Edit tour

Windows Analysis Report
https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk

Overview

General Information

Sample URL:	https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk
Analysis ID:	1417264
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Phishing site detected (based on OCR NLP Model)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2012,i,7783744179106233875,4894796927445351254,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

ML Model on OCR Text: Matched 97.0% probability on "Add To Favorites (Ctrl + D) Sorry, the page you requested cannot be processed Return to home page WEBSITE SECURITY av WhiteHat U ed s by of this website is g.d by Federal State Illicit may in This content is copyrighted. You may not reproduce it without permission. Your IP Address: "

Source: https://www.creditbureaureports.com/iconnect/login.html

HTTP Parser: <input type="password" .../> found

Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/404.html	HTTP Parser: No favicon
Source: https://www.creditbureaureports.com/iconnect/404.html	HTTP Parser: No favicon

Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="author".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="author".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="author".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="author".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="author".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="author".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="author".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="author".. found

Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.29.128.114:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.29.128.114:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.29.128.114
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.0.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /iconnect/urlHandler?command=changePassword&logid=cnadmtk HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /css/main.css HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICA2NVfhqru_10283240308130508.js HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery-3.6.0.min.js HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery-migrate-3.3.2.min.js HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /js/lib/aes-3.1.2.js HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /img/loading.gif HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/modernizr-custom.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /js/config/tooltip.config.min.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /js/utils.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
Source: global traffic	HTTP traffic detected: GET /common_config/commonConfig.min.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
Source: global traffic	HTTP traffic detected: GET /js/config/config.min.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
Source: global traffic	HTTP traffic detected: GET /js/modules/login/tempPage.min.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
Source: global traffic	HTTP traffic detected: GET /js/config/message.config.min.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
Source: global traffic	HTTP traffic detected: GET /img/loading.gif HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
Source: global traffic	HTTP traffic detected: GET /iconnect/login.html HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery-ui-1.13.2.min.js HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /js/lib/jquery.validate-1.19.3.min.js HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /js/lib/handlebars-4.7.7.min.js HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /js/lib/handlebars.runtime-4.7.7.min.js HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /css/main.css?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /hbs/beforeLoginFooter.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/beforeLoginHeader.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/helpers/handlebarHelpers.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/login.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
Source: global traffic	HTTP traffic detected: GET /js/modules/login/login.min.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/showMessage.js?1705934910 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /img/favorites.fw.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-icons_ffffff_256x240.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D
Source: global traffic	HTTP traffic detected: GET /2.2/w/w-893076/sync/js/ HTTP/1.1Host: api-cbci.nd.nudatasecurity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gateway/loadLogin HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-icons_ffffff_256x240.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /img/favorites.fw.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /2.2/w/w-893076/init/js/?q=%7B%22e%22%3A962415%2C%22oq%22%3A%221280%3A907%3A1280%3A984%3A1280%3A984%22%2C%22wfi%22%3A%22flap-1%22%2C%22ji%22%3A%222.3.1%22%2C%22yf%22%3A%7B%7D%2C%22jc%22%3A%22Ybtva%22%2C%22jcc%22%3A1%2C%22ov%22%3A%22o2%7C1280k1024%201280k984%2024%2024%7C-60%7Cra-HF%7Coc1-2501pp0s72219oop%7Csnyfr%7Cuggcf%3A%2F%2Fjjj.perqvgohernhercbegf.pbz%2Fvpbaarpg%2FybtvaGrzc.ugzy%3Fqngn%3DcD%2BnTNtBKoG9T%2FYJcP4mlWbussoGT2RhvGZ9goozQBncoQUeKB4C2tAA13GEHAP%7CZbmvyyn%2F5.0%20(Jvaqbjf%20AG%2010.0%3B%20Jva64%3B%20k64)%20NccyrJroXvg%2F537.36%20(XUGZY%2C%20yvxr%20Trpxb)%20Puebzr%2F117.0.0.0%20Fnsnev%2F537.36%7Cjt1-n46p01n68sp5740r%22%7D HTTP/1.1Host: api-cbci.nd.nudatasecurity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=2754135240&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /iconnect/forgot_password.html HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /iconnect/404.html HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=1959665568&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /js/config/config.min.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /js/lib/vendor/modernizr-custom.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /common_config/commonConfig.min.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/beforeLoginFooter.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/beforeLoginHeader.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/activeSession.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/helpers/handlebarHelpers.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /js/utils.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /hbs/errorPage.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /js/modules/errorPage/errorPage.min.js?1705934884 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653643485 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-XSRF-TOKEN: 7ebf18ac-f933-4bca-a3c1-fa94ba5510f6slc: sec-ch-ua-mobile: ?0pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /img/whitehat.gif HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d6613a51140fa12b9db01d861691c63f8fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05af054a1c6c2cc122d6f294b3aacf7e05577fad34d26deae00181814faed9b1d361c3fbe28dede5b9da1f31eae5fe7939ea8cc7fbc62f3684e1ad80a0fae8db96d2027d0fb32258d1065b4d54d94b21333
Source: global traffic	HTTP traffic detected: GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653643485 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /img/whitehat.gif HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2536432815&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=1806900681&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=3246155910&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /iconnect/forgot_password.html HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653654703 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-XSRF-TOKEN: 7ebf18ac-f933-4bca-a3c1-fa94ba5510f6slc: sec-ch-ua-mobile: ?0pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453654670_913h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655454682\|1711653631333
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653654703 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2314521492&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2037933061&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
Source: global traffic	HTTP traffic detected: GET /iconnect/forgot_password.html HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
Source: global traffic	HTTP traffic detected: GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653672582 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-XSRF-TOKEN: 7ebf18ac-f933-4bca-a3c1-fa94ba5510f6slc: sec-ch-ua-mobile: ?0pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453672565_762h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655472574\|1711653631333
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653672582 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=3152934683&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=693529100&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /2.2/w/w-893076/sync/js/ HTTP/1.1Host: api-cbci.nd.nudatasecurity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gateway/loadLogin HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /2.2/w/w-893076/init/js/?q=%7B%22e%22%3A213152%2C%22oq%22%3A%221280%3A907%3A1280%3A984%3A1280%3A984%22%2C%22wfi%22%3A%22flap-1%22%2C%22ji%22%3A%222.3.1%22%2C%22yf%22%3A%7B%7D%2C%22jc%22%3A%22Ybtva%22%2C%22jcc%22%3A1%2C%22ov%22%3A%22o2%7C1280k1024%201280k984%2024%2024%7C-60%7Cra-HF%7Coc1-2501pp0s72219oop%7Csnyfr%7C%7CZbmvyyn%2F5.0%20(Jvaqbjf%20AG%2010.0%3B%20Jva64%3B%20k64)%20NccyrJroXvg%2F537.36%20(XUGZY%2C%20yvxr%20Trpxb)%20Puebzr%2F117.0.0.0%20Fnsnev%2F537.36%7Cjt1-n46p01n68sp5740r%22%7D HTTP/1.1Host: api-cbci.nd.nudatasecurity.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.creditbureaureports.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=3149778170&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=1162880932&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /iconnect/forgot_password.html HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653692700 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-XSRF-TOKEN: 0d9b1ef3-f1cc-41e4-b516-96febc1062f4slc: sec-ch-ua-mobile: ?0pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453692643_34h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655492679\|1711653631333
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.creditbureaureports.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.creditbureaureports.com/iconnect/404.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
Source: global traffic	HTTP traffic detected: GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653692700 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=DAAB9CED5D0C5181A6BBBD1B75A9E702; TS01b7a93c=01fdb62b4dab6734563a25279961da4c23228adec9fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9107975590b828acfbc41915eee764b1f66f4f7efffb84d0779a3cd7d7791bb50cc71637b6355f55039ae50fba4b1229e3e769713cda52ac150bfcdd76a470370a1bf62a7209870660042f693e489865
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=583385474&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=DAAB9CED5D0C5181A6BBBD1B75A9E702; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
Source: global traffic	HTTP traffic detected: GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2955867825&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=DAAB9CED5D0C5181A6BBBD1B75A9E702; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08

Source: unknown

DNS traffic detected: queries for: www.creditbureaureports.com

Source: unknown

HTTP traffic detected: POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba&bp=3&app=3389b198b27ff03b&crc=2203798042&en=5eyzl3s4&end=1 HTTP/1.1Host: www.creditbureaureports.comConnection: keep-aliveContent-Length: 3068sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.creditbureaureports.comSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0baAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655431367|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C

Source: chromecache_112.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_112.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?scope=&folderName=cupertino&cornerRadiusShadow=8px&offsetLeftShadow
Source: chromecache_144.2.dr, chromecache_131.2.dr	String found in binary or memory: https://raw.github.com/shagstrom/split-pane/master/LICENSE
Source: chromecache_107.2.dr	String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: chromecache_138.2.dr, chromecache_121.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.google.com/chrome/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.29.128.114:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.29.128.114:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@21/110@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2012,i,7783744179106233875,4894796927445351254,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2012,i,7783744179106233875,4894796927445351254,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://api-cbci.nd.nudatasecurity.com/2.2/w/w-893076/sync/js/	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://api-cbci.nd.nudatasecurity.com/2.2/w/w-893076/init/js/?q=%7B%22e%22%3A213152%2C%22oq%22%3A%221280%3A907%3A1280%3A984%3A1280%3A984%22%2C%22wfi%22%3A%22flap-1%22%2C%22ji%22%3A%222.3.1%22%2C%22yf%22%3A%7B%7D%2C%22jc%22%3A%22Ybtva%22%2C%22jcc%22%3A1%2C%22ov%22%3A%22o2%7C1280k1024%201280k984%2024%2024%7C-60%7Cra-HF%7Coc1-2501pp0s72219oop%7Csnyfr%7C%7CZbmvyyn%2F5.0%20(Jvaqbjf%20AG%2010.0%3B%20Jva64%3B%20k64)%20NccyrJroXvg%2F537.36%20(XUGZY%2C%20yvxr%20Trpxb)%20Puebzr%2F117.0.0.0%20Fnsnev%2F537.36%7Cjt1-n46p01n68sp5740r%22%7D	0%	Avira URL Cloud	safe
https://api-cbci.nd.nudatasecurity.com/2.2/w/w-893076/init/js/?q=%7B%22e%22%3A962415%2C%22oq%22%3A%221280%3A907%3A1280%3A984%3A1280%3A984%22%2C%22wfi%22%3A%22flap-1%22%2C%22ji%22%3A%222.3.1%22%2C%22yf%22%3A%7B%7D%2C%22jc%22%3A%22Ybtva%22%2C%22jcc%22%3A1%2C%22ov%22%3A%22o2%7C1280k1024%201280k984%2024%2024%7C-60%7Cra-HF%7Coc1-2501pp0s72219oop%7Csnyfr%7Cuggcf%3A%2F%2Fjjj.perqvgohernhercbegf.pbz%2Fvpbaarpg%2FybtvaGrzc.ugzy%3Fqngn%3DcD%2BnTNtBKoG9T%2FYJcP4mlWbussoGT2RhvGZ9goozQBncoQUeKB4C2tAA13GEHAP%7CZbmvyyn%2F5.0%20(Jvaqbjf%20AG%2010.0%3B%20Jva64%3B%20k64)%20NccyrJroXvg%2F537.36%20(XUGZY%2C%20yvxr%20Trpxb)%20Puebzr%2F117.0.0.0%20Fnsnev%2F537.36%7Cjt1-n46p01n68sp5740r%22%7D	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.creditbureaureports.com	12.51.26.7	true	false	high
ga-us-east-1.nd.nudatasecurity.com	99.83.176.153	true	false	unknown
www.google.com	142.251.16.104	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
api-cbci.nd.nudatasecurity.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=3246155910&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/js/lib/handlebars-4.7.7.min.js	false		high
https://www.creditbureaureports.com/gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653672582	false		high
https://api-cbci.nd.nudatasecurity.com/2.2/w/w-893076/init/js/?q=%7B%22e%22%3A213152%2C%22oq%22%3A%221280%3A907%3A1280%3A984%3A1280%3A984%22%2C%22wfi%22%3A%22flap-1%22%2C%22ji%22%3A%222.3.1%22%2C%22yf%22%3A%7B%7D%2C%22jc%22%3A%22Ybtva%22%2C%22jcc%22%3A1%2C%22ov%22%3A%22o2%7C1280k1024%201280k984%2024%2024%7C-60%7Cra-HF%7Coc1-2501pp0s72219oop%7Csnyfr%7C%7CZbmvyyn%2F5.0%20(Jvaqbjf%20AG%2010.0%3B%20Jva64%3B%20k64)%20NccyrJroXvg%2F537.36%20(XUGZY%2C%20yvxr%20Trpxb)%20Puebzr%2F117.0.0.0%20Fnsnev%2F537.36%7Cjt1-n46p01n68sp5740r%22%7D	false	Avira URL Cloud: safe	unknown
https://www.creditbureaureports.com/hbs/helpers/handlebarHelpers.js?1705934910	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=3152934683&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=583385474&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/favicon.ico	false		high
https://www.creditbureaureports.com/hbs/beforeLoginHeader.js?1705934884	false		high
https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png	false		high
https://www.creditbureaureports.com/iconnect/login.html	false		high
https://www.creditbureaureports.com/iconnect/404.html	false		high
https://api-cbci.nd.nudatasecurity.com/2.2/w/w-893076/sync/js/	false	Avira URL Cloud: safe	unknown
https://www.creditbureaureports.com/img/loading.gif	false		high
https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css	false		high
https://www.creditbureaureports.com/hbs/helpers/handlebarHelpers.js?1705934884	false		high
about:blank	false	Avira URL Cloud: safe	low
https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png	false		high
https://www.creditbureaureports.com/hbs/beforeLoginFooter.js?1705934910	false		high
https://www.creditbureaureports.com/js/config/config.min.js?1705934910	false		high
https://www.creditbureaureports.com/common_config/commonConfig.min.js?1705934884	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2314521492&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/js/modules/login/login.min.js?1705934910	false		high
https://www.creditbureaureports.com/js/lib/jquery-3.6.0.min.js	false		high
https://www.creditbureaureports.com/img/favorites.fw.png	false		high
https://www.creditbureaureports.com/js/lib/aes-3.1.2.js	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=1959665568&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/ruxitagentjs_ICA2NVfhqru_10283240308130508.js	false		high
https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba	false		high
https://www.creditbureaureports.com/hbs/login.js?1705934910	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=3149778170&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=1806900681&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/hbs/showMessage.js?1705934910	false		high
https://www.creditbureaureports.com/hbs/activeSession.js?1705934884	false		high
https://www.creditbureaureports.com/js/lib/handlebars.runtime-4.7.7.min.js	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=1162880932&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2955867825&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/hbs/beforeLoginFooter.js?1705934884	false		high
https://www.creditbureaureports.com/js/modules/errorPage/errorPage.min.js?1705934884	false		high
https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png	false		high
https://www.creditbureaureports.com/js/lib/vendor/modernizr-custom.js?1705934884	false		high
https://www.creditbureaureports.com/gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653643485	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba&bp=3&app=3389b198b27ff03b&crc=2203798042&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/js/utils.js?1705934884	false		high
https://www.creditbureaureports.com/css/main.css	false		high
https://www.creditbureaureports.com/js/config/tooltip.config.min.js?1705934910	false		high
https://www.creditbureaureports.com/js/config/message.config.min.js?1705934910	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2536432815&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/js/lib/vendor/modernizr-custom.js?1705934910	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=693529100&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/img/whitehat.gif	false		high
https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk	false		high
https://www.creditbureaureports.com/iconnect/forgot_password.html	false		high
https://www.creditbureaureports.com/common_config/commonConfig.min.js?1705934910	false		high
https://www.creditbureaureports.com/hbs/errorPage.js?1705934884	false		high
https://www.creditbureaureports.com/js/lib/jquery-ui-1.13.2.min.js	false		high
https://www.creditbureaureports.com/js/modules/login/tempPage.min.js?1705934910	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=2754135240&en=5eyzl3s4&end=1	false		high
https://www.creditbureaureports.com/js/lib/jquery.validate-1.19.3.min.js	false		high
https://www.creditbureaureports.com/hbs/beforeLoginHeader.js?1705934910	false		high
https://www.creditbureaureports.com/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2037933061&en=5eyzl3s4&end=1	false		high
https://api-cbci.nd.nudatasecurity.com/2.2/w/w-893076/init/js/?q=%7B%22e%22%3A962415%2C%22oq%22%3A%221280%3A907%3A1280%3A984%3A1280%3A984%22%2C%22wfi%22%3A%22flap-1%22%2C%22ji%22%3A%222.3.1%22%2C%22yf%22%3A%7B%7D%2C%22jc%22%3A%22Ybtva%22%2C%22jcc%22%3A1%2C%22ov%22%3A%22o2%7C1280k1024%201280k984%2024%2024%7C-60%7Cra-HF%7Coc1-2501pp0s72219oop%7Csnyfr%7Cuggcf%3A%2F%2Fjjj.perqvgohernhercbegf.pbz%2Fvpbaarpg%2FybtvaGrzc.ugzy%3Fqngn%3DcD%2BnTNtBKoG9T%2FYJcP4mlWbussoGT2RhvGZ9goozQBncoQUeKB4C2tAA13GEHAP%7CZbmvyyn%2F5.0%20(Jvaqbjf%20AG%2010.0%3B%20Jva64%3B%20k64)%20NccyrJroXvg%2F537.36%20(XUGZY%2C%20yvxr%20Trpxb)%20Puebzr%2F117.0.0.0%20Fnsnev%2F537.36%7Cjt1-n46p01n68sp5740r%22%7D	false	Avira URL Cloud: safe	unknown
https://www.creditbureaureports.com/css/main.css?1705934910	false		high
https://www.creditbureaureports.com/gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653654703	false		high
https://www.creditbureaureports.com/gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653692700	false		high
https://www.creditbureaureports.com/js/utils.js?1705934910	false		high
https://www.creditbureaureports.com/js/config/config.min.js?1705934884	false		high
https://www.creditbureaureports.com/gateway/loadLogin	false		high
https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-icons_ffffff_256x240.png	false		high
https://www.creditbureaureports.com/js/lib/jquery-migrate-3.3.2.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://jqueryui.com	chromecache_112.2.dr	false	high
http://jqueryui.com/themeroller/?scope=&folderName=cupertino&cornerRadiusShadow=8px&offsetLeftShadow	chromecache_112.2.dr	false	high
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_107.2.dr	false	high
https://www.google.com/chrome/	chromecache_138.2.dr, chromecache_121.2.dr, chromecache_157.2.dr	false	high
https://raw.github.com/shagstrom/split-pane/master/LICENSE	chromecache_144.2.dr, chromecache_131.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.16.104	www.google.com	United States	15169	GOOGLEUS	false
99.83.176.153	ga-us-east-1.nd.nudatasecurity.com	United States	16509	AMAZON-02US	false
12.51.26.7	www.creditbureaureports.com	United States	26777	CBC-COMPANIES-INCUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417264
Start date and time:	2024-03-28 20:19:37 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@21/110@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.creditbureaureports.com/iconnect/forgot_password.html Browse: https://www.creditbureaureports.com/iconnect/forgot_password.html Browse: https://www.creditbureaureports.com/iconnect/forgot_password.html Browse: https://www.creditbureaureports.com/iconnect/login.html Browse: https://www.creditbureaureports.com/iconnect/forgot_password.html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.111.94, 142.251.16.113, 142.251.16.101, 142.251.16.102, 142.251.16.139, 142.251.16.138, 142.251.16.100, 142.251.163.84, 34.104.35.123, 142.251.179.95, 142.250.31.95, 142.251.167.95, 172.253.115.95, 142.251.111.95, 172.253.122.95, 142.251.16.95, 142.251.163.95, 172.253.62.95, 172.253.63.95, 40.68.123.157, 72.21.81.240, 192.229.211.108, 13.95.31.18, 13.85.23.206, 20.12.23.50, 142.251.16.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (312)
Category:	downloaded
Size (bytes):	986
Entropy (8bit):	4.946473378717247
Encrypted:	false
SSDEEP:	12:sysBKUG4yt6SfiDeUT7XLAUf+EFsk/siwvVuEFlRRyggJxO/byt6S7GE3REgEFl3:feWLfiFDfJ2TReOzWLy4c6OTo/rI
MD5:	2DF873083DA067477A19D11B469C5698
SHA1:	D16D650F7EB8BA95CDB04F335409539B7C1755ED
SHA-256:	B5F68121FE387D1446E4B39438BF2AA04F13B95959D079C1ADC3FA2E5A48D582
SHA-512:	829C355EB2FC48370E79C0E4B89C7A087DA6C651E49A6D387CCACC3BB48CBE90D3B9B3EEF74523EAC2060B50F91506727D24E9E498821D327CC0B4E45813C07A
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/activeSession.js?1705934884
Preview:	this["hbTemplates"] = this["hbTemplates"] \|\| {};.this["hbTemplates"]["activeSession"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) {. var helper;.. return ". <input type=\"hidden\" id=\"activeSessionId\" value=\"". + container.escapeExpression(((helper = (helper = helpers.timeout \|\| (depth0 != null ? depth0.timeout : depth0)) != null ? helper : helpers.helperMissing),(typeof helper === "function" ? helper.call(depth0 != null ? depth0 : (container.nullContext \|\| {}),{"name":"timeout","hash":{},"data":data}) : helper))). + "\">\n";.},"compiler":[7,">= 4.0.0"],"main":function(container,depth0,helpers,partials,data) {. var stack1;.. return ((stack1 = helpers["with"].call(depth0 != null ? depth0 : (container.nullContext \|\| {}),(depth0 != null ? depth0.activeSession : depth0),{"name":"with","hash":{},"fn":container.program(1, data, 0),"inverse":container.noop,"data":data})) != null ? stack1 : ""). + "\n";.},"useData":true});

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (394), with no line terminators
Category:	downloaded
Size (bytes):	394
Entropy (8bit):	4.921858478334846
Encrypted:	false
SSDEEP:	6:qQQV7vKAvXARwMgezwDComkBuVOQY9zzKUSpEmYDt8Nw6tBNkTGIBC6/OmYDto:cJKAPRM0ORVEJdSm7C+SiC6/O7G
MD5:	67B510832F53F6CB28D910176F11D074
SHA1:	54B60E752CBD211A719EA1C9C9D96A886EBF6B77
SHA-256:	F14E1218EA13C3D49C87C1A645EA7196D5D74670790829BB525610674D7143E4
SHA-512:	7F92A7C3B2E571B0EBB7DDFDAB7F98F325A77FC5B4907EE7768D7045E951B6093070ED0E4A4468BEAEBD0CC983EE8261282830C8EA6F2AED809F5A8904B5EC8F
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/modules/login/tempPage.min.js?1705934910
Preview:	!function(){try{var a=new pageMsg,e=queryStringUtil(),t=e.getQueryParameter("data").replace(/ /g,"+");(function(e){e=getDecryptedText(e);JSON.parse(e)})(t);setCookie("nextPageParam","login"),setCookie("data",t),window.location.href=pageNameMap.login+".html"}catch(e){a.setMsg("Unfortunately, an error occured. Please try again later","error"),window.location.href=pageNameMap.login+".html"}}();

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 461 x 461
Category:	downloaded
Size (bytes):	43908
Entropy (8bit):	7.910486595849377
Encrypted:	false
SSDEEP:	768:HbD2xNcjf/kgutdTEdlL3XljAIGgbtGPqDAnRG8plD6aVaDVJraPf6pfCI+:Hf5HkguXeZrbtYqD0RT15apJiH
MD5:	E46817000DE4271EFB4C1D68C3A46F79
SHA1:	A4107B1E6A5ECD956E08A1E1E11BCF1058F704C4
SHA-256:	65553BEE70B929CBED18B526C3B8A8FBDDF2EADE1380686BECC3D8EB39CF2A2E
SHA-512:	78143F0D5F3B223B21D34B6E082A3CC0995D7E85664A9EB4B4746FCAB60011AF386A771B81E4874CEBD48851825A0466B83AC1042E6E14E7A9CD76700A31BAE6
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/img/loading.gif
Preview:	GIF89a.....?...................................................}.....R.......:..........................................k.......]..........._.....F....S..h................r.......................!..NETSCAPE2.0.....!.....?.,.............pH,...r.l:..tJU.L.D.f.z..R.d.T..z.n...\|N.....w.....fu.........h...}..{..........m.....].........U&%...%&......t................................K....%.....&...}.......$...$.........=..\.......kH....,"j..".. .a.H.c.(.)#.1B.0u.dI2a.8;5..A...@.1.I.T.H...C.%..I.J...)K.S.j]..j..[....+.c.J.g..?.p.bhk.Y.1g.i...s.6...0E..Y.5.X..x.i...r....r..]..<Yt..n(.SS[q.....}n.Rt....I...V;w.......#.6.\|....m7...:M......^..r.....:l.G\|{.=.....wO.....K...>.~..' ...'O..&.D........`..<..ELH!3.b............,#..!\|'23....."0/.x.......<...H....g#; <....4..PN....lP.vD2...h...(D).N. ...d........p.9.."...Sj.....h.A.r..g....\..,..0~.).p.Ph+.!J.f.....vJf.........i.....p.`.x.........'.......V+. ...b...'...Q...........,...B...

