Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://spaceavenue.ae/Wilbe/roni.html

Overview

General Information

Sample URL:	https://spaceavenue.ae/Wilbe/roni.html
Analysis ID:	1631297
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 3128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2000,i,16966085620865134829,8594563024700151732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://spaceavenue.ae/Wilbe/roni.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://spaceavenue.ae/Wilbe/roni.html

Joe Sandbox AI: Score: 9 Reasons: The brand 'DocuSign' is a well-known electronic signature service provider., The legitimate domain for DocuSign is 'docusign.com'., The provided URL 'spaceavenue.ae' does not match the legitimate domain for DocuSign., The domain 'spaceavenue.ae' does not have any apparent connection to DocuSign., The URL does not contain any recognizable elements related to DocuSign, which is suspicious., The presence of an input field asking for an email address on an unrelated domain increases the risk of phishing. DOM: 1.0.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Source: https://spaceavenue.ae/Wilbe/roni.html

HTTP Parser: Number of links: 0

Source: https://spaceavenue.ae/Wilbe/roni.html

HTTP Parser: Title: Protected Form does not match URL

Source: https://spaceavenue.ae/Wilbe/roni.html	HTTP Parser: No favicon
Source: https://horolasscratchrubberincorporate.docvaulthost.com/A8r6D/?e=qggi45@gcr.net	HTTP Parser: No favicon
Source: https://horolasscratchrubberincorporate.docvaulthost.com/A8r6D/?e=qggi45@gcr.net	HTTP Parser: No favicon

Source: https://spaceavenue.ae/Wilbe/roni.html

HTTP Parser: No <meta name="author".. found

Source: https://spaceavenue.ae/Wilbe/roni.html

HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.4:65353 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /A8r6D/?e=qggi45@gcr.net HTTP/1.1Host: horolasscratchrubberincorporate.docvaulthost.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://spaceavenue.ae/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://horolasscratchrubberincorporate.docvaulthost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://horolasscratchrubberincorporate.docvaulthost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://horolasscratchrubberincorporate.docvaulthost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://horolasscratchrubberincorporate.docvaulthost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91c4e0b2d81cbce3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: horolasscratchrubberincorporate.docvaulthost.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://horolasscratchrubberincorporate.docvaulthost.com/A8r6D/?e=qggi45@gcr.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=rt4516vme7ml7l3l0lllq32kpp
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91c4e0b2d81cbce3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcvLtmuYj.Xu0Te5yPd8vcoPy9BtFjwXQjhGNXCqg8IEoM-1741295823-1.3.1.1-Bv0uNAhqOFLIhtdJiU3YuVE7Bac_tO0F.d3jBJXolHk/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/crashed_retry/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://horolasscratchrubberincorporate.docvaulthost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91c4e17ff9706733&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: spaceavenue.ae
Source: global traffic	DNS traffic detected: DNS query: horolasscratchrubberincorporate.docvaulthost.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=8o8lCUUKuoBhMLmx9r3kO6vxOPNNErMMpN3X9ud63cSvpMw0G6br6Gh1tlrqiiU60F83gzWs4CqwbV9T%2FeQ%2FJS4g%2FRxqjUvsiVxh90Ij3IUPWPBOBz4LSxBGNBe4SrqZn6jpRcumCj3E5CTA%2FJ6EZK%2B%2FlX%2B0YQctZPogiG26GtcNgMQ%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 509Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Mar 2025 21:17:07 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400cf-cache-status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8o8lCUUKuoBhMLmx9r3kO6vxOPNNErMMpN3X9ud63cSvpMw0G6br6Gh1tlrqiiU60F83gzWs4CqwbV9T%2FeQ%2FJS4g%2FRxqjUvsiVxh90Ij3IUPWPBOBz4LSxBGNBe4SrqZn6jpRcumCj3E5CTA%2FJ6EZK%2B%2FlX%2B0YQctZPogiG26GtcNgMQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 91c4e0c79c7ca4da-MIAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=44184&min_rtt=40863&rtt_var=14472&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1299&delivery_rate=70855&cwnd=32&unsent_bytes=0&cid=b5401891731eca2d&ts=13305&x=0"

Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://brendanjkane.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://bunsin.io
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://datasign.jp
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://hookpoint.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://webtru.io
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn
Source: sets.json.0.dr	String found in binary or memory: https://zoom.com
Source: sets.json.0.dr	String found in binary or memory: https://zoom.us

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 65361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 65355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65362
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 65362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\sets.json			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\manifest.json			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\LICENSE			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\_metadata\			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\_metadata\verified_contents.json			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\manifest.fingerprint			Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3128_180488735

Jump to behavior

Source: classification engine

Classification label: mal56.phis.win@21/20@18/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2000,i,16966085620865134829,8594563024700151732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://spaceavenue.ae/Wilbe/roni.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2000,i,16966085620865134829,8594563024700151732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://spaceavenue.ae/Wilbe/roni.html	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
horolasscratchrubberincorporate.docvaulthost.com	104.21.60.95	true	false		unknown
jsdelivr.map.fastly.net	151.101.129.229	true	false		high
a.nel.cloudflare.com	35.190.80.1	true	false		high
challenges.cloudflare.com	104.18.94.41	true	false		high
www.google.com	216.58.206.36	true	false		high
spaceavenue.ae	178.32.67.58	true	true		unknown
cdn.jsdelivr.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcvLtmuYj.Xu0Te5yPd8vcoPy9BtFjwXQjhGNXCqg8IEoM-1741295823-1.3.1.1-Bv0uNAhqOFLIhtdJiU3YuVE7Bac_tO0F.d3jBJXolHk/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/crashed_retry/normal/auto/	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91c4e17ff9706733&lang=auto	false		high
https://horolasscratchrubberincorporate.docvaulthost.com/A8r6D/?e=qggi45@gcr.net	false		unknown
https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false		high
https://mercadoshops.com.co	sets.json.0.dr	false		high
https://gliadomain.com	sets.json.0.dr	false		high
https://poalim.xyz	sets.json.0.dr	false		high
https://mercadolivre.com	sets.json.0.dr	false		high
https://reshim.org	sets.json.0.dr	false		high
https://nourishingpursuits.com	sets.json.0.dr	false		high
https://medonet.pl	sets.json.0.dr	false		high
https://unotv.com	sets.json.0.dr	false		high
https://mercadoshops.com.br	sets.json.0.dr	false		high
https://joyreactor.cc	sets.json.0.dr	false		high
https://zdrowietvn.pl	sets.json.0.dr	false		high
https://johndeere.com	sets.json.0.dr	false		high
https://songstats.com	sets.json.0.dr	false		high
https://baomoi.com	sets.json.0.dr	false		high
https://supereva.it	sets.json.0.dr	false		high
https://elfinancierocr.com	sets.json.0.dr	false		high
https://bolasport.com	sets.json.0.dr	false		high
https://rws1nvtvt.com	sets.json.0.dr	false		high
https://desimartini.com	sets.json.0.dr	false		high
https://hearty.app	sets.json.0.dr	false		high
https://hearty.gift	sets.json.0.dr	false		high
https://mercadoshops.com	sets.json.0.dr	false		high
https://heartymail.com	sets.json.0.dr	false		high
https://nlc.hu	sets.json.0.dr	false		high
https://p106.net	sets.json.0.dr	false		high
https://radio2.be	sets.json.0.dr	false		high
https://finn.no	sets.json.0.dr	false		high
https://hc1.com	sets.json.0.dr	false		high
https://kompas.tv	sets.json.0.dr	false		high
https://mystudentdashboard.com	sets.json.0.dr	false		high
https://songshare.com	sets.json.0.dr	false		high
https://smaker.pl	sets.json.0.dr	false		high
https://mercadopago.com.mx	sets.json.0.dr	false		high
https://p24.hu	sets.json.0.dr	false		high
https://talkdeskqaid.com	sets.json.0.dr	false		high
https://24.hu	sets.json.0.dr	false		high
https://mercadopago.com.pe	sets.json.0.dr	false		high
https://cardsayings.net	sets.json.0.dr	false		high
https://text.com	sets.json.0.dr	false		high
https://mightytext.net	sets.json.0.dr	false		high
https://pudelek.pl	sets.json.0.dr	false		high
https://hazipatika.com	sets.json.0.dr	false		high
https://joyreactor.com	sets.json.0.dr	false		high
https://cookreactor.com	sets.json.0.dr	false		high
https://wildixin.com	sets.json.0.dr	false		high
https://eworkbookcloud.com	sets.json.0.dr	false		high
https://cognitiveai.ru	sets.json.0.dr	false		high
https://nacion.com	sets.json.0.dr	false		high
https://chennien.com	sets.json.0.dr	false		high
https://drimer.travel	sets.json.0.dr	false		high
https://deccoria.pl	sets.json.0.dr	false		high
https://mercadopago.cl	sets.json.0.dr	false		high
https://talkdeskstgid.com	sets.json.0.dr	false		high
https://naukri.com	sets.json.0.dr	false		high
https://interia.pl	sets.json.0.dr	false		high
https://bonvivir.com	sets.json.0.dr	false		high
https://carcostadvisor.be	sets.json.0.dr	false		high
https://salemovetravel.com	sets.json.0.dr	false		high
https://sapo.io	sets.json.0.dr	false		high
https://wpext.pl	sets.json.0.dr	false		high
https://welt.de	sets.json.0.dr	false		high
https://poalim.site	sets.json.0.dr	false		high
https://drimer.io	sets.json.0.dr	false		high
https://infoedgeindia.com	sets.json.0.dr	false		high
https://blackrockadvisorelite.it	sets.json.0.dr	false		high
https://cognitive-ai.ru	sets.json.0.dr	false		high
https://cafemedia.com	sets.json.0.dr	false		high
https://graziadaily.co.uk	sets.json.0.dr	false		high
https://thirdspace.org.au	sets.json.0.dr	false		high
https://mercadoshops.com.ar	sets.json.0.dr	false		high
https://smpn106jkt.sch.id	sets.json.0.dr	false		high
https://elpais.uy	sets.json.0.dr	false		high
https://landyrev.com	sets.json.0.dr	false		high
https://the42.ie	sets.json.0.dr	false		high
https://commentcamarche.com	sets.json.0.dr	false		high
https://tucarro.com.ve	sets.json.0.dr	false		high
https://rws3nvtvt.com	sets.json.0.dr	false		high
https://eleconomista.net	sets.json.0.dr	false		high
https://helpdesk.com	sets.json.0.dr	false		high
https://mercadolivre.com.br	sets.json.0.dr	false		high
https://clmbtech.com	sets.json.0.dr	false		high
https://standardsandpraiserepurpose.com	sets.json.0.dr	false		high
https://07c225f3.online	sets.json.0.dr	false		high
https://salemovefinancial.com	sets.json.0.dr	false		high
https://mercadopago.com.br	sets.json.0.dr	false		high
https://zoom.us	sets.json.0.dr	false		high
https://commentcamarche.net	sets.json.0.dr	false		high
https://etfacademy.it	sets.json.0.dr	false		high
https://mighty-app.appspot.com	sets.json.0.dr	false		high
https://hj.rs	sets.json.0.dr	false		high
https://hearty.me	sets.json.0.dr	false		high
https://mercadolibre.com.gt	sets.json.0.dr	false		high
https://timesinternet.in	sets.json.0.dr	false		high
https://indiatodayne.in	sets.json.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
151.101.129.229	jsdelivr.map.fastly.net	United States		54113	FASTLYUS	false
104.18.94.41	challenges.cloudflare.com	United States		13335	CLOUDFLARENETUS	false
104.21.60.95	horolasscratchrubberincorporate.docvaulthost.com	United States		13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States		13335	CLOUDFLARENETUS	false
216.58.206.36	www.google.com	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
178.32.67.58	spaceavenue.ae	France		16276	OVHFR	true
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.13
192.168.2.15

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1631297
Start date and time:	2025-03-06 22:15:17 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://spaceavenue.ae/Wilbe/roni.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@21/20@18/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 172.217.18.14, 74.125.133.84, 142.250.185.142, 216.58.206.78, 199.232.210.172, 184.30.131.245, 142.250.185.234, 142.250.186.106, 142.250.185.106, 142.250.186.170, 142.250.186.42, 142.250.184.202, 216.58.206.42, 142.250.74.202, 172.217.16.202, 142.250.185.74, 142.250.185.138, 142.250.185.170, 142.250.185.202, 142.250.181.234, 142.250.186.74, 142.250.186.138, 142.250.184.206, 172.217.16.142, 142.250.181.238, 216.58.212.142, 142.250.185.163, 142.250.186.142, 34.104.35.123, 23.60.203.209, 4.245.163.56, 13.107.246.60
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://spaceavenue.ae/Wilbe/roni.html

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\LICENSE

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\_metadata\verified_contents.json

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.018016831363379
Encrypted:	false
SSDEEP:	48:p/hUI1TvVVxAdID7ak2ljx3zep0SEWS4dYi3kk3+qPNMdj:RnTNbQID7aFO0RWLdYfQ+fj
MD5:	177C2A7817798E7D7BACAEDECFD87525
SHA1:	71988C249F6D5B507FD952B4855E396FC0E0244F
SHA-256:	EC59D860D89661A9C3F8E1B5680CEE95207EFC65484997B120BB453722A1565C
SHA-512:	49F6FEA9DBFD0E121AFA6AEF1FA5EA776233407D55929382A57AAA7F4C599946EA831789993DD5E850AA89D730E393B95F4FBED32E17075ADB224ADC482FDFD5
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"RusEcCDFElOLSdXd4ysSJU4U-iIRmp1XKn24PPw0TV7oM-0RMpRpNnrxJMuXnstC1qjIWV3Lm4-xIHUmBUg9EZ6psakCDBDY2alzudAqlnjjBr1JjLeaPb4XmRK5QvqmqPIn1wIkwjIIRdRjT9G9jwOcQ2sCkPpRG_u_1L-lumB61ApMya4ss_mE0JZ47kRqvKnfiSlW7YVtSVHQTflvDxi7sIVn6rw-kTSvhNS8hIfdtWgc_CMjw2p