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889), with no line terminators
Category:	downloaded
Size (bytes):	889
Entropy (8bit):	5.213867964083285
Encrypted:	false
SSDEEP:	24:h5+AAZJdAZJr2AZJFAZJUAZJDAZJNAZJcAZJ4AZJIAAZJoAZJZrAZJCRAZJdKgbL:VAZJdAZJr2AZJFAZJUAZJDAZJNAZJcAd
MD5:	249E4683733C9CEC8855C5E98419515B
SHA1:	20FF73CC0FD333BAD8CE218FA1BD11D64199223A
SHA-256:	A579FD64B58419293175989431C7DB848CA327C24A23EE66F5836B53069C0BCE
SHA-512:	5FF06D27FCC594BAB0CAB6B058DDA86D0A6E57C9755BFB16F58E1B30386E16C612199A7D2B42F30FE537DA107008C3B3BD7135A5FA7A487EFE4D8633471B80CC
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/config/config.min.js?1705934884
Preview:	var F5_URLS=["dev.creditbureaureports.com","qa.creditbureaureports.com","iris.creditbureaureports.com","pegasus.creditbureaureports.com","qt.creditbureaureports.com","uat.creditbureaureports.com","ml-uat.creditbureaureports.com","ua-uat.creditbureaureports.com","www.creditbureaureports.com","creditbureaureports.com","ml.creditbureaureports.com","ua.creditbureaureports.com","midland.creditbureaureports.com","prod1691.creditbureaureports.com"];function isF5(){return-1<$.inArray(location.hostname,F5_URLS)}var serverPort=isF5()?"":"5000",serverURL=location.protocol+"//"+location.hostname+(serverPort?":"+serverPort:"")+"/gateway/",server={path:serverURL,configVar1:"KfoIh84KhnJ893HJmuGhG893tyGffDFp",configVar2:"JNij89Mohh32oh5H"},sessionTime={time:28800,alert:300},pageMsgTimeout={info:5e3,success:5e3,error:5e3},CONSTANTS={CONTENT_TYPE_HEADER:"content-type",JSON_CONTENT_TYPE:"json"};

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 120 x 45
Category:	downloaded
Size (bytes):	1927
Entropy (8bit):	7.479612016072432
Encrypted:	false
SSDEEP:	48:83NqI/zAih5ltOxjz1AP5dW+V2ROlNEe9O:moI/zAihYxs5dW+vP/O
MD5:	30C9DFBABEFDE1B394E0970F3388C277
SHA1:	81F79912D412C42D3518918F82B5DF4DB54842C6
SHA-256:	CD51293971876F0B44A829BDB77A438CD096DCA99FA1AABEB8D52B43609A7A8B
SHA-512:	7618E886D18B9F487E2379C6689931DEFBA2F586219079612A9BF1A7B90DAC8F1FF0CDCDDE43A174BAB7643DC41AC518E601E67C7399A3281266883578BE365C
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/img/whitehat.gif
Preview:	GIF89ax.-........f..T......................@..#........................... y.ZWW...`..0...p.p.......P............1--...vss...hee......?;;LII...............................Gj.................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,....x.-........A. ....*\....#J.X....+2j.... C..I....V.X...0c.I...2W.. .....h.0aB...,.\.r....20.J...........T...p.[.g....v(....."....r....7L..`.X.F1@. U...0,..vA.RY.^.aC.F........+..u.AA..d...Za...[.( .B..+.~.Pa...[..NX...M..!xD...9.}.._...j?n.Aw..W..^.;....l....4X..>.}.6...QCU..y......`..b..._..0Bx.......s....z....d.A..(.@o..G.u+q@`..%6.b...R.a1..a.Y..u~.........5.g.d1. Az..$.....bpL...Z+Q._j..dAi.Xp.gua`..^v....=p.v].D....$.....QZ...Z...#.`..R..Be.f...}..I.ae.a.1...\|.5.d.m.j.n..%.......$..jkH..p.......+...;,......6.,......VKm..f..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2058)
Category:	downloaded
Size (bytes):	199954
Entropy (8bit):	5.634667373241535
Encrypted:	false
SSDEEP:	3072:jhLx/R0f1iSkhtdoY/TiHelWq39r3VwDOM93FMHiyUjkDuX/jl:R0f4DzsE9r3VwDO6DyUjiux
MD5:	9E8D180F189D194C164CB08C6E218DF5
SHA1:	7CD8448270E7A959CF32B5D184BB2D9D19E137FF
SHA-256:	E8160310797F41816D75DDD34EC036E6E644B7225431A83E4759D66257AD69F8
SHA-512:	5126FAD9B3FD96F460472EBA17527A3CC16E3CCB0DE174756D64E82560C3A0068A5AC30118FAF0F02E14941ED9C31E2CE6E5AC4917CA7958E683B0B8C6B9AB4B
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/ruxitagentjs_ICA2NVfhqru_10283240308130508.js
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ca=-1!==document.cookie.indexOf("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ca}function fb(){return void 0===gb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function hb(){var Ca;if(fb()){var Ia=gb.dT_,Va=null===Ia\|\|void 0===Ia?void 0:Ia.platformPrefix;if(!Ia\|\|Va){var La=null===Ia\|\|void 0===Ia?void 0:Ia.minAgentVersion;.La&&"10283240308130508"<La+""?window.console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"):(La=(Ca={},Ca.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Ca.iCE=fb,Ca.platformCookieOffset=null===Ia\|\|void 0===Ia?void 0:Ia.platformCookieOffset,Ca),Va&&(La

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12163), with no line terminators
Category:	downloaded
Size (bytes):	12163
Entropy (8bit):	5.234051116223441
Encrypted:	false
SSDEEP:	192:3TKtVTLrPcOiWsFB85L6A2hlBBOV55DicORWT2Kfbe3uoikhH1SJZ:3TKtVTLrPcOiWsFB85uAol+H5hfYN1AZ
MD5:	94E1BBD9D64382086CBC73D5D35D5661
SHA1:	405AF7E632BF61F82AAE04301F4CE88AD53D3AD3
SHA-256:	D94AC337F111BE41152A9BBB28CE80821C327BF91C5DF78AB94CBDC06A8DB819
SHA-512:	936C6FF151BC9132CC6EEF59DF78655C4E80B7F5D9B83E2355E48165955BC3E96ED715BC8BA117AD5BC29EDCE8235FDCFFAA21A506AEA8EB9764B17C1D660B78
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/modules/login/login.min.js?1705934910
Preview:	function checkIftradeLineOrUpgradeAccess(){var e=getCookie("nextPageParam");return e&&("tradelineAU"==e\|\|"upgradeOrder"==e)}clearCookies(),$.fn.loadLogin=function(){var e,t=queryStringUtil().getQueryParameter("REF");t?(t="?REF="+t,makeAjaxCall("loadLogin"+t,"POST",e).done(function(e,a,n){var s=redirectPage();isJsonResponse(n)?($("#main_container").hide(),$("#main_container").html(hbTemplates.login(e))):($("#main_container").hide(),$("#main_container").html(e)),"startPage"==$("#nextPage").val()?makeAjaxCall("startPage"+t,"POST",{},{dataType:"json"}).done(function(e,a,n){e=e.startPage;e.success&&e.nextPage&&$.fn.moveToNextPage(e.nextPage)}):"ssoMessage"==$("#nextPage").val()?("false"==$("#successCheck").val()&&$("#ssoPageMsg").val()&&setCookie("ssoPageMsg",$("#ssoPageMsg").val()),setCookie("ssoMessage",$("#ssoMessage").val()),setCookie("ContactInfo",$("#ContactInfo").val()),setCookie("ssoRequest",$("#ssoRequest").val()),s.setLocation(pageNameMap.ssoMessage+".html")):"challengeQA"==$("#ne

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 100, 16-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	445
Entropy (8bit):	6.727338022891414
Encrypted:	false
SSDEEP:	12:6v/7WogU9+7eZVCDygfx6n+PnrtT1pA+nzS5wEMISy:no19+7eu3fx9nZjA+nzowEMIJ
MD5:	CC1868CFFDDDA33BE077A7052EF8171F
SHA1:	A8083AF9137BC4A9C6EEC17C203FDD6F66E5055D
SHA-256:	1DF44706A748B80D95AEB2B476987137C543804332C584531B3E1BFB8B8F8B1E
SHA-512:	EF8A0DDF3025AC32B398698B6FBD24391762CF1079DBE126853C5138ECDA7F8C2BE15E33E94BDAC62C497266607404ED0E63897AC8D36D235C85AA8FE4835AA6
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png
Preview:	.PNG........IHDR.......d........t....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......X......tIME.......%......IDAT(..=j...@...t)..N...P..t...%..=C...frw.EL.v).@E..mH......P.......Z._......Q.....1......U9...u1mB.va6......._...u..:a{...h.O...U}.&..v..>2.5p......M.+.:.M.....u..1..>.V..A.../.9../^d...c...%tEXtdate:create.2022-11-09T13:07:25+00:00.6.....%tEXtdate:modify.2022-11-09T13:07:25+00:00.k......IEND.B`.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	2275
Entropy (8bit):	5.352532118108641
Encrypted:	false
SSDEEP:	48:Oj62SYWAlDnRz080+i0aiYf4Oi31Soo2zDOsNFcNoxT:M5WAlDnRQd+TamOiFQ2zDOsNFcNoB
MD5:	BAA7CA7B3A7602A605130360622458BA
SHA1:	9584FC673C882E5470C8D4E09427C2A0C38B3B85
SHA-256:	949645E0F65636E7EF6EE71EAF6334161993300B7CD0F1901F2F6A5A778D78CF
SHA-512:	B3B5D5C65B53E28FC7AFC7300EF15A9F6F7C2B187B3839074CF4CD262713E2176A40B7A46D3640791B935D217A7410183AA9CFA5A079383C2335CEE148FF9BA6
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/iconnect/404.html
Preview:	<!DOCTYPE html>.<html>.<head>..<meta charset="utf-8">..<title>Error Page</title>.. jQuery -->. <script type="text/javascript" src="/ruxitagentjs_ICA2NVfhqru_10283240308130508.js" data-dtconfig="rid=RID_460664705\|rpid=-41818265\|domain=creditbureaureports.com\|reportUrl=/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0\|app=3389b198b27ff03b\|ssc=1\|featureHash=ICA2NVfhqru\|vcv=2\|rdnt=1\|uxrgce=1\|bp=3\|cuc=5eyzl3s4\|mel=100000\|dpvc=1\|md=mdcc1=a#header ^rb div ^rb ul ^rb li:nth-child(2)\|ssv=4\|lastModification=1710200991129\|tp=500,50,0,1\|agentUri=/ruxitagentjs_ICA2NVfhqru_10283240308130508.js"></script><script src="../js/lib/jquery-3.6.0.min.js"></script>. <script src="../js/lib/jquery-migrate-3.3.2.min.js"></script>. <script src="../js/lib/jquery-ui-1.13.2.min.js"></script>. <script src="../js/lib/handlebars.runtime-4.7.7.min.js"></script>. jQueryUI Css -->. <link rel="stylesheet" href="../js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css">.. [if lt IE 9

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	36879
Entropy (8bit):	5.280704068324567
Encrypted:	false
SSDEEP:	192:viOxJGwrq6lNQY+Bpn+brGtUQnSMfps3+e1572hk/AcY5Y6BjSmMErEURHS1j/kT:5rqkyN+vN1eLlF5fy7QtSDS25K
MD5:	6F285CB9861F10F67CB0987B401FD31D
SHA1:	9D7708DD462DF150ABB91F44D79C8FA4D0FF8558
SHA-256:	F4F92ABDBF43238CBAA4B8AC806A52117AAF7613747D53CD87384D5BF2A5CFA2
SHA-512:	5AE7E0DA7B6FC35AD2B17517BB03829CFAE6F0FEA24C3E55CB91E375F3E51B015F6D14CDBE838DB4BD73337439E44D78FBBBEB2A20F19FEF66D12F756726D747
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css
Preview:	/! jQuery UI - v1.13.2 - 2022-11-09. http://jqueryui.com.* Includes: draggable.css, core.css, resizable.css, selectable.css, sortable.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, progressbar.css, selectmenu.css, slider.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?scope=&folderName=cupertino&cornerRadiusShadow=8px&offsetLeftShadow=-7px&offsetTopShadow=-7px&thicknessShadow=7px&opacityShadow=30&bgImgOpacityShadow=70&bgTextureShadow=highlight_hard&bgColorShadow=000000&opacityOverlay=80&bgImgOpacityOverlay=90&bgTextureOverlay=diagonals_thick&bgColorOverlay=eeeeee&iconColorError=ffffff&fcError=ffffff&borderColorError=cd0a0a&bgImgOpacityError=15&bgTextureError=flat&bgColorError=cd0a0a&iconColorHighlight=2e83ff&fcHighlight=363636&borderColorHighlight=f9dd34&bgImgOpacityHighlight=25&bgTextureHighlight=highlight_soft&bgColorHighlight=ffef

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1353)
Category:	downloaded
Size (bytes):	2872
Entropy (8bit):	4.979568730808955
Encrypted:	false
SSDEEP:	48:9zeoGACKR+w2TcVo27GOEj2KQCtT0C6BPgSf6Vys2u8ai:9SMC6X26NPEjIkwC66l2F
MD5:	5946DF729C658F0DCBF167F810E591ED
SHA1:	DD7B646053E2768B6CEEBEDF1C115951C21EFC5E
SHA-256:	254CFC2C76E391231ECE38D57949C80F65C3851A164DF441B8ED2315C00E30C4
SHA-512:	9C16DD0C179929637229FD9330705B7969AB1F489CA47FCEDDCC7A4278D2BD729BBB3702B45B06494B0F666AE842EB2168DB2999FEB542D35881F9E279872102
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/beforeLoginFooter.js?1705934884
Preview:	this["hbTemplates"] = this["hbTemplates"] \|\| {};.this["hbTemplates"]["beforeLoginFooter"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) {. var helper;.. return " <span class=\"floatLeft\">This content is copyrighted. You may not reproduce it without permission.</span>\n <ul class=\"list-inline floatRight\">\n <li><a href=\"#\" id=\"privacyDialog\" class=\"link\" tabindex=\"6\">Privacy Policy</a></li> -->\n <li tab-index=\"-1\">Your IP Address: ". + container.escapeExpression(((helper = (helper = helpers.ipAddress \|\| (depth0 != null ? depth0.ipAddress : depth0)) != null ? helper : helpers.helperMissing),(typeof helper === "function" ? helper.call(depth0 != null ? depth0 : (container.nullContext \|\| {}),{"name":"ipAddress","hash":{},"data":data}) : helper))). + "</li>\n </ul>\n <div class=\"footerLogo text-center\">\n <a href=\"#\" tabindex=\"-1\">\n <img src=\"..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5066), with no line terminators
Category:	downloaded
Size (bytes):	5066
Entropy (8bit):	4.8579329372581075
Encrypted:	false
SSDEEP:	96:1G7nTJgYmWxod84f4bujzi3sGXHsdINjEh/gOtNzVB1R6GgbJInlJnUjL+s+u+K/:U7nTJgYmWxod84AynGsGXHsdINjEhIOe
MD5:	7FF30FA96BACEBD50013AB80006925F4
SHA1:	C2BB78F5930881F713C4F70042FD4B1983EAE89E
SHA-256:	4F49DD171A9378587E609C0DEF5A7417D335D7BC3EE44D8559A0DDF107CA3B53
SHA-512:	4959FC56BFDDDCEADAA5BD5288BBC056833B424551A30D7AA52938048BD8C53F170829F1185FD62ECD626DD54D242E74F8EE32132EADF974980218AE7982A088
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/common_config/commonConfig.min.js?1705934884
Preview:	var releaseVersion="4.10.0";function stringToHash(e){var t=0;if(0!=e.length)for(i=0;i<e.length;i++)t=(t<<5)-t+(char=e.charCodeAt(i)),t&=t;return t}var pageNameQuery=stringToHash(releaseVersion),pageNameMap={newPw:"reset-password",forgotPw:"forgot-password",login:"login",entryFormHtml:"entry_form",challengeQa:"securityPage",reactiveAccount:"forgot-password",userAgreement:"user-agreement",startPage:"entry_form",securityPage:"securityPage",securityQa:"security-questions",changePw:"change-password",mainHelp:"help",customLetterMaintenance:"customLetterMaintenance",billing:"billing-information",entryForm:"entry_form",placeHolderPage:"placeholder",reportStatus:"report-status",requestStatus:"report-status",completedOrders:"report-status",pendingOrders:"report-status",requiresAction:"report-status",inProcess:"report-status",errors:"report-status",messages:"report-status",certificateHolders:"certificate-holders",summary:"report-status",reportPage:"report-page",reportStatusPayoff:"report-status-p

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 400, 16-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	404
Entropy (8bit):	6.478792059764679
Encrypted:	false
SSDEEP:	6:6v/lhPh1r+UyKfp5ERt9AU7sVi2pMntm1AwaB40pkuRO+6xzgNCaW6R2EMyjW6Sy:6v/7J1r+U9+7OeB80mmp1tqzS5wEMISy
MD5:	F91C5D8DC6353255705D8E0971FB608D
SHA1:	C4CCB24A97160AA061BEA06130FB6BDCEC787CE6
SHA-256:	263C80B9B1A07B5DEF42C160C01D51DB6AB2E65AD572A1F2961E8A213B492029
SHA-512:	11908B7570266B56AE6CDC1C636A1E3CEA77F822F52AD7F7EC4C0DAAC9F9FB1681CB02832072379C96C60C9B9E5A94A85D26491408C6F65B532B723F36CA84A8
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png
Preview:	.PNG........IHDR...............A.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......X......tIME.......%......IDATH...!........fs.jpc.5.4...l&...08N@2;<..71....A.H..N.......w.....0.o.4-.....N..8B.....3dN.k.......]..+<1....2..\|^.Z..}unW.....&..k.E.}t."m...C>B3.N..L....%tEXtdate:create.2022-11-09T13:07:25+00:00.6.....%tEXtdate:modify.2022-11-09T13:07:25+00:00.k......IEND.B`.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (550)
Category:	downloaded
Size (bytes):	3165
Entropy (8bit):	5.271635764861081
Encrypted:	false
SSDEEP:	96:xGAlDnRQJ+TaTOKFx1QMy2dE5zFMycfnukgz:AA1W6KFDQMrdE5zFMycfnukgz
MD5:	37D862143DDEA72FA873AC1C293508E4
SHA1:	F8255AABAFA004D6F38A48559F83E7965A84B25C
SHA-256:	323254EE39FD32BF9E7924D08B153D6EB466F8BBBDBCF82380E5591BDB07AECA
SHA-512:	69219E95C14FF374F93119FCACF205E3A0D1A57D6110F28EDC3C70E04F69C0414391D2C13059ACF0B5797EE020951DE483D0E3650D719C5A5801BABCFF1EDDFE
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/iconnect/login.html
Preview:	<!DOCTYPE html>.<html>.<head>..<meta charset="utf-8">..<title>Login Page</title>.. [if lt IE 9]>. <script>. document.createElement('header');. document.createElement('nav');. document.createElement('section');. document.createElement('article');. document.createElement('aside');. document.createElement('footer');. </script>. <![endif]-->. <script type="text/javascript" src="/ruxitagentjs_ICA2NVfhqru_10283240308130508.js" data-dtconfig="rid=RID_53190834\|rpid=-929112277\|domain=creditbureaureports.com\|reportUrl=/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0\|app=3389b198b27ff03b\|ssc=1\|featureHash=ICA2NVfhqru\|vcv=2\|rdnt=1\|uxrgce=1\|bp=3\|cuc=5eyzl3s4\|mel=100000\|dpvc=1\|md=mdcc1=a#header ^rb div ^rb ul ^rb li:nth-child(2)\|ssv=4\|lastModification=1710200991129\|tp=500,50,0,1\|agentUri=/ruxitagentjs_ICA2NVfhqru_10283240308130508.js"></script><script src="../js/lib/jquery-3.6.0.min.js"></script>. <script src="../js/lib/jquery

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (26329), with no line terminators
Category:	downloaded
Size (bytes):	26329
Entropy (8bit):	5.458087396098254
Encrypted:	false
SSDEEP:	384:fgQxafkS1+WBKqGcGyr+IbUcGsvXWTW+vk9pj5LBfHMLPYZTF5:PK1+W6sXB+ijZpgYZ3
MD5:	BD68E0EC75BD54BFD386388FF119CC48
SHA1:	9FEE0762518690521232129049848C11460446CA
SHA-256:	7915186008E402EF25177AAA57BD9204DF4725C6BB0E9BFBCB0B73AA30BA1A61
SHA-512:	B1C4CD07E4C9F5989216AC82DFF828289D54D6A2EA98F177113951DED5C3DC506222DD919B9B3F921ADBAFEFFFDEBF16E78BEE6957C2B9B6279962D0DE08D8AC
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/helpers/handlebarHelpers.js?1705934910
Preview:	Handlebars.registerHelper("advertise",function(e,r,a){var t="";return t=e&&0!==e.length?(e=e.split(r))[0]+' <a href="'+a+'" class="red">'+r+"</a>"+e[1]+"<br>":t}),Handlebars.registerHelper("showSubHeader",function(e,r){r=r.data.root.getAdvancedUpdate[0].acctDetails;if(0===e){if(this.inquiryRecSectionSubHeader)return new Handlebars.SafeString('<tr class="sectionSubHeader"><td colspan="6">'+this.inquiryRecSectionSubHeader+"</td></tr>");if(this.publicRecSectionSubHeader)return new Handlebars.SafeString('<tr class="sectionSubHeader"><td colspan="6">'+this.publicRecSectionSubHeader+"</td></tr>")}return 0<e&&r[e-1].inquiryRecSectionSubHeader!==this.inquiryRecSectionSubHeader?new Handlebars.SafeString('<tr class="sectionSubHeader"><td colspan="6">'+this.inquiryRecSectionSubHeader+"</td></tr>"):0<e&&r[e-1].publicRecSectionSubHeader!==this.publicRecSectionSubHeader?new Handlebars.SafeString('<tr class="sectionSubHeader"><td colspan="6">'+this.publicRecSectionSubHeader+"</td></tr>"):void 0}),Han

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1766)
Category:	downloaded
Size (bytes):	1985
Entropy (8bit):	4.9221517373005765
Encrypted:	false
SSDEEP:	24:fIzW7k6I8jiKMDfrFVHsZgE2FtQUwyVBvLBk0ZUTjoy+Zqy/:a8vri9FAgE2L9ZZuUy+Zqy/
MD5:	1048B15A2523E5518A2CE4A6A21B148D
SHA1:	4B850D00EA6B8FBE3B17930554A4610CC87A1C3E
SHA-256:	BAEF2086305EE817486C8D5BAEBA889486A3C4E53171109C9B47CF205AC9C93A
SHA-512:	D8D9A68FA3AB4CB53F1DC91D3A95CA3A853F9C2CD9F8CEFFB178E7496BC41EE0C37B712E5E08D95CEE50C5BB691B1C26B996EBC66303E7E7082325EA75943492
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/beforeLoginHeader.js?1705934884
Preview:	this["hbTemplates"] = this["hbTemplates"] \|\| {};.this["hbTemplates"]["beforeLoginHeader"] = Handlebars.template({"compiler":[7,">= 4.0.0"],"main":function(container,depth0,helpers,partials,data) {. return "<script type=\"text/javascript\">\n $( document ).ready(function() {\n $(\"#supportedBrowsersDialog\" ).dialog({\n autoOpen: false,\n width: 600,\n height: 225,\n position: { my: \"center\", at: \"top+255px\", of: window },\n resizable: false,\n draggable: false,\n title: \"Supported Browsers\",\n dialogClass: 'supportedBrowsersDialog'\n });\n\n $( \"#supportedBrowsersLink\" ).on(\"click\", function() {\n $( \"#supportedBrowsersDialog\" ).dialog( \"open\" );\n });\n });\n</script>\n<header id=\"header\" class=\"ui-widget-header\">\n <div class=\"floatRight favLink\">\n <img src=\"../img/favorites.fw.png\" width=\"25\" height=\"25\" alt=\"\"

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (26329), with no line terminators
Category:	downloaded
Size (bytes):	26329
Entropy (8bit):	5.458087396098254
Encrypted:	false
SSDEEP:	384:fgQxafkS1+WBKqGcGyr+IbUcGsvXWTW+vk9pj5LBfHMLPYZTF5:PK1+W6sXB+ijZpgYZ3
MD5:	BD68E0EC75BD54BFD386388FF119CC48
SHA1:	9FEE0762518690521232129049848C11460446CA
SHA-256:	7915186008E402EF25177AAA57BD9204DF4725C6BB0E9BFBCB0B73AA30BA1A61
SHA-512:	B1C4CD07E4C9F5989216AC82DFF828289D54D6A2EA98F177113951DED5C3DC506222DD919B9B3F921ADBAFEFFFDEBF16E78BEE6957C2B9B6279962D0DE08D8AC
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/helpers/handlebarHelpers.js?1705934884
Preview:	Handlebars.registerHelper("advertise",function(e,r,a){var t="";return t=e&&0!==e.length?(e=e.split(r))[0]+' <a href="'+a+'" class="red">'+r+"</a>"+e[1]+"<br>":t}),Handlebars.registerHelper("showSubHeader",function(e,r){r=r.data.root.getAdvancedUpdate[0].acctDetails;if(0===e){if(this.inquiryRecSectionSubHeader)return new Handlebars.SafeString('<tr class="sectionSubHeader"><td colspan="6">'+this.inquiryRecSectionSubHeader+"</td></tr>");if(this.publicRecSectionSubHeader)return new Handlebars.SafeString('<tr class="sectionSubHeader"><td colspan="6">'+this.publicRecSectionSubHeader+"</td></tr>")}return 0<e&&r[e-1].inquiryRecSectionSubHeader!==this.inquiryRecSectionSubHeader?new Handlebars.SafeString('<tr class="sectionSubHeader"><td colspan="6">'+this.inquiryRecSectionSubHeader+"</td></tr>"):0<e&&r[e-1].publicRecSectionSubHeader!==this.publicRecSectionSubHeader?new Handlebars.SafeString('<tr class="sectionSubHeader"><td colspan="6">'+this.publicRecSectionSubHeader+"</td></tr>"):void 0}),Han

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19170), with no line terminators
Category:	downloaded
Size (bytes):	19178
Entropy (8bit):	4.8387327123853465
Encrypted:	false
SSDEEP:	384:8oQ79GWoPQ2vnBByyAf09kJ1qiGASMj9mD:8gWoPQ2vnBByyAmpMjMD
MD5:	1644B32B17BD86AEAEF79F37D91CFCC8
SHA1:	A355A71E8CBA46E4F3A2306C781F04A171D3E76F
SHA-256:	B070D687BCE78C9CC6AC007C61D32B87847EEDC13B54215CE9B07DF931193B59
SHA-512:	8BD403EE2BE472868037E5B3946CF74B1CF23EDA1ABE9D50F08428FF623894B708D3F6050E81224A298E2B4C2B8F1F599EE89D392BC919BEB4323B35FA6C29B2
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/config/message.config.min.js?1705934910
Preview:	var msgConfig={en_us:{sessionConfirmation:"Your session is about to expire. Do you want to continue ?",invalidCred:"Invalid User Name or password. Please try again.",mismatchEmail:"Email addresses do not match",blankEmail:"Email address and password can't be blank.",invalidEmail:"Invalid Email address",emptyFirstName:"First name cannot be blank",emptyLastName:"Last name cannot be blank",emptyUNcodeForFP:"Please enter a valid User Name.",emptyUNcode:"Please enter your User Name.",maxLengthUNcode:"Please enter maximum of 8 characters.",minLengthUNcode:"Please enter minimum of 2 characters.",emptyPcode:"Please enter your Password.",cortexAccountError:"E-mail ID is not registered.",emptyAdd1:"Address cannot be blank",emptyCity:"City cannot be blank",emptyState:"State cannot be blank",emptyCountry:"Country cannot be blank",invalidZip:"Zip / Postal code is invalid",phoneError:"Invalid Phone Number",noSpaceInPcode:"Please enter a valid Password.",emptyAnswer:"Please enter your answer",contact

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13090), with no line terminators
Category:	downloaded
Size (bytes):	13090
Entropy (8bit):	5.5100761318241975
Encrypted:	false
SSDEEP:	192:ZDhlNZqJMQxqZMGySUuRvdKNRy9w3PTH2ov0ipI3Kro8hrBg:RfCBGdKNRPZciy3ghdg
MD5:	CCC7A01EA64D8611E11B8C7C0204CEE9
SHA1:	14BEE7F62AA4326850A08A50C54F1ACE01BEE031
SHA-256:	20FC12A096E83E4D1CD2B2B8FF270550C8D0D7674FC43A40E7452B928824B6FD
SHA-512:	3E0F3C2805347836398E9FF766D91E3910BB9F430AB938F0D1FB8D433DE76E904A9B0ED397F58A11077EB38C799AF46BBFDFD98D5836C12FAE23554E76BE4C1F
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/aes-3.1.2.js
Preview:	var CryptoJS=CryptoJS\|\|function(c){function r(){}var t={},e=t.lib={},i=e.Base={extend:function(t){r.prototype=this;var e=new r;return t&&e.mixIn(t),e.hasOwnProperty("init")\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();return t.init.apply(t,arguments),t},init:function(){},mixIn:function(t){for(var e in t)t.hasOwnProperty(e)&&(this[e]=t[e]);t.hasOwnProperty("toString")&&(this.toString=t.toString)},clone:function(){return this.init.prototype.extend(this)}},a=e.WordArray=i.extend({init:function(t,e){t=this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|o).stringify(this)},concat:function(t){var e=this.words,r=t.words,i=this.sigBytes;if(t=t.sigBytes,this.clamp(),i%4)for(var n=0;n<t;n++)e[i+n>>>2]\|=(r[n>>>2]>>>24-n%48&255)<<24-(i+n)%4*8;else if(65535<r.length)for(n=0;n<t;n+=4)e[i+n>>>2]=r[n>>>2];else e.push.apply(e,r);return this.sigBytes+=t,this},clamp:function(){var t=thi

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889), with no line terminators
Category:	downloaded
Size (bytes):	889
Entropy (8bit):	5.213867964083285
Encrypted:	false
SSDEEP:	24:h5+AAZJdAZJr2AZJFAZJUAZJDAZJNAZJcAZJ4AZJIAAZJoAZJZrAZJCRAZJdKgbL:VAZJdAZJr2AZJFAZJUAZJDAZJNAZJcAd
MD5:	249E4683733C9CEC8855C5E98419515B
SHA1:	20FF73CC0FD333BAD8CE218FA1BD11D64199223A
SHA-256:	A579FD64B58419293175989431C7DB848CA327C24A23EE66F5836B53069C0BCE
SHA-512:	5FF06D27FCC594BAB0CAB6B058DDA86D0A6E57C9755BFB16F58E1B30386E16C612199A7D2B42F30FE537DA107008C3B3BD7135A5FA7A487EFE4D8633471B80CC
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/config/config.min.js?1705934910
Preview:	var F5_URLS=["dev.creditbureaureports.com","qa.creditbureaureports.com","iris.creditbureaureports.com","pegasus.creditbureaureports.com","qt.creditbureaureports.com","uat.creditbureaureports.com","ml-uat.creditbureaureports.com","ua-uat.creditbureaureports.com","www.creditbureaureports.com","creditbureaureports.com","ml.creditbureaureports.com","ua.creditbureaureports.com","midland.creditbureaureports.com","prod1691.creditbureaureports.com"];function isF5(){return-1<$.inArray(location.hostname,F5_URLS)}var serverPort=isF5()?"":"5000",serverURL=location.protocol+"//"+location.hostname+(serverPort?":"+serverPort:"")+"/gateway/",server={path:serverURL,configVar1:"KfoIh84KhnJ893HJmuGhG893tyGffDFp",configVar2:"JNij89Mohh32oh5H"},sessionTime={time:28800,alert:300},pageMsgTimeout={info:5e3,success:5e3,error:5e3},CONSTANTS={CONTENT_TYPE_HEADER:"content-type",JSON_CONTENT_TYPE:"json"};

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5066), with no line terminators
Category:	downloaded
Size (bytes):	5066
Entropy (8bit):	4.8579329372581075
Encrypted:	false
SSDEEP:	96:1G7nTJgYmWxod84f4bujzi3sGXHsdINjEh/gOtNzVB1R6GgbJInlJnUjL+s+u+K/:U7nTJgYmWxod84AynGsGXHsdINjEhIOe
MD5:	7FF30FA96BACEBD50013AB80006925F4
SHA1:	C2BB78F5930881F713C4F70042FD4B1983EAE89E
SHA-256:	4F49DD171A9378587E609C0DEF5A7417D335D7BC3EE44D8559A0DDF107CA3B53
SHA-512:	4959FC56BFDDDCEADAA5BD5288BBC056833B424551A30D7AA52938048BD8C53F170829F1185FD62ECD626DD54D242E74F8EE32132EADF974980218AE7982A088
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/common_config/commonConfig.min.js?1705934910
Preview:	var releaseVersion="4.10.0";function stringToHash(e){var t=0;if(0!=e.length)for(i=0;i<e.length;i++)t=(t<<5)-t+(char=e.charCodeAt(i)),t&=t;return t}var pageNameQuery=stringToHash(releaseVersion),pageNameMap={newPw:"reset-password",forgotPw:"forgot-password",login:"login",entryFormHtml:"entry_form",challengeQa:"securityPage",reactiveAccount:"forgot-password",userAgreement:"user-agreement",startPage:"entry_form",securityPage:"securityPage",securityQa:"security-questions",changePw:"change-password",mainHelp:"help",customLetterMaintenance:"customLetterMaintenance",billing:"billing-information",entryForm:"entry_form",placeHolderPage:"placeholder",reportStatus:"report-status",requestStatus:"report-status",completedOrders:"report-status",pendingOrders:"report-status",requiresAction:"report-status",inProcess:"report-status",errors:"report-status",messages:"report-status",certificateHolders:"certificate-holders",summary:"report-status",reportPage:"report-page",reportStatusPayoff:"report-status-p

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1353)
Category:	downloaded
Size (bytes):	2872
Entropy (8bit):	4.979568730808955
Encrypted:	false
SSDEEP:	48:9zeoGACKR+w2TcVo27GOEj2KQCtT0C6BPgSf6Vys2u8ai:9SMC6X26NPEjIkwC66l2F
MD5:	5946DF729C658F0DCBF167F810E591ED
SHA1:	DD7B646053E2768B6CEEBEDF1C115951C21EFC5E
SHA-256:	254CFC2C76E391231ECE38D57949C80F65C3851A164DF441B8ED2315C00E30C4
SHA-512:	9C16DD0C179929637229FD9330705B7969AB1F489CA47FCEDDCC7A4278D2BD729BBB3702B45B06494B0F666AE842EB2168DB2999FEB542D35881F9E279872102
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/beforeLoginFooter.js?1705934910
Preview:	this["hbTemplates"] = this["hbTemplates"] \|\| {};.this["hbTemplates"]["beforeLoginFooter"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) {. var helper;.. return " <span class=\"floatLeft\">This content is copyrighted. You may not reproduce it without permission.</span>\n <ul class=\"list-inline floatRight\">\n <li><a href=\"#\" id=\"privacyDialog\" class=\"link\" tabindex=\"6\">Privacy Policy</a></li> -->\n <li tab-index=\"-1\">Your IP Address: ". + container.escapeExpression(((helper = (helper = helpers.ipAddress \|\| (depth0 != null ? depth0.ipAddress : depth0)) != null ? helper : helpers.helperMissing),(typeof helper === "function" ? helper.call(depth0 != null ? depth0 : (container.nullContext \|\| {}),{"name":"ipAddress","hash":{},"data":data}) : helper))). + "</li>\n </ul>\n <div class=\"footerLogo text-center\">\n <a href=\"#\" tabindex=\"-1\">\n <img src=\"..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	6487
Entropy (8bit):	7.903365589791063
Encrypted:	false
SSDEEP:	192:uj0gQaKWsGJ989aEOJ4bKSbfHdx2p1oAvqAxhB:uIgz9tEOJ4bKAPmZvqAbB
MD5:	268B7F40F744517A39231600453540A6
SHA1:	84D1D54680524CF519A0A45157EA6E5CAA90616C
SHA-256:	AF00E8A385583EB03515A09998E173E30CA6280BC9832C7C1FCCDB3D852A0914
SHA-512:	B62EC24ED2143DEE07EE9DCD9970663A753CC99B6014CFFA9994CD342A8B6F379D051E233C453DBF0199D16EF9507BADA37C6119ED1CC0DCFFB1F8B1BB3C3A28
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-icons_ffffff_256x240.png
Preview:	.PNG........IHDR.............E.r@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........tIME..........J...:IDATx..]m.].Y~..)..\|.&q...4.!K.K$..d..k~.....#>..u....n..?.v.BR.i]9.?7.Z...?XS.T.1....8.j.C..Oi.."...k>..8.....<..{.yg.....9g.wfNB....F]...". pD.....u!....":X......M.._?..}.M...&..9.......CD..!..5N.".%}..c.c?7.i.5...<..6.z...!@..<..yZs......S.w..:n.P...(.^z...w......6.z..(...........n%s-.@....?....sp?..........F.4.....:..F]...$..$t...X.u1.....#Z..G$@........#. pD...H......iG]...f.ty..im..J.Z.\|.....\|../2/..2.Wo.7..9.r...m...]]oe^....r7..&...oJ..]\...@..v.l.u>...^........k.......C.f......9...s....`.a..t>....!...G4...H.....8"..G$@..........Q.`.@HFx....P..w7K>.F.e..Y.TIu..N9......B.....Y.j...{.W.S.'.\....>.*..%EpU?.9}..@>U0_.>......Y..........D..."../..\|.O......t.6...MJ@E..g.._^.2.En....2.K..U.....q..ag.k.O..G.6...[..l..O..6..U..e......@7..y..X...u......Y.n...R.Twp..}....8. pDK`........#. pD...H.....8D.t@...h..p..i...h.t.z..

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23950), with no line terminators
Category:	downloaded
Size (bytes):	23950
Entropy (8bit):	5.152755096925356
Encrypted:	false
SSDEEP:	384:OrQA4NIQdpvuFHZ5ZXqzixuwQDmsny+nve/3s5yAsPrcu4czS6/754099rM6Hoy:KQdpvuFHZ5ZazixYasny+HjD+/75NrMY
MD5:	B32A3122C3AD907BFD7FF6C78CB9E5F1
SHA1:	94649234972EFABFF244B5470789A0641B4195D9
SHA-256:	D2B02135944ABC54D3A570D574B45AC70A26BA9D95E6890339ACDE28B8F8AC1D
SHA-512:	BC69C8E16C2B7DEC7ECC786755F15FD032730AC0AC151A7CAE61FD1CD5CA519B228ED9E2FAF3222A23C1D9161E7C8ACE59D7FE25E4E1F061D90FDCB53BEEBD4E
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/jquery.validate-1.19.3.min.js
Preview:	!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof module&&module.exports?module.exports=t(require("jquery")):t(jQuery)}(function(d){d.extend(d.fn,{validate:function(t){var s;if(this.length)return(s=d.data(this[0],"validator"))\|\|(this.attr("novalidate","novalidate"),s=new d.validator(t,this[0]),d.data(this[0],"validator",s),s.settings.onsubmit&&(this.on("click.validate",":submit",function(t){s.submitButton=t.currentTarget,d(this).hasClass("cancel")&&(s.cancelSubmit=!0),void 0!==d(this).attr("formnovalidate")&&(s.cancelSubmit=!0)}),this.on("submit.validate",function(i){function t(){var t,e;return s.submitButton&&(s.settings.submitHandler\|\|s.formSubmitted)&&(t=d("<input type='hidden'/>").attr("name",s.submitButton.name).val(d(s.submitButton).val()).appendTo(s.currentForm)),!(s.settings.submitHandler&&!s.settings.debug)\|\|(e=s.settings.submitHandler.call(s,s.currentForm,i),t&&t.remove(),void 0!==e&&e)}return s.settings.debug&&i.preventDefault(),s.cance

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (456)
Category:	downloaded
Size (bytes):	7082
Entropy (8bit):	4.974923598274529
Encrypted:	false
SSDEEP:	96:2lE2t/lg2pIli2+J/lE2trXlg2peOli2+TgX1pJvXMWpJ2XQpOSXggpgTXCspEW/:QEQdgkeirJdEQr1gkeoir8NyYQJymvH
MD5:	D499D005E99AF03A78CAF2E64A4092A5
SHA1:	C473964CF992C93A94BC786442A524DB988049A4
SHA-256:	ED268D58711B3D65A1E0F7F7B778269B39092EC0D0F6497C88E3D6210A88EAC7
SHA-512:	86E62D65E4F06D141769443A1F87C00228EA15D1516FC0A20FE957670D257F21C4DF36945D68A1C62AD40026CA946D9EDD283E145BE0CD4779A7142D09D0B313
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/showMessage.js?1705934910
Preview:	this["hbTemplates"] = this["hbTemplates"] \|\| {};.this["hbTemplates"]["showMessage"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) {. var stack1, helper;.. return "... .<span id=\"errorMsgTextServer\">". + ((stack1 = ((helper = (helper = helpers.errorMessage \|\| (depth0 != null ? depth0.errorMessage : depth0)) != null ? helper : helpers.helperMissing),(typeof helper === "function" ? helper.call(depth0 != null ? depth0 : (container.nullContext \|\| {}),{"name":"errorMessage","hash":{},"data":data}) : helper))) != null ? stack1 : ""). + "</span>\n";.},"3":function(container,depth0,helpers,partials,data) {. var stack1, helper;.. return "... .<span id=\"alertMsgTextServer\">". + ((stack1 = ((helper = (helper = helpers.alertMessage \|\| (depth0 != null ? depth0.alertMessage : depth0)) != null ? helper : helpers.helperMissing),(typeof helper === "function" ? helper.call(depth0 != null ? depth0 : (container.nullContext \|\| {}),{"name":"ale

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	180129
Entropy (8bit):	4.983602720167641
Encrypted:	false
SSDEEP:	768:eb63qQNgGCjhJN4PMYG4C7jPhVJl4CEpIQXQWvhSUfRzMELNpOKfDglDfsCEu+8T:YnGrZ9rkjtPXND
MD5:	9348A53FB1929D27FF7E13343CF9EA6F
SHA1:	495CC270C438363E565D799FB1211829F902F5FF
SHA-256:	79C18D7400B39F2A8F7AECF29E6AC5B7BBCEA56C1CE93C3A5D58D05E2A1B94C2
SHA-512:	62515FCD0BE92DFD0F6A61F3AB725D7C831620109042A3B40485787CD2C60EB2121509BBD9668636D294082032136951E71EADB214B9207E5B6ADE6309293823
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/css/main.css?1705934910
Preview:	@charset "UTF-8";#inMain,#inMain .displayDiv,#outMain,body{min-width:825px}.info-tooltip,html{font-family:"Lucida Sans Unicode",Arial,sans-serif}html{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;position:relative;height:100%}iframe{position:relative}body{margin:0 auto;font-size:.8em;max-width:1024px}.label-block.label-block.label-block.label-block.label-block.label-block.label-block,footer,header,menu,nav,section{display:block}.label-inline-block.label-inline-block.label-inline-block.label-inline-block.label-inline-block,label{display:inline-block}a{background-color:transparent;color:#0000cd;outline:0}a:active,a:hover{outline:0}a:active,a:focus{color:purple}small{font-size:80%}img{border:0}hr{height:0;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;border-top:1px solid #555}label{max-width:100%}.form-control,article,aside,footer,header,nav,section{display:block}.label-blue{color:#00f}.info-tooltip{max-width:470px;overflow:auto;z-index:100001

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 240, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	6487
Entropy (8bit):	7.903365589791063
Encrypted:	false
SSDEEP:	192:uj0gQaKWsGJ989aEOJ4bKSbfHdx2p1oAvqAxhB:uIgz9tEOJ4bKAPmZvqAbB
MD5:	268B7F40F744517A39231600453540A6
SHA1:	84D1D54680524CF519A0A45157EA6E5CAA90616C
SHA-256:	AF00E8A385583EB03515A09998E173E30CA6280BC9832C7C1FCCDB3D852A0914
SHA-512:	B62EC24ED2143DEE07EE9DCD9970663A753CC99B6014CFFA9994CD342A8B6F379D051E233C453DBF0199D16EF9507BADA37C6119ED1CC0DCFFB1F8B1BB3C3A28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............E.r@....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........tIME..........J...:IDATx..]m.].Y~..)..\|.&q...4.!K.K$..d..k~.....#>..u....n..?.v.BR.i]9.?7.Z...?XS.T.1....8.j.C..Oi.."...k>..8.....<..{.yg.....9g.wfNB....F]...". pD.....u!....":X......M.._?..}.M...&..9.......CD..!..5N.".%}..c.c?7.i.5...<..6.z...!@..<..yZs......S.w..:n.P...(.^z...w......6.z..(...........n%s-.@....?....sp?..........F.4.....:..F]...$..$t...X.u1.....#Z..G$@........#. pD...H......iG]...f.ty..im..J.Z.\|.....\|../2/..2.Wo.7..9.r...m...]]oe^....r7..&...oJ..]\...@..v.l.u>...^........k.......C.f......9...s....`.a..t>....!...G4...H.....8"..G$@..........Q.`.@HFx....P..w7K>.F.e..Y.TIu..N9......B.....Y.j...{.W.S.'.\....>.*..%EpU?.9}..@>U0_.>......Y..........D..."../..\|.O......t.6...MJ@E..g.._^.2.En....2.K..U.....q..ag.k.O..G.6...[..l..O..6..U..e......@7..y..X...u......Y.n...R.Twp..}....8. pDK`........#. pD...H.....8D.t@...h..p..i...h.t.z..

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4675), with no line terminators
Category:	downloaded
Size (bytes):	4675
Entropy (8bit):	5.301051134444459
Encrypted:	false
SSDEEP:	96:D544QvTF5BqV7e2kIWhe+Rso4jERqXk8U3yRK+uWTg9y2An0j4B:DOrF5wV7eAR3j4q033yg0g02bj4B
MD5:	FF5D825225D5BA8D45EE9569CDCB67D6
SHA1:	03123A097E4423DD3FDF094F3A2EAE8964DEE656
SHA-256:	FDFA7D9E2788A44EF90839CFEA0B92D5AC9252F1F8F460CD0A85CF7FBAAF4802
SHA-512:	0D0644868081799E074047843C2EFE337F92D35BB93E78422A62C75FF5F4DDC7572257C5B9B3D9085D31F21A1F8D448F278FD98D8D75ACE21C840DCB8688AA64
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/vendor/modernizr-custom.js?1705934910
Preview:	!function(d,u,c){var l,n,o=[],e={_version:"3.3.1",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(e,t){var n=this;setTimeout(function(){t(n[e])},0)},addTest:function(e,t,n){o.push({name:e,fn:t,options:n})},addAsyncTest:function(e){o.push({name:null,fn:e})}},a=function(){},t=(a.prototype=e,(a=new a).addTest("json","JSON"in d&&"parse"in JSON&&"stringify"in JSON),[]);function h(e,t){return typeof e===t}l=void 0!==(n={}.hasOwnProperty)&&void 0!==n.call?function(e,t){return n.call(e,t)}:function(e,t){return t in e&&void 0===e.constructor.prototype[t]};var p=u.documentElement,m="svg"===p.nodeName.toLowerCase();function f(e,t){if("object"==typeof e)for(var n in e)l(e,n)&&f(n,e[n]);else{var o=(e=e.toLowerCase()).split("."),r=a[o[0]];if(void 0!==(r=2==o.length?r[o[1]]:r))return a;t="function"==typeof t?t():t,1==o.length?a[o[0]]=t:(!a[o[0]]\|\|a[o[0]]instanceof Boolean\|\|(a[o[0]]=new Boolean(a[o[0]])),a[o[0]][o[1]]=t),r=[(t&&0!=t?"":"no-")+o.join("-")],o=

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (362), with no line terminators
Category:	downloaded
Size (bytes):	362
Entropy (8bit):	4.930491373555391
Encrypted:	false
SSDEEP:	6:OsLMQQI6xKNnyQvud6FpByQvQWTumPTN9oTqdQUMYEULkatcVe:hL1QICKBygUkTuQMTqDdkatc0
MD5:	CCE833FB74393AF6DB722A8B9733D99E
SHA1:	733AC6D388DA64E87E883F03150D7C62400F372A
SHA-256:	7810C7EC5EE310CEB65D7CAFA9B9D5CCF2CE9BEA8E8400BBFD9A68AEB71A5FFE
SHA-512:	8B24D119479700A490DA70FF83029AE3A0D80538132DB49CFF2E4C45040A37F88A1FF05C8C43FE9458F9273A699D2E2FEEF1C0EE05BF0591120D19FAE7AEF662
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/modules/errorPage/errorPage.min.js?1705934884
Preview:	$.fn.errorPage=function(){makeAjaxCall("errorPage","GET",void 0).done(function(e,r,o){isJsonResponse(o)?$("#error_container").html(hbTemplates.errorPage(e)):$("#error_container").html(e),browser_config=get_browser_info(),setAddToFavText(browser_config.os),configureFooterLinks()})},$(document).ready(function(){Handlebars.partials=hbTemplates,$.fn.errorPage()});

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	53469
Entropy (8bit):	6.913477447338134
Encrypted:	false
SSDEEP:	1536:9YJBEYeTbJhF80DxLS+/o/DGWvHMHhk5k:9mBEZTdhF19WCeDGVHok
MD5:	8AC87C873220D261BB9AE73B416668E8
SHA1:	BB9B1CDF44EC8A3785BCCEB05EA06C3784E65270
SHA-256:	667277F27AC0666B56115695DC4CA80074BD04F136EB6D6DB9C1A8401EDFB056
SHA-512:	B111EBE2D08611F670379EBBC3DFB12B09D835DE9211786591BF92F1749769A3A509CD1D29C50A2C3CB8F0748588F71A48B2573745973DCF4057553A0E3183A8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............c....sBIT....\|.d.....pHYs............Z....tEXtSoftware.Adobe Fireworks CS6......tEXtCreation Time.04/21/16.c.....prVWx..Z]v........`D..j[..bY..d.y..z..f.......\|U.2.-[.8... Y..~..iZ.........k.........'uU.UYW...........'.nW..nR.IeU.z[...jWU..TeY....V.......m........^'.v[n'..5.x!.........#.F.....?.66#...Y...>....F.VB.X.X......'z.\|........\.......IL.....?...k8...Q.I.....f$.._...:..?1f.....D".).1.../.A.4..&.i..#.h..x.K.._......s...._...9/..X<o.0...QmZL=.?...A....qH....o.......otl..G.....a8..;.......'.V.......g....{>.....>......~8@E.._.....S.\|......>.ha........3.=w..<....N...^..}O..B.........M..P/.........k.......s...P...u...9....5mo.Sn.8b..Zh.Pz..E.8._....oj...T~....P..........."...W.i.wA.nM....0....~E....$..~.P...c.@.N...2...pu.g..0..#..}L.y.tx}\|..G......O.%.Vk.vm...R.j..^..>.X...F-N`.)..?.O....#....L...D..k..l..!:.w.......kW...,8.............g..._?........\|G&.g.bl..0..H.s.o.AH.s.....7.n......N63

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18822), with no line terminators
Category:	downloaded
Size (bytes):	18822
Entropy (8bit):	5.181678413432229
Encrypted:	false
SSDEEP:	192:3rVtLT6pfcr9uEHNlTVIvNGgP2VVY9P7BoPfFms2jvipS6heB1tP2x6WrI0Q3DCr:3rvfiggKEl09lePZI6W6zCJeB64G
MD5:	4FCD35A2EE8DFB467D9318E9AE2604DE
SHA1:	929527208D79C31F783E908913FE9DE46DD45C57
SHA-256:	B6D2B832C56C1D8FA2649CCFAFFBAD033F401E844057FC156FB36ABE1FE2F728
SHA-512:	445A534CFD9F03F98F2573D6CC607A928848C7108C145BF520F69348B4ABDD7A0E73B9908EE7245199A34A1FF65F4AE335A599A4E819CF3AB129F746478C5B10
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/handlebars.runtime-4.7.7.min.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Handlebars=t():e.Handlebars=t()}(this,function(){return n=[function(e,t,r){"use strict";function n(){var t=new i.HandlebarsEnvironment;return s.extend(t,i),t.SafeString=u.default,t.Exception=l.default,t.Utils=s,t.escapeExpression=s.escapeExpression,t.VM=c,t.template=function(e){return c.template(e,t)},t}var o=r(1).default,a=r(2).default;t.__esModule=!0;var i=o(r(3)),u=a(r(36)),l=a(r(5)),s=o(r(4)),c=o(r(37)),o=a(r(43)),a=n();a.create=n,o.default(a),a.default=a,t.default=a,e.exports=t.default},function(e,t){"use strict";t.default=function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t.default=e,t},t.__esModule=!0},function(e,t){"use strict";t.default=function(e){return e&&e.__esModule?e:{default:e}},t.__esModule=!0},function(e,t,r){"use stri

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4675), with no line terminators
Category:	downloaded
Size (bytes):	4675
Entropy (8bit):	5.301051134444459
Encrypted:	false
SSDEEP:	96:D544QvTF5BqV7e2kIWhe+Rso4jERqXk8U3yRK+uWTg9y2An0j4B:DOrF5wV7eAR3j4q033yg0g02bj4B
MD5:	FF5D825225D5BA8D45EE9569CDCB67D6
SHA1:	03123A097E4423DD3FDF094F3A2EAE8964DEE656
SHA-256:	FDFA7D9E2788A44EF90839CFEA0B92D5AC9252F1F8F460CD0A85CF7FBAAF4802
SHA-512:	0D0644868081799E074047843C2EFE337F92D35BB93E78422A62C75FF5F4DDC7572257C5B9B3D9085D31F21A1F8D448F278FD98D8D75ACE21C840DCB8688AA64
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/vendor/modernizr-custom.js?1705934884
Preview:	!function(d,u,c){var l,n,o=[],e={_version:"3.3.1",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(e,t){var n=this;setTimeout(function(){t(n[e])},0)},addTest:function(e,t,n){o.push({name:e,fn:t,options:n})},addAsyncTest:function(e){o.push({name:null,fn:e})}},a=function(){},t=(a.prototype=e,(a=new a).addTest("json","JSON"in d&&"parse"in JSON&&"stringify"in JSON),[]);function h(e,t){return typeof e===t}l=void 0!==(n={}.hasOwnProperty)&&void 0!==n.call?function(e,t){return n.call(e,t)}:function(e,t){return t in e&&void 0===e.constructor.prototype[t]};var p=u.documentElement,m="svg"===p.nodeName.toLowerCase();function f(e,t){if("object"==typeof e)for(var n in e)l(e,n)&&f(n,e[n]);else{var o=(e=e.toLowerCase()).split("."),r=a[o[0]];if(void 0!==(r=2==o.length?r[o[1]]:r))return a;t="function"==typeof t?t():t,1==o.length?a[o[0]]=t:(!a[o[0]]\|\|a[o[0]]instanceof Boolean\|\|(a[o[0]]=new Boolean(a[o[0]])),a[o[0]][o[1]]=t),r=[(t&&0!=t?"":"no-")+o.join("-")],o=

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	109496
Entropy (8bit):	4.828727044308957
Encrypted:	false
SSDEEP:	1536:FJC2VMBTLqOVmVGJUZh5+xJagPYXl9gTb6cT18JPJgEUnvNH7u7s9:FJdOTJVmVGJUZh1U6cT180nms9
MD5:	092A7C430D64A7904ADB47C88FA4B613
SHA1:	4E8D02750EA17D83ED221D53FE500598DC6616BF
SHA-256:	C1DD34A1A4FDF0DF90F2AE85D8DF37F991F88C00108061340901FFB9C3D03076
SHA-512:	F2A94E4417431D1DE8289EA798D01A4FE8BF9CE40BCFCD21EFA27AB44B95745AC97157396ECDE852E212E51E2BF02B87AA771B2C006B85CB0098F9FAE7C91E0B
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/config/tooltip.config.min.js?1705934910
Preview:	var newLine="<br/>",tooltipTemplate="<h6 style='padding-left:4px;font-size:0.9em; display:none' class='ui-accordion-header ui-helper-reset ui-state-default .ui-corner-all'>{0}</h6><span style='' class=''>{1}</span>",tooltipConfig={en_us:{"Supported Browsers":{header:"Supported Browsers",content:"To help provide you with the best experience while using our ordering platform, we recommend using one of the supported browsers listed below.As we continuously improve our platform and release new enhancements, older browser versions and the Internet Explorer browser are not supported.Supported Browsers:<a href='https://www.microsoft.com/en-us/edge' target='_new'>.Microsoft Edge</a><a href='https://www.google.com/chrome/' target='_new'>.Google Chrome</a>"},"Get Price":{header:"Get Price",content:"Click 'Get Price' button to populate the Charge Amount based on configuration. The displayed amount is approximate. Some charges cannot be determined until after the request is submitted. In most c

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.462814895472355
Encrypted:	false
SSDEEP:	3:9IkqiSNTsfMS1CYYn:9IkqLZsxC
MD5:	C599FC75BB850EB5FD0A7AB4C1BA039B
SHA1:	B9FEE222CF2F15B7E5F285707BC1FBEDCE771050
SHA-256:	A80ECEACEB6E918FFD295C9634D844922285343EED6E6549BD9B09F9EE0D0EBB
SHA-512:	7937C4728B299DCD6013673CE393C8896F9117587C57DF4D79D4E1522FA1EE1BB21498C9DDCE5C0777A5FE6FFE228D5FF40A45CFD11298476DD41DADA28BEFAB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnoX4MG6X33uhIFDeeNQA4SBQ3OQUx6?alt=proto
Preview:	ChoKCw3njUAOGgQIVhgCCgsNzkFMehoECEsYAg==

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 400, 16-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	404
Entropy (8bit):	6.478792059764679
Encrypted:	false
SSDEEP:	6:6v/lhPh1r+UyKfp5ERt9AU7sVi2pMntm1AwaB40pkuRO+6xzgNCaW6R2EMyjW6Sy:6v/7J1r+U9+7OeB80mmp1tqzS5wEMISy
MD5:	F91C5D8DC6353255705D8E0971FB608D
SHA1:	C4CCB24A97160AA061BEA06130FB6BDCEC787CE6
SHA-256:	263C80B9B1A07B5DEF42C160C01D51DB6AB2E65AD572A1F2961E8A213B492029
SHA-512:	11908B7570266B56AE6CDC1C636A1E3CEA77F822F52AD7F7EC4C0DAAC9F9FB1681CB02832072379C96C60C9B9E5A94A85D26491408C6F65B532B723F36CA84A8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............A.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......X......tIME.......%......IDATH...!........fs.jpc.5.4...l&...08N@2;<..71....A.H..N.......w.....0.o.4-.....N..8B.....3dN.k.......]..+<1....2..\|^.Z..}unW.....&..k.E.}t."m...C>B3.N..L....%tEXtdate:create.2022-11-09T13:07:25+00:00.6.....%tEXtdate:modify.2022-11-09T13:07:25+00:00.k......IEND.B`.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24271), with no line terminators
Category:	downloaded
Size (bytes):	24305
Entropy (8bit):	5.301578204014469
Encrypted:	false
SSDEEP:	384:KxM2UUxBY7kg/Z2X/W2ClcON3/SifRzfR85k4kTifdY+ZC3AColZ09:Kq2UU7g8X/W2ClPSM9JTifdYFLZ9
MD5:	9E936911B73D8E38D9EB4976FE5F3FDB
SHA1:	4CF0F405CE905AF5B32F15DA7B54EBB2FF25A200
SHA-256:	AEAAB997904E8496F474D34EAFD2F9452C65EC0119D3102635632E19F2C83D04
SHA-512:	5A37A6E31CEE5FFEF7DE91C6ECA977D6CED922010BDBABD5E1149C6FDB0BFEEE31FBAE338E51807E93CFC7745F87B865F7AACF2C9C4DD3CD358A126ED66E47DD
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/utils.js?1705934884
Preview:	function checkRedirect(e){var t,i=getCookie("nextPageParam"),n=redirectPage(),o=queryStringUtil().getQueryParameter("nextPage");return"tradelineAU"==i\|\|"upgradeOrder"==i?(e&&"newPassword"!=e&&"stillLogin"!=e&&"login"!=e&&"hostBrowserForm"!=e&&(n.setLocation("tradelineTemp.html?data="+getCookie("data")),t=!0),"hostBrowserForm"==e&&(deleteCookie("nextPageParam"),deleteCookie("data"))):void 0!==i&&""!==i?(deleteCookie("nextPageParam"),deleteCookie("data"),n.setLocation(pageNameMap[i]+".html?"+pageNameQuery),t=!0):o&&""!==o&&e&&"newPassword"!=e&&"stillLogin"!=e&&"login"!=e&&(deleteCookie("nextPageParam"),deleteCookie("data"),location.href=o.replace(/ /g,"+"),t=!0),t}function get_browser_info(){var e,t,i="Unknown OS",n=navigator.userAgent,o=n.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))\/?\s*(\d+)/i);return-1!=navigator.appVersion.indexOf("Win")&&(i="Windows"),-1!=navigator.appVersion.indexOf("Mac")&&(i="MacOS"),-1!=navigator.appVersion.indexOf("X11")&&(i="UNIX"),-1!=navigator.ap

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	180129
Entropy (8bit):	4.983602720167641
Encrypted:	false
SSDEEP:	768:eb63qQNgGCjhJN4PMYG4C7jPhVJl4CEpIQXQWvhSUfRzMELNpOKfDglDfsCEu+8T:YnGrZ9rkjtPXND
MD5:	9348A53FB1929D27FF7E13343CF9EA6F
SHA1:	495CC270C438363E565D799FB1211829F902F5FF
SHA-256:	79C18D7400B39F2A8F7AECF29E6AC5B7BBCEA56C1CE93C3A5D58D05E2A1B94C2
SHA-512:	62515FCD0BE92DFD0F6A61F3AB725D7C831620109042A3B40485787CD2C60EB2121509BBD9668636D294082032136951E71EADB214B9207E5B6ADE6309293823
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/css/main.css
Preview:	@charset "UTF-8";#inMain,#inMain .displayDiv,#outMain,body{min-width:825px}.info-tooltip,html{font-family:"Lucida Sans Unicode",Arial,sans-serif}html{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;position:relative;height:100%}iframe{position:relative}body{margin:0 auto;font-size:.8em;max-width:1024px}.label-block.label-block.label-block.label-block.label-block.label-block.label-block,footer,header,menu,nav,section{display:block}.label-inline-block.label-inline-block.label-inline-block.label-inline-block.label-inline-block,label{display:inline-block}a{background-color:transparent;color:#0000cd;outline:0}a:active,a:hover{outline:0}a:active,a:focus{color:purple}small{font-size:80%}img{border:0}hr{height:0;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;border-top:1px solid #555}label{max-width:100%}.form-control,article,aside,footer,header,nav,section{display:block}.label-blue{color:#00f}.info-tooltip{max-width:470px;overflow:auto;z-index:100001