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\manifest.fingerprint

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9208338478672236
Encrypted:	false
SSDEEP:	3:SSLSnzYVUAmABDGe/WRYlXn:SSOzYVUhl8
MD5:	DF7A75D476EF712892D3F011B8F8B798
SHA1:	7C8377254B64A1291F04174C7C48106E65EF2B58
SHA-256:	E57905859904073B9C5D96D45B6266B537DE46D591DFEDFB41B31CE5FB2EFA8F
SHA-512:	CB000D18F0BF76AD0547DDE4E3CFF30872BBD2DFD3C74330917004DC83211EE4A44E4CDF804B0BB577B03395DB58772E0CE067859EB2D1AF0A22DD8EF02F8AC9
Malicious:	false
Reputation:	low
Preview:	1.7c7087f1e01a939b41851a790125c2fed32542cba2ff03cd364e3292810704b2

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\manifest.json

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.381548433976706
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1o8LtvY:F6VlM8aRWpqS1oatA
MD5:	A843D665EE614A26118EB8D1599E7EA6
SHA1:	BFDDF74A53EAE6CC075E2C65AA6C0C1ED8A9555B
SHA-256:	E1AFEEE38BB6BE6E5CFCE8858635D5ACFDEFE851610368E0F3BF6750E97D7205
SHA-512:	E6E9CEBC862D3BA6EF9A53B64F30ADF18352613E6AE35940573561F6A37BCCDFE599D5159C5478B85BAC977C806270218DC897A90AD3D8F7A33AF578638A0149
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2025.2.25.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3128_1204490391\sets.json

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9994
Entropy (8bit):	4.6298727627234
Encrypted:	false
SSDEEP:	96:Mon4mvCuqX19sXblbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5CuqlLBkIVmtRTGXvcxBsl
MD5:	D3580D5631A46125E91444C9D7F25A65
SHA1:	8475D33654933C183F8398316F13EB1FAE80A66D
SHA-256:	744FB53273EB4F32E46D8EB6DA2D445B5B7428733ACE1F4FC22AE135199B659D
SHA-512:	D71017F0B9D8AEC4F96A0B8A4B5A41A87E7708058A4462F4886F89ECEA7F20B25D21A8C8DE8C3DF787FB31D5D98B0C42B4544EADF2C017857FB5F88366D79831
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://datasign.jp","as

Chrome Cache Entry: 57

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1746
Entropy (8bit):	7.0941604123505115
Encrypted:	false
SSDEEP:	48:0OTCvdgy5wWh9XtNmtNvVII0Xk0t54tO31aUanH:09vdgy5d0vVvz0tuA8x
MD5:	FF9BBAC9E01B1DDD59C87D1E8DD194D1
SHA1:	018AD340A895FB021B57B3C08A4D88646F2981F1
SHA-256:	C28BD21CF6420D2282292B8FD5DF776B62B68C9681AEDC0D2E73D6444C0BF3A1
SHA-512:	CC7AEF1C346579FF31A504B82D719D73A15A895D08494AF0BA6905CD5DDF4B147FEA627E96AF4AAB8F177A84283F51F10FEF08C71C75851023A0ECF9A26A681E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png
Preview:	RIFF....WEBPVP8L..../..?..:..)....Lef..x...^..@.T..Ybf.%y.....PD.<.......eK.[c.\|. 9..H..g).....O\ue.....n$I...~.@/..9'6....4.{.Q....m;m........7_...e.....N.s'.....A+.>.tz \.zg...............8.8.[.q.]..Z.....k.....M.< ..\...A.............h..O..............e..$.SE$K.....6..!..?..?....iT.?..?..?..?.3...}TE......@y.......X.p.O....}.p\|X.J...................(.........e....?..."...............k\I................m..q...g.*...{.Rs............/...a....j.............b..8L.Ti.;.........r@....._.....`Ta....>;.....9.....RXU.].J.~.9..L...5......9............9..(.We...)..d..0.t-....g.9...._.h.../.u,../6k.....h.;........q.........!..N...?..../}..{..?......g...w4.....g.....9.`l....o!.~qpD."rj.M...>..>Q.O.....5......c.....9.`../...K..2.K5<.SU.J...IpV...........Ui.......n............/..8...?...5..2.e.N..i...uS?e..`....\0.......j..........>j-".(Q,..T...o....%43.`P...P.W.}.........j$...>&...\u...Zo...s.2l..QkUl....s........]7......>'j.=7..1.\|...~..T=...qX;........s..

Chrome Cache Entry: 58

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
Reputation:	low
URL:	https://horolasscratchrubberincorporate.docvaulthost.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 59

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	270411
Entropy (8bit):	7.998979819409146
Encrypted:	true
SSDEEP:	6144:SRVC0hZ10WQvYuTrS5+lMwzCMJMGow5fniYoHkS+:SvhZPuS5+dCMJM7CsH7+
MD5:	6B559061B70B8C40AB8DD2E57EBEAA28
SHA1:	F7A2796388B310AA0135EECF3087ED0C79EB32C9
SHA-256:	9DF6F4F81D5836F1FF234CE80FC295F5B7A4A9ECF5333D3CB22409F24B9EE210
SHA-512:	6B9620A24245CF86F95A19E4F8FF4A31591870405EE2473D58FD8F0DE2A55EBF592DB6663BDB87086B9EC3E5234947A1522DCB73C0ACBA6F99D4B91D9FCDCFAC
Malicious:	false
Reputation:	low
URL:	https://spaceavenue.ae/Wilbe/roni.html
Preview:	....L.......'9.=..,...V........X.....l..:....Q....p.}l..7Y.v..f.KM4.........U._.q.8..........6..a....B..1.i.).+....e.....?...w...w.=..j=......).....8..x..._W.&C.......oZ....s..T..?..9.Y].........^9...j.?.J....`&acb........(._..sY.{....R..O76=..I./....v..HC4..K.?g.:[...w?..8.A.......<..1Z.]mH...S.....?.....'...............$SU..&).A.....H#.\|.....4L.../.j..O....y.....?Q...6.b......G....y..a..4.Y.=.&.....w..c..._r....+.?fuV.....W..,e..w.._5&g.Y[.......2......N..........L>.PC..Y........t.O...Q.-...:.0e...>...\.._Y.i..w...{C.....0...B.0..6...$..p...p....`.F..N.b....u._.....>.E:.4f....%{d......&...,{e.&.N..x.......:.....\......\|.V.>.T.P>..}/O'.g(..].p{..Lv."....6. A.@..i$,F....2_..~dC<..~$.x.E`._...I9.d...p.:...=>4.h........t..`...P.8..@..h.@.....nulK..R.R.....i.P/<v....s.\..B.O............._.h.w....L.....2c..I.[.......p.@.........\|.&o7...Y.y......m....`..B+.E..yTP.G7.A]".a.....#.....<}37).....__...=..W..... .D...Do..%.I.\...LU7:.VU.d....R..q.....S....\|

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48238)
Category:	downloaded
Size (bytes):	48239
Entropy (8bit):	5.343270713163753
Encrypted:	false
SSDEEP:	768:+CbPzHMb42QOna0rhgaqC2DdONTjwzsLSh0ZsC3Y2zIijkKY1LBep7iFFQ7Srv3h:gb425na0rhgaqDnzs22z3kH
MD5:	184E29DE57C67BC329C650F294847C16
SHA1:	961208535893142386BA3EFE1444B4F8A90282C3
SHA-256:	DD03BA1DD6D73643A8ED55F4CEBC059D673046975D106D26D245326178C2EB9D
SHA-512:	AF3D62053148D139837CA895457BEEF7620AA52614B9A08FD0D5BEF8163F4C3B9E8D7B2A74D29079DB3DACC51D98AE4A5DC19C788928E5A854D7803EBB9DED9C
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.285366469574286
Encrypted:	false
SSDEEP:	3:OgGunSHnP20TviWP6Ln:O6SHPTTvfPCn
MD5:	72AB058D2FA559E3E6B52394976CCFED
SHA1:	C46C96A456C45FA250B2AD92B6AA612F7579BF9E
SHA-256:	C066F73B20113C8ABEBA91C9943F8A5B4DAE0985E7BA05EB60973260965892FE
SHA-512:	00DD788ACDAEF6DF998BDD173E255C6DFD22FF9984A8EA5C524FD06701814DC343548633B52DD514327C4D64B4B3EC4D9ABCF2B53A207CC363A93092D41976E7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQl_1fV_aDsf2hIFDZRU-s8SBQ2DqFs9EgUNSUCvSRIFDa8aOOA=?alt=proto
Preview:	CiQKBw2UVPrPGgAKBw2DqFs9GgAKBw1JQK9JGgAKBw2vGjjgGgA=

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48238)
Category:	dropped
Size (bytes):	48239
Entropy (8bit):	5.343270713163753
Encrypted:	false
SSDEEP:	768:+CbPzHMb42QOna0rhgaqC2DdONTjwzsLSh0ZsC3Y2zIijkKY1LBep7iFFQ7Srv3h:gb425na0rhgaqDnzs22z3kH
MD5:	184E29DE57C67BC329C650F294847C16
SHA1:	961208535893142386BA3EFE1444B4F8A90282C3
SHA-256:	DD03BA1DD6D73643A8ED55F4CEBC059D673046975D106D26D245326178C2EB9D
SHA-512:	AF3D62053148D139837CA895457BEEF7620AA52614B9A08FD0D5BEF8163F4C3B9E8D7B2A74D29079DB3DACC51D98AE4A5DC19C788928E5A854D7803EBB9DED9C
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1746
Entropy (8bit):	7.0941604123505115
Encrypted:	false
SSDEEP:	48:0OTCvdgy5wWh9XtNmtNvVII0Xk0t54tO31aUanH:09vdgy5d0vVvz0tuA8x
MD5:	FF9BBAC9E01B1DDD59C87D1E8DD194D1
SHA1:	018AD340A895FB021B57B3C08A4D88646F2981F1
SHA-256:	C28BD21CF6420D2282292B8FD5DF776B62B68C9681AEDC0D2E73D6444C0BF3A1
SHA-512:	CC7AEF1C346579FF31A504B82D719D73A15A895D08494AF0BA6905CD5DDF4B147FEA627E96AF4AAB8F177A84283F51F10FEF08C71C75851023A0ECF9A26A681E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..:..)....Lef..x...^..@.T..Ybf.%y.....PD.<.......eK.[c.\|. 9..H..g).....O\ue.....n$I...~.@/..9'6....4.{.Q....m;m........7_...e.....N.s'.....A+.>.tz \.zg...............8.8.[.q.]..Z.....k.....M.< ..\...A.............h..O..............e..$.SE$K.....6..!..?..?....iT.?..?..?..?.3...}TE......@y.......X.p.O....}.p\|X.J...................(.........e....?..."...............k\I................m..q...g.*...{.Rs............/...a....j.............b..8L.Ti.;.........r@....._.....`Ta....>;.....9.....RXU.].J.~.9..L...5......9............9..(.We...)..d..0.t-....g.9...._.h.../.u,../6k.....h.;........q.........!..N...?..../}..{..?......g...w4.....g.....9.`l....o!.~qpD."rj.M...>..>Q.O.....5......c.....9.`../...K..2.K5<.SU.J...IpV...........Ui.......n............/..8...?...5..2.e.N..i...uS?e..`....\0.......j..........>j-".(Q,..T...o....%43.`P...P.W.}.........j$...>&...\u...Zo...s.2l..QkUl....s........]7......>'j.=7..1.\|...~..T=...qX;........s..