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (775)
Category:	downloaded
Size (bytes):	1462
Entropy (8bit):	4.8000187477721425
Encrypted:	false
SSDEEP:	24:fozWLyaGvjZ/6WA2mHf2nzCvi3I6hD0bCWK0HR:KNcvpGzCK464Vd
MD5:	C1FD080843A44577651904B44ADC03A8
SHA1:	D9740810F3BAF98135DDC182895889748A1A2F2C
SHA-256:	D15DEACF1B476643B8A669BD4F7E2FD7464F29C3B19FD0B7C529BCCB95D25FA8
SHA-512:	3BC63DE6928E9977DA610049C18947897955E97AA657FCFB0E29AD6996C21DD3592B6D0DACE0741F20CDE710A3AE21D0CD876FC69149F6EB0B02DE4910E4A20C
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/errorPage.js?1705934884
Preview:	this["hbTemplates"] = this["hbTemplates"] \|\| {};.this["hbTemplates"]["errorPage"] = Handlebars.template({"compiler":[7,">= 4.0.0"],"main":function(container,depth0,helpers,partials,data) {. var stack1;.. return ((stack1 = container.invokePartial(partials.beforeLoginHeader,depth0,{"name":"beforeLoginHeader","data":data,"indent":" ","helpers":helpers,"partials":partials,"decorators":container.decorators})) != null ? stack1 : ""). + "\n<div id=\"outMain\" class=\"error-page\">\n <div class=\"displayDiv text-center\">\n <h2 class=\"red\">Sorry, the page you requested cannot be processed</h2>\n <a href=\"login.html\">Return to home page</a>\n <div class=\"divBody clearfix\"> \n Whitehat Message -->\n <div class=\"whitehat-msgbox\">\n <img src=\"../img/whitehat.gif\" alt=\"Whitehat Logo\" />\n <p>Unauthorized access prohibited by law Use of information\n from this website is go

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	88560
Entropy (8bit):	5.2901575445962346
Encrypted:	false
SSDEEP:	1536:LyB3XluG7bF8YoXWbxgDB4EUeERigRqtxgmj18DKE3OihBAx/irl99jG8WGqXj7i:7ZDgmjljx/ulS8E/TrZQ47GKM
MD5:	68323CA22448D1A56A519D78C1B6C40C
SHA1:	955ED861D071F075B854859DA4AD341C8C0FC5B4
SHA-256:	B41F1D8232FB13C23E7C34B1C667631D8F6768661E330C57B8FF78AA6912ABC5
SHA-512:	F59A03A1BA5A50518FB3C0476F3D4AE98B288AED558BE8C348380AF7E2ED89091830E71076594A0246232FBC0049CE38DE8159134C51FA5A73D90ECA44107B59
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/jquery-3.6.0.min.js
Preview:	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?window:this,function(w,R){"use strict";function v(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item}function g(e){return null!=e&&e===e.window}var t=[],M=Object.getPrototypeOf,s=t.slice,I=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},W=t.push,F=t.indexOf,B={},$=B.toString,_=B.hasOwnProperty,z=_.toString,U=z.call(Object),y={},T=w.document,X={type:!0,src:!0,nonce:!0,noModule:!0};function V(e,t,n){var r,i,o=(n=n\|\|T).createElement("script");if(o.text=e,t)for(r in X)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function h(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?B[$.call(e)]\|\|"object"

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 461 x 461
Category:	dropped
Size (bytes):	43908
Entropy (8bit):	7.910486595849377
Encrypted:	false
SSDEEP:	768:HbD2xNcjf/kgutdTEdlL3XljAIGgbtGPqDAnRG8plD6aVaDVJraPf6pfCI+:Hf5HkguXeZrbtYqD0RT15apJiH
MD5:	E46817000DE4271EFB4C1D68C3A46F79
SHA1:	A4107B1E6A5ECD956E08A1E1E11BCF1058F704C4
SHA-256:	65553BEE70B929CBED18B526C3B8A8FBDDF2EADE1380686BECC3D8EB39CF2A2E
SHA-512:	78143F0D5F3B223B21D34B6E082A3CC0995D7E85664A9EB4B4746FCAB60011AF386A771B81E4874CEBD48851825A0466B83AC1042E6E14E7A9CD76700A31BAE6
Malicious:	false
Reputation:	low
Preview:	GIF89a.....?...................................................}.....R.......:..........................................k.......]..........._.....F....S..h................r.......................!..NETSCAPE2.0.....!.....?.,.............pH,...r.l:..tJU.L.D.f.z..R.d.T..z.n...\|N.....w.....fu.........h...}..{..........m.....].........U&%...%&......t................................K....%.....&...}.......$...$.........=..\.......kH....,"j..".. .a.H.c.(.)#.1B.0u.dI2a.8;5..A...@.1.I.T.H...C.%..I.J...)K.S.j]..j..[....+.c.J.g..?.p.bhk.Y.1g.i...s.6...0E..Y.5.X..x.i...r....r..]..<Yt..n(.SS[q.....}n.Rt....I...V;w.......#.6.\|....m7...:M......^..r.....:l.G\|{.=.....wO.....K...>.~..' ...'O..&.D........`..<..ELH!3.b............,#..!\|'23....."0/.x.......<...H....g#; <....4..PN....lP.vD2...h...(D).N. ...d........p.9.."...Sj.....h.A.r..g....\..,..0~.).p.Ph+.!J.f.....vJf.........i.....p.`.x.........'.......V+. ...b...'...Q...........,...B...

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 100, 16-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	390
Entropy (8bit):	6.488033762848094
Encrypted:	false
SSDEEP:	6:6v/lhPeogUyKfp5ERtvshkvkpLixj26g3j1sGf8M+I92zgNCaW6R2EMyjW6SwTp:6v/7WogU9+7vA7lOdyjOJhzS5wEMISy
MD5:	2638A07B72C838BCF8C954E3AE11B66A
SHA1:	3D8386FB1EA14879922B555F197957E0376E06AB
SHA-256:	81A68C12018CD3298DAACA9004E8ED64C17B1475F74F839EEC21BC4C3CEE2854
SHA-512:	56E678C9CA7BBDD676F5B35A94BB59208ADA09D16818274150ACC649807619A1D5171EBF981C2D77D7F7FE88F98C180D75385031D34B0B584873E58FA1E159F7
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png
Preview:	.PNG........IHDR.......d........t....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......X......tIME.......%......IDAT(.....@...?........B..PE...0.....P..4..hr...k.........R.5..........Q..~...#..%.i.d..a..x....s.@.z....n.r..}#.y..R..LFX.\..n..o..C.d......%tEXtdate:create.2022-11-09T13:07:25+00:00.6.....%tEXtdate:modify.2022-11-09T13:07:25+00:00.k......IEND.B`.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 120 x 45
Category:	dropped
Size (bytes):	1927
Entropy (8bit):	7.479612016072432
Encrypted:	false
SSDEEP:	48:83NqI/zAih5ltOxjz1AP5dW+V2ROlNEe9O:moI/zAihYxs5dW+vP/O
MD5:	30C9DFBABEFDE1B394E0970F3388C277
SHA1:	81F79912D412C42D3518918F82B5DF4DB54842C6
SHA-256:	CD51293971876F0B44A829BDB77A438CD096DCA99FA1AABEB8D52B43609A7A8B
SHA-512:	7618E886D18B9F487E2379C6689931DEFBA2F586219079612A9BF1A7B90DAC8F1FF0CDCDDE43A174BAB7643DC41AC518E601E67C7399A3281266883578BE365C
Malicious:	false
Reputation:	low
Preview:	GIF89ax.-........f..T......................@..#........................... y.ZWW...`..0...p.p.......P............1--...vss...hee......?;;LII...............................Gj.................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,....x.-........A. ....*\....#J.X....+2j.... C..I....V.X...0c.I...2W.. .....h.0aB...,.\.r....20.J...........T...p.[.g....v(....."....r....7L..`.X.F1@. U...0,..vA.RY.^.aC.F........+..u.AA..d...Za...[.( .B..+.~.Pa...[..NX...M..!xD...9.}.._...j?n.Aw..W..^.;....l....4X..>.}.6...QCU..y......`..b..._..0Bx.......s....z....d.A..(.@o..G.u+q@`..%6.b...R.a1..a.Y..u~.........5.g.d1. Az..$.....bpL...Z+Q._j..dAi.Xp.gua`..^v....=p.v].D....$.....QZ...Z...#.`..R..Be.f...}..I.ae.a.1...\|.5.d.m.j.n..%.......$..jkH..p.......+...;,......6.,......VKm..f..

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 100, 16-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	390
Entropy (8bit):	6.488033762848094
Encrypted:	false
SSDEEP:	6:6v/lhPeogUyKfp5ERtvshkvkpLixj26g3j1sGf8M+I92zgNCaW6R2EMyjW6SwTp:6v/7WogU9+7vA7lOdyjOJhzS5wEMISy
MD5:	2638A07B72C838BCF8C954E3AE11B66A
SHA1:	3D8386FB1EA14879922B555F197957E0376E06AB
SHA-256:	81A68C12018CD3298DAACA9004E8ED64C17B1475F74F839EEC21BC4C3CEE2854
SHA-512:	56E678C9CA7BBDD676F5B35A94BB59208ADA09D16818274150ACC649807619A1D5171EBF981C2D77D7F7FE88F98C180D75385031D34B0B584873E58FA1E159F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d........t....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......X......tIME.......%......IDAT(.....@...?........B..PE...0.....P..4..hr...k.........R.5..........Q..~...#..%.i.d..a..x....s.@.z....n.r..}#.y..R..LFX.\..n..o..C.d......%tEXtdate:create.2022-11-09T13:07:25+00:00.6.....%tEXtdate:modify.2022-11-09T13:07:25+00:00.k......IEND.B`.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	253640
Entropy (8bit):	5.155513285011218
Encrypted:	false
SSDEEP:	3072:RX32FaKRMrDafDXnujVFU899toIubuz+qWxPNBm4N688ScKCy6:QGVgxXvPWTjKY
MD5:	306521CAC32C795F84317E23B4483E31
SHA1:	CB847AA12BC43578FCF06945D3366128FD5DD384
SHA-256:	E71C6AC661D3044AF3EC4E0BCE1E5FB8A4A67882DB326199BF14B0CD6AD18419
SHA-512:	A99FF53E34EDEF30C64EB50C93FB2C8F9AF251CC5211CE96E2FF61663C2375C4B03084ABC78B12F6F45BAD274D87F4DAE8284976A687C6487CE9ACDE86672699
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/jquery-ui-1.13.2.min.js
Preview:	!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(V){"use strict";V.ui=V.ui\|\|{},V.ui.version="1.13.2";var n,s,x,k,o,a,r,l,h,i,N=0,E=Array.prototype.hasOwnProperty,c=Array.prototype.slice;function C(t,e,i){return[parseFloat(t[0])(h.test(t[0])?e/100:1),parseFloat(t[1])(h.test(t[1])?i/100:1)]}function D(t,e){return parseInt(V.css(t,e),10)\|\|0}function I(t){return null!=t&&t===t.window}V.cleanData=(n=V.cleanData,function(t){for(var e,i,s=0;null!=(i=t[s]);s++)(e=V._data(i,"events"))&&e.remove&&V(i).triggerHandler("remove");n(t)}),V.widget=function(t,i,e){var s,n,o,a={},r=t.split(".")[0],l=r+"-"+(t=t.split(".")[1]);return e\|\|(e=i,i=V.Widget),Array.isArray(e)&&(e=V.extend.apply(null,[{}].concat(e))),V.expr.pseudos[l.toLowerCase()]=function(t){return!!V.data(t,l)},V[r]=V[r]\|\|{},s=V[r][t],n=V[r][t]=function(t,e){if(!this\|\|!this._createWidget)return new n(t,e);arguments.length&&this._createWidget(t,e)},V.extend(n,s,{version:e.version,_proto

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	77217
Entropy (8bit):	5.466439948969196
Encrypted:	false
SSDEEP:	768:1mcdmtn8zdroWWoES4YBRSkYc4FpjVq+D/aOrJHy1QDMTlBVmHTlSTui:7HrBWoSkUkYzFm+DztHcBcHTlSqi
MD5:	ACD1DE1F4716176B34622A4608409CDF
SHA1:	F9FCEEF158DE0E772BFA0813AD951BAC2AEC3C43
SHA-256:	06D3D710C10135B9092C8C8518B3B147CC8F8FB9E3AF3BF005DC1965C97AC409
SHA-512:	E62A81E4CB28235E48E07C4E569594E192A89C24313268EC2DC51142678ED987C57237E64214F1A4F185619347EFFE96D7424BEBDA8AD7B69169126D15F8C408
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/handlebars-4.7.7.min.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Handlebars=e():t.Handlebars=e()}(this,function(){return s=[function(t,e,r){"use strict";function s(){var r=p();return r.compile=function(t,e){return c.compile(t,e,r)},r.precompile=function(t,e){return c.precompile(t,e,r)},r.AST=o.default,r.Compiler=c.Compiler,r.JavaScriptCompiler=l.default,r.Parser=a.parser,r.parse=a.parse,r.parseWithoutProcessing=a.parseWithoutProcessing,r}var n=r(1).default;e.__esModule=!0;var i=n(r(2)),o=n(r(45)),a=r(46),c=r(51),l=n(r(52)),u=n(r(49)),n=n(r(44)),p=i.default.create,r=s();r.create=s,n.default(r),r.Visitor=u.default,r.default=r,e.default=r,t.exports=e.default},function(t,e){"use strict";e.default=function(t){return t&&t.__esModule?t:{default:t}},e.__esModule=!0},function(t,e,r){"use strict";function s(){var e=new o.HandlebarsEnvironment;return l.extend(e,o),e.SafeString=a.default,e.Except

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1766)
Category:	downloaded
Size (bytes):	1985
Entropy (8bit):	4.9221517373005765
Encrypted:	false
SSDEEP:	24:fIzW7k6I8jiKMDfrFVHsZgE2FtQUwyVBvLBk0ZUTjoy+Zqy/:a8vri9FAgE2L9ZZuUy+Zqy/
MD5:	1048B15A2523E5518A2CE4A6A21B148D
SHA1:	4B850D00EA6B8FBE3B17930554A4610CC87A1C3E
SHA-256:	BAEF2086305EE817486C8D5BAEBA889486A3C4E53171109C9B47CF205AC9C93A
SHA-512:	D8D9A68FA3AB4CB53F1DC91D3A95CA3A853F9C2CD9F8CEFFB178E7496BC41EE0C37B712E5E08D95CEE50C5BB691B1C26B996EBC66303E7E7082325EA75943492
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/beforeLoginHeader.js?1705934910
Preview:	this["hbTemplates"] = this["hbTemplates"] \|\| {};.this["hbTemplates"]["beforeLoginHeader"] = Handlebars.template({"compiler":[7,">= 4.0.0"],"main":function(container,depth0,helpers,partials,data) {. return "<script type=\"text/javascript\">\n $( document ).ready(function() {\n $(\"#supportedBrowsersDialog\" ).dialog({\n autoOpen: false,\n width: 600,\n height: 225,\n position: { my: \"center\", at: \"top+255px\", of: window },\n resizable: false,\n draggable: false,\n title: \"Supported Browsers\",\n dialogClass: 'supportedBrowsersDialog'\n });\n\n $( \"#supportedBrowsersLink\" ).on(\"click\", function() {\n $( \"#supportedBrowsersDialog\" ).dialog( \"open\" );\n });\n });\n</script>\n<header id=\"header\" class=\"ui-widget-header\">\n <div class=\"floatRight favLink\">\n <img src=\"../img/favorites.fw.png\" width=\"25\" height=\"25\" alt=\"\"

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	53469
Entropy (8bit):	6.913477447338134
Encrypted:	false
SSDEEP:	1536:9YJBEYeTbJhF80DxLS+/o/DGWvHMHhk5k:9mBEZTdhF19WCeDGVHok
MD5:	8AC87C873220D261BB9AE73B416668E8
SHA1:	BB9B1CDF44EC8A3785BCCEB05EA06C3784E65270
SHA-256:	667277F27AC0666B56115695DC4CA80074BD04F136EB6D6DB9C1A8401EDFB056
SHA-512:	B111EBE2D08611F670379EBBC3DFB12B09D835DE9211786591BF92F1749769A3A509CD1D29C50A2C3CB8F0748588F71A48B2573745973DCF4057553A0E3183A8
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/img/favorites.fw.png
Preview:	.PNG........IHDR...............c....sBIT....\|.d.....pHYs............Z....tEXtSoftware.Adobe Fireworks CS6......tEXtCreation Time.04/21/16.c.....prVWx..Z]v........`D..j[..bY..d.y..z..f.......\|U.2.-[.8... Y..~..iZ.........k.........'uU.UYW...........'.nW..nR.IeU.z[...jWU..TeY....V.......m........^'.v[n'..5.x!.........#.F.....?.66#...Y...>....F.VB.X.X......'z.\|........\.......IL.....?...k8...Q.I.....f$.._...:..?1f.....D".).1.../.A.4..&.i..#.h..x.K.._......s...._...9/..X<o.0...QmZL=.?...A....qH....o.......otl..G.....a8..;.......'.V.......g....{>.....>......~8@E.._.....S.\|......>.ha........3.=w..<....N...^..}O..B.........M..P/.........k.......s...P...u...9....5mo.Sn.8b..Zh.Pz..E.8._....oj...T~....P..........."...W.i.wA.nM....0....~E....$..~.P...c.@.N...2...pu.g..0..#..}L.y.tx}\|..G......O.%.Vk.vm...R.j..^..>.X...F-N`.)..?.O....#....L...D..k..l..!:.w.......kW...,8.............g..._?........\|G&.g.bl..0..H.s.o.AH.s.....7.n......N63

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24271), with no line terminators
Category:	downloaded
Size (bytes):	24305
Entropy (8bit):	5.301578204014469
Encrypted:	false
SSDEEP:	384:KxM2UUxBY7kg/Z2X/W2ClcON3/SifRzfR85k4kTifdY+ZC3AColZ09:Kq2UU7g8X/W2ClPSM9JTifdYFLZ9
MD5:	9E936911B73D8E38D9EB4976FE5F3FDB
SHA1:	4CF0F405CE905AF5B32F15DA7B54EBB2FF25A200
SHA-256:	AEAAB997904E8496F474D34EAFD2F9452C65EC0119D3102635632E19F2C83D04
SHA-512:	5A37A6E31CEE5FFEF7DE91C6ECA977D6CED922010BDBABD5E1149C6FDB0BFEEE31FBAE338E51807E93CFC7745F87B865F7AACF2C9C4DD3CD358A126ED66E47DD
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/utils.js?1705934910
Preview:	function checkRedirect(e){var t,i=getCookie("nextPageParam"),n=redirectPage(),o=queryStringUtil().getQueryParameter("nextPage");return"tradelineAU"==i\|\|"upgradeOrder"==i?(e&&"newPassword"!=e&&"stillLogin"!=e&&"login"!=e&&"hostBrowserForm"!=e&&(n.setLocation("tradelineTemp.html?data="+getCookie("data")),t=!0),"hostBrowserForm"==e&&(deleteCookie("nextPageParam"),deleteCookie("data"))):void 0!==i&&""!==i?(deleteCookie("nextPageParam"),deleteCookie("data"),n.setLocation(pageNameMap[i]+".html?"+pageNameQuery),t=!0):o&&""!==o&&e&&"newPassword"!=e&&"stillLogin"!=e&&"login"!=e&&(deleteCookie("nextPageParam"),deleteCookie("data"),location.href=o.replace(/ /g,"+"),t=!0),t}function get_browser_info(){var e,t,i="Unknown OS",n=navigator.userAgent,o=n.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))\/?\s*(\d+)/i);return-1!=navigator.appVersion.indexOf("Win")&&(i="Windows"),-1!=navigator.appVersion.indexOf("Mac")&&(i="MacOS"),-1!=navigator.appVersion.indexOf("X11")&&(i="UNIX"),-1!=navigator.ap

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1786)
Category:	downloaded
Size (bytes):	8071
Entropy (8bit):	4.864239158850017
Encrypted:	false
SSDEEP:	192:giNHZH65Z31VPrnb6S4OpiFXr74e8PaQTd:ZNHZivP7bGFXr74LbTd
MD5:	E2740EB3FB4A13B60E3D0FE514DD2F70
SHA1:	E6A473705B50712D2B645986F9F3A4C558627A69
SHA-256:	C41DBB07AF61C449B665FE6B0ADB9DCD0331359BAA8047B19F56699CE5DBB3B5
SHA-512:	450F15E31934AD8A8B266C3E1BB539FE49F10E995B83F4B7D96B704C2F2466E80BE39215DC5F202A5F1188EE3D0905389427591583532C9D4A2E2612C5FBC2C8
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/hbs/login.js?1705934910
Preview:	this["hbTemplates"] = this["hbTemplates"] \|\| {};.this["hbTemplates"]["login"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) {. var stack1, helper, alias1=depth0 != null ? depth0 : (container.nullContext \|\| {}), alias2=helpers.helperMissing, alias3="function", alias4=container.escapeExpression;.. return " <input type=\"hidden\" id=\"nextPage\" value=\"". + alias4(((helper = (helper = helpers.nextPage \|\| (depth0 != null ? depth0.nextPage : depth0)) != null ? helper : alias2),(typeof helper === alias3 ? helper.call(alias1,{"name":"nextPage","hash":{},"data":data}) : helper))). + "\">\n". + ((stack1 = helpers.each.call(alias1,(depth0 != null ? depth0.pageMessages : depth0),{"name":"each","hash":{},"fn":container.program(2, data, 0),"inverse":container.noop,"data":data})) != null ? stack1 : ""). + ((stack1 = (helpers.compare \|\| (depth0 && depth0.compare) \|\| alias2).call(alias1,(depth0 != null ? depth0.nextPage : depth0),"==","ssoM

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11101), with no line terminators
Category:	downloaded
Size (bytes):	11101
Entropy (8bit):	5.2562127897720785
Encrypted:	false
SSDEEP:	192:+rDNvDk6fPP/+I6OP1rP0OhIMVA96DByTcwxwiRv:+rxA6fPP3P1rMOhIMVTDD1A
MD5:	C36EB91EAAC55F44353FDA479C295066
SHA1:	8D0F514A4AAF28137508F7BC837107E620047658
SHA-256:	922765B53724E0329D2D2E67F5DBCAF92E03EDF96A27D4E4E002C45852682A44
SHA-512:	6B561F214AA72FBDDC6ACC13F0E9059227826B8E7F3767914AA7DED548E0C6CF8705F13B8DD3C7209F152052983AA3FFDDA67DE42B1F3DAE0F73472C7DC2D166
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/js/lib/jquery-migrate-3.3.2.min.js
Preview:	void 0===jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0,s.migrateWarnings.push(e),t&&t.warn&&!s.migrateMute&&(t.warn("JQMIGRATE: "+e),s.migrateTrace)&&t.trace&&t.t

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	2142
Entropy (8bit):	5.337935321165017
Encrypted:	false
SSDEEP:	48:MASXHWAlDnRz080+i5Ff4Oi31oGm5cfzFEodEzAz:vaWAlDnRQd+nOiFg5cfzFEodEzAz
MD5:	8CD234FACF5A8B12221612DC26AB8E9C
SHA1:	AF68B240D1C35F00AC82DDADEA349BFF88B9A3FA
SHA-256:	A766DCDD2D89E5EF2BC38843BDF59D6486C134499AC609C396A9954A16D8CE9B
SHA-512:	DD9CEAA0A519FD3F6FD1FB5A06DC4BEE3C5E9E05A132B113042066DDF250CFBF66DE30B6CC36DE5AE3B80893F2E3B2F45E094BA826AE12EDADD96287E42F33E6
Malicious:	false
Reputation:	low
URL:	https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba
Preview:	<!DOCTYPE html>.<html>.<head>..<meta charset="utf-8">..<title>Placeholder</title>.. . <script type="text/javascript" src="/ruxitagentjs_ICA2NVfhqru_10283240308130508.js" data-dtconfig="rid=RID_2076849205\|rpid=-870453905\|domain=creditbureaureports.com\|reportUrl=/rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0\|app=3389b198b27ff03b\|ssc=1\|featureHash=ICA2NVfhqru\|vcv=2\|rdnt=1\|uxrgce=1\|bp=3\|cuc=5eyzl3s4\|mel=100000\|dpvc=1\|md=mdcc1=a#header ^rb div ^rb ul ^rb li:nth-child(2)\|ssv=4\|lastModification=1710200991129\|tp=500,50,0,1\|agentUri=/ruxitagentjs_ICA2NVfhqru_10283240308130508.js"></script><script src="../js/lib/jquery-3.6.0.min.js"></script>. <script src="../js/lib/jquery-migrate-3.3.2.min.js"></script>. <script src="../js/lib/aes-3.1.2.js"></script> . jQueryUI Css -->. <link rel="stylesheet" href="../js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css">.. [if lt IE 9]>. <script>. document.createElement('header');. document.createEle