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 6, 2025 22:16:25.670806885 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:25.670833111 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:25.670928001 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:25.671112061 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:25.671148062 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:27.287358999 CET	49741	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:27.287405014 CET	443	49741	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:27.287467003 CET	49741	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:27.287775993 CET	49741	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:27.287786007 CET	443	49741	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:27.288153887 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:27.288201094 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:27.288265944 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:27.288610935 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:27.288629055 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:27.588995934 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:27.589365005 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:27.589407921 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:27.591212988 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:27.591280937 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:27.592641115 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:27.592782021 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:27.633068085 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:27.633109093 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:27.677638054 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:35.247489929 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.247595072 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.253119946 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.253142118 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.253381014 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.253386021 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.253612041 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.253617048 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.397967100 CET	443	49741	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.398590088 CET	49741	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.398590088 CET	49741	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.399126053 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.399171114 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.399355888 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.399502993 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.399514914 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.708605051 CET	49741	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.708645105 CET	443	49741	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.937398911 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.937510967 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.937541962 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.937614918 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.937702894 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.937748909 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.937764883 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.938113928 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.938132048 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.938182116 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.944097996 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.944238901 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.944258928 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.950790882 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.950805902 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.950930119 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:35.950953960 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:35.950999975 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.028455019 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.078171015 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.088682890 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.088841915 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.091943979 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.092031002 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.092051983 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.097031116 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.097098112 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.097104073 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.102133036 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.102253914 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.102272987 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.102318048 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.108815908 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.108903885 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.108923912 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.116120100 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.116226912 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.125436068 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.125516891 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.128992081 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.129049063 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.135690928 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.135725021 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.135763884 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.135785103 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.135835886 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.142287970 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.164716005 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.164819002 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.164846897 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.195297003 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.195338964 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.195395947 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.196872950 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.196948051 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.196965933 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.201839924 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.201905012 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.201911926 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.201937914 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.201981068 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.208774090 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.215418100 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.215449095 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.215461016 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.215516090 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.215533972 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.215563059 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.222064018 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.222141981 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.222148895 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.233138084 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.233161926 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.233269930 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.233294964 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.233354092 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.238795042 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.238818884 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.238876104 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.238900900 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.244498014 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.244580030 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.249453068 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.249497890 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.249536991 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.249557018 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.249603987 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.254925013 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.254950047 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.255013943 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.255038023 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.260592937 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.260708094 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.265882969 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.265950918 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.265974998 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.270885944 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.270904064 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.270958900 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.270983934 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.271034002 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.271513939 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.276575089 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.276686907 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.282124996 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.282154083 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.282197952 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.282222986 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.282268047 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.286932945 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.286952972 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.287019014 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.287041903 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.292579889 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.292809963 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.295943975 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.295958996 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.296032906 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.296046019 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.296097040 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.299628973 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.299649000 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.299715996 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.299721003 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.303262949 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.303363085 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.303371906 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.308237076 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.308319092 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.308326960 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.322525978 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.322649956 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.322666883 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.364914894 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.406841993 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.406864882 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.407027960 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.407049894 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.407617092 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.407648087 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.407666922 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.409511089 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.409585953 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.411320925 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.411375999 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.411398888 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.411408901 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.411453009 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.413362980 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.413451910 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.413503885 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.415072918 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.415215969 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.415266991 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.415277958 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.417120934 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.417145014 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.417180061 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.418910980 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.418967962 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.418977022 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.420766115 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.420778036 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.420819998 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.420829058 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.420865059 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.422679901 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.422827005 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.422925949 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.424727917 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.424840927 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.424896955 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.426471949 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.426574945 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.426584959 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.428385973 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.428442001 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.428450108 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.430264950 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.430277109 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.430321932 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.430329084 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.430367947 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.432167053 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.432179928 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.432224989 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.432234049 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.433969975 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.434021950 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.434098959 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.435897112 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.435961962 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.436034918 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.439666033 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.439743042 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.439750910 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.439819098 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.439846039 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.439868927 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.439898014 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.441550970 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.441570997 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.441606998 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.441616058 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.443546057 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.443602085 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.443639994 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.445409060 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.445422888 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.445468903 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.445477009 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.445513964 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.447166920 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.449039936 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.449052095 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.449095964 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.449104071 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.449150085 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.449165106 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.451548100 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.451605082 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.451612949 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.453985929 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.454083920 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.454140902 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.454168081 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.454222918 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.454657078 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.454741955 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.454792023 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.454802990 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.456990957 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.457014084 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.457043886 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.458436966 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.458493948 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.458504915 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.458564997 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.458604097 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.460293055 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.460438967 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.460484982 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.460494995 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.462176085 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.462227106 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.462261915 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.464035988 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.464082003 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.464088917 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.466087103 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.466130018 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.466150999 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.466159105 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.466198921 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.467935085 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.468013048 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.469821930 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.469844103 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.469893932 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.469901085 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.472287893 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.472349882 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.474049091 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.474111080 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.474160910 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.475639105 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.475691080 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.475697994 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.475744963 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.475780964 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.477461100 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.477519989 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.477526903 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.496942997 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.497004986 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.497070074 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.497096062 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.497184992 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.497605085 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.497653008 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.497658968 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.505541086 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.505631924 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.506500959 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.506578922 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.506586075 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.506629944 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.508835077 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.508857012 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.508934021 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.508940935 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.510416985 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.510477066 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.510507107 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.512051105 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.512079954 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.512151957 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.512166977 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.512223959 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.514095068 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.515824080 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.515841961 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.515897036 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.515904903 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.515919924 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.515953064 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.517788887 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.517859936 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.519876003 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.519951105 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.522712946 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.522797108 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.523459911 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.523555994 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.526690960 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.526807070 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.526808977 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.530450106 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:36.530550957 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.612395048 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:36.660322905 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:37.091963053 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:37.138510942 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:37.202025890 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:37.202105045 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:37.202193975 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:37.244714975 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:37.288820028 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:37.325366974 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:37.325400114 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:37.329348087 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:37.329432964 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:37.478225946 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:37.478616953 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:37.523417950 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:37.523446083 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:37.575164080 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:37.862679958 CET	49739	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:16:37.862719059 CET	443	49739	216.58.206.36	192.168.2.4
Mar 6, 2025 22:16:48.922971964 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:48.923158884 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:48.923235893 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:50.132661104 CET	49746	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:16:50.132709980 CET	443	49746	178.32.67.58	192.168.2.4
Mar 6, 2025 22:16:50.967845917 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:50.967870951 CET	443	49753	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:50.967937946 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:50.968882084 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:50.968911886 CET	443	49754	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:50.969005108 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:50.969650030 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:50.969661951 CET	443	49753	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:50.970089912 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:50.970108986 CET	443	49754	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.681962013 CET	443	49753	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.682352066 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.682375908 CET	443	49753	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.683317900 CET	443	49753	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.683399916 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.684796095 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.684854031 CET	443	49753	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.684871912 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.685019016 CET	443	49753	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.685053110 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.685053110 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.685062885 CET	443	49753	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.685105085 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.685133934 CET	49753	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.685584068 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.685621023 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.685682058 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.685986996 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.686000109 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.688883066 CET	443	49754	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.689258099 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.689277887 CET	443	49754	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.690958023 CET	443	49754	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.691485882 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.692576885 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.692600965 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.692675114 CET	443	49754	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.692694902 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.692815065 CET	49754	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.693144083 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.693188906 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:52.693490028 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.693852901 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:52.693869114 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.593672991 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.594181061 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.594202042 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.595197916 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.595283985 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.596724033 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.596782923 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.597182035 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.597187996 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.645617962 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.646142006 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.646157980 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.646178961 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.649894953 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.649995089 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.650516033 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.650707960 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.692533016 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:54.692564011 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:54.740396023 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:55.683469057 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:55.683552027 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:55.683592081 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:55.683605909 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:55.683620930 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:55.683689117 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:55.713679075 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:55.713767052 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:55.713821888 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:56.123126030 CET	49755	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:16:56.123156071 CET	443	49755	104.21.60.95	192.168.2.4
Mar 6, 2025 22:16:56.149938107 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:56.149992943 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:56.150057077 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:56.150576115 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:56.150592089 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:56.151155949 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:56.151180983 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:56.151237965 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:56.151556969 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:56.151567936 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:57.836038113 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:57.836324930 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:57.836354017 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:57.837363005 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:57.837449074 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:57.838623047 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:57.838685989 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:57.838819027 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:57.838830948 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:57.886014938 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:57.915276051 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:57.916668892 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:57.916733980 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:57.917818069 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:57.917905092 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:57.919054985 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:57.919123888 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:57.919502020 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:57.919518948 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:57.965436935 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:58.423331022 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:58.423409939 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:58.423572063 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:58.455117941 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:58.455317020 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:58.455476046 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:58.455490112 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:58.455549955 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:58.629525900 CET	49757	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:58.629571915 CET	443	49757	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:58.633230925 CET	49758	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:58.633264065 CET	443	49758	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:58.634440899 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:58.634491920 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:58.634572983 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:58.634968042 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:16:58.634984016 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:16:58.687884092 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:58.687928915 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:16:58.688107014 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:58.688200951 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:16:58.688209057 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:00.539505959 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:00.539860010 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:17:00.539880037 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:00.543035030 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:00.543128967 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:17:00.545907021 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:17:00.545993090 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:00.546186924 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:17:00.546196938 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:00.586507082 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:17:00.617918968 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:00.618314981 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:00.618347883 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:00.619164944 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:00.619499922 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:00.619594097 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:00.619740963 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:00.664033890 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.054688931 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:01.057159901 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:01.057307959 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:01.057405949 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:17:01.123183966 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.123213053 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.123431921 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.123460054 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.123513937 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.124408960 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.124417067 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.166604042 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.168829918 CET	49760	443	192.168.2.4	151.101.129.229
Mar 6, 2025 22:17:01.168884993 CET	443	49760	151.101.129.229	192.168.2.4
Mar 6, 2025 22:17:01.197983980 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.201265097 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.201323032 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.201322079 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.201351881 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.201416969 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.208045006 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.214556932 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.214611053 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.214643955 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.221343994 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.221389055 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.221396923 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.221415997 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.221580982 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.228177071 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.238056898 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.238169909 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.238209963 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.238240957 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.238296986 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.241921902 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.287961960 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.287997961 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.288822889 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.288856983 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.288883924 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.288899899 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.288924932 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.288954973 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.294504881 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.294533968 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.294585943 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.294595957 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.294641018 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.297005892 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.303715944 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.303781033 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.303787947 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.310548067 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.310606003 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.310612917 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.310621023 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.310659885 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.317229986 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.323930025 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.324023962 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.324095011 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.324124098 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.324363947 CET	49759	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.324381113 CET	443	49759	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.339097977 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.339139938 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.339238882 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.339509964 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:01.339521885 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:01.644273043 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:01.644314051 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:01.644418955 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:01.644624949 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:01.644643068 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:03.158757925 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.159301043 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.159312963 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.160270929 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.160361052 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.160748005 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.160793066 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.161000967 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.161009073 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.208895922 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.519206047 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:03.565597057 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:03.587670088 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:03.587706089 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:03.588907003 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:03.589006901 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:03.596766949 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:03.596860886 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:03.619745016 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:03.619774103 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:03.665318012 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:03.736881971 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.736952066 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.736996889 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.737006903 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.737016916 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.737066984 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.737071991 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.740047932 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.740099907 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.740104914 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.746882915 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.746948004 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.746953011 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.753563881 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.753612041 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.753618002 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.802524090 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.802532911 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.828416109 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.828443050 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.828464985 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.828469992 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.828520060 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.833584070 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.833635092 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.833687067 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.833698034 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.837234020 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.837285995 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.837291956 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.843754053 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.843799114 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.843802929 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.850514889 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.850570917 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.850574970 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.857275009 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.857316971 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.857321024 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.863755941 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.863812923 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.863817930 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.870234966 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.870287895 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.870291948 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.876211882 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.876276016 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.876281977 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.882224083 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.882282019 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.882286072 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.900731087 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.900778055 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.900787115 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.900793076 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.900830030 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.900837898 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.900882959 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:03.900924921 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.901139975 CET	49761	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:03.901150942 CET	443	49761	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:04.058554888 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.058696985 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.058758974 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.058758020 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.058785915 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.058829069 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.061826944 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.068489075 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.068532944 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.068553925 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.068586111 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.068631887 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.075220108 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.075294971 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.075360060 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.075392962 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.124686003 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.124715090 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.130439043 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.130476952 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.130521059 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.130530119 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.130656004 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.143496990 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.143536091 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.143619061 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.143964052 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.143973112 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.152334929 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.152403116 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.152430058 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.152458906 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.152466059 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.152512074 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.154402018 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.157764912 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.157793045 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.157836914 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.157843113 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.157870054 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.157888889 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.157918930 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.158065081 CET	49762	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.158078909 CET	443	49762	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.160696983 CET	49764	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.160759926 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:04.160856962 CET	49764	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.161087036 CET	49764	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:04.161120892 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.837152958 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.837555885 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:05.837569952 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.837889910 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.838427067 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:05.838474989 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.838619947 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:05.853888988 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.854244947 CET	49764	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:05.854271889 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.854609966 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.855124950 CET	49764	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:05.855191946 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.855324984 CET	49764	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:05.880333900 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:05.896330118 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.395694971 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.395735979 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.395759106 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.395811081 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.395850897 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.395858049 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.395870924 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.402199030 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.402278900 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.402283907 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.408972025 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.409044981 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.409049988 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.452982903 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.453054905 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.453064919 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.456219912 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.456293106 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.456296921 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.462383986 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.462464094 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.462546110 CET	49764	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.463236094 CET	49764	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.463253021 CET	443	49764	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.467278004 CET	49766	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:06.467308044 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:06.467386007 CET	49766	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:06.467674971 CET	49766	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:06.467690945 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:06.485526085 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.485611916 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.485616922 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.492063046 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.492144108 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.492149115 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.495383978 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.495443106 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.495446920 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.502233982 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.502289057 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.502293110 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.508991003 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.509078026 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.509083033 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.515795946 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.515851021 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.515855074 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.522567034 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.522631884 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.522636890 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.529263020 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.529314995 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.529318094 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.539055109 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.539082050 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.539113045 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.539117098 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.539170027 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.547645092 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.550962925 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.550992012 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.551016092 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.551019907 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.551064968 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.584964037 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.585011005 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.585043907 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.585062027 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.585067034 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.585109949 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.585277081 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.590825081 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.590899944 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.590904951 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.591528893 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.591569901 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.591619968 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.591625929 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.591645956 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.600739002 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.600815058 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.600820065 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.600871086 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.610383034 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.610467911 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.615362883 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.615427971 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.619935989 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.619988918 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.628835917 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.628895044 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.633080959 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.633147001 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.641062975 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.641127110 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.645240068 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.645296097 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.648266077 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.648335934 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.654396057 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.654454947 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.657598019 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.657655001 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.672934055 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.673017025 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.673610926 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.673671007 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.674128056 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.674184084 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.674186945 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.674230099 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.674256086 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.674309969 CET	49763	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:06.674315929 CET	443	49763	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:06.678143024 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:06.678253889 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:06.678349972 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:06.678719044 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:06.678746939 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:06.713572025 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:17:06.756329060 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:17:07.924158096 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:17:07.924272060 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:17:07.924335003 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:17:07.927828074 CET	49756	443	192.168.2.4	104.21.60.95
Mar 6, 2025 22:17:07.927865982 CET	443	49756	104.21.60.95	192.168.2.4
Mar 6, 2025 22:17:07.933947086 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:07.934021950 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:07.934102058 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:07.934356928 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:07.934391975 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:08.358267069 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.358647108 CET	49766	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:08.358668089 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.359036922 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.359415054 CET	49766	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:08.359483957 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.359574080 CET	49766	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:08.404323101 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.473109961 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.484766006 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:08.484798908 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.485222101 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.491096020 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:08.491178036 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.491261959 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:08.532326937 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.864651918 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.864728928 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:08.864816904 CET	49766	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:08.979559898 CET	49766	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:08.979593992 CET	443	49766	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.164000988 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.166218042 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.166246891 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.166275024 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.166273117 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.166290045 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.166322947 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.172593117 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.172637939 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.179672003 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.179733992 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.179771900 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.179785967 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.186145067 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.186244011 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.186254978 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.235641003 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.235661030 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.253490925 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.253660917 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.253670931 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.297281027 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.435532093 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.439414024 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.439462900 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.439470053 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.439512968 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.439557076 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.445127010 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.451836109 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.451884031 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.451894999 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.458400965 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.458437920 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.458452940 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.458462000 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.458502054 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.464998960 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.471556902 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.471604109 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.471627951 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.471630096 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.471638918 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.471672058 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.484769106 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.484797955 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.484817982 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.484826088 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.484837055 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.484869957 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.491377115 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.491426945 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.491436005 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.498115063 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.498183012 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.498192072 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.504888058 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.504937887 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.504951000 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.525268078 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.525304079 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.525316954 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.525327921 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.525369883 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.531713963 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.531722069 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.531785965 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.535245895 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.535254002 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.535310030 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.535319090 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.547859907 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.547910929 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.547921896 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.547960997 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.584707022 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.584743023 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.584773064 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.584786892 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.584811926 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.584821939 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.584896088 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.584948063 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.585942030 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.585999012 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.594212055 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.594290018 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.599318027 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.599400043 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.605251074 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.605314970 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.614587069 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.614669085 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.619136095 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.619210005 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.627403975 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.627477884 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.631633997 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.631704092 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.631731033 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.631757975 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.631836891 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.631994963 CET	49767	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:09.632023096 CET	443	49767	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:09.975800991 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:09.979091883 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:09.979149103 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:09.981184006 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:09.981287003 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:09.982570887 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:09.982662916 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:09.982911110 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:09.982920885 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:10.030131102 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:10.488080978 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:10.488756895 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:10.488881111 CET	443	49768	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:10.488966942 CET	49768	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:10.489675045 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:10.489731073 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:10.489828110 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:10.490053892 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:10.490062952 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:12.272699118 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:12.273180008 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:12.273207903 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:12.274326086 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:12.274394035 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:12.274761915 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:12.274838924 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:12.274924994 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:12.318331957 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:12.318358898 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:12.364741087 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:12.815063953 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:12.815442085 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:12.815500975 CET	443	49770	35.190.80.1	192.168.2.4
Mar 6, 2025 22:17:12.815555096 CET	49770	443	192.168.2.4	35.190.80.1
Mar 6, 2025 22:17:16.918021917 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:16.918071985 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:16.918163061 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:16.918488979 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:16.918504953 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:18.664506912 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:18.667267084 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:18.667299986 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:18.667783976 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:18.672333956 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:18.672450066 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:18.672496080 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:18.720323086 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:18.724117041 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.217870951 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.217968941 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.218012094 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.218069077 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.218080044 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.218110085 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.218137980 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.221004009 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.223145008 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.223155975 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.227919102 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.227956057 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.228013039 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.228024960 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.232234955 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.234807014 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.241506100 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.243485928 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.243505001 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.286678076 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.313905001 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.314001083 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.314146042 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.314165115 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.315474033 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.319482088 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.319530964 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.319533110 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.319546938 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.319598913 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.325572968 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.327475071 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.327481985 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.332499981 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.332603931 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:19.332768917 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.332962036 CET	49782	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:19.332976103 CET	443	49782	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:22.099081993 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:17:22.099097967 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:17:24.843393087 CET	65353	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:24.848594904 CET	53	65353	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:24.848710060 CET	65353	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:24.854029894 CET	53	65353	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:25.335711002 CET	65353	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:25.342140913 CET	53	65353	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:25.342221975 CET	65353	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:25.726363897 CET	65355	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:25.726413012 CET	443	65355	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:25.726594925 CET	65355	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:25.726799011 CET	65355	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:25.726830006 CET	443	65355	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:28.620198965 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:28.620261908 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:28.620346069 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:28.620790005 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:28.620810032 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:34.667841911 CET	443	65355	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:34.668026924 CET	65355	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:34.668106079 CET	65355	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:34.668132067 CET	443	65355	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:34.668560028 CET	65362	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:34.668596983 CET	443	65362	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:34.668688059 CET	65362	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:34.668910027 CET	65362	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:34.668922901 CET	443	65362	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:36.292273045 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.333121061 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.333147049 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.335495949 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.335508108 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.335675001 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.335679054 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.335840940 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.335844994 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.625171900 CET	443	65362	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:36.625552893 CET	65362	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:36.625591993 CET	443	65362	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:36.625942945 CET	443	65362	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:36.626271963 CET	65362	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:36.626336098 CET	443	65362	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:36.676734924 CET	65362	443	192.168.2.4	216.58.206.36
Mar 6, 2025 22:17:36.755822897 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.756148100 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.756177902 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.856654882 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.894875050 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.894948959 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.894968033 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.894984961 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.895020962 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.901390076 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.901467085 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.901474953 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.953336954 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.953361034 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.993630886 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.993654966 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:36.998759985 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:36.998776913 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.505559921 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.505641937 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.508759022 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.508876085 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.508932114 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.508946896 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.515583992 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.515645981 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.515652895 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.522667885 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.522735119 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.522739887 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.522749901 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.522792101 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.522803068 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.529194117 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.529228926 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.529249907 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.535918951 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.535981894 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.535991907 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.536048889 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.542638063 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.542733908 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.542793036 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.542800903 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.556233883 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.556258917 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.556293964 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.590878010 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.591157913 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.591172934 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.591234922 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.599246979 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.599365950 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.599421978 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.602327108 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.602428913 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.605768919 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.605798006 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.605839968 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.605849028 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.605895996 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.612477064 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.612545013 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.612607956 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.612620115 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.619302988 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.619384050 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.619391918 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.626111031 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.626126051 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.626211882 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.626219988 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.626270056 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.632885933 CET	443	65361	104.18.95.41	192.168.2.4
Mar 6, 2025 22:17:37.632989883 CET	65361	443	192.168.2.4	104.18.95.41
Mar 6, 2025 22:17:37.651493073 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:37.651546955 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:37.651618004 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:37.651849031 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:37.651864052 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:38.878189087 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:17:38.922983885 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:17:38.973921061 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:17:38.974092960 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:17:39.297363043 CET	49742	443	192.168.2.4	178.32.67.58
Mar 6, 2025 22:17:39.297416925 CET	443	49742	178.32.67.58	192.168.2.4
Mar 6, 2025 22:17:39.415927887 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:39.416901112 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:39.416914940 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:39.417243004 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:39.418431997 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:39.418498039 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:39.418926954 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:39.464323044 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.057712078 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.057749033 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.057777882 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.057810068 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.057837963 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.057887077 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.057899952 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.060159922 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.060254097 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.060264111 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.066606045 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.066639900 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.066679001 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.066689968 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.066904068 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.074934006 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.080277920 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.080337048 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.080352068 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.131484032 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.150538921 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.150602102 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.150645018 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.150665045 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.152796984 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.152853012 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.152868032 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.158880949 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.158978939 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.158987999 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.208326101 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.379614115 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379677057 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379709959 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379772902 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379786968 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.379811049 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379839897 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.379851103 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379899025 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379921913 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379956961 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.379956961 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.379964113 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.379981995 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.380069017 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.380075932 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.383084059 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.383176088 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.383181095 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.383193016 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.383234978 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.383265972 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.383306980 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.383306980 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.383318901 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.387232065 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.387363911 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.387379885 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.389671087 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.389694929 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.389792919 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.389810085 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.389820099 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.389900923 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.390175104 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.390214920 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.390259981 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.390259981 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.390270948 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.391100883 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.391129017 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.391187906 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.391187906 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.391201019 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.392250061 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.392301083 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.392323017 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.392360926 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.392421961 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.392505884 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:40.392539978 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.392657042 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.405623913 CET	65368	443	192.168.2.4	104.18.94.41
Mar 6, 2025 22:17:40.405644894 CET	443	65368	104.18.94.41	192.168.2.4
Mar 6, 2025 22:17:46.234903097 CET	443	65362	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:46.234976053 CET	443	65362	216.58.206.36	192.168.2.4
Mar 6, 2025 22:17:46.235037088 CET	65362	443	192.168.2.4	216.58.206.36

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 6, 2025 22:16:21.505038023 CET	53	61045	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:21.547926903 CET	53	52983	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:24.245074987 CET	53	49207	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:25.662451029 CET	63576	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:25.662600040 CET	58833	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:25.669668913 CET	53	58833	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:25.669719934 CET	53	63576	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:27.265856981 CET	51704	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:27.266024113 CET	53460	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:27.284437895 CET	53	53460	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:27.286819935 CET	53	51704	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:30.984246969 CET	138	138	192.168.2.4	192.168.2.255
Mar 6, 2025 22:16:36.618884087 CET	53	50252	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:41.186079979 CET	53	54238	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:50.941720009 CET	58794	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:50.941868067 CET	63593	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:50.957220078 CET	53	58794	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:50.965423107 CET	53	63593	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:56.140705109 CET	51529	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:56.141086102 CET	56666	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:56.141947031 CET	60789	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:56.142158985 CET	63834	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:56.148391962 CET	53	51529	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:56.148849964 CET	53	56666	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:56.149353027 CET	53	60789	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:56.150150061 CET	53	63834	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:58.679959059 CET	52447	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:58.680118084 CET	59236	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:16:58.687134027 CET	53	52447	1.1.1.1	192.168.2.4
Mar 6, 2025 22:16:58.687515974 CET	53	59236	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:00.148678064 CET	53	51869	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:01.330162048 CET	60813	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:01.330549955 CET	58075	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:01.337522984 CET	53	60813	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:01.338443995 CET	53	58075	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:01.636159897 CET	54196	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:01.636328936 CET	50515	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:01.643357992 CET	53	54196	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:01.643376112 CET	53	50515	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:07.925874949 CET	49267	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:07.926022053 CET	56670	53	192.168.2.4	1.1.1.1
Mar 6, 2025 22:17:07.933196068 CET	53	49267	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:07.933578014 CET	53	56670	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:20.859869957 CET	53	56945	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:23.045336962 CET	53	62258	1.1.1.1	192.168.2.4
Mar 6, 2025 22:17:24.842849970 CET	53	52612	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 6, 2025 22:16:25.662451029 CET	192.168.2.4	1.1.1.1	0x98a8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:25.662600040 CET	192.168.2.4	1.1.1.1	0x4678	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 6, 2025 22:16:27.265856981 CET	192.168.2.4	1.1.1.1	0xc5df	Standard query (0)	spaceavenue.ae	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:27.266024113 CET	192.168.2.4	1.1.1.1	0xdae4	Standard query (0)	spaceavenue.ae	65	IN (0x0001)	false
Mar 6, 2025 22:16:50.941720009 CET	192.168.2.4	1.1.1.1	0x3ad5	Standard query (0)	horolasscratchrubberincorporate.docvaulthost.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:50.941868067 CET	192.168.2.4	1.1.1.1	0x2c41	Standard query (0)	horolasscratchrubberincorporate.docvaulthost.com	65	IN (0x0001)	false
Mar 6, 2025 22:16:56.140705109 CET	192.168.2.4	1.1.1.1	0x918b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:56.141086102 CET	192.168.2.4	1.1.1.1	0x8e2b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 22:16:56.141947031 CET	192.168.2.4	1.1.1.1	0x13c6	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:56.142158985 CET	192.168.2.4	1.1.1.1	0xba84	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 6, 2025 22:16:58.679959059 CET	192.168.2.4	1.1.1.1	0x12a9	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:58.680118084 CET	192.168.2.4	1.1.1.1	0xc82f	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 6, 2025 22:17:01.330162048 CET	192.168.2.4	1.1.1.1	0xf55	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:17:01.330549955 CET	192.168.2.4	1.1.1.1	0x682b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 22:17:01.636159897 CET	192.168.2.4	1.1.1.1	0x1504	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:17:01.636328936 CET	192.168.2.4	1.1.1.1	0xce9b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 6, 2025 22:17:07.925874949 CET	192.168.2.4	1.1.1.1	0x7962	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:17:07.926022053 CET	192.168.2.4	1.1.1.1	0x4850	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 6, 2025 22:16:25.669668913 CET	1.1.1.1	192.168.2.4	0x4678	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 6, 2025 22:16:25.669719934 CET	1.1.1.1	192.168.2.4	0x98a8	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:27.286819935 CET	1.1.1.1	192.168.2.4	0xc5df	No error (0)	spaceavenue.ae		178.32.67.58	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:50.957220078 CET	1.1.1.1	192.168.2.4	0x3ad5	No error (0)	horolasscratchrubberincorporate.docvaulthost.com		104.21.60.95	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:50.957220078 CET	1.1.1.1	192.168.2.4	0x3ad5	No error (0)	horolasscratchrubberincorporate.docvaulthost.com		172.67.195.129	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:50.965423107 CET	1.1.1.1	192.168.2.4	0x2c41	No error (0)	horolasscratchrubberincorporate.docvaulthost.com			65	IN (0x0001)	false
Mar 6, 2025 22:16:56.148391962 CET	1.1.1.1	192.168.2.4	0x918b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:56.148391962 CET	1.1.1.1	192.168.2.4	0x918b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:56.148849964 CET	1.1.1.1	192.168.2.4	0x8e2b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 6, 2025 22:16:56.149353027 CET	1.1.1.1	192.168.2.4	0x13c6	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 6, 2025 22:16:56.149353027 CET	1.1.1.1	192.168.2.4	0x13c6	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:56.149353027 CET	1.1.1.1	192.168.2.4	0x13c6	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:56.149353027 CET	1.1.1.1	192.168.2.4	0x13c6	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:56.149353027 CET	1.1.1.1	192.168.2.4	0x13c6	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:56.150150061 CET	1.1.1.1	192.168.2.4	0xba84	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 6, 2025 22:16:58.687134027 CET	1.1.1.1	192.168.2.4	0x12a9	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 6, 2025 22:16:58.687134027 CET	1.1.1.1	192.168.2.4	0x12a9	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:58.687134027 CET	1.1.1.1	192.168.2.4	0x12a9	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:58.687134027 CET	1.1.1.1	192.168.2.4	0x12a9	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:58.687134027 CET	1.1.1.1	192.168.2.4	0x12a9	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:16:58.687515974 CET	1.1.1.1	192.168.2.4	0xc82f	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 6, 2025 22:17:01.337522984 CET	1.1.1.1	192.168.2.4	0xf55	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:17:01.337522984 CET	1.1.1.1	192.168.2.4	0xf55	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:17:01.338443995 CET	1.1.1.1	192.168.2.4	0x682b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 6, 2025 22:17:01.643357992 CET	1.1.1.1	192.168.2.4	0x1504	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:17:01.643357992 CET	1.1.1.1	192.168.2.4	0x1504	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 6, 2025 22:17:01.643376112 CET	1.1.1.1	192.168.2.4	0xce9b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 6, 2025 22:17:07.933196068 CET	1.1.1.1	192.168.2.4	0x7962	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