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 100, 16-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	445
Entropy (8bit):	6.727338022891414
Encrypted:	false
SSDEEP:	12:6v/7WogU9+7eZVCDygfx6n+PnrtT1pA+nzS5wEMISy:no19+7eu3fx9nZjA+nzowEMIJ
MD5:	CC1868CFFDDDA33BE077A7052EF8171F
SHA1:	A8083AF9137BC4A9C6EEC17C203FDD6F66E5055D
SHA-256:	1DF44706A748B80D95AEB2B476987137C543804332C584531B3E1BFB8B8F8B1E
SHA-512:	EF8A0DDF3025AC32B398698B6FBD24391762CF1079DBE126853C5138ECDA7F8C2BE15E33E94BDAC62C497266607404ED0E63897AC8D36D235C85AA8FE4835AA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d........t....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......X......tIME.......%......IDAT(..=j...@...t)..N...P..t...%..=C...frw.EL.v).@E..mH......P.......Z._......Q.....1......U9...u1mB.va6......._...u..:a{...h.O...U}.&..v..>2.5p......M.+.:.M.....u..1..>.V..A.../.9../^d...c...%tEXtdate:create.2022-11-09T13:07:25+00:00.6.....%tEXtdate:modify.2022-11-09T13:07:25+00:00.k......IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 20:20:20.275973082 CET	49678	443	192.168.2.4	104.46.162.224
Mar 28, 2024 20:20:21.744676113 CET	49675	443	192.168.2.4	173.222.162.32
Mar 28, 2024 20:20:30.277218103 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.277256966 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.277326107 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.278163910 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.278198004 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.278486967 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.278506994 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.278517008 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.278687954 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.278698921 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.799194098 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.799427986 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.799618959 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.799644947 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.799752951 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.799774885 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.800725937 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.800802946 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.800810099 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.800873995 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.802098989 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.802187920 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.802330017 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.802408934 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.802500010 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.802505970 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.855385065 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.855412960 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.886445999 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.902122021 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.945605993 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.945699930 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.945883036 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.947768927 CET	49735	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.947796106 CET	443	49735	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:30.948365927 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:30.996241093 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.074482918 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.074603081 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.074695110 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.074716091 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.074779987 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.077642918 CET	49734	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.077671051 CET	443	49734	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.093683004 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.093719006 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.093796015 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.094381094 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.094394922 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.099960089 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.099988937 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.100066900 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.100352049 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.100380898 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.100445032 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.100542068 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.100552082 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.100852013 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.100872040 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.100917101 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.101052999 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.101063967 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.101388931 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.101434946 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.101480961 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.101774931 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.101810932 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.101865053 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.101950884 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.101960897 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.102097988 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.102109909 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.102238894 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.102248907 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.339148998 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.339538097 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.339561939 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.339955091 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.340296030 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.340368032 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.340553999 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.353272915 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.353693008 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.353708982 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.354114056 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.354473114 CET	49675	443	192.168.2.4	173.222.162.32
Mar 28, 2024 20:20:31.354701996 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.354762077 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.354871988 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.381979942 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.382364035 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.382388115 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.383464098 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.383536100 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.383898973 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.383960962 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.384049892 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.384058952 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.384900093 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.385075092 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.385099888 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.386192083 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.386255980 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.386619091 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.386796951 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.386866093 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.386985064 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.386996031 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.387106895 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.387113094 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.387785912 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.387945890 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.387969017 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.388099909 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.388153076 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.388228893 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.388591051 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.388642073 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.388725042 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.388737917 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.389055014 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.389127016 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.389468908 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.389537096 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.389599085 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.389609098 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.400230885 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.433665991 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.433669090 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.481177092 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.481281996 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.584774017 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.604737043 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.630853891 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.632262945 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.635720968 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.635849953 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.638438940 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.653726101 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.682709932 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.682710886 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.682710886 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.683562994 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.683590889 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.731650114 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.829355001 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.829381943 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.829425097 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.829442978 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.829453945 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.829502106 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.829524040 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.829549074 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.829582930 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.872632027 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.872652054 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.872699022 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.872716904 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.872729063 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.872773886 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.872802019 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.872814894 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.872838020 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.874408960 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.874424934 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.874449015 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.874463081 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.874488115 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.874490976 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.874511957 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.874521017 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.874535084 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.874560118 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.877063036 CET	49741	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.877079964 CET	443	49741	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.877991915 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878001928 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878009081 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878012896 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878026962 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878035069 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878036976 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878047943 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878053904 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878073931 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.878088951 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.878097057 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878098965 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.878140926 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.878182888 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.878185034 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.878185034 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.884077072 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.884107113 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.884172916 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.884613991 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.884623051 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.885036945 CET	49739	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.885060072 CET	443	49739	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.895348072 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.895378113 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.895448923 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.896431923 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.896440029 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.967169046 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.967184067 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.967231989 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.967252970 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.967268944 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.967278004 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.967317104 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.967338085 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.993693113 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.993705988 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.993746042 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.993763924 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.993769884 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.993794918 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.993819952 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.993823051 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.993834972 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.993845940 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.993881941 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.993908882 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.993925095 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.993952990 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.998542070 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.998555899 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.998575926 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.998583078 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.998614073 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.998635054 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:31.998662949 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:31.998681068 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.070811033 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.070880890 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.070904970 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.070919991 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.070949078 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.070971012 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.077455997 CET	49736	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.077475071 CET	443	49736	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.087604046 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.087625980 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.087680101 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.087696075 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.087716103 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.087738037 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.113930941 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.113955021 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.113986015 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.114022017 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.114083052 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.114995956 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.115012884 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.115050077 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.115061045 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.115098000 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.115115881 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.130923033 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.131472111 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.131489038 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.131876945 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.132828951 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.132905006 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.133430958 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.143945932 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.144862890 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.144877911 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.145215034 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.146895885 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.146950006 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.147567034 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.154839993 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.154874086 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.154922009 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.154953957 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.154977083 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.154995918 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.159109116 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.159123898 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.159143925 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.159177065 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.159181118 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.159202099 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.159240961 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.159255981 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.160006046 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.160023928 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.160063982 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.160069942 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.160115004 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.160129070 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.176238060 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.188226938 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.200942993 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.201010942 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.201036930 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.201052904 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.201092958 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.204617023 CET	49740	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.204638958 CET	443	49740	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.209052086 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.209081888 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.209141970 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.209152937 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.209197044 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.209858894 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.209877968 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.209913015 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.209918976 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.209959984 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.209976912 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.210755110 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.210777044 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.210803032 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.210808039 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.210851908 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.280066013 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.280093908 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.280144930 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.280172110 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.280193090 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.280222893 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.281064987 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.281081915 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.281112909 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.281120062 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.281148911 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.281167984 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.282021999 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.282040119 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.282073021 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.282078028 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.282119989 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.282139063 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.282943010 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.282962084 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.282998085 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.283003092 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.283034086 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.283057928 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.331003904 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.331042051 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.331073999 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.331093073 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.331120968 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.331137896 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.332021952 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.332042933 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.332072020 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.332077026 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.332119942 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.333225965 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.333249092 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.333277941 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.333282948 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.333326101 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.334182978 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.334219933 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.334238052 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.334243059 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.334278107 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.378420115 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.389422894 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.400849104 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.400875092 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.400921106 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.400947094 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.400979042 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.401004076 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.401597977 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.401616096 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.401648045 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.401662111 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.401690006 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.401707888 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.402573109 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.402590036 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.402622938 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.402633905 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.402659893 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.402678013 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.403701067 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.403719902 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.403789043 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.403800964 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.403836966 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.430687904 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.430696964 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.451096058 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.451126099 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.451165915 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.451194048 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.451216936 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.451232910 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.452111006 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.452128887 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.452167034 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.452183962 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.452207088 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.452224970 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.452229977 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.452260017 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.454242945 CET	49737	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.454260111 CET	443	49737	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.512062073 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.512111902 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.512125969 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.512181044 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.512191057 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.512204885 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.512242079 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.515172958 CET	49745	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.515194893 CET	443	49745	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.521337986 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.521403074 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.521425962 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.521440983 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.521466017 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.521492958 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.523849964 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.523883104 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.523941994 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.529448986 CET	49738	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.529465914 CET	443	49738	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.532953978 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.532970905 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.621519089 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.621534109 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.621581078 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.621587038 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.621602058 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.621627092 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.621644020 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.621651888 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.621671915 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.621694088 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.769169092 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.769217968 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.769294024 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.770082951 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.770100117 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.771152020 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.771198988 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.771250010 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.771739006 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.771759033 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.773165941 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.773191929 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.773247957 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.773760080 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.773771048 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.775105000 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.775135040 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.775204897 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.775934935 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.775953054 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.778831005 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.781910896 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.781939030 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.782565117 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.783204079 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.783322096 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.783828020 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.789535046 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.789561033 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.789639950 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.789668083 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.789710045 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.824244022 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.864876986 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.864934921 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.864985943 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.865003109 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.865026951 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.865042925 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.865822077 CET	49744	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.865839958 CET	443	49744	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.878134012 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.878185034 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.878242970 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.878835917 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.878854036 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.994393110 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.994436026 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:32.994502068 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.997169971 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:32.997189999 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.020082951 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.020426035 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.020451069 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.021080971 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.021698952 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.021840096 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.021891117 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.022654057 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.023236036 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.023260117 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.024537086 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.024601936 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.025914907 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.026071072 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.026295900 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.026305914 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.026359081 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.038222075 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.038237095 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.039617062 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.039629936 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.039974928 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.040002108 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.040736914 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.040810108 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.041156054 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.041218042 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.041973114 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.042047024 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.044629097 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.044639111 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.045722961 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.045830011 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.046065092 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.046077967 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.068231106 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.072792053 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.072916985 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.072923899 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.088804007 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.088994980 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.123858929 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.124167919 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.124193907 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.124576092 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.124943972 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.125034094 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.125191927 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.172240973 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.243146896 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.253417969 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.253446102 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.254858017 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.254929066 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.255337000 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.255403042 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.255635023 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.255642891 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.260879040 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.262392044 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.269510031 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.269521952 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.269545078 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.269572973 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.269577026 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.269608021 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.269628048 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.269628048 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.269665003 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.273689985 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.273845911 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.273931980 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.274015903 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.274141073 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.274185896 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.275072098 CET	49749	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.275094032 CET	443	49749	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.275715113 CET	49750	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.275731087 CET	443	49750	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.299067974 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.315121889 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.315125942 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.374655962 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.381709099 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.381724119 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.381838083 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.381844044 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.381897926 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.382143021 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.382143021 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.382160902 CET	443	49748	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.382246017 CET	49748	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.390388966 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.390415907 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.390499115 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.390499115 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.390525103 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.390791893 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.427576065 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.489720106 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.504333019 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.504349947 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.504364014 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.504374981 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.504381895 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.504411936 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.504441023 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.504472971 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.504477978 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.504838943 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.510525942 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.510551929 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.510634899 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.510634899 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.510659933 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.511157990 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.511297941 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.511315107 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.511468887 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.511475086 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.511559010 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.542217016 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.555185080 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.555223942 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.555301905 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.555301905 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.555309057 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.557277918 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:33.557311058 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:33.557337999 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.557390928 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:33.557679892 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:33.557693958 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:33.587539911 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:33.587588072 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:33.587896109 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:33.590225935 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:33.590243101 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:33.624732971 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.624806881 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.624825001 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.624933004 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.624933004 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.625395060 CET	49747	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.625416994 CET	443	49747	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.631223917 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.631256104 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.631335974 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.631361961 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.632302999 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.632340908 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.632395029 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.632404089 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.632404089 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.632807970 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.637828112 CET	49746	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.637840986 CET	443	49746	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662049055 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662062883 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662101030 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662120104 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662137985 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662193060 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.662218094 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662267923 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.662288904 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662369013 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.662431002 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.662902117 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.666179895 CET	49751	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.666204929 CET	443	49751	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.685478926 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.685534954 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.690376043 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.690679073 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.690691948 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.695780993 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.695827007 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.696229935 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.696229935 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.696269989 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.732758045 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.732772112 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.732831955 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.732856035 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.732868910 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.732882977 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.732918978 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.732939959 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.732939959 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.733375072 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.778301954 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:33.782221079 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:33.782238007 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:33.783360004 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:33.783651114 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:33.786221981 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:33.786315918 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:33.801632881 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:33.801914930 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:33.806227922 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:33.806241989 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:33.806508064 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:33.836764097 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:33.836792946 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:33.852317095 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:33.853130102 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.853141069 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.853188038 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.853281975 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.853281975 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.853310108 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.853707075 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.853748083 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.853775978 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.853785038 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.853806973 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.853809118 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.853919029 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.873954058 CET	49752	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.873980045 CET	443	49752	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.885097027 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:33.894234896 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:33.935631037 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.936242104 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:33.941282988 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.946594954 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.946594954 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.946619034 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.946624994 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.947058916 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.947074890 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.949373007 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.949454069 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.950148106 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.950150967 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.950179100 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.950257063 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.950563908 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.950589895 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.950633049 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.950655937 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:33.995364904 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:33.996277094 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:33.996567011 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.000464916 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.003089905 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.003110886 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.003144979 CET	49754	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.003150940 CET	443	49754	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.131241083 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.131283998 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.131458998 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.132169962 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.132186890 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.182081938 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.182156086 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.182231903 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.182544947 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.185280085 CET	49755	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.185305119 CET	443	49755	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.203372955 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.203516960 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.203612089 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.213999987 CET	49756	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.214032888 CET	443	49756	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.219950914 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.219955921 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.219995022 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.219995975 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.220074892 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.220076084 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.220819950 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.220835924 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.221414089 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.221419096 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.221435070 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.221462011 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.221868992 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.221901894 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.221932888 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.222125053 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.222292900 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.222306013 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.223809004 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.223819971 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.224688053 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.224716902 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.231492996 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.238125086 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.238137960 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.240825891 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.240859985 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.246520042 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.246520042 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.246550083 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.342187881 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.342267036 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.345170975 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.345196009 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.345530033 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.348340988 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.392237902 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.468636036 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.469295979 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.469317913 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.469718933 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.473670959 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.473789930 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.474070072 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.474083900 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.480875015 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.481530905 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.481553078 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.481980085 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.482901096 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.482970953 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.483298063 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.483314037 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.487638950 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.488038063 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.488081932 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.489161968 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.489222050 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.490505934 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.490609884 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.490936995 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.490951061 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.493176937 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.493614912 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.493640900 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.495040894 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.495099068 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.495858908 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.495950937 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.496377945 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.496388912 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.512998104 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.513010025 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.513614893 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.513655901 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.513915062 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.513957024 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.514863968 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.514925957 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.515065908 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.515117884 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.521747112 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.521888971 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.522696018 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.522845984 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.523169041 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.523181915 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.523415089 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.523436069 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.530626059 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.546356916 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.546719074 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.546814919 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.546869993 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.552422047 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.552447081 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.552472115 CET	49757	443	192.168.2.4	184.29.128.114
Mar 28, 2024 20:20:34.552478075 CET	443	49757	184.29.128.114	192.168.2.4
Mar 28, 2024 20:20:34.575779915 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.576796055 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.713073015 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.714992046 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.715014935 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.715056896 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.715080976 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.715120077 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.715143919 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.730154991 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.730746984 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.730768919 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.730802059 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.730829954 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.730850935 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.730876923 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.738624096 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740291119 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740312099 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740317106 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740333080 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740339041 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740361929 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.740397930 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740421057 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740437031 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.740439892 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740447998 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.740484953 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.740493059 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740529060 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.740565062 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.740823984 CET	49763	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.740839005 CET	443	49763	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.741744995 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.743263006 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.743277073 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.743293047 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.743328094 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.743360996 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.743393898 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.743410110 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.743444920 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.751513004 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753266096 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753273964 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753300905 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753319979 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753328085 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.753333092 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753357887 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753387928 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.753387928 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.753410101 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.753559113 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753597021 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753640890 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.753669977 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753736019 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.753778934 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.754364967 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.754386902 CET	443	49762	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.754399061 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.754425049 CET	49762	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.835216999 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.835247993 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.835299015 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.835319996 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.835355997 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.835371017 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.835705042 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.835724115 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.835753918 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.835758924 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.835783005 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.835803032 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.851219893 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.851294994 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.851319075 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.851344109 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.851389885 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.851650000 CET	49759	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.851665020 CET	443	49759	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.865684032 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.865716934 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.865757942 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.865786076 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.865804911 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.865828037 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.867772102 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.867794037 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.867837906 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.867861032 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.867878914 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.867907047 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.874084949 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.874105930 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.874152899 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.874169111 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.874186993 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.874211073 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.874720097 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.874738932 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.874773026 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.874783993 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.874809027 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.874835014 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.954860926 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.954901934 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.954936981 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.954965115 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.955003977 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.955022097 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.955430031 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.955446959 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.955470085 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.955473900 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.955506086 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.955780029 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.955794096 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.955833912 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.955838919 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.955868959 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.956178904 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.956193924 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.956234932 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.956238985 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.956274033 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.985832930 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.985862970 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.985893965 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.985955954 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.985971928 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.986008883 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.987044096 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.987076998 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.987102985 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.987112999 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.987139940 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.987171888 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.987215042 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.987345934 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.987365961 CET	443	49761	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.987376928 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.987407923 CET	49761	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.994298935 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.994321108 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.994373083 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.994400978 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.994419098 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.994443893 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.994987011 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.995006084 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.995039940 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.995050907 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.995076895 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.995095968 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.995820045 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.995837927 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.995873928 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.995888948 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.995906115 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.995934010 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.996665955 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.996691942 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.996725082 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.996743917 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:34.996757030 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:34.996778011 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.075437069 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.075467110 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.075510979 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.075536966 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.075567007 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.075582981 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.075678110 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.075692892 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.075753927 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.075758934 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.075784922 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.076183081 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.076199055 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.076242924 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.076247931 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.076277971 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.076586008 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.076601028 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.076646090 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.076651096 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.076683998 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.114945889 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.114973068 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.115031004 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.115051985 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.115104914 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.116024971 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.116046906 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.116108894 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.116117001 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.116173029 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.116533995 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.116559029 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.116610050 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.116693020 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.116712093 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.116746902 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.116755009 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.116775990 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.116796017 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.117165089 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.117176056 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.117542982 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.117562056 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.117594957 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.117600918 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.117635012 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.117666006 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.117712975 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.119602919 CET	49760	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.119611979 CET	443	49760	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.129951000 CET	49765	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.129975080 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.130027056 CET	49765	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.130686998 CET	49765	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.130697966 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.196670055 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.196696043 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.196743965 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.196758032 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.196784973 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.196820021 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.197303057 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.197320938 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.197380066 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.197386026 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.197427988 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.198034048 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.198050976 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.198085070 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.198090076 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.198111057 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.198127985 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.239959955 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.239984989 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.240031004 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.240057945 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.240075111 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.240089893 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.319190979 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.319262981 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.319287062 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.319304943 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.319355965 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.343806982 CET	49758	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.343859911 CET	443	49758	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.382987976 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.410000086 CET	49765	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.410018921 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.410567045 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.413321018 CET	49765	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.413472891 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.414372921 CET	49765	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.444309950 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.444359064 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.444430113 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.445178032 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.445194960 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.445904970 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.445936918 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.446126938 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.447088957 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.447129965 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.447320938 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.450572014 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.450593948 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.451481104 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.451494932 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.456237078 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.631264925 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.631352901 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.631432056 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.631481886 CET	49765	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.636904955 CET	49765	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.636926889 CET	443	49765	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.690588951 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.694205046 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.694228888 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.694617987 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.695158005 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.695216894 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.695771933 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.698048115 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.698328972 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.698676109 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.698709965 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.699047089 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.699069023 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.699718952 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.699795008 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.700102091 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.700153112 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.700613976 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.700694084 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.701365948 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.701471090 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.701828957 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.701843023 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.701976061 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.701988935 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.736237049 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.742502928 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.742505074 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.935981989 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.942219019 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.942348957 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.942358017 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.942408085 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.942425966 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.942471981 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.944268942 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.944432974 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.944439888 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.944477081 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.944493055 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.944519043 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.944531918 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.944566011 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.944602013 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.945746899 CET	49768	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.945768118 CET	443	49768	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.953679085 CET	49767	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:35.953706026 CET	443	49767	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:35.979931116 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.057975054 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.057988882 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.058010101 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.058068991 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.058092117 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.058101892 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.058114052 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.058135033 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.058762074 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.058804035 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.058825016 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.058831930 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.058859110 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.058862925 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.058898926 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.060683012 CET	49766	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.060700893 CET	443	49766	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.372414112 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.372662067 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.372684002 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.373023033 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.373323917 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.373375893 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.373482943 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.416230917 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.623056889 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.623522043 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.623585939 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.623610020 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.623626947 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.623651028 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.623672962 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.627058029 CET	49764	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.627077103 CET	443	49764	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.717027903 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.717092037 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.717154980 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.718524933 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.718538046 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.759177923 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.759217024 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.759279966 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.762742996 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.762753010 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.965842962 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.966341972 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.966377974 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.966733932 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.967257977 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.967327118 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:36.967744112 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.967763901 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:36.967770100 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.013191938 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.048520088 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.048549891 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.049949884 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.051223040 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.051347971 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.103899956 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.171737909 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.216243982 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.227032900 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.227057934 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.227108955 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.227144003 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.227164984 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.227215052 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.233464003 CET	49769	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.233493090 CET	443	49769	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.298494101 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.298582077 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.298645973 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.567253113 CET	49771	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.567301035 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.567426920 CET	49771	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.568388939 CET	49772	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.568434000 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.568531990 CET	49772	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.569720984 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.569757938 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.569977045 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.570687056 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.570708990 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.570935965 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.571638107 CET	49771	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.571666956 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.575156927 CET	49772	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.575181961 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.575558901 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.575571060 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.575817108 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.575834990 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.604888916 CET	49770	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.604921103 CET	443	49770	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.717041016 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:37.717052937 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:37.717130899 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:37.717675924 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:37.717688084 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:37.815186024 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.815232992 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.815370083 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.815593958 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.815606117 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.819432974 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.820152998 CET	49771	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.820178032 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.820602894 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.823931932 CET	49771	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.824033022 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.824698925 CET	49771	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.824729919 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.847120047 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.847425938 CET	49772	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.847450972 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.848130941 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.848773956 CET	49772	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.848881006 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.849266052 CET	49772	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.849286079 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.858305931 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.858385086 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.867429972 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.867444992 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.868804932 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.868871927 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.869721889 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.869735003 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.870856047 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.870918989 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.871260881 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.871392965 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.871665001 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.871675968 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.873594046 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.873680115 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.873730898 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.873749971 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.916476965 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.917191982 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.917213917 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:37.927021980 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:37.927747965 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:37.927772045 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:37.928839922 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:37.928927898 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:37.935564995 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:37.935688019 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:37.936427116 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:37.936435938 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:37.963057995 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:37.978334904 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.067632914 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.067905903 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.067969084 CET	49771	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.068852901 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.074987888 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.075017929 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.075448036 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.075979948 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.076065063 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.076425076 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.086966038 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.087105036 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.087342978 CET	49772	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.091519117 CET	49771	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.091545105 CET	443	49771	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.093986034 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.094650030 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.094657898 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.094682932 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.094688892 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.094691992 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.094706059 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.094722986 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.094736099 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.094736099 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.094768047 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.095735073 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.096113920 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.096123934 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.096163034 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.096180916 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.096242905 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.096277952 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.096333027 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.096370935 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.111125946 CET	49772	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.111154079 CET	443	49772	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.113645077 CET	49773	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.113672972 CET	443	49773	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.120245934 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.131603956 CET	49778	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.131645918 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.131793976 CET	49778	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.132148981 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.132188082 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.132344007 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.153397083 CET	49778	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.153433084 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.161411047 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.161437035 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.161480904 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.161500931 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.161559105 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.211708069 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.211736917 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.215756893 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.215787888 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.215830088 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.215845108 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.215886116 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.216504097 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.216519117 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.216581106 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.216588974 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.216620922 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.216675043 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.216710091 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.216717005 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.216743946 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.216748953 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.216787100 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.216790915 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.216819048 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.216835022 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.217334032 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.217348099 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.218138933 CET	49774	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.218152046 CET	443	49774	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.243607044 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.243648052 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.243802071 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.244656086 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.244672060 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.257019997 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.257031918 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.257080078 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.257081985 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.257102966 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.257117987 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.257688999 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.257709026 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.257733107 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.257745981 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.257771969 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.306328058 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.337568998 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.337599993 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.337632895 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.337688923 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.337717056 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.337735891 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.337739944 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.337755919 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.337785006 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.352318048 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.352368116 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.352452040 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.352478027 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.352610111 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.352621078 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.352644920 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.352665901 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.352674007 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.352715015 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.352749109 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.366197109 CET	49776	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:38.366219044 CET	443	49776	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:38.370912075 CET	49777	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.370935917 CET	443	49777	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.398232937 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.438488007 CET	49778	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.438515902 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.439105988 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.448628902 CET	49778	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.448798895 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.448939085 CET	49778	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.457134008 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.461678982 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.492238045 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.492348909 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.505423069 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.505448103 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.505846024 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.505872965 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.505970955 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.506114006 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.506125927 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.506972075 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.507024050 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.507164001 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.507208109 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.511138916 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.511231899 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.511837959 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.511914968 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.516199112 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.516268969 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.556288004 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.556291103 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.556315899 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.556343079 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.556368113 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.603152990 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.603164911 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.642719984 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.642857075 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.642951965 CET	49778	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.782982111 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.783925056 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.784589052 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.800314903 CET	49778	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.800343037 CET	443	49778	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.828227997 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.828233004 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.828234911 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.909504890 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.909591913 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.909599066 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.909642935 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.909662962 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.909676075 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.909677029 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.909708977 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.910764933 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.914314985 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.914422989 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:38.914520979 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:38.962511063 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.033516884 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.033529043 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.033559084 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.033571005 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.033586025 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.033607006 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.033617020 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.033626080 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.033646107 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.033668041 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.155590057 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.155605078 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.155669928 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.155709982 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.155747890 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.155776978 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.155796051 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.156162977 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.156186104 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.156214952 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.156230927 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.156243086 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.156255007 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.156280041 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.156373024 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.156415939 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:39.156420946 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.156467915 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:39.156507015 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.588673115 CET	49781	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.588699102 CET	443	49781	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.589809895 CET	49779	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.589839935 CET	443	49779	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.616084099 CET	49784	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:40.616127014 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:40.616182089 CET	49784	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:40.616342068 CET	49780	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.616357088 CET	443	49780	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.618196011 CET	49785	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.618241072 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.618293047 CET	49785	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.619199038 CET	49784	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:40.619210958 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:40.619704008 CET	49785	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.619715929 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.821765900 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:40.822033882 CET	49784	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:40.822058916 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:40.822401047 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:40.822901964 CET	49784	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:40.822962046 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:40.823326111 CET	49784	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:40.864233971 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:40.866486073 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.866729975 CET	49785	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.866746902 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.867067099 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.867357016 CET	49785	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.867424011 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:40.867597103 CET	49785	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:40.867614985 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.061312914 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:41.061398983 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:41.061443090 CET	49784	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:41.062341928 CET	49784	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:20:41.062369108 CET	443	49784	99.83.176.153	192.168.2.4