horolasscratchrubberincorporate.docvaulthost.com

cdn.jsdelivr.net

challenges.cloudflare.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49755	104.21.60.95	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:16:54 UTC	754	OUT	GET /A8r6D/?e=qggi45@gcr.net HTTP/1.1 Host: horolasscratchrubberincorporate.docvaulthost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://spaceavenue.ae/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:16:55 UTC	1034	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:16:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=rt4516vme7ml7l3l0lllq32kpp; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zEC80la52xd%2Bf9DDiUSkR7mgz2Psg3SSkeo4pm7SqNa1As1ATnURIhx73HBnxUVcCDU%2FyNVBta4xbaNLFfOnUV7UC%2Fn7cY596E0VnNm193hb%2BvShpFzovEjNm7nJTCWZ31syG7LE9r44NiFTRMHhK%2ByG3GKBsuR0Jom6W65%2BVCBMOA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91c4e07b1dc95c6b-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=46460&min_rtt=45487&rtt_var=14480&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1332&delivery_rate=58334&cwnd=32&unsent_bytes=0&cid=6a3a3c5d1969324f&ts=1238&x=0"
2025-03-06 21:16:55 UTC	335	IN	Data Raw: 31 31 32 33 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 55 74 6f 70 69 61 54 77 69 6e 6b 6c 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 62 6f 6f 6b 20 77 61 73 20 61 20 74 68 72 69 6c 6c 69 6e 67 20 74 61 6c 65 20 66 69 6c 6c 65 64 20 77 69 74 68 20 73 75 73 70 65 6e 73 65 2c 20 6d 79 73 74 65 72 79 2c 20 61 6e 64 20 75 6e 65 78 70 65 63 74 65 64 20 74 77 69 73 74 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 Data Ascii: 1123 <html lang="en"> <head> <meta charset="UTF-8"> <title>UtopiaTwinkle</title> ... <span>The book was a thrilling tale filled with suspense, mystery, and unexpected twists.</span> --> <meta name="robots"
2025-03-06 21:16:55 UTC	1369	IN	Data Raw: 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 20 63 72 65 61 74 69 76 65 20 77 72 69 74 65 72 20 64 72 61 66 74 65 64 20 61 6e 20 69 6d 61 67 69 6e 61 74 69 76 65 20 73 74 6f 72 79 20 74 68 61 74 20 63 61 70 74 69 76 61 74 65 64 20 79 6f 75 6e 67 20 72 65 61 64 65 72 73 20 65 76 65 72 79 77 68 65 72 65 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: e-width, initial-scale=1.0"> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>A creative writer drafted an imaginative story that captivated young readers everywhere.</p> --> <style>
2025-03-06 21:16:55 UTC	1369	IN	Data Raw: 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 50 6f 6e 64 65 72 4c 6f 6f 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 54 68 65 20 62 61 6b 65 72 20 63 72 65 61 74 65 64 20 61 20 6d 61 73 74 65 72 70 69 65 63 65 20 6f 66 20 61 20 63 61 6b 65 20 66 6f 72 20 74 68 65 20 63 6f 75 70 6c 65 e2 80 99 73 20 77 65 64 64 69 6e 67 20 63 65 6c 65 62 72 61 74 69 6f 6e 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 Data Ascii: 20px; } .PonderLoom { /* The baker created a masterpiece of a cake for the couples wedding celebration. */ font-size: 1rem; margin-bottom: 30px; letter-spa
2025-03-06 21:16:55 UTC	1322	IN	Data Raw: 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 41 20 64 69 6c 69 67 65 6e 74 20 73 74 75 64 65 6e 74 20 73 74 75 64 69 65 64 20 6c 61 74 65 20 69 6e 74 6f 20 74 68 65 20 6e 69 67 68 74 2c 20 70 72 65 70 61 72 69 6e 67 20 66 6f 72 20 74 68 65 20 66 69 6e 61 6c 20 65 78 61 6d 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 54 68 65 20 66 61 72 6d 65 72 20 77 6f 72 6b 65 64 20 74 69 72 65 6c 65 73 73 6c 79 20 74 6f 20 65 6e 73 75 72 65 20 61 20 67 6f 6f 64 20 68 61 72 76 65 73 74 20 66 6f 72 20 74 68 65 20 63 6f 6d 69 6e 67 20 73 65 61 73 6f 6e 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 Data Ascii: <form method="POST"> ... A diligent student studied late into the night, preparing for the final exam. --> ... The farmer worked tirelessly to ensure a good harvest for the coming season. --> <spa
2025-03-06 21:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49758	151.101.129.229	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:16:57 UTC	657	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://horolasscratchrubberincorporate.docvaulthost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:16:58 UTC	727	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1746 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/png X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"6d2-AYrTQKiV+wIbV7PAik2IZG8pgfE" Accept-Ranges: bytes Age: 15109 Date: Thu, 06 Mar 2025 21:16:58 GMT X-Served-By: cache-fra-etou8220171-FRA, cache-pdk-kpdk1780111-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-06 21:16:58 UTC	1378	IN	Data Raw: 52 49 46 46 ca 06 00 00 57 45 42 50 56 50 38 4c bd 06 00 00 2f ff c4 3f 11 1e 3a b6 b5 29 92 9c da dd 4c 65 66 c3 f0 78 d3 a6 b4 8a 5e 86 a0 40 cc 54 95 15 59 62 66 96 25 79 da 0a cb ca 9e 86 50 44 dd 3c a3 05 b0 c9 cc e4 cb 65 4b 16 5b 63 89 7c c9 93 20 39 92 a4 48 0a c5 9f 67 29 b3 97 e9 c4 0c 4f 5c 75 65 96 ba aa 87 03 6e 24 49 8e 9c 8a 7e 13 40 2f ae e7 39 27 36 c2 07 c8 dc 34 ba 7b af 51 11 c0 c0 b2 6d 3b 6d b3 ac af 2e 0b 1c e6 e9 37 5f 1d 04 a3 65 c9 9c e2 00 c2 0c 4e 9e 73 27 a0 aa 81 c8 b5 ac 41 2b 9b 3e ca 74 7a 20 5c eb 7a 67 b0 ae b5 8f 08 a7 bb f0 0c 11 9c e0 da 0b d0 38 d4 38 88 5b 83 71 89 5d 8a 0c 5a dd f5 d1 0f a7 6b 1a d4 ba de 1f ac 4d d7 3c 20 82 11 5c 7f 09 82 41 fc c7 7f fc c7 7f fc c7 7f fc 87 18 fd 68 d3 e4 4f 91 91 f0 1f ff f1 1f Data Ascii: RIFFWEBPVP8L/?:)Lefx^@TYbf%yPD<eK[c\| 9Hg)O\uen$I~@/9'64{Qm;m.7_eNs'A+>tz \zg88[q]ZkM< \AhO
2025-03-06 21:16:58 UTC	368	IN	Data Raw: ee 2a c6 ec 56 a7 71 8f 31 3b 44 ad ef 9f c3 33 46 ac 69 db 66 b3 82 6b 25 3c 3b 9b 85 b8 b5 ee ba f0 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff Data Ascii: *Vq1;D3Fifk%<;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49757	104.18.94.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:16:57 UTC	576	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://horolasscratchrubberincorporate.docvaulthost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:16:58 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 06 Mar 2025 21:16:58 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 91c4e08fcd5a7b94-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49760	151.101.129.229	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:00 UTC	389	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:01 UTC	727	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1746 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/png X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"6d2-AYrTQKiV+wIbV7PAik2IZG8pgfE" Accept-Ranges: bytes Date: Thu, 06 Mar 2025 21:17:00 GMT Age: 15112 X-Served-By: cache-fra-etou8220171-FRA, cache-pdk-kpdk1780038-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-06 21:17:01 UTC	1378	IN	Data Raw: 52 49 46 46 ca 06 00 00 57 45 42 50 56 50 38 4c bd 06 00 00 2f ff c4 3f 11 1e 3a b6 b5 29 92 9c da dd 4c 65 66 c3 f0 78 d3 a6 b4 8a 5e 86 a0 40 cc 54 95 15 59 62 66 96 25 79 da 0a cb ca 9e 86 50 44 dd 3c a3 05 b0 c9 cc e4 cb 65 4b 16 5b 63 89 7c c9 93 20 39 92 a4 48 0a c5 9f 67 29 b3 97 e9 c4 0c 4f 5c 75 65 96 ba aa 87 03 6e 24 49 8e 9c 8a 7e 13 40 2f ae e7 39 27 36 c2 07 c8 dc 34 ba 7b af 51 11 c0 c0 b2 6d 3b 6d b3 ac af 2e 0b 1c e6 e9 37 5f 1d 04 a3 65 c9 9c e2 00 c2 0c 4e 9e 73 27 a0 aa 81 c8 b5 ac 41 2b 9b 3e ca 74 7a 20 5c eb 7a 67 b0 ae b5 8f 08 a7 bb f0 0c 11 9c e0 da 0b d0 38 d4 38 88 5b 83 71 89 5d 8a 0c 5a dd f5 d1 0f a7 6b 1a d4 ba de 1f ac 4d d7 3c 20 82 11 5c 7f 09 82 41 fc c7 7f fc c7 7f fc c7 7f fc 87 18 fd 68 d3 e4 4f 91 91 f0 1f ff f1 1f Data Ascii: RIFFWEBPVP8L/?:)Lefx^@TYbf%yPD<eK[c\| 9Hg)O\uen$I~@/9'64{Qm;m.7_eNs'A+>tz \zg88[q]ZkM< \AhO
2025-03-06 21:17:01 UTC	368	IN	Data Raw: ee 2a c6 ec 56 a7 71 8f 31 3b 44 ad ef 9f c3 33 46 ac 69 db 66 b3 82 6b 25 3c 3b 9b 85 b8 b5 ee ba f0 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff Data Ascii: *Vq1;D3Fifk%<;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49759	104.18.94.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:00 UTC	591	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://horolasscratchrubberincorporate.docvaulthost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:01 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:00 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91c4e0a0acec673a-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 21:17:01 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-06 21:17:01 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49761	104.18.94.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:03 UTC	383	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:03 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91c4e0b08bbd1d68-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 76 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 76 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 76 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,v,h;try{for(a=a.call(e);!(c=(v=a.next()).done)&&(o.push(v.value),!(t&&o.length===t));c=!0)
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 76 26 26 28 76 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;v&&(v=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 6a 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 2c 65 2e 4c 69 67 68 74 3d 22 6c 69 67 68 74 22 2c 65 2e 44 61 72 6b 3d 22 64 61 72 6b 22 7d 29 28 6a 65 7c 7c 28 6a 65 3d 7b 7d 29 29 3b 76 61 72 20 43 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 65 72 69 66 79 69 6e 67 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 4f 76 65 72 72 75 6e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 61 69 6c 75 72 65 57 6f 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 66 61 69 6c 75 72 65 2d 77 6f Data Ascii: );var je;(function(e){e.Auto="auto",e.Light="light",e.Dark="dark"})(je\|\|(je={}));var Ce;(function(e){e.Verifying="verifying",e.VerifyingHavingTroubles="verifying-having-troubles",e.VerifyingOverrun="verifying-overrun",e.FailureWoHavingTroubles="failure-wo
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 78 65 63 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 2c 65 2e 52 65 64 69 72 65 63 74 Data Ascii: xecute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_missing_aux",e.Redirect
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 4c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 Data Ascii: rams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearanceLevel!=="default"&&t.set("clearance_level",e.params._debugS
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 46 65 65 64 62 61 63 6b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 2c 6c 2c 76 3d 4c 28 4d 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c Data Ascii: language,"/").concat(_)}var St=function(e){var t,a,o=window.innerWidth<400,c=e.state===Ce.FailureFeedback\|\|e.state===Ce.FailureHavingTroubles,l,v=L(Mr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 61 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 4f 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 76 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 76 26 26 74 65 28 70 2c 76 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 4f 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: l(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Oe(e,t,a){return Be()?Oe=Reflect.construct:Oe=function(c,l,v){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return v&&te(p,v.prototype),p},Oe.apply(null,a
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 66 72 28 61 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 71 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 71 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 71 65 29 2e 63 6f 6e 63 61 74 Data Ascii: r));function g(e,t){var a="[Cloudflare Turnstile] ".concat(e,".");throw new fr(a,t)}function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(qe)?e.substring(qe.length):null}function $(e){return"".concat(qe).concat
2025-03-06 21:17:03 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 Data Ascii: height="100vh",s.style.top="0",s.style.left="0",s.style.transformOrigin="center center",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49762	104.18.95.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:03 UTC	832	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://horolasscratchrubberincorporate.docvaulthost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:04 UTC	1297	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28339 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-EHFjwkSclNzL9zPu' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-06 21:17:04 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 45 48 46 6a 77 6b 53 63 6c 4e 7a 4c 39 7a 50 75 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-EHFjwkSclNzL9zPu' 'unsafe-
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 35 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 72 65 77 6f 72 6b 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 38 7d 33 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 74 6f 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 75 6e 73 70 69 6e 7b 34 30 25 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 70 78 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 73 71 75 61 72 65 3b 73 74 72 6f 6b 65 Data Ascii: pacity:0;transform:scale(0)}50%{opacity:1;transform:scale(1.5)}to{opacity:0;transform:scale(2)}}@keyframes firework{0%{opacity:0;stroke-dashoffset:8}30%{opacity:1}to{stroke-dashoffset:-8}}@keyframes unspin{40%{stroke-width:1px;stroke-linecap:square;stroke
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 72 6c 69 6d 69 74 3a 31 30 7d 23 73 75 63 63 65 73 73 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 36 70 78 7d 23 73 75 63 63 65 73 73 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 20 2e 70 31 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 7d 23 73 75 63 63 65 73 73 2d 69 20 2e 70 31 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 32 34 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 32 34 32 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 Data Ascii: rlimit:10}#success-i{animation:scale-up-center .3s cubic-bezier(.55,.085,.68,.53) both;stroke-width:6px}#success-i,#success-i .p1{box-shadow:inset 0 0 0 #038127}#success-i .p1{stroke-dasharray:242;stroke-dashoffset:242;animation:stroke .4s cubic-bezier(.6
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 70 78 3b 66 69 6c 6c 3a 23 66 38 66 38 66 38 3b 73 74 72 6f 6b 65 3a 23 66 38 66 38 66 38 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 Data Ascii: :flex;height:30px;width:30px;stroke-width:1px;fill:#f8f8f8;stroke:#f8f8f8;stroke-miterlimit:10}.theme-dark #challenge-overlay{background-color:#222}.theme-dark #challenge-error-text,.theme-dark #challenge-overlay{color:#ffa299}.theme-dark #challenge-error
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 7b 63 6f 6c 6f 72 3a 23 62 62 62 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 Data Ascii: er{color:#949494}.theme-dark #terms{color:#bbb}.theme-dark #terms a{color:#bbb;white-space:nowrap}.theme-dark #terms a:link,.theme-dark #terms a:visited{color:#bbb}.theme-dark #terms a:active,.theme-dark #terms a:focus,.theme-dark #terms a:hover{color:#94
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 66 61 66 61 66 61 3b 63 6f 6c 6f 72 3a 23 64 65 31 33 30 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 Data Ascii: olor:#fafafa;color:#de1303;font-size:9px;line-height:10px;position:absolute;top:0;z-index:9999}#challenge-overlay a,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-over
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 74 68 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 36 64 36 64 36 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 67 72 69 64 2d 61 72 65 61 3a 31 2f 31 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a Data Ascii: th;background:#fff;border:2px solid #6d6d6d;border-radius:3px;box-sizing:border-box;grid-area:1/1;height:24px;transition:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 65 78 74 2d 61 6c 69 67 6e 3a 65 6e 64 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2e 6c 74 72 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 63 62 2d 6c 62 2d 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 2d 72 65 76 65 72 73 65 20 6e 6f 77 72 61 70 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 66 6c 65 78 2d 65 6e 64 7d 2e 72 74 6c 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 Data Ascii: ext-align:end}.size-compact .error-message.ltr #fr-overrun{margin-left:0;margin-right:0}.cb-lb-t{align-items:center;display:flex;flex-flow:row-reverse nowrap;place-content:center flex-end}.rtl{direction:rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;pad
2025-03-06 21:17:04 UTC	1369	IN	Data Raw: 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 74 65 72 6d 73 20 61 3a 61 63 74 69 76 65 2c 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 2c 23 74 65 72 6d 73 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 64 65 31 33 30 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 35 35 70 78 3b 6d 61 72 67 69 6e 3a 35 70 78 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 32 30 30 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 Data Ascii: ecoration:underline}#terms a:active,#terms a:focus,#terms a:hover{color:#166379;text-decoration:underline}#challenge-error-title{color:#de1303;font-size:11px;height:55px;margin:5px 0;position:absolute;top:0;width:200px}#challenge-error-title a{color:#2323