Mar 28, 2024 20:20:41.115407944 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.115544081 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.115591049 CET	49785	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.117919922 CET	49785	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.117938995 CET	443	49785	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.179874897 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.179923058 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.179981947 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.181294918 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.181313038 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.194466114 CET	49787	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.194520950 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.194581032 CET	49787	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.195241928 CET	49787	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.195261002 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.427673101 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.428695917 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.428724051 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.429131031 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.431117058 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.431222916 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.431541920 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.431574106 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.434215069 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.434236050 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.439347029 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.442526102 CET	49787	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.442549944 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.443001032 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.447005033 CET	49787	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.447128057 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.447506905 CET	49787	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.492234945 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.679028988 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.679161072 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.679255009 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.684930086 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.685050964 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.685381889 CET	49787	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.725265980 CET	49786	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.725285053 CET	443	49786	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.736058950 CET	49787	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.736088037 CET	443	49787	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.743320942 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.743371964 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:41.744303942 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.779197931 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:41.779233932 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:42.024907112 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:42.025621891 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:42.025650978 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:42.025995016 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:42.026645899 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:42.026645899 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:42.026667118 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:42.026710987 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:42.150003910 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:42.279360056 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:42.279501915 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:42.280320883 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:42.280594110 CET	49788	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:42.280615091 CET	443	49788	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.171032906 CET	49789	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.171075106 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.171142101 CET	49789	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.172235012 CET	49789	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.172246933 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.307230949 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.307277918 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.307342052 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.307549000 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.307560921 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.417623997 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.418565989 CET	49789	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.418584108 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.418958902 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.420124054 CET	49789	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.420188904 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.420767069 CET	49789	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.420790911 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.555412054 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.563287973 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.563316107 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.563946962 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.564994097 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.565102100 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.565876961 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.565911055 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.566005945 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.566040993 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.663000107 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.663129091 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.663279057 CET	49789	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.663719893 CET	49789	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.663744926 CET	443	49789	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.769848108 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:43.769917965 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:43.769998074 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:43.816541910 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.816692114 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:43.816744089 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.817436934 CET	49790	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:43.817459106 CET	443	49790	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.096333981 CET	49753	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:20:44.096369028 CET	443	49753	142.251.16.104	192.168.2.4
Mar 28, 2024 20:20:44.096926928 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.096972942 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.097059965 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.099198103 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.099211931 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.115808964 CET	49793	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.115853071 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.115909100 CET	49793	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.116694927 CET	49793	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.116709948 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.344019890 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.344491959 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.344516039 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.344857931 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.345593929 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.345645905 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.345921040 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.345936060 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.360884905 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.361274958 CET	49793	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.361299038 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.361633062 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.362354040 CET	49793	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.362415075 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.362865925 CET	49793	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.362880945 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.556235075 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.556340933 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.594274998 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.594337940 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.594418049 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.594471931 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.611665964 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.611778021 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.612040043 CET	49793	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.623148918 CET	49792	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.623169899 CET	443	49792	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.634305000 CET	49793	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.634326935 CET	443	49793	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.683260918 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.683301926 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.683365107 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.684062958 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.684077024 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.695796013 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.695832968 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.696063042 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.696449041 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.696459055 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.858068943 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.858113050 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.858181000 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.858479023 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.858493090 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.861821890 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.861850977 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.861932039 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.862440109 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.862462997 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.863251925 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.863281012 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.863396883 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.864059925 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.864084959 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.864207029 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.864358902 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.864377975 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.864569902 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.864583015 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.928527117 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.940845966 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.956322908 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.956360102 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.956640005 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.956655025 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.956878901 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.957123995 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:44.989820957 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:44.989959002 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.001250029 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.033409119 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.033600092 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.036758900 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.036829948 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.036837101 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.036863089 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.110524893 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.112025976 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.113974094 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.114269972 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.122184992 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.122219086 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.122361898 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.122386932 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.122611046 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.122633934 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.122973919 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.122991085 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.123316050 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.123408079 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.123661995 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.123737097 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.124325037 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.124448061 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.124939919 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.125011921 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.125149965 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.125206947 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.125514984 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.125593901 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.125828028 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.125931025 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.126169920 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.126192093 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.126271009 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.126291990 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.127240896 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.127338886 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.128973961 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.128983021 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.129070044 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.129082918 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.166963100 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.181462049 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.181772947 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.181840897 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.182260990 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.185838938 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.185911894 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.185919046 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.185997009 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.185997009 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.186038017 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.188328028 CET	49794	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.188349009 CET	443	49794	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.193806887 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.193850040 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.194119930 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.196870089 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.196882963 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.201402903 CET	49795	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.201431990 CET	443	49795	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.208476067 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.208508015 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.208575010 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.208998919 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.209011078 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.228929043 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.228976965 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.354001045 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.354285955 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.354295969 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.354355097 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.354387045 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.354401112 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.354406118 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.354430914 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.355289936 CET	49797	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.355314016 CET	443	49797	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.356084108 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.356241941 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.356486082 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.356540918 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.356564045 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.356583118 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.356626987 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.356650114 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.356872082 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.357178926 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.357223034 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.357285023 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.357520103 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.357528925 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.358144045 CET	49799	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.358155012 CET	443	49799	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.358355045 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.358434916 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.358498096 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.358513117 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.358604908 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.358644009 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.358757973 CET	49796	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.358774900 CET	443	49796	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.360065937 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.360089064 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.360368013 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.360532045 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.360548019 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.361006021 CET	49798	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.361016035 CET	443	49798	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.446455956 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.446715117 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.446738958 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.447102070 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.447470903 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.447552919 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.447720051 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.454113007 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.454298973 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.454313993 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.454631090 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.454936981 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.454982042 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.455097914 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.492238998 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.496234894 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.502609968 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.604883909 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.605145931 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.605179071 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.605540037 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.605722904 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.605763912 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.606242895 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.606326103 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.606667042 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.606734037 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.606802940 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.606806993 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.606812000 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.606879950 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.607160091 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.607250929 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.607251883 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.652111053 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.652136087 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.668231964 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.692930937 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.695622921 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.705355883 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.743885040 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.746939898 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.815301895 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815315008 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815366030 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815381050 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815397978 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.815402985 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815416098 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815424919 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815459013 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815475941 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.815512896 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.815515041 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.815594912 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.817790985 CET	49801	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.817807913 CET	443	49801	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.827879906 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.827896118 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.827934980 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.827969074 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.827975988 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.827986002 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.828000069 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.828010082 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.828042984 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.828057051 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.828087091 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.828105927 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.828125000 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.828161955 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.829973936 CET	49802	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.829991102 CET	443	49802	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.850456953 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.850523949 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.850600958 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.850603104 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.850642920 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.856031895 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.856149912 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.856246948 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.860244989 CET	49804	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.860264063 CET	443	49804	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:45.860872030 CET	49803	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:45.860898018 CET	443	49803	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.029390097 CET	49807	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.029434919 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.029505014 CET	49807	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.031292915 CET	49808	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.031348944 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.031465054 CET	49808	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.032749891 CET	49807	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.032763958 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.033133030 CET	49808	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.033157110 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.302665949 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.302802086 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.303019047 CET	49808	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.303044081 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.303369045 CET	49807	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.303400993 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.303411961 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.303719044 CET	49808	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.303760052 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.303785086 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.304172993 CET	49807	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.304265022 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.304459095 CET	49808	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.304488897 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.304512024 CET	49807	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.304527998 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.534840107 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.534934044 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.535017014 CET	49807	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.548614979 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.548712015 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.548801899 CET	49808	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.562894106 CET	49808	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.562931061 CET	443	49808	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.949695110 CET	49807	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.949722052 CET	443	49807	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.951662064 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.951725960 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.951872110 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.952450991 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.952475071 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.979690075 CET	49812	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.979733944 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:46.979804993 CET	49812	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.982779026 CET	49812	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:46.982798100 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.197989941 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.198304892 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.198319912 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.198667049 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.199363947 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.199428082 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.199541092 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.199563026 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.227859974 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.241022110 CET	49812	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.241046906 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.241579056 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.242976904 CET	49812	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.243067026 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.245517969 CET	49812	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.289335966 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.289366007 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.289591074 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.292229891 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.294012070 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.294040918 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.443703890 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.443772078 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.443842888 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.443881989 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.443881989 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.446167946 CET	49810	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.446192026 CET	443	49810	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.485327005 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.485420942 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.485466003 CET	49812	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.487488985 CET	49812	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.487510920 CET	443	49812	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.521044970 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.521089077 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.521162033 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.521573067 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.521595001 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.539361000 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.539583921 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.539607048 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.539944887 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.540416002 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.540491104 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.540589094 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.540618896 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.540654898 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.584239960 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.767493963 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.767771006 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.767796040 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.768424988 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.768976927 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.769053936 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.769279003 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.790049076 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.790198088 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.790252924 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.792573929 CET	49813	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.792589903 CET	443	49813	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.798018932 CET	49815	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.798051119 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.798119068 CET	49815	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.798374891 CET	49815	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:47.798388004 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:47.812263966 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.010894060 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.010967970 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.011046886 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.011048079 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:48.011214018 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:48.020772934 CET	49814	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:48.020791054 CET	443	49814	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.043919086 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.044154882 CET	49815	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:48.044179916 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.044560909 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.044940948 CET	49815	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:48.045022011 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.045181990 CET	49815	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:48.045205116 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.293214083 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.293355942 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:48.293401957 CET	49815	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:48.294641972 CET	49815	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:48.294660091 CET	443	49815	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.309650898 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.309699059 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.309782982 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.310148954 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.310165882 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.555943966 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.556329966 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.556359053 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.557013988 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.558703899 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.559046984 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.559046984 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.559154034 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.559228897 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.603259087 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.651287079 CET	80	49723	69.164.0.0	192.168.2.4
Mar 28, 2024 20:20:49.651454926 CET	49723	80	192.168.2.4	69.164.0.0
Mar 28, 2024 20:20:49.651456118 CET	49723	80	192.168.2.4	69.164.0.0
Mar 28, 2024 20:20:49.746249914 CET	80	49723	69.164.0.0	192.168.2.4
Mar 28, 2024 20:20:49.810215950 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.810344934 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.811886072 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.811886072 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.815346003 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.815387964 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:49.815665007 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.815665007 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:49.815696001 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.062045097 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.062293053 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:50.062310934 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.063075066 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.063519001 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:50.063519001 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:50.063546896 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.063628912 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.103143930 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:50.118681908 CET	49816	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:50.118710995 CET	443	49816	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.305288076 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.305658102 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:50.306665897 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:50.307368040 CET	49817	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:50.307385921 CET	443	49817	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:51.810858011 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:51.810910940 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:51.811017036 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:51.811368942 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:51.811388016 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.056845903 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.057089090 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.057113886 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.057421923 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.058029890 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.058029890 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.058029890 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.058057070 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.058094978 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.103001118 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.310079098 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.310210943 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.310489893 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.314203024 CET	49818	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.314229012 CET	443	49818	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.314917088 CET	49819	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.314954996 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.315129042 CET	49819	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.315321922 CET	49819	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.315335989 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.559926033 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.560269117 CET	49819	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.560297966 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.560678959 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.561296940 CET	49819	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.561388016 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.561536074 CET	49819	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.561556101 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.811674118 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.811793089 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:52.813751936 CET	49819	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.813991070 CET	49819	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:52.814007998 CET	443	49819	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.281197071 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.281200886 CET	49820	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.281236887 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.281238079 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.281320095 CET	49820	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.281322956 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.282576084 CET	49820	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.282582045 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.282591105 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.282594919 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.549302101 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.549302101 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.549598932 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.549631119 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.549757004 CET	49820	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.549793959 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.550007105 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.550118923 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.550404072 CET	49820	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.550497055 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.550734043 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.550806046 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.551000118 CET	49820	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.551032066 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.595303059 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.791006088 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.791134119 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:55.791192055 CET	49820	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.797554016 CET	49820	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:55.797578096 CET	443	49820	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.323837042 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.323918104 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.366806984 CET	49822	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.366858959 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.366952896 CET	49822	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.367230892 CET	49822	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.367244005 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.470050097 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.470140934 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.470227003 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.470915079 CET	49821	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.470932961 CET	443	49821	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.475179911 CET	49823	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.475222111 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.475287914 CET	49823	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.475533009 CET	49823	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.475547075 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.612039089 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.612301111 CET	49822	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.612329006 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.612690926 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.612989902 CET	49822	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.613063097 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.613221884 CET	49822	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.613243103 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.721355915 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.721657991 CET	49823	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.721684933 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.722039938 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.722759962 CET	49823	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.722826004 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.722995043 CET	49823	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.764242887 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.856822014 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.856923103 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.856978893 CET	49822	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.857527018 CET	49822	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.857549906 CET	443	49822	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.980710983 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.980808020 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:56.980885029 CET	49823	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.981617928 CET	49823	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:56.981642008 CET	443	49823	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:57.899475098 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:57.899521112 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:57.899640083 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:57.899882078 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:57.899894953 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.148518085 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.148782969 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.148799896 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.149224997 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.149955034 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.149955034 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.149955034 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.149996042 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.150079966 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.197309017 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.401129007 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.401257038 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.401323080 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.402724028 CET	49824	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.402743101 CET	443	49824	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.406689882 CET	49825	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.406747103 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.406827927 CET	49825	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.407053947 CET	49825	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.407069921 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.652019024 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.652306080 CET	49825	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.652342081 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.652744055 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.653378963 CET	49825	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.653476954 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.653621912 CET	49825	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.653645992 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.902123928 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.902261972 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:58.902329922 CET	49825	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.903403997 CET	49825	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:58.903429985 CET	443	49825	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:59.925353050 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:59.925400972 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:20:59.925548077 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:59.926924944 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:20:59.926945925 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.173252106 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.173517942 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.173533916 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.173871994 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.174303055 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.174370050 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.174556971 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.174557924 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.174585104 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.429708004 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.429835081 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.429898977 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.430510044 CET	49826	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.430529118 CET	443	49826	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.433825016 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.433861971 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.434053898 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.434361935 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.434391975 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.679352999 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.679646969 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.679675102 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.680010080 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.680319071 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.680382967 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.680584908 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.680608034 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.723138094 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.924523115 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.924644947 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:00.924696922 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.925534964 CET	49827	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:00.925560951 CET	443	49827	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:03.961843014 CET	80	49724	69.164.0.0	192.168.2.4
Mar 28, 2024 20:21:03.961941004 CET	49724	80	192.168.2.4	69.164.0.0
Mar 28, 2024 20:21:03.961968899 CET	49724	80	192.168.2.4	69.164.0.0
Mar 28, 2024 20:21:04.056189060 CET	80	49724	69.164.0.0	192.168.2.4
Mar 28, 2024 20:21:13.281920910 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.281954050 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.282075882 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.282104015 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.282108068 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.282147884 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.282361984 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.282371998 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.282598972 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.282608986 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.545994997 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.546008110 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.546561956 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.546577930 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.546674967 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.546698093 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.546874046 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.546989918 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.547214985 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.547274113 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.547503948 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.547554016 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.547661066 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.547679901 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.589896917 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.782286882 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.782413006 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.782463074 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.782844067 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.782844067 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.782869101 CET	443	49829	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.784318924 CET	49829	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.895884037 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.895957947 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.921185017 CET	49830	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.921216011 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:13.922214985 CET	49830	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.922671080 CET	49830	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:13.922681093 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.033411026 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.033495903 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.033541918 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.034282923 CET	49828	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.034301996 CET	443	49828	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.038980961 CET	49831	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.039007902 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.039225101 CET	49831	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.039783955 CET	49831	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.039798021 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.167447090 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.167757034 CET	49830	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.167777061 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.168097973 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.168435097 CET	49830	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.168492079 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.168601990 CET	49830	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.168610096 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.287664890 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.287969112 CET	49831	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.287987947 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.288336992 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.288666010 CET	49831	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.288727045 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.288819075 CET	49831	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.332226038 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.416446924 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.416529894 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.416579008 CET	49830	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.417496920 CET	49830	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.417512894 CET	443	49830	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.554446936 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.554542065 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:14.554631948 CET	49831	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.555653095 CET	49831	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:14.555666924 CET	443	49831	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.490149975 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.490191936 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.490263939 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.490629911 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.490638018 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.738734007 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.739955902 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.739979029 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.740375042 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.740700960 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.740767956 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.740879059 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.740895987 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.741013050 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.788233995 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.797915936 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.985569954 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.985923052 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.986016989 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.987399101 CET	49832	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.987422943 CET	443	49832	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.990953922 CET	49833	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.990994930 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:15.991132975 CET	49833	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.991461039 CET	49833	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:15.991480112 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:16.241097927 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:16.241399050 CET	49833	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:16.241424084 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:16.241807938 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:16.242274046 CET	49833	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:16.242362976 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:16.242522955 CET	49833	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:16.242541075 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:16.485553026 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:16.485809088 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:16.485867977 CET	49833	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:16.488204956 CET	49833	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:16.488239050 CET	443	49833	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:17.515172005 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:17.515211105 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:17.515328884 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:17.515511990 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:17.515527010 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:17.760474920 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:17.760749102 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:17.760763884 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:17.761092901 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:17.761425972 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:17.761486053 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:17.761682987 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:17.761682987 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:17.761708975 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.010751009 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.010874033 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.011204958 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.012187004 CET	49834	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.012206078 CET	443	49834	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.014775038 CET	49835	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.014815092 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.015024900 CET	49835	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.015110970 CET	49835	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.015120983 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.260624886 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.262712002 CET	49835	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.262732983 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.263050079 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.264638901 CET	49835	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.264703989 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.268213987 CET	49835	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.268246889 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.507266045 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.507411957 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:18.507514000 CET	49835	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.508593082 CET	49835	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:18.508616924 CET	443	49835	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.272846937 CET	49837	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.272876978 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.272943974 CET	49837	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.273260117 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.273289919 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.273351908 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.275640965 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.275655031 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.275846004 CET	49837	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.275860071 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.542102098 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.542273998 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.555258036 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.555284023 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.555793047 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.559870958 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.559969902 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.560201883 CET	49837	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.560235023 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.560347080 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.560347080 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.560379028 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.560683966 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.566746950 CET	49837	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.566854000 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.586401939 CET	49837	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.628240108 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.779198885 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.779277086 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.781294107 CET	49837	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.797332048 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.797353029 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.797437906 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.797473907 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.801430941 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.806096077 CET	49838	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.806122065 CET	443	49838	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:23.972358942 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:23.972408056 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:23.972522974 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:23.973190069 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:23.973202944 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:23.973716974 CET	49837	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:23.973752022 CET	443	49837	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.006191015 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.006231070 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.006335974 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.006705999 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.006721973 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.173079014 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.189281940 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.189313889 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.189670086 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.191190958 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.191190958 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.191260099 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.243199110 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.251888037 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.285352945 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.285372972 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.285856962 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.286410093 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.286485910 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.287060976 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.332237959 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.336854935 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.476133108 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.476157904 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.476234913 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.476263046 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.476314068 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.571926117 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.571938038 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.571995974 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.571997881 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.572025061 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.572036982 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.572046995 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.572046995 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.572052002 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.572062969 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.572092056 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.573158026 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.573177099 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.573215008 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.573220015 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.573249102 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.573265076 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.667330027 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.667407036 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.667428970 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.667444944 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.667495012 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.667505026 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.667510986 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.667529106 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.667550087 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.667577982 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.668020964 CET	49839	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:24.668036938 CET	443	49839	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:24.688802958 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.688832998 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.688841105 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.688857079 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.688890934 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.688911915 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.688924074 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.688956022 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.688961029 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.688978910 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:24.689019918 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.689865112 CET	49840	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:24.689879894 CET	443	49840	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:25.418185949 CET	49841	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:25.418227911 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.420567989 CET	49841	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:25.420567989 CET	49841	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:25.420595884 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.617297888 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.617757082 CET	49841	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:25.617786884 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.618124008 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.618747950 CET	49841	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:25.618812084 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.620251894 CET	49841	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:25.668231010 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.833383083 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.833460093 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:25.836293936 CET	49841	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:25.844913960 CET	49841	443	192.168.2.4	99.83.176.153
Mar 28, 2024 20:21:25.844932079 CET	443	49841	99.83.176.153	192.168.2.4
Mar 28, 2024 20:21:26.526269913 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:26.526309013 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:26.526375055 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:26.527252913 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:26.527264118 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:26.772537947 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:26.780394077 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:26.780404091 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:26.780836105 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:26.784131050 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:26.784210920 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:26.784646988 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:26.784672976 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:26.784707069 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:26.832237959 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.019835949 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.019975901 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.020021915 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.022074938 CET	49842	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.022098064 CET	443	49842	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.201351881 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.201404095 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.201469898 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.201994896 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.202009916 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.447594881 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.452411890 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.452449083 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.452779055 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.453272104 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.453330040 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.453624010 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.453649998 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.493422031 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.692691088 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.692821980 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:27.693082094 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.693870068 CET	49843	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:27.693887949 CET	443	49843	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:28.759628057 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:28.759668112 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:28.759737015 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:28.760229111 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:28.760241032 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.004724979 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.021775961 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.021801949 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.022483110 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.023052931 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.023123980 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.023700953 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.023749113 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.023825884 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.023849964 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.274641037 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.274772882 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.274832964 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.275851965 CET	49845	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.275866985 CET	443	49845	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.301253080 CET	49846	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.301284075 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.301341057 CET	49846	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.301532984 CET	49846	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.301546097 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.547426939 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.547683001 CET	49846	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.547717094 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.548444033 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.548845053 CET	49846	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.548935890 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.549096107 CET	49846	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.549149036 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.796801090 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.796926022 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:29.797127962 CET	49846	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.798042059 CET	49846	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:29.798059940 CET	443	49846	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.090274096 CET	49847	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:21:33.090326071 CET	443	49847	142.251.16.104	192.168.2.4
Mar 28, 2024 20:21:33.090410948 CET	49847	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:21:33.093175888 CET	49847	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:21:33.093190908 CET	443	49847	142.251.16.104	192.168.2.4
Mar 28, 2024 20:21:33.284953117 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.284969091 CET	49849	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.285003901 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.285003901 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.285087109 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.285090923 CET	49849	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.285507917 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.285509109 CET	49849	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.285520077 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.285520077 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.311312914 CET	443	49847	142.251.16.104	192.168.2.4
Mar 28, 2024 20:21:33.311995983 CET	49847	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:21:33.312016964 CET	443	49847	142.251.16.104	192.168.2.4
Mar 28, 2024 20:21:33.312433958 CET	443	49847	142.251.16.104	192.168.2.4
Mar 28, 2024 20:21:33.312992096 CET	49847	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:21:33.313108921 CET	443	49847	142.251.16.104	192.168.2.4
Mar 28, 2024 20:21:33.355638027 CET	49847	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:21:33.537014008 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.537168980 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.539421082 CET	49849	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.539443016 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.539787054 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.540347099 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.540364981 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.540805101 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.541860104 CET	49849	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.541914940 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.546466112 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.546574116 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.546871901 CET	49849	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.546890020 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.588702917 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.777810097 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.777935982 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:33.778050900 CET	49849	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.781153917 CET	49849	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:33.781172991 CET	443	49849	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.530718088 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.530860901 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.540616035 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.540659904 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.540760040 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.542160988 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.542176008 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.602916956 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.602960110 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.606275082 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.618171930 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.618184090 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.670562983 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.670650959 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.672802925 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.676922083 CET	49848	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.676938057 CET	443	49848	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.787686110 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.788431883 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.788444042 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.788816929 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.789319992 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.789397001 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.789525032 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.789536953 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.863182068 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.870179892 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.870206118 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.870803118 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.872360945 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.872360945 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.872360945 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.872396946 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.872471094 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.906512976 CET	49852	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.906560898 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.910233021 CET	49852	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.910666943 CET	49852	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:34.910680056 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:34.917462111 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.037432909 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.037522078 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.038254023 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.038666964 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.038666964 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.038691044 CET	443	49850	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.042283058 CET	49850	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.112116098 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.112257004 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.112462044 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.114329100 CET	49851	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.114353895 CET	443	49851	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.122172117 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.122216940 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.126430035 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.130172968 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.130188942 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.156114101 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.156507969 CET	49852	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.156533957 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.156898975 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.158693075 CET	49852	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.158761024 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.158962965 CET	49852	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.204227924 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.375920057 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.380253077 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.380279064 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.380657911 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.381598949 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.381598949 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.381627083 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.381673098 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.425548077 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.425641060 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.425683022 CET	49852	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.432168007 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.444653988 CET	49852	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.444668055 CET	443	49852	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.626625061 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.626751900 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:35.626795053 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.629049063 CET	49853	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:35.629065990 CET	443	49853	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:38.629534006 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:38.629589081 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:38.629656076 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:38.630163908 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:38.630177975 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:38.875009060 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:38.892319918 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:38.892359972 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:38.892777920 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:38.893327951 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:38.893409967 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:38.893827915 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:38.893871069 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:38.893891096 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:38.893927097 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.142873049 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.142995119 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.143054962 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.145039082 CET	49854	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.145072937 CET	443	49854	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.149424076 CET	49855	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.149457932 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.149611950 CET	49855	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.149830103 CET	49855	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.149841070 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.394645929 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.395291090 CET	49855	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.395322084 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.395685911 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.396466970 CET	49855	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.396539927 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.397273064 CET	49855	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.397305012 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.639348984 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.639482021 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:39.639664888 CET	49855	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.641144037 CET	49855	443	192.168.2.4	12.51.26.7
Mar 28, 2024 20:21:39.641171932 CET	443	49855	12.51.26.7	192.168.2.4
Mar 28, 2024 20:21:43.319331884 CET	443	49847	142.251.16.104	192.168.2.4
Mar 28, 2024 20:21:43.319405079 CET	443	49847	142.251.16.104	192.168.2.4
Mar 28, 2024 20:21:43.319569111 CET	49847	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:21:45.657947063 CET	49847	443	192.168.2.4	142.251.16.104
Mar 28, 2024 20:21:45.657984972 CET	443	49847	142.251.16.104	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 20:20:29.132891893 CET	53	50927	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:29.148240089 CET	53	49824	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:29.747183084 CET	53	53575	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:30.173145056 CET	64522	53	192.168.2.4	1.1.1.1
Mar 28, 2024 20:20:30.173809052 CET	53103	53	192.168.2.4	1.1.1.1
Mar 28, 2024 20:20:30.272644043 CET	53	64522	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:30.274981022 CET	53	53103	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:32.890106916 CET	52886	53	192.168.2.4	1.1.1.1
Mar 28, 2024 20:20:32.891064882 CET	63275	53	192.168.2.4	1.1.1.1
Mar 28, 2024 20:20:32.989494085 CET	53	63275	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:32.992980957 CET	53	52886	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:33.038537025 CET	62383	53	192.168.2.4	1.1.1.1
Mar 28, 2024 20:20:33.039016962 CET	54872	53	192.168.2.4	1.1.1.1
Mar 28, 2024 20:20:33.133893967 CET	53	54872	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:33.148333073 CET	53	62383	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:37.569037914 CET	61669	53	192.168.2.4	1.1.1.1
Mar 28, 2024 20:20:37.569350958 CET	55661	53	192.168.2.4	1.1.1.1
Mar 28, 2024 20:20:37.689331055 CET	53	61669	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:37.690536976 CET	53	55661	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:37.699109077 CET	53	53224	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:47.009627104 CET	53	58675	1.1.1.1	192.168.2.4
Mar 28, 2024 20:20:50.797602892 CET	138	138	192.168.2.4	192.168.2.255
Mar 28, 2024 20:21:06.115763903 CET	53	50733	1.1.1.1	192.168.2.4
Mar 28, 2024 20:21:28.643538952 CET	53	59367	1.1.1.1	192.168.2.4
Mar 28, 2024 20:21:28.649765968 CET	53	59208	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 20:20:30.173145056 CET	192.168.2.4	1.1.1.1	0x51a6	Standard query (0)	www.creditbureaureports.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:30.173809052 CET	192.168.2.4	1.1.1.1	0x9ac6	Standard query (0)	www.creditbureaureports.com	65	IN (0x0001)	false
Mar 28, 2024 20:20:32.890106916 CET	192.168.2.4	1.1.1.1	0x899e	Standard query (0)	www.creditbureaureports.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:32.891064882 CET	192.168.2.4	1.1.1.1	0xf1b1	Standard query (0)	www.creditbureaureports.com	65	IN (0x0001)	false
Mar 28, 2024 20:20:33.038537025 CET	192.168.2.4	1.1.1.1	0xd511	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:33.039016962 CET	192.168.2.4	1.1.1.1	0xfbbb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 20:20:37.569037914 CET	192.168.2.4	1.1.1.1	0x55a0	Standard query (0)	api-cbci.nd.nudatasecurity.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:37.569350958 CET	192.168.2.4	1.1.1.1	0xc932	Standard query (0)	api-cbci.nd.nudatasecurity.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 20:20:30.272644043 CET	1.1.1.1	192.168.2.4	0x51a6	No error (0)	www.creditbureaureports.com		12.51.26.7	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:32.992980957 CET	1.1.1.1	192.168.2.4	0x899e	No error (0)	www.creditbureaureports.com		12.51.26.7	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:33.133893967 CET	1.1.1.1	192.168.2.4	0xfbbb	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 20:20:33.148333073 CET	1.1.1.1	192.168.2.4	0xd511	No error (0)	www.google.com		142.251.16.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:33.148333073 CET	1.1.1.1	192.168.2.4	0xd511	No error (0)	www.google.com		142.251.16.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:33.148333073 CET	1.1.1.1	192.168.2.4	0xd511	No error (0)	www.google.com		142.251.16.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:33.148333073 CET	1.1.1.1	192.168.2.4	0xd511	No error (0)	www.google.com		142.251.16.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:33.148333073 CET	1.1.1.1	192.168.2.4	0xd511	No error (0)	www.google.com		142.251.16.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:33.148333073 CET	1.1.1.1	192.168.2.4	0xd511	No error (0)	www.google.com		142.251.16.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:37.689331055 CET	1.1.1.1	192.168.2.4	0x55a0	No error (0)	api-cbci.nd.nudatasecurity.com	ga-us-east-1.nd.nudatasecurity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 20:20:37.689331055 CET	1.1.1.1	192.168.2.4	0x55a0	No error (0)	ga-us-east-1.nd.nudatasecurity.com		99.83.176.153	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:37.689331055 CET	1.1.1.1	192.168.2.4	0x55a0	No error (0)	ga-us-east-1.nd.nudatasecurity.com		75.2.31.133	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:37.690536976 CET	1.1.1.1	192.168.2.4	0xc932	No error (0)	api-cbci.nd.nudatasecurity.com	ga-us-east-1.nd.nudatasecurity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 20:20:45.461625099 CET	1.1.1.1	192.168.2.4	0xe655	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 20:20:45.461625099 CET	1.1.1.1	192.168.2.4	0xe655	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:20:58.622044086 CET	1.1.1.1	192.168.2.4	0x3374	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 20:20:58.622044086 CET	1.1.1.1	192.168.2.4	0x3374	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 20:21:21.230453968 CET	1.1.1.1	192.168.2.4	0xf24f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 20:21:21.230453968 CET	1.1.1.1	192.168.2.4	0xf24f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.creditbureaureports.com

https:

api-cbci.nd.nudatasecurity.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:30 UTC	726	OUT	GET /iconnect/urlHandler?command=changePassword&logid=cnadmtk HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 19:20:30 UTC	1575	IN	HTTP/1.1 302 Found X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-oneagent-js-injection: true set-cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; Path=/; Secure; HttpOnly set-cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; Path=/; Domain=.creditbureaureports.com; secure vary: Origin x-permitted-cross-domain-policies: none x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-download-options: noopen location: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba content-length: 0 date: Thu, 28 Mar 2024 19:20:30 GMT connection: close Server-Timing: dtSInfo;desc="0", dtRpid;desc="873077652" Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:30 UTC	1103	OUT	GET /iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:31 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:31 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:25 GMT Accept-Ranges: bytes X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Content-Length: 2142 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-870453905" Connection: close Content-Type: text/html; charset=UTF-8 Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:31 UTC	2142	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 6c 61 63 65 68 6f 6c 64 65 72 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 72 75 78 69 74 61 67 65 6e 74 6a 73 5f 49 43 41 32 4e 56 66 68 71 72 75 5f 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 2e 6a 73 22 20 64 61 74 61 2d 64 74 63 6f 6e 66 69 67 3d 22 72 69 64 3d 52 49 44 5f 32 30 37 36 38 34 39 32 30 35 7c 72 70 69 64 3d 2d 38 37 30 34 35 33 39 30 35 7c 64 6f 6d 61 69 6e 3d 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"><title>Placeholder</title> <script type="text/javascript" src="/ruxitagentjs_ICA2NVfhqru_10283240308130508.js" data-dtconfig="rid=RID_2076849205\|rpid=-870453905\|domain=creditbureaureports.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:31 UTC	1047	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:31 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:31 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 36879 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-729827800" Connection: close Content-Type: text/css Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:31 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 31 31 2d 30 39 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 63 6f 72 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 62 6c 65 2e 63 73 73 2c 20 73 6f 72 74 61 62 6c 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 Data Ascii: /! jQuery UI - v1.13.2 - 2022-11-09 http://jqueryui.com* Includes: draggable.css, core.css, resizable.css, selectable.css, sortable.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog
2024-03-28 19:20:31 UTC	16384	IN	Data Raw: 61 31 6d 4d 52 61 65 39 56 76 57 5a 66 65 42 32 58 66 50 6b 65 4c 6d 6d 31 38 6c 55 63 42 6a 2b 70 35 64 6e 4e 38 6a 58 5a 33 59 49 47 45 68 59 75 4f 55 6e 34 35 61 6f 43 44 6b 70 31 36 68 6c 35 49 6a 59 4a 76 6a 57 4b 63 6e 6f 47 51 70 71 79 50 6c 70 4f 68 72 33 61 45 6c 61 71 72 71 35 36 42 71 37 56 41 41 41 4f 77 3d 3d 22 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 32 35 29 22 3b 20 2f 2a 20 73 75 70 70 6f 72 74 3a 20 49 45 38 20 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 32 35 3b 0a 7d 0a 2e 75 69 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 20 2e 75 69 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 76 61 6c 75 65 20 7b 0a 09 62 61 Data Ascii: a1mMRae9VvWZfeB2XfPkeLmm18lUcBj+p5dnN8jXZ3YIGEhYuOUn45aoCDkp16hl5IjYJvjWKcnoGQpqyPlpOhr3aElaqrq56Bq7VAAAOw==");height: 100%;-ms-filter: "alpha(opacity=25)"; /* support: IE8 */opacity: 0.25;}.ui-progressbar-indeterminate .ui-progressbar-value {ba
2024-03-28 19:20:32 UTC	4111	IN	Data Raw: 20 2d 31 32 38 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 61 6c 65 72 74 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 34 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 69 6e 66 6f 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 36 70 78 20 2d 31 34 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 6e 6f 74 69 63 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 33 32 70 78 20 2d 31 34 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 68 65 6c 70 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 34 38 70 78 20 2d 31 34 34 70 78 3b 20 7d 0a 2e 75 69 2d 69 63 6f 6e 2d 63 68 65 63 6b 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 Data Ascii: -128px; }.ui-icon-alert { background-position: 0 -144px; }.ui-icon-info { background-position: -16px -144px; }.ui-icon-notice { background-position: -32px -144px; }.ui-icon-help { background-position: -48px -144px; }.ui-icon-check { background-posit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:31 UTC	998	OUT	GET /css/main.css HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:31 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:31 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:48:26 GMT Accept-Ranges: bytes Content-Length: 180129 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="200032075" Connection: close Content-Type: text/css Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:31 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 23 69 6e 4d 61 69 6e 2c 23 69 6e 4d 61 69 6e 20 2e 64 69 73 70 6c 61 79 44 69 76 2c 23 6f 75 74 4d 61 69 6e 2c 62 6f 64 79 7b 6d 69 6e 2d 77 69 64 74 68 3a 38 32 35 70 78 7d 2e 69 6e 66 6f 2d 74 6f 6f 6c 74 69 70 2c 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4c 75 63 69 64 61 20 53 61 6e 73 20 55 6e 69 63 6f 64 65 22 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 69 66 72 61 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c Data Ascii: @charset "UTF-8";#inMain,#inMain .displayDiv,#outMain,body{min-width:825px}.info-tooltip,html{font-family:"Lucida Sans Unicode",Arial,sans-serif}html{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;position:relative;height:100%}iframe{position:rel
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 2c 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 73 65 6c 65 63 74 2c 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 74 65 78 74 61 72 65 61 2c 2e 63 72 65 64 69 74 72 65 70 6f 72 74 2d 61 64 76 2d 75 70 64 61 74 65 73 20 2e 63 72 65 64 69 74 63 61 72 64 2d 63 6f 6e 74 65 6e 74 20 23 63 72 65 64 69 74 41 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 62 75 74 74 6f 6e 2c 2e 63 72 65 64 69 74 72 65 70 6f 72 74 2d 61 64 76 2d 75 70 64 61 74 65 73 20 2e 63 72 65 64 Data Ascii: ,.certificate-holders .certificate-holders-accordion .row-field select,.certificate-holders .certificate-holders-accordion .row-field textarea,.creditreport-adv-updates .creditcard-content #creditAccordion .row-field button,.creditreport-adv-updates .cred
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 20 2e 72 65 70 6f 72 74 2d 73 74 61 74 75 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 6f 6c 2d 31 35 2c 2e 73 65 72 76 69 63 65 57 69 64 67 65 74 44 69 61 6c 6f 67 20 2e 73 65 72 76 69 63 65 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 6f 6c 2d 31 35 2c 2e 75 70 67 72 61 64 65 2d 73 65 72 76 69 63 65 73 20 2e 64 69 73 70 6c 61 79 44 69 76 20 2e 73 65 72 76 69 63 65 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 6f 6c 2d 31 35 2c 2e 75 70 67 72 61 64 65 2d 73 65 72 76 69 63 65 73 20 2e 64 69 73 70 6c 61 79 44 69 76 20 2e 75 70 67 72 61 64 65 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 6f 6c 2d 31 35 2c 2e 77 69 64 67 65 74 2d 72 6f 77 66 69 65 6c Data Ascii: .report-status-accordion .row-field .col-15,.serviceWidgetDialog .service-accordion .row-field .col-15,.upgrade-services .displayDiv .service-accordion .row-field .col-15,.upgrade-services .displayDiv .upgrade-accordion .row-field .col-15,.widget-rowfiel
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 65 20 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 72 61 64 69 6f 20 23 61 70 70 72 61 69 73 61 6c 2c 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 20 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 72 61 64 69 6f 20 23 70 72 6f 70 65 72 74 79 2c 2e 6c 65 74 74 65 72 2d 67 65 6e 65 72 61 74 6f 72 20 2e 64 69 73 70 6c 61 79 44 69 76 20 2e 6c 65 74 74 65 72 67 65 6e 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 68 65 63 6b 62 6f 78 20 23 61 70 70 72 61 69 73 61 6c 2c 2e 6c 65 74 74 65 72 2d 67 65 6e 65 72 61 74 6f 72 20 2e 64 69 73 70 6c 61 79 44 69 76 20 2e 6c 65 74 74 65 72 67 65 6e 2d 61 63 Data Ascii: e .interfaceProfile-content .row-field .radio #appraisal,.interfaceProfile .interfaceProfile-content .row-field .radio #property,.letter-generator .displayDiv .lettergen-accordion .row-field .checkbox #appraisal,.letter-generator .displayDiv .lettergen-ac
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 63 68 65 63 6b 62 6f 78 2c 2e 68 6f 73 74 2d 62 72 6f 77 73 65 72 20 2e 68 6f 73 74 62 72 6f 77 73 65 72 2d 63 6f 6e 74 65 6e 74 20 23 68 6f 73 74 42 72 6f 77 73 65 72 41 63 63 6f 72 64 69 6f 6e 20 2e 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 63 68 65 63 6b 62 6f 78 2c 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 20 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 2d 63 6f 6e 74 65 6e 74 20 23 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 41 63 63 6f 72 64 69 6f 6e 20 2e 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 63 68 65 63 6b 62 6f 78 2c 2e 73 65 72 76 69 63 65 57 69 64 67 65 74 44 69 61 6c 6f 67 20 2e 73 65 72 76 69 63 65 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 77 69 64 Data Ascii: -accordion .widget-header-checkbox,.host-browser .hostbrowser-content #hostBrowserAccordion .widget-header-checkbox,.interfaceProfile .interfaceProfile-content #interfaceProfileAccordion .widget-header-checkbox,.serviceWidgetDialog .service-accordion .wid
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 20 23 68 6f 73 74 42 72 6f 77 73 65 72 41 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 2c 2e 68 6f 73 74 2d 62 72 6f 77 73 65 72 20 2e 68 6f 73 74 62 72 6f 77 73 65 72 2d 63 6f 6e 74 65 6e 74 20 23 68 6f 73 74 42 72 6f 77 73 65 72 41 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 65 64 30 65 61 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 6a 73 2f 6c 69 62 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2d 75 69 2d 31 2e 31 33 2e 32 2e 63 75 73 74 6f 6d 2e 63 75 70 65 72 74 69 6e 6f 2f 69 6d 61 67 65 73 Data Ascii: content #hostBrowserAccordion .ui-widget-content .ui-state-active,.host-browser .hostbrowser-content #hostBrowserAccordion .ui-widget-header .ui-state-active{border:1px solid #aed0ea;background:url(../js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 61 75 74 6f 20 32 30 70 78 7d 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 7d 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 2c 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 2c 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 Data Ascii: auto 20px}.certificate-holders .certificate-holders-accordion hr{border-top:1px solid #999}.certificate-holders .certificate-holders-accordion .ui-state-active,.certificate-holders .certificate-holders-accordion .ui-state-hover,.certificate-holders .certi
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 63 6c 69 65 6e 74 2d 69 6e 66 6f 20 75 6c 20 2e 63 6f 6c 2d 31 35 7b 77 69 64 74 68 3a 31 31 35 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 76 65 6e 64 6f 72 54 6f 67 67 6c 65 43 68 65 63 6b 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 36 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 73 75 62 6d 69 74 54 6c 42 74 6e 7b 77 69 64 74 68 3a 32 30 30 70 78 7d 23 74 72 61 64 65 4c 69 6e 65 41 55 44 69 61 6c 6f 67 7b 70 61 64 64 69 6e 67 3a 2e 35 65 6d 20 31 2e 37 65 6d 7d 23 74 72 61 64 65 4c 69 6e 65 41 55 44 69 61 6c 6f 67 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 74 72 61 64 65 4c 69 6e 65 41 55 44 69 61 6c 6f 67 20 69 6e 70 75 74 2c 23 74 72 61 64 65 4c 69 6e 65 41 55 44 69 61 6c 6f 67 20 73 65 6c Data Ascii: client-info ul .col-15{width:115px;word-wrap:break-word}.vendorToggleCheck{margin-left:406px;display:none}#submitTlBtn{width:200px}#tradeLineAUDialog{padding:.5em 1.7em}#tradeLineAUDialog label{display:block}#tradeLineAUDialog input,#tradeLineAUDialog sel
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 65 54 61 62 6c 65 20 23 64 65 6c 69 6e 71 75 65 6e 63 79 4c 69 6e 65 73 20 74 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 69 6e 71 75 69 72 79 49 6e 66 6f 20 2e 69 6e 71 75 69 72 79 54 61 62 6c 65 20 2e 74 72 61 64 65 6c 69 6e 65 54 61 62 6c 65 20 2e 61 64 76 2d 75 70 64 61 74 65 2d 64 65 74 61 69 6c 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 7d 2e 69 6e 71 75 69 72 79 49 6e 66 6f 20 2e 69 6e 71 75 69 72 79 54 61 62 6c 65 20 2e 74 72 61 64 65 6c 69 6e 65 54 61 62 6c 65 20 2e 61 64 76 2d 75 70 64 61 74 65 2d 64 65 74 61 69 6c 73 20 2e 75 70 64 61 74 65 2d 66 69 65 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 Data Ascii: eTable #delinquencyLines td{border-bottom:1px solid #000;line-height:22px}.inquiryInfo .inquiryTable .tradelineTable .adv-update-details{display:none;font-size:11px}.inquiryInfo .inquiryTable .tradelineTable .adv-update-details .update-field{border-top:1p
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 20 35 70 78 20 30 20 30 7d 2e 6e 74 6c 66 43 72 65 64 69 74 48 69 73 74 6f 72 79 20 2e 6e 74 6c 66 43 72 65 64 69 74 48 69 73 74 6f 72 79 52 6f 77 20 2e 68 65 61 64 65 72 52 6f 77 20 2e 68 65 61 64 65 72 52 6f 77 4c 65 66 74 20 2e 64 69 76 69 64 65 72 4c 65 66 74 7b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6e 74 6c 66 43 72 65 64 69 74 48 69 73 74 6f 72 79 20 2e 6e 74 6c 66 43 72 65 64 69 74 48 69 73 74 6f 72 79 52 6f 77 20 2e 68 65 61 64 65 72 52 6f 77 20 2e 68 65 61 64 65 72 52 6f 77 4c 65 66 74 20 2e 70 68 6f 6e 65 4e 75 6d 62 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 56 65 72 64 61 6e 61 2c 47 65 6e 65 76 61 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 Data Ascii: oat:left;margin:0 5px 0 0}.ntlfCreditHistory .ntlfCreditHistoryRow .headerRow .headerRowLeft .dividerLeft{margin:0 5px;float:left}.ntlfCreditHistory .ntlfCreditHistoryRow .headerRow .headerRowLeft .phoneNumber{font-family:Arial,Verdana,Geneva,helvetica,sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49738	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:31 UTC	1017	OUT	GET /ruxitagentjs_ICA2NVfhqru_10283240308130508.js HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:31 UTC	989	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:31 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Expires: Fri, 28 Mar 2025 19:20:31 GMT Cache-Control: public, max-age=31536000, immutable Last-Modified: Wed, 03 Mar 2010 07:01:40 GMT Content-Length: 199954 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/javascript; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:31 UTC	16384	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 43 61 3d 2d 31 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ca=-1!==document.cookie.indexOf("__dTCookie");documen
2024-03-28 19:20:31 UTC	16384	IN	Data Raw: 71 2e 64 54 5f 3b 69 66 28 78 26 26 22 65 61 22 69 6e 20 78 26 26 22 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 22 3d 3d 3d 78 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 78 2e 74 64 74 6f 28 29 3b 71 3d 71 21 3d 3d 71 2e 70 61 72 65 6e 74 3f 71 2e 70 61 72 65 6e 74 3a 76 6f 69 64 20 30 7d 7d 63 61 74 63 68 28 57 29 7b 7d 72 65 74 75 72 6e 20 67 7d 66 75 6e 63 74 69 6f 6e 20 4e 63 28 67 2c 71 2c 78 29 7b 76 61 72 20 57 3d 6b 61 28 22 70 63 6c 22 29 3b 57 3d 67 2e 6c 65 6e 67 74 68 2d 57 3b 30 3c 57 26 26 67 2e 73 70 6c 69 63 65 28 30 2c 57 29 3b 57 3d 46 28 51 61 28 67 64 28 29 2c 78 29 29 3b 66 6f 72 28 76 61 72 20 49 3d 5b 5d 2c 78 61 3d 57 3f 22 22 2e 63 6f 6e 63 61 74 28 57 2c 22 24 22 29 3a 22 22 2c 47 62 3d 30 3b 47 62 3c 67 2e 6c 65 6e Data Ascii: q.dT_;if(x&&"ea"in x&&"10283240308130508"===x.version)return x.tdto();q=q!==q.parent?q.parent:void 0}}catch(W){}return g}function Nc(g,q,x){var W=ka("pcl");W=g.length-W;0<W&&g.splice(0,W);W=F(Qa(gd(),x));for(var I=[],xa=W?"".concat(W,"$"):"",Gb=0;Gb<g.len
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 68 3d 4f 65 5b 50 65 5d 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 79 68 26 26 28 53 62 5b 50 65 5d 3d 79 68 29 7d 72 61 28 53 62 29 7d 76 61 72 20 51 65 3d 6e 75 6c 6c 3d 3d 3d 28 63 65 3d 28 46 64 3d 50 28 29 29 2e 67 43 50 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 65 3f 76 6f 69 64 20 30 3a 63 65 2e 63 61 6c 6c 28 46 64 29 2c 7a 68 3d 4f 28 22 63 75 63 22 29 3b 69 66 28 51 65 26 26 51 65 21 3d 3d 7a 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 70 6c 61 74 66 6f 72 6d 50 72 65 66 69 78 20 61 6e 64 20 63 75 63 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 21 22 29 3b 47 65 3d 21 30 7d 69 66 28 21 47 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 72 72 6f 72 20 64 75 72 69 6e 67 20 63 6f 6e 66 69 67 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f Data Ascii: h=Oe[Pe];"undefined"!==typeof yh&&(Sb[Pe]=yh)}ra(Sb)}var Qe=null===(ce=(Fd=P()).gCP)\|\|void 0===ce?void 0:ce.call(Fd),zh=O("cuc");if(Qe&&Qe!==zh)throw Error("platformPrefix and cuc do not match!");Ge=!0}if(!Ge)throw Error("Error during config initializatio
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 4f 4e 22 21 3d 3d 6b 26 26 22 53 55 42 4d 49 54 22 21 3d 3d 6b 26 26 22 52 45 53 45 54 22 21 3d 3d 6b 26 26 22 49 4d 41 47 45 22 21 3d 3d 6b 3f 6e 75 6c 6c 3a 62 2e 76 61 6c 75 65 2c 61 3d 50 61 28 62 2e 69 64 29 2c 66 3d 0a 21 6b 7c 7c 22 42 55 54 54 4f 4e 22 21 3d 3d 6b 26 26 22 53 55 42 4d 49 54 22 21 3d 3d 6b 26 26 22 52 45 53 45 54 22 21 3d 3d 6b 3f 64 62 28 61 2c 66 29 3a 64 62 28 66 2c 61 29 29 2c 66 7c 7c 28 66 3d 64 62 28 4a 62 28 62 29 29 29 2c 6e 3d 66 29 3a 6e 3d 22 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 3d 22 22 3b 69 66 28 43 62 28 62 29 26 26 22 48 49 44 44 45 4e 22 21 3d 3d 6b 7c 7c 62 26 26 22 42 55 54 54 4f 4e 22 3d 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 29 6b 3d 22 49 4d 41 47 45 22 3d 3d 3d 6b 3f 62 2e 67 65 74 41 74 74 72 69 62 Data Ascii: ON"!==k&&"SUBMIT"!==k&&"RESET"!==k&&"IMAGE"!==k?null:b.value,a=Pa(b.id),f=!k\|\|"BUTTON"!==k&&"SUBMIT"!==k&&"RESET"!==k?db(a,f):db(f,a)),f\|\|(f=db(Jb(b))),n=f):n="";break;case 1:f="";if(Cb(b)&&"HIDDEN"!==k\|\|b&&"BUTTON"===b.nodeName)k="IMAGE"===k?b.getAttrib
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 62 28 62 2c 66 2c 6e 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 7d 2c 7b 71 62 3a 6e 75 6c 6c 2c 61 64 3a 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 7d 29 2e 71 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 65 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 47 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3d 3d 3d 62 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 63 28 61 29 7b 72 65 74 75 72 6e 20 55 69 26 26 72 61 28 61 2c 31 33 29 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 22 21 3d 3d 61 2e 65 6e 74 72 79 54 79 70 65 7c 7c 72 61 28 61 2c 5b 22 5f 64 74 43 6c 22 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 42 65 28 61 29 7b 72 65 74 75 72 6e 20 42 6d 26 26 72 61 28 61 2c 31 34 29 7c 7c 72 61 28 61 2c 5b 22 65 6e 74 72 79 54 Data Ascii: b(b,f,n,k);return k},{qb:null,ad:Number.MAX_VALUE}).qb}function te(a,b){return Ga(a,function(f){return f.initiatorType===b})}function Rc(a){return Ui&&ra(a,13)&&"navigation"!==a.entryType\|\|ra(a,["_dtCl"])}function Be(a){return Bm&&ra(a,14)\|\|ra(a,["entryT
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 62 3d 66 64 3b 66 3d 62 2e 74 69 6d 65 73 74 61 6d 70 3b 76 61 72 20 6e 3d 62 2e 67 72 6f 75 70 2c 42 3d 62 2e 74 72 69 67 67 65 72 3b 0a 61 2e 61 76 28 6b 2c 22 74 76 6e 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 47 28 62 2e 6e 61 6d 65 29 29 29 3b 61 2e 61 76 28 6b 2c 22 74 76 74 22 2c 66 2b 22 22 29 3b 61 2e 61 76 28 6b 2c 22 74 76 6d 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6d 62 28 62 29 29 29 3b 61 2e 61 76 28 6b 2c 22 74 76 74 72 67 22 2c 42 2b 22 22 29 3b 6e 26 26 61 2e 61 76 28 6b 2c 22 74 76 67 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 47 28 6e 29 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 68 28 29 7b 49 6a 7c 7c 28 49 6a 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 Data Ascii: b=fd;f=b.timestamp;var n=b.group,B=b.trigger;a.av(k,"tvn",encodeURIComponent(G(b.name)));a.av(k,"tvt",f+"");a.av(k,"tvm",encodeURIComponent(mb(b)));a.av(k,"tvtrg",B+"");n&&a.av(k,"tvg",encodeURIComponent(G(n)))}}function bh(){Ij\|\|(Ij=document.createEleme
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 3d 22 70 65 72 66 22 2c 66 29 29 7d 66 75 6e 63 74 69 6f 6e 20 70 6a 28 61 29 7b 69 66 28 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 29 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 61 29 3b 76 61 72 20 62 3d 5b 5d 3b 69 66 28 61 3d 3d 3d 4f 62 6a 65 63 74 28 61 29 29 66 6f 72 28 76 61 72 20 66 20 69 6e 20 61 29 64 61 28 61 2c 66 29 26 26 62 2e 70 75 73 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 57 6c 28 29 7b 6d 69 3d 48 6b 2e 63 6f 6e 6e 65 63 74 69 6f 6e 3b 44 62 28 22 65 6e 69 22 29 26 26 6d 69 26 26 64 66 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 66 2c 6b 29 7b 21 62 26 26 77 63 26 26 6d 69 26 26 28 62 3d 22 22 2e 63 6f 6e 63 61 74 28 6d 69 2e 65 66 66 65 63 74 69 76 65 54 79 70 65 7c 7c 22 2d 22 2c 22 Data Ascii: ="perf",f))}function pj(a){if(Object.values)return Object.values(a);var b=[];if(a===Object(a))for(var f in a)da(a,f)&&b.push(a[f]);return b}function Wl(){mi=Hk.connection;Db("eni")&&mi&&df(function(a,b,f,k){!b&&wc&&mi&&(b="".concat(mi.effectiveType\|\|"-","
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 5a 66 2e 73 74 61 72 74 3d 30 2c 5a 66 2e 74 61 72 67 65 74 3d 76 6f 69 64 20 30 2c 5a 66 2e 75 72 6c 3d 22 22 2c 5a 66 2e 74 69 74 6c 65 3d 22 22 2c 5a 66 2e 76 69 65 77 3d 76 6f 69 64 20 30 2c 5a 66 29 2c 74 66 2c 65 2c 68 2c 6d 2c 72 2c 44 2c 59 3d 2d 31 2c 42 61 3d 6e 75 6c 6c 2c 6a 61 3d 5b 5d 2c 52 61 2c 58 61 2c 45 62 2c 57 63 2c 44 66 3d 28 52 61 3d 7b 7d 2c 52 61 2e 5f 63 73 70 72 76 5f 3d 28 58 61 3d 7b 7d 2c 58 61 2e 62 6c 6f 63 6b 65 64 55 52 4c 3d 53 61 2c 58 61 2e 64 6f 63 75 6d 65 6e 74 55 52 4c 3d 53 61 2c 58 61 2e 72 65 66 65 72 72 65 72 3d 53 61 2c 58 61 2e 73 6f 75 72 63 65 46 69 6c 65 3d 53 61 2c 58 61 29 2c 52 61 2e 5f 63 75 73 74 6f 6d 65 72 72 6f 72 5f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 6e 61 6d 65 22 Data Ascii: Zf.start=0,Zf.target=void 0,Zf.url="",Zf.title="",Zf.view=void 0,Zf),tf,e,h,m,r,D,Y=-1,Ba=null,ja=[],Ra,Xa,Eb,Wc,Df=(Ra={},Ra._csprv_=(Xa={},Xa.blockedURL=Sa,Xa.documentURL=Sa,Xa.referrer=Sa,Xa.sourceFile=Sa,Xa),Ra._customerror_=function(a,b){return"name"
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 69 73 2e 53 63 7c 7c 28 62 3e 74 68 69 73 2e 73 74 6f 70 26 26 33 3d 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 3f 74 68 69 73 2e 50 61 3d 2d 36 3a 74 68 69 73 2e 50 61 3d 62 29 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 42 62 2b 3d 62 3b 76 61 72 20 66 3d 33 3d 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 3b 66 26 26 28 74 68 69 73 2e 73 74 61 74 75 73 3d 31 29 3b 74 68 69 73 2e 70 61 72 65 6e 74 26 26 28 66 26 26 28 74 68 69 73 2e 50 63 28 29 7c 7c 62 2b 2b 2c 74 68 69 73 2e 70 61 72 65 6e 74 2e 5a 62 2b 2b 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 2e 73 65 28 62 29 29 7d 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 50 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 65 6d 2e 69 6e 64 65 78 Data Ascii: is.Sc\|\|(b>this.stop&&3===this.status?this.Pa=-6:this.Pa=b)};a.prototype.se=function(b){this.Bb+=b;var f=3===this.status;f&&(this.status=1);this.parent&&(f&&(this.Pc()\|\|b++,this.parent.Zb++),this.parent.se(b))};a.prototype.Pc=function(){return-1!==em.index
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 3a 4c 2c 42 6a 3a 77 7d 3b 5a 61 28 4c 2c 77 2c 70 29 3b 4c 2e 73 72 63 3d 41 3b 7a 64 5b 41 5d 3d 4c 7d 72 65 74 75 72 6e 20 7a 64 5b 41 5d 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 70 2c 77 2c 41 29 7b 76 61 72 20 4c 3d 4e 63 5b 77 5d 5b 41 5d 7c 7c 5b 5d 3b 69 66 28 70 2e 65 6c 65 6d 65 6e 74 29 7b 76 61 72 20 4e 3d 45 61 2e 64 54 5f 2e 61 46 49 28 4c 2c 66 75 6e 63 74 69 6f 6e 28 66 61 29 7b 72 65 74 75 72 6e 20 66 61 2e 65 6c 65 6d 65 6e 74 3d 3d 3d 70 2e 65 6c 65 6d 65 6e 74 7d 29 3b 30 3c 3d 4e 26 26 4c 2e 73 70 6c 69 63 65 28 4e 2c 31 29 7d 6b 62 28 70 2c 77 2c 41 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 62 28 70 2c 77 2c 41 29 7b 4e 63 5b 77 5d 5b 41 5d 7c 7c 28 4e 63 5b 77 5d 5b 41 5d 3d 5b 5d 29 3b 4e 63 5b 77 5d 5b 41 5d 2e 70 75 73 68 28 70 29 7d 66 Data Ascii: :L,Bj:w};Za(L,w,p);L.src=A;zd[A]=L}return zd[A]}function La(p,w,A){var L=Nc[w][A]\|\|[];if(p.element){var N=Ea.dT_.aFI(L,function(fa){return fa.element===p.element});0<=N&&L.splice(N,1)}kb(p,w,A)}function kb(p,w,A){Nc[w][A]\|\|(Nc[w][A]=[]);Nc[w][A].push(p)}f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49740	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:31 UTC	998	OUT	GET /js/lib/jquery-3.6.0.min.js HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:31 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:31 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 88560 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="428229703" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:31 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 28 65 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 Data Ascii: !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?wind
2024-03-28 19:20:31 UTC	16384	IN	Data Raw: 29 2c 61 21 3d 3d 65 29 29 3b 29 3b 72 65 74 75 72 6e 28 64 2d 3d 79 29 3d 3d 3d 67 7c 7c 64 25 67 3d 3d 30 26 26 30 3c 3d 64 2f 67 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 74 2c 61 3d 62 2e 70 73 65 75 64 6f 73 5b 65 5d 7c 7c 62 2e 73 65 74 46 69 6c 74 65 72 73 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 44 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 61 5b 53 5d 3f 61 28 6f 29 3a 31 3c 61 2e 6c 65 6e 67 74 68 3f 28 74 3d 5b 65 2c 65 2c 22 22 2c 6f 5d 2c 62 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 4c 28 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ),a!==e)););return(d-=y)===g\|\|d%g==0&&0<=d/g}}},PSEUDO:function(e,o){var t,a=b.pseudos[e]\|\|b.setFilters[e.toLowerCase()]\|\|D.error("unsupported pseudo: "+e);return a[S]?a(o):1<a.length?(t=[e,e,"",o],b.setFilters.hasOwnProperty(e.toLowerCase())?L(function(e
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 74 68 69 73 2e 63 61 63 68 65 28 65 29 3a 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 26 26 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 5b 78 28 74 29 5d 7d 2c 61 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 2e 67 65 74 28 65 2c 74 29 3a 28 74 68 69 73 2e 73 65 74 28 65 2c 74 2c 6e 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 74 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 69 66 28 Data Ascii: ction(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][x(t)]},access:function(e,t,n){return void 0===t\|\|t&&"string"==typeof t&&void 0===n?this.get(e,t):(this.set(e,t,n),void 0!==n?n:t)},remove:function(e,t){var n,r=e[this.expando];if(
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 7d 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 31 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 4f 65 28 74 68 69 73 2c 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 31 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d Data Ascii: })},null,e,arguments.length)},append:function(){return D(this,arguments,function(e){1!==this.nodeType&&11!==this.nodeType&&9!==this.nodeType\|\|Oe(this,e).appendChild(e)})},prepend:function(){return D(this,arguments,function(e){var t;1!==this.nodeType&&11!=
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 68 28 43 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 73 6f 75 72 63 65 2e 6d 61 74 63 68 28 2f 5c 77 2b 2f 67 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 78 74 5b 74 5d 7c 7c 43 2e 66 69 6e 64 2e 61 74 74 72 3b 78 74 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 69 3d 78 74 5b 6f 5d 2c 78 74 5b 6f 5d 3d 72 2c 72 3d 6e 75 6c 6c 21 3d 61 28 65 2c 74 2c 6e 29 3f 6f 3a 6e 75 6c 6c 2c 78 74 5b 6f 5d 3d 69 29 2c 72 7d 7d 29 2c 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 29 2c 77 74 3d 2f 5e 28 3f 3a 61 7c 61 72 65 61 29 24 2f 69 3b 66 75 6e 63 Data Ascii: h(C.expr.match.bool.source.match(/\w+/g),function(e,t){var a=xt[t]\|\|C.find.attr;xt[t]=function(e,t,n){var r,i,o=t.toLowerCase();return n\|\|(i=xt[o],xt[o]=r,r=null!=a(e,t,n)?o:null,xt[o]=i),r}}),/^(?:input\|select\|textarea\|button)$/i),wt=/^(?:a\|area)$/i;func
2024-03-28 19:20:32 UTC	6640	IN	Data Raw: 69 2e 68 61 73 43 6f 6e 74 65 6e 74 26 26 69 2e 64 61 74 61 7c 7c 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 65 7d 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 6f 28 29 7d 7d 7d 29 2c 43 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 65 2e 63 6f 6e 74 65 6e 74 73 2e 73 63 72 69 70 74 3d 21 31 29 7d 29 2c 43 2e 61 6a 61 78 53 65 74 75 70 28 7b 61 63 63 65 70 74 73 3a 7b 73 63 72 69 70 74 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 65 63 6d 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f Data Ascii: i.hasContent&&i.data\|\|null)}catch(e){if(o)throw e}},abort:function(){o&&o()}}}),C.ajaxPrefilter(function(e){e.crossDomain&&(e.contents.script=!1)}),C.ajaxSetup({accepts:{script:"text/javascript, application/javascript, application/ecmascript, application/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49739	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:31 UTC	1006	OUT	GET /js/lib/jquery-migrate-3.3.2.min.js HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:31 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:31 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 11101 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-656569891" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:31 UTC	11101	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 65 2c 77 69 6e 64 6f 77 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 2c 77 69 6e 64 6f 77 29 3a 74 28 6a 51 75 Data Ascii: void 0===jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:31 UTC	991	OUT	GET /js/lib/aes-3.1.2.js HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:31 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:31 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 13090 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="645104421" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:31 UTC	13090	IN	Data Raw: 76 61 72 20 43 72 79 70 74 6f 4a 53 3d 43 72 79 70 74 6f 4a 53 7c 7c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 76 61 72 20 74 3d 7b 7d 2c 65 3d 74 2e 6c 69 62 3d 7b 7d 2c 69 3d 65 2e 42 61 73 65 3d 7b 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 70 72 6f 74 6f 74 79 70 65 3d 74 68 69 73 3b 76 61 72 20 65 3d 6e 65 77 20 72 3b 72 65 74 75 72 6e 20 74 26 26 65 2e 6d 69 78 49 6e 28 74 29 2c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 69 6e 69 74 22 29 7c 7c 28 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 24 73 75 70 65 72 2e 69 6e 69 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 28 65 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 65 29 2e 24 73 75 Data Ascii: var CryptoJS=CryptoJS\|\|function(c){function r(){}var t={},e=t.lib={},i=e.Base={extend:function(t){r.prototype=this;var e=new r;return t&&e.mixIn(t),e.hasOwnProperty("init")\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$su