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49763	104.18.95.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:05 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91c4e0b2d81cbce3&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:06 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 123608 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 91c4e0c18edcb035-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 21:17:06 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 22 54 72 6f Data Ascii: he%20issue%20persists.","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_expired":"Expired","turnstile_feedback_description":"Send%20Feedback","turnstile_success":"Success%21","feedback_report_guideline":"Tro
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 74 6f 72 25 32 30 6f 72 25 32 30 73 75 62 6d 69 74 25 32 30 61 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 52 2c 65 53 2c 65 57 2c 65 58 2c 66 30 2c 66 31 2c 66 78 2c 66 44 2c 66 47 2c 66 49 2c 66 4a 2c 66 4b 2c 66 57 2c Data Ascii: tor%20or%20submit%20a%20feedback%20report"},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_output_subtitle":false,"feedback_report_guideline":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eR,eS,eW,eX,f0,f1,fx,fD,fG,fI,fJ,fK,fW,
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 67 56 28 34 33 33 29 3d 3d 3d 67 56 28 38 31 35 29 3f 28 68 3d 69 7c 7c 6a 2c 21 68 5b 6b 5d 3f 27 27 3a 6c 28 6d 2c 68 5b 6e 5d 29 29 3a 65 5b 67 56 28 31 30 31 34 29 5d 28 65 51 2c 63 29 7d 63 61 74 63 68 28 68 29 7b 69 66 28 65 5b 67 56 28 37 30 31 29 5d 21 3d 3d 67 56 28 31 37 37 30 29 29 72 65 74 75 72 6e 20 65 4f 28 65 5b 67 56 28 31 36 32 35 29 5d 28 65 50 2c 63 29 29 3b 65 6c 73 65 7b 66 6f 72 28 6a 3d 65 5b 67 56 28 31 34 38 38 29 5d 28 74 68 69 73 2e 68 5b 65 5b 67 56 28 31 34 38 38 29 5d 28 35 35 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 65 5b 67 56 28 31 34 35 36 29 5d 28 65 5b 67 56 28 31 34 33 36 29 5d 28 74 68 69 73 2e 68 5b Data Ascii: function(g,h){return g(h)}});try{return gV(433)===gV(815)?(h=i\|\|j,!h[k]?'':l(m,h[n])):e[gV(1014)](eQ,c)}catch(h){if(e[gV(701)]!==gV(1770))return eO(e[gV(1625)](eP,c));else{for(j=e[gV(1488)](this.h[e[gV(1488)](55,this.g)][3]^e[gV(1456)](e[gV(1436)](this.h[
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 2c 27 71 4e 76 64 67 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 2c 4a 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 2c 4a 29 7d 2c 27 47 62 67 56 44 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 4c 67 6e 68 78 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 67 53 46 71 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 6f 5b 68 30 28 38 36 32 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 68 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 65 56 28 68 29 2c 67 5b 68 30 28 31 30 30 37 29 5d 5b 68 30 28 35 37 32 29 5d 26 26 28 78 3d 78 5b 68 30 28 35 39 37 29 5d 28 67 5b 68 30 28 31 30 30 37 29 5d 5b 68 30 28 Data Ascii: ,'qNvdg':function(G,H,I,J){return G(H,I,J)},'GbgVD':function(G,H){return G+H},'Lgnhx':function(G,H){return G+H},'gSFqJ':function(G,H,I){return G(H,I)}},o[h0(862)](null,h)\|\|h===void 0)return j;for(x=eV(h),g[h0(1007)][h0(572)]&&(x=x[h0(597)](g[h0(1007)][h0(
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 31 32 35 29 29 2c 66 31 3d 61 74 6f 62 28 67 4a 28 31 31 33 36 29 29 2c 65 4d 5b 67 4a 28 35 33 39 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4a 28 37 38 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 54 29 7b 69 66 28 68 54 3d 67 4a 2c 65 4d 5b 68 54 28 35 33 39 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 54 28 35 33 39 29 5d 3d 21 21 5b 5d 7d 2c 66 78 3d 30 2c 65 4e 5b 67 4a 28 31 34 38 39 29 5d 3d 3d 3d 67 4a 28 31 30 36 34 29 3f 65 4e 5b 67 4a 28 33 33 39 29 5d 28 67 4a 28 37 33 32 29 2c 66 75 6e 63 74 69 6f 6e 28 69 36 2c 63 29 7b 69 36 3d 67 4a 2c 63 3d 7b 27 77 43 73 6a 55 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 69 36 28 38 37 33 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 66 41 2c 30 29 7d 29 3a 73 Data Ascii: 125)),f1=atob(gJ(1136)),eM[gJ(539)]=![],eM[gJ(788)]=function(hT){if(hT=gJ,eM[hT(539)])return;eM[hT(539)]=!![]},fx=0,eN[gJ(1489)]===gJ(1064)?eN[gJ(339)](gJ(732),function(i6,c){i6=gJ,c={'wCsjU':function(d,e,f){return d(e,f)}},c[i6(873)](setTimeout,fA,0)}):s
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 39 28 35 31 36 29 5d 3d 65 4d 5b 69 39 28 31 37 31 32 29 5d 5b 69 39 28 35 31 36 29 5d 2c 6f 5b 69 39 28 31 34 33 38 29 5d 3d 65 4d 5b 69 39 28 31 37 31 32 29 5d 5b 69 39 28 31 33 37 39 29 5d 2c 73 3d 6f 2c 76 3d 6e 65 77 20 65 4d 5b 28 69 39 28 37 34 37 29 29 5d 28 29 2c 76 5b 69 39 28 36 37 39 29 5d 28 6b 5b 69 39 28 31 33 34 38 29 5d 2c 6e 29 2c 76 5b 69 39 28 31 31 34 39 29 5d 3d 35 65 33 2c 76 5b 69 39 28 31 32 34 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 78 3d 7b 7d 2c 78 5b 69 39 28 31 30 35 34 29 5d 3d 67 2c 78 5b 69 39 28 39 37 30 29 5d 3d 6c 2c 78 2e 63 63 3d 68 2c 78 5b 69 39 28 31 34 33 39 29 5d 3d 6d 2c 78 5b 69 39 28 31 34 31 38 29 5d 3d 73 2c 42 3d 4a 53 4f 4e 5b 69 39 28 31 33 33 37 29 5d 28 78 29 2c 76 5b 69 39 28 31 35 38 30 29 Data Ascii: 9(516)]=eM[i9(1712)][i9(516)],o[i9(1438)]=eM[i9(1712)][i9(1379)],s=o,v=new eM[(i9(747))](),v[i9(679)](k[i9(1348)],n),v[i9(1149)]=5e3,v[i9(1245)]=function(){},x={},x[i9(1054)]=g,x[i9(970)]=l,x.cc=h,x[i9(1439)]=m,x[i9(1418)]=s,B=JSON[i9(1337)](x),v[i9(1580)
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 2c 69 3d 64 5b 69 63 28 38 38 34 29 5d 28 29 2c 6a 3d 69 63 28 33 32 33 29 2c 69 5b 69 63 28 33 33 34 29 5d 28 6a 29 3e 2d 31 3f 76 6f 69 64 20 30 3a 28 6b 3d 7b 7d 2c 6b 5b 69 63 28 31 65 33 29 5d 3d 64 2c 6b 5b 69 63 28 34 34 31 29 5d 3d 65 2c 6b 5b 69 63 28 31 33 32 35 29 5d 3d 66 2c 6b 5b 69 63 28 31 33 37 35 29 5d 3d 67 2c 6b 5b 69 63 28 31 32 32 39 29 5d 3d 68 2c 6c 3d 6b 2c 65 4d 5b 69 63 28 35 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 64 29 7b 69 64 3d 69 63 2c 65 4d 5b 69 64 28 31 30 39 30 29 5d 28 6c 2c 75 6e 64 65 66 69 6e 65 64 2c 69 64 28 39 36 38 29 29 7d 2c 31 30 29 2c 65 4d 5b 69 63 28 35 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 65 29 7b 69 65 3d 69 63 2c 65 4d 5b 69 65 28 31 33 39 34 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 69 63 Data Ascii: ,i=d[ic(884)](),j=ic(323),i[ic(334)](j)>-1?void 0:(k={},k[ic(1e3)]=d,k[ic(441)]=e,k[ic(1325)]=f,k[ic(1375)]=g,k[ic(1229)]=h,l=k,eM[ic(582)](function(id){id=ic,eM[id(1090)](l,undefined,id(968))},10),eM[ic(582)](function(ie){ie=ic,eM[ie(1394)]()},1e3),eM[ic
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 32 31 29 5d 28 65 5b 6a 30 28 31 34 33 39 29 5d 2c 6a 30 28 31 33 33 34 29 29 26 26 65 5b 6a 30 28 31 30 34 30 29 5d 3d 3d 3d 64 5b 6a 30 28 31 36 34 31 29 5d 26 26 28 64 5b 6a 30 28 31 36 30 34 29 5d 3d 3d 3d 6a 30 28 33 39 33 29 3f 64 28 29 3a 64 5b 6a 30 28 31 30 30 31 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 67 65 29 29 7d 29 2c 67 67 3d 21 5b 5d 2c 21 66 48 28 67 4a 28 34 35 31 29 29 26 26 28 67 45 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 6a 79 2c 63 2c 64 2c 65 29 7b 6a 79 3d 67 4a 2c 63 3d 7b 27 45 75 56 6d 41 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 2c 27 6c 4a 76 41 59 27 3a 6a 79 28 38 39 34 29 2c 27 52 56 6b 50 49 27 3a 6a 79 28 34 38 33 29 2c 27 78 58 41 61 6b Data Ascii: 21)](e[j0(1439)],j0(1334))&&e[j0(1040)]===d[j0(1641)]&&(d[j0(1604)]===j0(393)?d():d[j0(1001)](clearInterval,ge))}),gg=![],!fH(gJ(451))&&(gE(),setInterval(function(jy,c,d,e){jy=gJ,c={'EuVmA':function(f,g){return f(g)},'lJvAY':jy(894),'RVkPI':jy(483),'xXAak
2025-03-06 21:17:06 UTC	1369	IN	Data Raw: 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 70 51 66 74 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 74 4e 41 7a 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 71 53 6c 59 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 69 56 4a 63 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 76 67 41 76 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 61 6d 69 63 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 69 59 57 41 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 Data Ascii: h,i){return h>i},'pQftX':function(h,i){return h<<i},'tNAzf':function(h,i){return h==i},'qSlYi':function(h,i){return h(i)},'iVJcP':function(h,i){return h(i)},'vgAvU':function(h,i){return h>i},'amicM':function(h,i){return h\|i},'iYWAc':function(h,i){return h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49764	104.18.95.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:05 UTC	743	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:06 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:06 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 91c4e0c18afcbfa4-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 21:17:06 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	104.21.60.95	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:06 UTC	721	OUT	GET /favicon.ico HTTP/1.1 Host: horolasscratchrubberincorporate.docvaulthost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://horolasscratchrubberincorporate.docvaulthost.com/A8r6D/?e=qggi45@gcr.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=rt4516vme7ml7l3l0lllq32kpp
2025-03-06 21:17:07 UTC	882	IN	HTTP/1.1 404 Not Found Date: Thu, 06 Mar 2025 21:17:07 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 cf-cache-status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8o8lCUUKuoBhMLmx9r3kO6vxOPNNErMMpN3X9ud63cSvpMw0G6br6Gh1tlrqiiU60F83gzWs4CqwbV9T%2FeQ%2FJS4g%2FRxqjUvsiVxh90Ij3IUPWPBOBz4LSxBGNBe4SrqZn6jpRcumCj3E5CTA%2FJ6EZK%2B%2FlX%2B0YQctZPogiG26GtcNgMQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91c4e0c79c7ca4da-MIA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=44184&min_rtt=40863&rtt_var=14472&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1299&delivery_rate=70855&cwnd=32&unsent_bytes=0&cid=b5401891731eca2d&ts=13305&x=0"
2025-03-06 21:17:07 UTC	201	IN	Data Raw: 63 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: c3<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-03-06 21:17:07 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2025-03-06 21:17:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49766	104.18.94.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:08 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:08 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:08 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 91c4e0d10b5abd59-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 21:17:08 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49767	104.18.94.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:08 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91c4e0b2d81cbce3&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:09 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114967 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 91c4e0d20f9e675e-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 21:17:09 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e Data Ascii: lem%20persists.","turnstile_footer_terms":"Terms","turnstile_feedback_description":"Send%20Feedback","turnstile_verifying":"Verifying...","turnstile_refresh":"Refresh","turnstile_success":"Success%21","human_button_text":"Verify%20you%20are%20human","turn
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 55 2c 66 30 2c 66 33 2c 66 35 2c 66 36 2c 66 37 2c 66 6a 2c 66 76 2c 66 42 2c 66 43 2c 66 44 2c 66 4e 2c 66 59 2c Data Ascii: ile_feedback_report":"Having%20trouble%3F"},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_aux_subtitle":false,"feedback_report_guideline":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eU,f0,f3,f5,f6,f7,fj,fv,fB,fC,fD,fN,fY,
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 68 6b 3d 67 4a 2c 7b 27 49 75 43 44 55 27 3a 66 75 6e 63 74 69 6f 6e 28 78 2c 42 2c 43 29 7b 72 65 74 75 72 6e 20 78 28 42 2c 43 29 7d 2c 27 59 51 71 48 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 42 2c 43 29 7b 72 65 74 75 72 6e 20 42 7c 7c 43 7d 2c 27 58 6d 6a 41 52 27 3a 66 75 6e 63 74 69 6f 6e 28 42 2c 43 29 7b 72 65 74 75 72 6e 20 42 2b 43 7d 2c 27 69 55 6d 6f 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 42 2c 43 29 7b 72 65 74 75 72 6e 20 42 2b 43 7d 2c 27 66 6c 58 48 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 42 2c 43 29 7b 72 65 74 75 72 6e 20 42 2b 43 7d 2c 27 4c 75 67 49 4c 27 3a 68 6b 28 34 39 33 29 7d 29 3b 74 72 79 7b 6a 3d 69 5b 68 6b 28 31 32 39 38 29 5d 28 65 59 2c 66 5b 68 6b 28 31 35 35 37 29 5d 2c 66 5b 68 6b 28 39 36 34 29 5d 29 2c 66 5b 68 6b 28 31 35 35 37 Data Ascii: hk=gJ,{'IuCDU':function(x,B,C){return x(B,C)},'YQqHn':function(B,C){return B\|\|C},'XmjAR':function(B,C){return B+C},'iUmoZ':function(B,C){return B+C},'flXHk':function(B,C){return B+C},'LugIL':hk(493)});try{j=i[hk(1298)](eY,f[hk(1557)],f[hk(964)]),f[hk(1557
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 68 6e 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 76 29 7b 66 6f 72 28 68 6e 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 6e 28 33 37 33 29 5d 3d 68 6e 28 31 31 38 34 29 2c 6b 3d 6a 2c 6c 3d 6b 5b 68 6e 28 33 37 33 29 5d 5b 68 6e 28 32 38 38 29 5d 28 27 7c 27 29 2c 6d 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6c 5b 6d 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 65 4d 5b 68 6e 28 31 35 34 31 29 5d 5b 68 6e 28 39 36 38 29 5d 28 68 6e 28 31 35 38 32 29 2c 65 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6f 3d 28 6e 3d 7b 7d 2c 6e 5b 68 6e 28 39 30 34 29 5d 3d 65 2c 6e 5b 68 6e 28 39 36 34 29 5d 3d 66 2c 6e 5b 68 6e 28 31 31 30 35 29 5d 3d 67 2c 6e 5b 68 6e 28 31 30 32 35 29 5d 3d 68 2c 6e 5b 68 6e 28 31 Data Ascii: ction(e,f,g,h,i,hn,j,k,l,m,n,o,s,v){for(hn=gJ,j={},j[hn(373)]=hn(1184),k=j,l=k[hn(373)][hn(288)]('\|'),m=0;!![];){switch(l[m++]){case'0':eM[hn(1541)][hn(968)](hn(1582),e);continue;case'1':o=(n={},n[hn(904)]=e,n[hn(964)]=f,n[hn(1105)]=g,n[hn(1025)]=h,n[hn(1
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 2c 67 32 5b 67 4a 28 31 35 30 36 29 5d 3d 66 51 2c 67 32 5b 67 4a 28 31 32 39 31 29 5d 3d 66 56 2c 67 32 5b 67 4a 28 33 38 39 29 5d 3d 66 57 2c 67 32 5b 67 4a 28 31 30 38 36 29 5d 3d 66 52 2c 67 32 5b 67 4a 28 31 33 39 38 29 5d 3d 66 58 2c 67 32 5b 67 4a 28 38 34 30 29 5d 3d 66 55 2c 67 32 5b 67 4a 28 31 30 34 31 29 5d 3d 66 54 2c 67 32 5b 67 4a 28 31 32 37 33 29 5d 3d 66 69 2c 67 32 5b 67 4a 28 31 32 34 34 29 5d 3d 66 50 2c 67 32 5b 67 4a 28 35 36 35 29 5d 3d 66 4f 2c 67 32 5b 67 4a 28 31 33 37 36 29 5d 3d 66 39 2c 67 32 5b 67 4a 28 34 32 37 29 5d 3d 66 61 2c 67 32 5b 67 4a 28 31 33 31 32 29 5d 3d 66 77 2c 67 32 5b 67 4a 28 38 31 31 29 5d 3d 66 79 2c 67 32 5b 67 4a 28 31 32 35 30 29 5d 3d 66 78 2c 67 32 5b 67 4a 28 38 38 37 29 5d 3d 66 49 2c 67 32 5b 67 Data Ascii: ,g2[gJ(1506)]=fQ,g2[gJ(1291)]=fV,g2[gJ(389)]=fW,g2[gJ(1086)]=fR,g2[gJ(1398)]=fX,g2[gJ(840)]=fU,g2[gJ(1041)]=fT,g2[gJ(1273)]=fi,g2[gJ(1244)]=fP,g2[gJ(565)]=fO,g2[gJ(1376)]=f9,g2[gJ(427)]=fa,g2[gJ(1312)]=fw,g2[gJ(811)]=fy,g2[gJ(1250)]=fx,g2[gJ(887)]=fI,g2[g
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 27 55 44 66 42 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 41 4c 45 4d 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4c 56 6c 46 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 71 6e 66 65 65 27 3a 6a 66 28 31 31 36 35 29 2c 27 4b 52 69 6a 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 62 4e 72 52 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 4d 74 41 54 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 63 4c 73 68 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c Data Ascii: 'UDfBD':function(h,i){return h&i},'ALEMR':function(h,i){return h(i)},'LVlFM':function(h,i){return h<i},'qnfee':jf(1165),'KRijY':function(h,i){return h\|i},'bNrRF':function(h,i){return h<<i},'MtATl':function(h,i){return i==h},'cLshF':function(h,i){return h<
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 64 5b 6a 69 28 31 30 30 32 29 5d 28 4d 2c 6a 5b 6a 69 28 39 31 30 29 5d 29 3b 4d 2b 3d 31 29 69 66 28 64 5b 6a 69 28 31 33 35 39 29 5d 28 6a 69 28 34 30 39 29 2c 6a 69 28 37 31 33 29 29 29 7b 69 66 28 4e 3d 6a 5b 6a 69 28 36 39 34 29 5d 28 4d 29 2c 4f 62 6a 65 63 74 5b 6a 69 28 31 35 37 38 29 5d 5b 6a 69 28 35 30 31 29 5d 5b 6a 69 28 37 34 34 29 5d 28 44 2c 4e 29 7c 7c 28 44 5b 4e 5d 3d 48 2b 2b 2c 45 5b 4e 5d 3d 21 30 29 2c 4f 3d 46 2b 4e 2c 4f 62 6a 65 63 74 5b 6a 69 28 31 35 37 38 29 5d 5b 6a 69 28 35 30 31 29 5d 5b 6a 69 28 37 34 34 29 5d 28 44 2c 4f 29 29 46 3d 4f 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 69 28 31 35 37 38 29 5d 5b 6a 69 28 35 30 31 29 5d 5b 6a 69 28 37 34 34 29 5d 28 45 2c 46 29 29 7b 69 66 28 32 35 36 3e 46 5b 6a 69 28 39 Data Ascii: d[ji(1002)](M,j[ji(910)]);M+=1)if(d[ji(1359)](ji(409),ji(713))){if(N=j[ji(694)](M),Object[ji(1578)][ji(501)][ji(744)](D,N)\|\|(D[N]=H++,E[N]=!0),O=F+N,Object[ji(1578)][ji(501)][ji(744)](D,O))F=O;else{if(Object[ji(1578)][ji(501)][ji(744)](E,F)){if(256>F[ji(9
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 29 5d 28 38 2c 43 29 3b 4b 3d 64 5b 6a 69 28 37 36 37 29 5d 28 64 5b 6a 69 28 33 36 37 29 5d 28 4b 2c 31 29 2c 64 5b 6a 69 28 33 34 33 29 5d 28 50 2c 31 29 29 2c 64 5b 6a 69 28 38 39 35 29 5d 28 4c 2c 64 5b 6a 69 28 31 35 31 37 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 6a 69 28 31 34 30 38 29 5d 28 64 5b 6a 69 28 33 31 33 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 64 5b 6a 69 28 32 35 39 29 5d 28 4b 2c 31 29 7c 50 2c 4c 3d 3d 6f 2d 31 3f 28 4c 3d 30 2c 4a 5b 6a 69 28 31 34 30 38 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 50 3d 30 2c 43 2b 2b 29 3b 66 6f 72 28 50 3d 46 5b 6a 69 28 39 33 31 29 5d 28 30 29 2c 43 3d 30 3b 31 36 Data Ascii: )](8,C);K=d[ji(767)](d[ji(367)](K,1),d[ji(343)](P,1)),d[ji(895)](L,d[ji(1517)](o,1))?(L=0,J[ji(1408)](d[ji(313)](s,K)),K=0):L++,P>>=1,C++);}else{for(P=1,C=0;C<I;K=d[ji(259)](K,1)\|P,L==o-1?(L=0,J[ji(1408)](s(K)),K=0):L++,P=0,C++);for(P=F[ji(931)](0),C=0;16
2025-03-06 21:17:09 UTC	1369	IN	Data Raw: 6c 28 31 33 30 39 29 5d 2c 4e 5b 6a 6c 28 38 32 38 29 5d 5b 6a 6c 28 34 39 31 29 5d 29 29 3b 73 77 69 74 63 68 28 4d 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 6a 6c 28 37 34 35 29 5d 28 32 2c 38 29 2c 49 3d 31 3b 64 5b 6a 6c 28 31 35 33 34 29 5d 28 49 2c 4e 29 3b 51 3d 4b 26 4a 2c 4b 3e 3e 3d 31 2c 4b 3d 3d 30 26 26 28 4b 3d 6f 2c 4a 3d 64 5b 6a 6c 28 31 35 34 35 29 5d 28 73 2c 4c 2b 2b 29 29 2c 4d 7c 3d 28 64 5b 6a 6c 28 33 37 30 29 5d 28 30 2c 51 29 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 52 3d 65 28 4d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 6a 6c 28 37 34 35 29 5d 28 32 2c 31 36 29 2c 49 3d 31 3b 64 5b 6a 6c 28 31 35 33 34 29 5d 28 49 2c 4e 29 3b 51 3d 64 5b 6a 6c 28 Data Ascii: l(1309)],N[jl(828)][jl(491)]));switch(M){case 0:for(M=0,N=Math[jl(745)](2,8),I=1;d[jl(1534)](I,N);Q=K&J,K>>=1,K==0&&(K=o,J=d[jl(1545)](s,L++)),M\|=(d[jl(370)](0,Q)?1:0)*I,I<<=1);R=e(M);break;case 1:for(M=0,N=Math[jl(745)](2,16),I=1;d[jl(1534)](I,N);Q=d[jl(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49768	35.190.80.1	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:09 UTC	621	OUT	OPTIONS /report/v4?s=8o8lCUUKuoBhMLmx9r3kO6vxOPNNErMMpN3X9ud63cSvpMw0G6br6Gh1tlrqiiU60F83gzWs4CqwbV9T%2FeQ%2FJS4g%2FRxqjUvsiVxh90Ij3IUPWPBOBz4LSxBGNBe4SrqZn6jpRcumCj3E5CTA%2FJ6EZK%2B%2FlX%2B0YQctZPogiG26GtcNgMQ%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://horolasscratchrubberincorporate.docvaulthost.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:10 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 06 Mar 2025 21:17:10 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49770	35.190.80.1	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:12 UTC	530	OUT	POST /report/v4?s=8o8lCUUKuoBhMLmx9r3kO6vxOPNNErMMpN3X9ud63cSvpMw0G6br6Gh1tlrqiiU60F83gzWs4CqwbV9T%2FeQ%2FJS4g%2FRxqjUvsiVxh90Ij3IUPWPBOBz4LSxBGNBe4SrqZn6jpRcumCj3E5CTA%2FJ6EZK%2B%2FlX%2B0YQctZPogiG26GtcNgMQ%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 509 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:12 UTC	509	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 31 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 68 6f 72 6f 6c 61 73 73 63 72 61 74 63 68 72 75 62 62 65 72 69 6e 63 6f 72 70 6f 72 61 74 65 2e 64 6f 63 76 61 75 6c 74 68 6f 73 74 2e 63 6f 6d 2f 41 38 72 36 44 2f 3f 65 3d 71 67 67 69 34 35 40 67 63 72 2e 6e 65 74 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 30 2e 39 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 Data Ascii: [{"age":0,"body":{"elapsed_time":1211,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://horolasscratchrubberincorporate.docvaulthost.com/A8r6D/?e=qggi45@gcr.net","sampling_fraction":1.0,"server_ip":"104.21.60.95","status_code"
2025-03-06 21:17:12 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 06 Mar 2025 21:17:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49782	104.18.95.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:18 UTC	948	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcvLtmuYj.Xu0Te5yPd8vcoPy9BtFjwXQjhGNXCqg8IEoM-1741295823-1.3.1.1-Bv0uNAhqOFLIhtdJiU3YuVE7Bac_tO0F.d3jBJXolHk/xw739/0x4AAAAAAA7suTDgvwWXnfYh/auto/fbE/crashed_retry/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://horolasscratchrubberincorporate.docvaulthost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:19 UTC	1297	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28519 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-rafzWPXoDJSwOINI' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-06 21:17:19 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-06 21:17:19 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 72 61 66 7a 57 50 58 6f 44 4a 53 77 4f 49 4e 49 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-rafzWPXoDJSwOINI' 'unsafe-