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49744	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:32 UTC	1047	OUT	GET /img/loading.gif HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:32 UTC	957	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:32 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 43908 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2034022790" Connection: close Content-Type: image/gif Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 cd 01 cd 01 f5 3f 00 f7 fa fd cb e3 f3 e0 ee f8 f2 f8 fc d2 e7 f5 c7 e1 f2 eb f4 fa bd db ef e4 f0 f9 85 bd e2 d5 e8 f5 f0 f7 fb da eb f6 b6 d7 ee ed f5 fb b2 d5 ed af d3 ec 7d b9 e1 c4 df f1 52 a1 d7 94 c5 e6 db ec f7 3a 94 d1 ac d2 ec e6 f2 f9 de ed f7 f4 f9 fc e9 f3 fa f8 fb fd a8 d0 eb fa fc fe be dc f0 df ed f7 c1 dd f1 9e ca e8 ce e5 f4 9c c9 e8 6b af dd ce e4 f3 9b c9 e8 5d a7 d9 fb fd fe fd fe fe 93 c4 e6 5f a8 da d6 e9 f5 46 9b d4 b6 d8 ee 53 a1 d7 68 ad dc a2 cc e9 d7 e9 f6 f5 fa fd 95 c6 e6 e1 ef f8 72 b3 de 8d c1 e4 ef f6 fb a5 ce ea c9 e2 f2 c3 de f1 88 be e3 e6 f1 f9 ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 14 00 3f 00 2c 00 00 00 00 cd 01 cd 01 00 06 ff c0 9f 70 48 2c 1a 8f c8 a4 72 c9 Data Ascii: GIF89a?}R:k]_FShr!NETSCAPE2.0!?,pH,r
2024-03-28 19:20:32 UTC	16384	IN	Data Raw: 4b ea d3 7e ea cf 8b ec d8 9e cc cb 6e be 9a 5e ee 9d 5e bb ad 8e ed b0 6e be 95 ae eb 98 ce ee e5 fe ee ec 1b ef ae be ee e3 3e ed e7 6e c0 e0 9e ea e2 6e c0 1e 7d eb bc ce c3 3f 70 ed b3 ae ed df 7e eb ab 3e ba e9 0e ea fa fe bf 2a 30 f0 96 6e 03 0d 6e f0 47 70 d8 96 ae d8 18 cf 04 1a 7f e8 1c df f1 1e 8f e2 53 1e f2 22 3f f2 7d 6e f2 27 8f f2 6e ae f2 2b ef f1 14 3f e3 22 fd f2 52 a0 02 0f ff e1 18 70 f1 34 8f 87 33 de f0 18 df d1 0a 3e f3 3b 7f 06 ff fe da 01 3f f4 4f e0 01 37 5f da 18 d0 ef 48 3f 05 00 80 ef 64 8d 00 f6 fe f4 54 00 00 be de d6 1b 50 f5 56 ff a9 0e c0 ed 36 2d 00 2d 0e e0 f4 5d bf 06 d8 1c f3 20 6d 03 e0 5c f6 ac 3d 00 06 20 f5 cc 8c 00 06 30 00 64 cf f6 81 10 cb 03 30 cb 7a bf f7 03 d0 cb 1d 17 04 00 21 f9 04 09 14 00 3f 00 2c 00 00 Data Ascii: K~n^^n>nn}?p~>*0nnGpS"?}n'n+?"Rp43>;?O7_H?dTPV6--] m\= 0d0z!?,
2024-03-28 19:20:32 UTC	11140	IN	Data Raw: f5 48 f0 e3 ae ee dd d8 eb da ae f0 00 c9 f0 d5 ee f0 e2 88 f0 d5 2e f1 04 49 ed de 7e ed cf 28 ee da 2e f0 0e 09 f1 b9 fe d4 23 09 dc cc 6e f0 f5 88 d6 d0 5e ee 09 19 ef c2 4e ef 28 49 f2 9d 6e f2 44 b9 ef 85 8e 02 54 4e 90 38 df e5 1e 8f 91 3d af e2 16 7f f3 a2 8e 02 43 bf 94 41 0f dd 3a 0f 98 5a dd e5 37 b0 f3 39 a9 00 f6 0e dd 3d f0 ee 33 b9 01 1c ff dd f9 4e 98 0f 30 f5 77 fd f4 8a 89 f5 50 b5 8d 02 ce 3e 98 9c fc d8 2b 60 f5 7e f9 01 14 ef cf 2b d0 ef 7d b9 03 59 ff ce 28 20 02 70 0f 98 56 dc f6 ae 9c c4 6a af 98 20 d0 01 28 ef c9 28 c0 f7 a1 39 04 1a a0 00 1d d0 03 81 5f c4 28 c0 c1 0f 00 f5 9e 79 f8 2e e2 22 90 ef 6e 41 00 00 21 f9 04 09 14 00 3f 00 2c 00 00 00 00 cd 01 cd 01 00 06 ff c0 9f 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a 45 7a 06 Data Ascii: H.I~(.#n^N(InDTN8=CA:Z79=3N0wP>+`~+}Y( pVj ((9_(y."nA!?,pH,rl:tJEz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:32 UTC	1016	OUT	GET /js/lib/vendor/modernizr-custom.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:32 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:32 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 4675 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="259072264" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:32 UTC	4675	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 64 2c 75 2c 63 29 7b 76 61 72 20 6c 2c 6e 2c 6f 3d 5b 5d 2c 65 3d 7b 5f 76 65 72 73 69 6f 6e 3a 22 33 2e 33 2e 31 22 2c 5f 63 6f 6e 66 69 67 3a 7b 63 6c 61 73 73 50 72 65 66 69 78 3a 22 22 2c 65 6e 61 62 6c 65 43 6c 61 73 73 65 73 3a 21 30 2c 65 6e 61 62 6c 65 4a 53 43 6c 61 73 73 3a 21 30 2c 75 73 65 50 72 65 66 69 78 65 73 3a 21 30 7d 2c 5f 71 3a 5b 5d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 5b 65 5d 29 7d 2c 30 29 7d 2c 61 64 64 54 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 66 6e 3a 74 2c 6f 70 74 69 6f 6e 73 3a 6e 7d 29 7d 2c 61 64 64 41 73 Data Ascii: !function(d,u,c){var l,n,o=[],e={_version:"3.3.1",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(e,t){var n=this;setTimeout(function(){t(n[e])},0)},addTest:function(e,t,n){o.push({name:e,fn:t,options:n})},addAs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49746	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:32 UTC	1014	OUT	GET /js/config/tooltip.config.min.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:33 UTC	971	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:32 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 109496 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1298319851" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 76 61 72 20 6e 65 77 4c 69 6e 65 3d 22 3c 62 72 2f 3e 22 2c 74 6f 6f 6c 74 69 70 54 65 6d 70 6c 61 74 65 3d 22 3c 68 36 20 73 74 79 6c 65 3d 27 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 39 65 6d 3b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 20 63 6c 61 73 73 3d 27 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 20 75 69 2d 68 65 6c 70 65 72 2d 72 65 73 65 74 20 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 20 2e 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 27 3e 7b 30 7d 3c 2f 68 36 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 27 27 20 63 6c 61 73 73 3d 27 27 3e 7b 31 7d 3c 2f 73 70 61 6e 3e 22 2c 74 6f 6f 6c 74 69 70 43 6f 6e 66 69 67 3d 7b 65 6e 5f 75 73 3a 7b 22 53 75 70 70 6f 72 74 65 64 20 42 72 6f 77 73 65 Data Ascii: var newLine="<br/>",tooltipTemplate="<h6 style='padding-left:4px;font-size:0.9em; display:none' class='ui-accordion-header ui-helper-reset ui-state-default .ui-corner-all'>{0}</h6><span style='' class=''>{1}</span>",tooltipConfig={en_us:{"Supported Browse
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 68 65 20 64 65 66 61 75 6c 74 20 75 6e 6c 65 73 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 76 65 72 72 69 64 65 73 20 69 74 2e 22 7d 2c 22 4f 70 65 6e 20 52 65 76 20 4c 69 6e 6b 22 3a 7b 68 65 61 64 65 72 3a 22 4f 70 65 6e 20 52 65 76 20 4c 69 6e 6b 22 2c 63 6f 6e 74 65 6e 74 3a 22 54 68 69 73 20 63 6f 6e 74 72 6f 6c 73 20 74 68 65 20 63 72 65 61 74 69 6f 6e 20 6f 66 20 52 65 76 65 72 73 65 20 4c 69 6e 6b 20 66 69 6c 65 73 20 28 4e 3d 4e 6f 29 20 66 6f 72 20 73 6f 6d 65 20 4f 70 65 6e 20 50 72 6f 74 6f 63 6f 6c 20 49 6e 74 65 72 66 61 63 65 73 2e 20 54 68 69 73 20 77 69 6c 6c 20 62 65 20 74 68 65 20 64 65 66 61 75 6c 74 20 75 6e 6c 65 73 73 20 74 68 65 20 69 6e 74 65 72 66 61 63 65 20 6f 76 65 72 72 69 64 65 73 20 69 74 2e 22 7d 2c 22 4f 70 65 6e Data Ascii: he default unless the interface overrides it."},"Open Rev Link":{header:"Open Rev Link",content:"This controls the creation of Reverse Link files (N=No) for some Open Protocol Interfaces. This will be the default unless the interface overrides it."},"Open
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 20 2f 20 53 63 6f 72 65 50 6c 75 73 20 4f 76 65 72 72 69 64 65 22 3a 7b 68 65 61 64 65 72 3a 22 52 4d 43 52 20 2f 20 53 63 6f 72 65 50 6c 75 73 20 4f 76 65 72 72 69 64 65 22 2c 63 6f 6e 74 65 6e 74 3a 22 53 65 74 20 74 68 69 73 20 66 6c 61 67 20 74 6f 20 27 59 27 20 69 66 20 52 4d 43 52 20 61 6e 64 20 53 63 6f 72 65 50 6c 75 73 20 72 65 71 75 65 73 74 73 20 66 6f 72 20 63 6c 69 65 6e 74 73 20 77 69 74 68 20 4d 61 6e 61 67 65 64 20 51 75 65 75 65 73 20 73 68 6f 75 6c 64 20 62 65 20 72 6f 75 74 65 64 20 74 6f 20 74 68 65 20 4d 61 6e 61 67 65 64 20 51 75 65 75 65 20 66 6f 72 20 74 68 61 74 20 63 6c 69 65 6e 74 2c 20 69 6e 73 74 65 61 64 20 6f 66 20 74 68 65 20 52 4d 43 52 20 61 6e 64 20 53 63 6f 72 65 50 6c 75 73 20 71 75 65 75 65 73 2e 22 7d 2c 22 54 72 61 Data Ascii: / ScorePlus Override":{header:"RMCR / ScorePlus Override",content:"Set this flag to 'Y' if RMCR and ScorePlus requests for clients with Managed Queues should be routed to the Managed Queue for that client, instead of the RMCR and ScorePlus queues."},"Tra
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 6e 69 6f 6e 20 6f 6e 20 61 20 72 65 71 75 65 73 74 2e 22 7d 2c 22 54 52 55 20 50 72 6f 64 75 63 74 20 4f 70 74 69 6f 6e 73 22 3a 7b 68 65 61 64 65 72 3a 22 54 52 55 20 50 72 6f 64 75 63 74 20 4f 70 74 69 6f 6e 73 22 2c 63 6f 6e 74 65 6e 74 3a 22 4b 65 79 77 6f 72 64 73 20 28 66 72 6f 6d 20 74 68 65 20 63 68 65 63 6b 62 6f 78 65 73 20 62 65 6c 6f 77 29 20 66 6f 72 20 54 72 61 6e 73 55 6e 69 6f 6e 20 61 6e 63 69 6c 6c 61 72 79 20 70 72 6f 64 75 63 74 73 20 28 46 49 43 4f 20 53 63 6f 72 65 73 2c 20 46 72 61 75 64 73 2c 20 65 74 63 2e 22 7d 2c 22 43 42 43 20 6f 77 6e 20 54 52 55 20 73 75 62 20 23 20 69 6e 64 69 63 61 74 6f 72 22 3a 7b 68 65 61 64 65 72 3a 22 43 42 43 20 6f 77 6e 20 54 52 55 20 73 75 62 20 23 20 69 6e 64 69 63 61 74 6f 72 22 2c 63 6f 6e 74 65 Data Ascii: nion on a request."},"TRU Product Options":{header:"TRU Product Options",content:"Keywords (from the checkboxes below) for TransUnion ancillary products (FICO Scores, Frauds, etc."},"CBC own TRU sub # indicator":{header:"CBC own TRU sub # indicator",conte
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 6f 72 6d 65 64 20 69 6e 20 4d 41 43 53 57 65 62 2e 20 20 54 68 69 73 20 69 73 20 4e 4f 54 20 62 69 6c 6c 65 64 20 77 68 65 6e 20 61 20 63 75 73 74 6f 6d 65 72 20 75 74 69 6c 69 7a 65 73 20 74 68 65 20 73 65 6c 66 2d 73 65 72 76 69 63 65 20 66 65 61 74 75 72 65 2c 20 6f 72 20 69 66 20 61 20 73 65 72 76 69 63 65 20 61 67 65 6e 74 20 64 65 6c 65 74 65 73 20 74 68 65 20 66 69 6c 65 20 6f 75 74 73 69 64 65 20 6f 66 20 4d 41 43 53 57 65 62 2e 22 7d 2c 22 4d 61 6e 75 61 6c 20 53 70 6c 69 74 20 46 69 6c 65 22 3a 7b 68 65 61 64 65 72 3a 22 4d 61 6e 75 61 6c 20 53 70 6c 69 74 20 46 69 6c 65 22 2c 63 6f 6e 74 65 6e 74 3a 22 50 72 69 63 65 20 6f 66 20 61 20 4d 61 6e 75 61 6c 20 53 70 6c 69 74 20 52 65 70 6f 72 74 2e 22 7d 2c 22 4d 61 6e 75 61 6c 20 53 77 61 70 20 41 Data Ascii: ormed in MACSWeb. This is NOT billed when a customer utilizes the self-service feature, or if a service agent deletes the file outside of MACSWeb."},"Manual Split File":{header:"Manual Split File",content:"Price of a Manual Split Report."},"Manual Swap A
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 61 6c 6c 6f 77 20 70 72 65 76 69 6f 75 73 6c 79 20 75 73 65 64 20 6c 6f 61 6e 20 6e 75 6d 62 65 72 73 20 74 6f 20 62 65 20 72 65 75 73 65 64 2e 20 46 6f 72 20 6e 65 77 20 72 65 71 75 65 73 74 73 20 75 73 65 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 74 6f 20 6f 76 65 72 72 69 64 65 20 74 68 69 73 20 73 65 74 74 69 6e 67 2e 22 7d 2c 22 53 74 61 72 74 20 50 61 67 65 22 3a 7b 68 65 61 64 65 72 3a 22 53 74 61 72 74 20 50 61 67 65 22 2c 63 6f 6e 74 65 6e 74 3a 22 54 68 69 73 20 6f 70 74 69 6f 6e 20 64 65 74 65 72 6d 69 6e 65 73 20 77 68 61 74 20 73 63 72 65 65 6e 20 69 73 20 70 72 65 73 65 6e 74 65 64 20 66 69 72 73 74 20 77 68 65 6e 65 76 65 72 20 79 6f 75 20 6c 6f 67 20 69 6e 74 6f 20 43 42 43 57 65 62 2e 20 45 6e 74 72 79 20 46 6f 72 6d 20 69 73 20 74 68 65 20 Data Ascii: allow previously used loan numbers to be reused. For new requests use this option to override this setting."},"Start Page":{header:"Start Page",content:"This option determines what screen is presented first whenever you log into CBCWeb. Entry Form is the
2024-03-28 19:20:33 UTC	11192	IN	Data Raw: 74 65 6e 74 3a 22 54 68 65 20 43 6c 69 65 6e 74 20 41 64 6d 69 6e 20 72 65 70 6f 72 74 20 69 73 20 69 6e 63 6c 75 73 69 76 65 20 6f 66 20 61 6c 6c 20 6c 6f 67 69 6e 73 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 61 20 63 6c 69 65 6e 74 20 6f 72 20 63 6c 69 65 6e 74 73 2e 20 54 6f 20 6d 6f 6e 69 74 6f 72 20 41 64 6d 69 6e 20 41 63 74 69 76 69 74 79 20 66 6f 72 20 61 20 63 65 72 74 61 69 6e 20 74 69 6d 65 66 72 61 6d 65 2c 20 73 65 6c 65 63 74 20 61 20 64 61 74 65 20 72 61 6e 67 65 2c 20 6f 72 20 6e 75 6d 62 65 72 20 6f 66 20 70 72 65 76 69 6f 75 73 20 64 61 79 73 2c 20 77 65 65 6b 73 20 6f 72 20 6d 6f 6e 74 68 73 2e 22 7d 2c 46 75 6c 6c 3a 7b 68 65 61 64 65 72 3a 22 52 4d 43 52 22 2c 63 6f 6e 74 65 6e 74 3a 22 43 6c 69 63 6b 20 74 68 65 20 52 4d 43 Data Ascii: tent:"The Client Admin report is inclusive of all logins associated with a client or clients. To monitor Admin Activity for a certain timeframe, select a date range, or number of previous days, weeks or months."},Full:{header:"RMCR",content:"Click the RMC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	1154	OUT	GET /js/utils.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
2024-03-28 19:20:33 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:33 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 24305 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-30732675" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 52 65 64 69 72 65 63 74 28 65 29 7b 76 61 72 20 74 2c 69 3d 67 65 74 43 6f 6f 6b 69 65 28 22 6e 65 78 74 50 61 67 65 50 61 72 61 6d 22 29 2c 6e 3d 72 65 64 69 72 65 63 74 50 61 67 65 28 29 2c 6f 3d 71 75 65 72 79 53 74 72 69 6e 67 55 74 69 6c 28 29 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 28 22 6e 65 78 74 50 61 67 65 22 29 3b 72 65 74 75 72 6e 22 74 72 61 64 65 6c 69 6e 65 41 55 22 3d 3d 69 7c 7c 22 75 70 67 72 61 64 65 4f 72 64 65 72 22 3d 3d 69 3f 28 65 26 26 22 6e 65 77 50 61 73 73 77 6f 72 64 22 21 3d 65 26 26 22 73 74 69 6c 6c 4c 6f 67 69 6e 22 21 3d 65 26 26 22 6c 6f 67 69 6e 22 21 3d 65 26 26 22 68 6f 73 74 42 72 6f 77 73 65 72 46 6f 72 6d 22 21 3d 65 26 26 28 6e 2e 73 65 74 4c 6f 63 61 74 69 Data Ascii: function checkRedirect(e){var t,i=getCookie("nextPageParam"),n=redirectPage(),o=queryStringUtil().getQueryParameter("nextPage");return"tradelineAU"==i\|\|"upgradeOrder"==i?(e&&"newPassword"!=e&&"stillLogin"!=e&&"login"!=e&&"hostBrowserForm"!=e&&(n.setLocati
2024-03-28 19:20:33 UTC	7921	IN	Data Raw: 22 2c 22 50 4f 53 54 22 2c 70 61 79 6c 6f 61 64 3d 7b 6e 61 6d 65 3a 72 7d 29 2c 28 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 73 75 62 68 65 6c 70 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 69 22 29 2e 65 78 65 63 28 72 29 29 3f 28 69 3d 22 22 2c 69 3d 22 55 73 65 72 20 54 65 72 6d 73 20 6f 66 20 41 67 72 65 65 6d 65 6e 74 22 3d 3d 6e 2e 74 65 78 74 28 29 3f 22 68 65 6c 70 55 73 65 72 41 67 72 65 65 6d 65 6e 74 2e 68 74 6d 6c 22 3a 22 2e 2e 2f 65 78 74 65 72 6e 61 6c 2f 22 2b 74 5b 31 5d 2c 6f 2e 73 65 74 4c 6f 63 61 74 69 6f 6e 28 69 29 29 3a 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 72 2c 22 5f 62 6c 61 6e 6b 22 29 29 2c 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 73 73 69 6f 6e 28 29 7b 6d 61 6b 65 41 6a 61 78 43 61 6c 6c 28 22 6c 6f 67 6f 66 66 22 2c Data Ascii: ","POST",payload={name:r}),(t=new RegExp("subhelp=([^&#]*)","i").exec(r))?(i="",i="User Terms of Agreement"==n.text()?"helpUserAgreement.html":"../external/"+t[1],o.setLocation(i)):window.open(r,"_blank")),!1}function clearSession(){makeAjaxCall("logoff",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49748	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	1176	OUT	GET /common_config/commonConfig.min.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
2024-03-28 19:20:33 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:33 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 5066 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1116548305" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:33 UTC	5066	IN	Data Raw: 76 61 72 20 72 65 6c 65 61 73 65 56 65 72 73 69 6f 6e 3d 22 34 2e 31 30 2e 30 22 3b 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 6e 67 54 6f 48 61 73 68 28 65 29 7b 76 61 72 20 74 3d 30 3b 69 66 28 30 21 3d 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 3d 28 74 3c 3c 35 29 2d 74 2b 28 63 68 61 72 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 29 2c 74 26 3d 74 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 70 61 67 65 4e 61 6d 65 51 75 65 72 79 3d 73 74 72 69 6e 67 54 6f 48 61 73 68 28 72 65 6c 65 61 73 65 56 65 72 73 69 6f 6e 29 2c 70 61 67 65 4e 61 6d 65 4d 61 70 3d 7b 6e 65 77 50 77 3a 22 72 65 73 65 74 2d 70 61 73 73 77 6f 72 64 22 2c 66 6f 72 67 6f 74 50 77 3a 22 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 Data Ascii: var releaseVersion="4.10.0";function stringToHash(e){var t=0;if(0!=e.length)for(i=0;i<e.length;i++)t=(t<<5)-t+(char=e.charCodeAt(i)),t&=t;return t}var pageNameQuery=stringToHash(releaseVersion),pageNameMap={newPw:"reset-password",forgotPw:"forgot-password

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49749	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	1166	OUT	GET /js/config/config.min.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
2024-03-28 19:20:33 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:33 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 889 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1414667215" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:33 UTC	889	IN	Data Raw: 76 61 72 20 46 35 5f 55 52 4c 53 3d 5b 22 64 65 76 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 71 61 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 69 72 69 73 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 70 65 67 61 73 75 73 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 71 74 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 75 61 74 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 6d 6c 2d 75 61 74 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 75 61 2d 75 61 74 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 Data Ascii: var F5_URLS=["dev.creditbureaureports.com","qa.creditbureaureports.com","iris.creditbureaureports.com","pegasus.creditbureaureports.com","qt.creditbureaureports.com","uat.creditbureaureports.com","ml-uat.creditbureaureports.com","ua-uat.creditbureaureport

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49750	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	1175	OUT	GET /js/modules/login/tempPage.min.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
2024-03-28 19:20:33 UTC	966	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:33 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 394 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-13125067" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:33 UTC	394	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 61 3d 6e 65 77 20 70 61 67 65 4d 73 67 2c 65 3d 71 75 65 72 79 53 74 72 69 6e 67 55 74 69 6c 28 29 2c 74 3d 65 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 28 22 64 61 74 61 22 29 2e 72 65 70 6c 61 63 65 28 2f 20 2f 67 2c 22 2b 22 29 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 67 65 74 44 65 63 72 79 70 74 65 64 54 65 78 74 28 65 29 3b 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 29 28 74 29 3b 73 65 74 43 6f 6f 6b 69 65 28 22 6e 65 78 74 50 61 67 65 50 61 72 61 6d 22 2c 22 6c 6f 67 69 6e 22 29 2c 73 65 74 43 6f 6f 6b 69 65 28 22 64 61 74 61 22 2c 74 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 70 61 67 65 4e 61 6d 65 4d 61 70 2e 6c 6f 67 69 6e 2b 22 2e 68 74 6d Data Ascii: !function(){try{var a=new pageMsg,e=queryStringUtil(),t=e.getQueryParameter("data").replace(/ /g,"+");(function(e){e=getDecryptedText(e);JSON.parse(e)})(t);setCookie("nextPageParam","login"),setCookie("data",t),window.location.href=pageNameMap.login+".htm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49751	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	1174	OUT	GET /js/config/message.config.min.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
2024-03-28 19:20:33 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:33 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 19178 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1780408757" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 76 61 72 20 6d 73 67 43 6f 6e 66 69 67 3d 7b 65 6e 5f 75 73 3a 7b 73 65 73 73 69 6f 6e 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 3a 22 59 6f 75 72 20 73 65 73 73 69 6f 6e 20 69 73 20 61 62 6f 75 74 20 74 6f 20 65 78 70 69 72 65 2e 20 44 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 6f 6e 74 69 6e 75 65 20 3f 22 2c 69 6e 76 61 6c 69 64 43 72 65 64 3a 22 49 6e 76 61 6c 69 64 20 55 73 65 72 20 4e 61 6d 65 20 6f 72 20 70 61 73 73 77 6f 72 64 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 6d 69 73 6d 61 74 63 68 45 6d 61 69 6c 3a 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 65 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 22 2c 62 6c 61 6e 6b 45 6d 61 69 6c 3a 22 45 6d 61 69 6c 20 61 64 64 72 65 73 73 20 61 6e 64 20 70 61 73 73 77 6f 72 64 20 63 61 6e 27 74 Data Ascii: var msgConfig={en_us:{sessionConfirmation:"Your session is about to expire. Do you want to continue ?",invalidCred:"Invalid User Name or password. Please try again.",mismatchEmail:"Email addresses do not match",blankEmail:"Email address and password can't
2024-03-28 19:20:33 UTC	2794	IN	Data Raw: 20 76 61 6c 75 65 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 65 20 41 70 70 6c 69 63 61 6e 74 20 4d 6f 76 65 20 69 6e 20 44 61 74 65 2e 22 2c 70 72 6f 70 6f 73 65 64 52 65 6e 74 52 65 71 3a 22 41 20 76 61 6c 75 65 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 65 20 41 70 70 6c 69 63 61 6e 74 20 50 72 6f 70 6f 73 65 64 20 52 65 6e 74 20 41 6d 6f 75 6e 74 2e 22 2c 6f 72 44 65 70 6f 73 69 74 52 65 71 3a 22 41 20 76 61 6c 75 65 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 65 20 41 70 70 6c 69 63 61 6e 74 20 44 65 70 6f 73 69 74 2e 22 2c 74 72 61 6e 73 54 79 70 65 52 65 71 3a 22 54 72 61 6e 73 61 63 74 69 6f 6e 20 74 79 70 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 70 72 65 76 50 75 72 63 68 61 73 65 44 74 65 67 3a 22 Data Ascii: value is required for the Applicant Move in Date.",proposedRentReq:"A value is required for the Applicant Proposed Rent Amount.",orDepositReq:"A value is required for the Applicant Deposit.",transTypeReq:"Transaction type is required.",prevPurchaseDteg:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49752	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	866	OUT	GET /img/loading.gif HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655431367\|1711653631333
2024-03-28 19:20:33 UTC	956	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:33 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 43908 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-239200300" Connection: close Content-Type: image/gif Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 cd 01 cd 01 f5 3f 00 f7 fa fd cb e3 f3 e0 ee f8 f2 f8 fc d2 e7 f5 c7 e1 f2 eb f4 fa bd db ef e4 f0 f9 85 bd e2 d5 e8 f5 f0 f7 fb da eb f6 b6 d7 ee ed f5 fb b2 d5 ed af d3 ec 7d b9 e1 c4 df f1 52 a1 d7 94 c5 e6 db ec f7 3a 94 d1 ac d2 ec e6 f2 f9 de ed f7 f4 f9 fc e9 f3 fa f8 