2025-03-06 21:17:19 UTC	1369	IN	Data Raw: 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f Data Ascii: ames fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfo
2025-03-06 21:17:19 UTC	1369	IN	Data Raw: 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a Data Ascii: -align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:
2025-03-06 21:17:19 UTC	1369	IN	Data Raw: 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 Data Ascii: shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #ex
2025-03-06 21:17:19 UTC	1369	IN	Data Raw: 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 Data Ascii: 1}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active
2025-03-06 21:17:19 UTC	1369	IN	Data Raw: 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e Data Ascii: resh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:lin
2025-03-06 21:17:19 UTC	1369	IN	Data Raw: 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 Data Ascii: t:checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wi
2025-03-06 21:17:19 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a Data Ascii: content:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:
2025-03-06 21:17:19 UTC	1369	IN	Data Raw: 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 Data Ascii: r{margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	65368	104.18.94.41	443	3068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-06 21:17:39 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91c4e17ff9706733&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-06 21:17:40 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 06 Mar 2025 21:17:39 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122714 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 91c4e1932c297bcf-ATL alt-svc: h3=":443"; ma=86400
2025-03-06 21:17:40 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebs
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f Data Ascii: text":"Verify%20you%20are%20human","testing_only":"Testing%20only.","turnstile_refresh":"Refresh","turnstile_timeout":"Timed%20out","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 22 3a 22 45 72 72 6f 72 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 52 2c 65 53 2c 65 57 2c 65 58 2c 65 59 2c 66 31 2c 66 34 2c 66 36 2c 66 37 2c 66 38 2c 66 6b 2c 66 77 2c 66 43 2c Data Ascii: ":"Error","turnstile_footer_terms":"Terms"},"polyfills":{"feedback_report_guideline":false,"feedback_report_aux_subtitle":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eR,eS,eW,eX,eY,f1,f4,f6,f7,f8,fk,fw,fC,
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 29 5e 74 68 69 73 2e 67 5d 2c 6b 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 68 5b 32 32 37 5e 74 68 69 73 2e 67 5d 5b 33 5d 5e 65 5b 67 59 28 31 37 32 30 29 5d 28 74 68 69 73 2e 68 5b 65 5b 67 59 28 31 31 38 34 29 5d 28 32 32 37 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 67 59 28 37 34 34 29 5d 28 74 68 69 73 2e 68 5b 65 5b 67 59 28 31 35 34 31 29 5d 28 32 32 37 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2c 31 33 36 29 2b 32 35 36 26 32 35 35 5e 32 31 30 2e 39 39 5e 74 68 69 73 2e 67 5d 2c 74 68 69 73 2e 68 5b 69 5e 74 68 69 73 2e 67 5d 3d 6a 5b 6b 5d 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 65 5b 67 59 28 31 30 30 38 29 5d 28 65 4f 2c 65 50 28 63 29 29 7d 7d 2c 65 52 3d 7b 7d 2c 65 52 5b 67 4a 28 31 35 32 38 29 5d 3d 27 6f 27 2c 65 52 5b 67 4a 28 34 32 37 29 5d Data Ascii: )^this.g],k=this.h[this.h[227^this.g][3]^e[gY(1720)](this.h[e[gY(1184)](227,this.g)][1][gY(744)](this.h[e[gY(1541)](227,this.g)][0]++),136)+256&255^210.99^this.g],this.h[i^this.g]=j[k];else return e[gY(1008)](eO,eP(c))}},eR={},eR[gJ(1528)]='o',eR[gJ(427)]
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 29 5d 5b 67 4a 28 39 38 30 29 5d 28 65 57 29 2c 65 4d 5b 67 4a 28 31 34 36 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 68 35 2c 69 2c 6a 2c 6b 2c 6c 29 7b 66 6f 72 28 68 35 3d 67 4a 2c 69 3d 4f 62 6a 65 63 74 5b 68 35 28 36 39 30 29 5d 28 68 29 2c 6a 3d 30 3b 6a 3c 69 5b 68 35 28 31 31 31 39 29 5d 3b 6a 2b 2b 29 69 66 28 6b 3d 69 5b 6a 5d 2c 6b 3d 3d 3d 27 66 27 26 26 28 6b 3d 27 4e 27 29 2c 67 5b 6b 5d 29 7b 66 6f 72 28 6c 3d 30 3b 6c 3c 68 5b 69 5b 6a 5d 5d 5b 68 35 28 31 31 31 39 29 5d 3b 2d 31 3d 3d 3d 67 5b 6b 5d 5b 68 35 28 37 30 37 29 5d 28 68 5b 69 5b 6a 5d 5d 5b 6c 5d 29 26 26 28 65 58 28 68 5b 69 5b 6a 5d 5d 5b 6c 5d 29 7c 7c 67 5b 6b 5d 5b 68 35 28 31 34 36 35 29 5d 28 27 6f 2e 27 2b 68 5b 69 5b 6a 5d 5d 5b 6c 5d 29 29 2c 6c 2b 2b 29 3b Data Ascii: )][gJ(980)](eW),eM[gJ(1468)]=function(g,h,h5,i,j,k,l){for(h5=gJ,i=Object[h5(690)](h),j=0;j<i[h5(1119)];j++)if(k=i[j],k==='f'&&(k='N'),g[k]){for(l=0;l<h[i[j]][h5(1119)];-1===g[k][h5(707)](h[i[j]][l])&&(eX(h[i[j]][l])\|\|g[k][h5(1465)]('o.'+h[i[j]][l])),l++);
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 68 61 28 34 36 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 6a 5b 68 61 28 39 33 31 29 5d 3d 68 61 28 39 36 37 29 2c 6a 5b 68 61 28 31 31 32 30 29 5d 3d 68 61 28 31 32 37 34 29 2c 6a 29 3b 74 72 79 7b 6c 3d 65 5a 28 67 5b 68 61 28 31 37 33 34 29 5d 2c 67 5b 68 61 28 36 39 37 29 5d 29 2c 67 5b 68 61 28 31 37 33 34 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 67 5b 68 61 28 31 37 33 34 29 5d 3d 4a 53 4f 4e 5b 68 61 28 31 35 35 32 29 5d 28 67 5b 68 61 28 31 37 33 34 29 5d 2c 4f 62 6a 65 63 74 5b 68 61 28 36 32 34 29 5d 28 67 5b 68 61 28 31 37 33 34 29 5d 29 29 3a 67 5b 68 61 28 31 37 33 34 29 5d 3d 4a 53 4f 4e 5b 68 61 28 31 Data Ascii: nction(C,D){return C+D},j[ha(465)]=function(C,D){return C+D},j[ha(931)]=ha(967),j[ha(1120)]=ha(1274),j);try{l=eZ(g[ha(1734)],g[ha(697)]),g[ha(1734)]instanceof Error?g[ha(1734)]=JSON[ha(1552)](g[ha(1734)],Object[ha(624)](g[ha(1734)])):g[ha(1734)]=JSON[ha(1
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 2c 65 4d 5b 67 4a 28 31 36 34 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 68 64 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 68 64 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 64 28 38 32 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 6a 5b 68 64 28 31 31 36 38 29 5d 3d 68 64 28 31 30 36 37 29 2c 6b 3d 6a 2c 6c 3d 65 5b 68 64 28 31 37 36 35 29 5d 28 29 2c 6d 3d 68 64 28 31 30 36 33 29 2c 6b 5b 68 64 28 38 32 34 29 5d 28 6c 5b 68 64 28 37 30 37 29 5d 28 6d 29 2c 2d 31 29 3f 76 6f 69 64 20 30 3a 28 6e 3d 7b 7d 2c 6e 5b 68 64 28 35 31 39 29 5d 3d 65 2c 6e 5b 68 64 28 36 39 37 29 5d 3d 66 2c 6e 5b 68 64 28 31 30 33 37 29 5d 3d 67 2c 6e 5b 68 64 28 34 38 31 29 5d 3d 68 2c 6e 5b 68 64 Data Ascii: ,eM[gJ(1645)]=function(e,f,g,h,i,hd,j,k,l,m,n,o){return hd=gJ,j={},j[hd(824)]=function(s,v){return s>v},j[hd(1168)]=hd(1067),k=j,l=e[hd(1765)](),m=hd(1063),k[hd(824)](l[hd(707)](m),-1)?void 0:(n={},n[hd(519)]=e,n[hd(697)]=f,n[hd(1037)]=g,n[hd(481)]=h,n[hd
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 63 5b 69 78 28 38 38 38 29 5d 28 66 46 29 26 26 21 65 4d 5b 69 78 28 31 33 36 33 29 5d 5b 69 78 28 31 34 31 39 29 5d 26 26 63 5b 69 78 28 31 35 32 36 29 5d 28 63 5b 69 78 28 31 32 36 37 29 5d 28 65 2c 66 5a 29 2c 64 29 29 3f 63 5b 69 78 28 39 36 34 29 5d 28 63 5b 69 78 28 38 30 37 29 5d 2c 69 78 28 34 34 36 29 29 3f 28 67 3d 7b 7d 2c 67 5b 69 78 28 31 32 37 33 29 5d 3d 63 5b 69 78 28 31 30 32 32 29 5d 2c 68 3d 67 2c 63 5b 69 78 28 36 34 34 29 5d 28 67 2c 69 78 28 31 38 32 31 29 2c 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 79 29 7b 69 79 3d 69 78 2c 6f 5b 69 79 28 31 38 31 31 29 5d 28 69 79 28 35 33 38 29 2c 66 75 6e 63 74 69 6f 6e 28 69 7a 2c 43 29 7b 28 69 7a 3d 69 79 2c 6f 5b 69 7a 28 34 38 39 29 5d 29 26 26 28 43 3d 7b 7d 2c 43 5b 69 7a 28 31 33 33 37 29 5d Data Ascii: c[ix(888)](fF)&&!eM[ix(1363)][ix(1419)]&&c[ix(1526)](c[ix(1267)](e,fZ),d))?c[ix(964)](c[ix(807)],ix(446))?(g={},g[ix(1273)]=c[ix(1022)],h=g,c[ix(644)](g,ix(1821),function(o,iy){iy=ix,o[iy(1811)](iy(538),function(iz,C){(iz=iy,o[iz(489)])&&(C={},C[iz(1337)]
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 20 68 2d 69 7d 2c 27 65 55 76 4d 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4a 72 47 4d 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 6a 47 73 58 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 76 7a 59 6d 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 47 64 78 50 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 4b 5a 58 49 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6a 4c 6c 4a 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 77 44 42 41 65 27 Data Ascii: h-i},'eUvMN':function(h,i){return h>i},'JrGMr':function(h,i){return h\|i},'jGsXP':function(h,i){return h==i},'vzYmk':function(h,i){return h(i)},'GdxPE':function(h,i){return h<<i},'KZXIR':function(h,i){return i==h},'jLlJr':function(h,i){return h<i},'wDBAe'
2025-03-06 21:17:40 UTC	1369	IN	Data Raw: 31 34 29 21 3d 3d 6a 47 28 38 31 34 29 29 72 65 74 75 72 6e 20 6a 47 28 31 37 32 31 29 5b 6a 47 28 33 39 32 29 5d 28 69 29 3b 65 6c 73 65 20 6b 3d 7b 7d 2c 6b 5b 6a 47 28 31 33 33 37 29 5d 3d 6a 47 28 31 38 30 32 29 2c 6b 5b 6a 47 28 33 37 33 29 5d 3d 6c 5b 6a 47 28 31 31 38 38 29 5d 5b 6a 47 28 31 37 30 35 29 5d 2c 6b 5b 6a 47 28 39 35 31 29 5d 3d 6a 47 28 31 32 36 38 29 2c 6b 5b 6a 47 28 31 36 37 33 29 5d 3d 6d 5b 6a 47 28 31 31 38 38 29 5d 5b 6a 47 28 31 34 37 34 29 5d 2c 6b 5b 6a 47 28 36 35 35 29 5d 3d 6e 5b 6a 47 28 31 31 38 38 29 5d 5b 6a 47 28 35 37 36 29 5d 2c 6b 5b 6a 47 28 31 37 39 34 29 5d 3d 6f 5b 6a 47 28 31 31 38 38 29 5d 5b 6a 47 28 35 34 32 29 5d 2c 6b 5b 6a 47 28 31 30 38 35 29 5d 3d 73 5b 6a 47 28 31 31 38 38 29 5d 5b 6a 47 28 31 36 31 Data Ascii: 14)!==jG(814))return jG(1721)[jG(392)](i);else k={},k[jG(1337)]=jG(1802),k[jG(373)]=l[jG(1188)][jG(1705)],k[jG(951)]=jG(1268),k[jG(1673)]=m[jG(1188)][jG(1474)],k[jG(655)]=n[jG(1188)][jG(576)],k[jG(1794)]=o[jG(1188)][jG(542)],k[jG(1085)]=s[jG(1188)][jG(161

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3128, Parent PID: 916

General

Target ID:	0
Start time:	16:16:14
Start date:	06/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3068, Parent PID: 3128

General

Target ID:	2
Start time:	16:16:19
Start date:	06/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2000,i,16966085620865134829,8594563024700151732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6564, Parent PID: 916

General

Target ID:	3
Start time:	16:16:25
Start date:	06/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://spaceavenue.ae/Wilbe/roni.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly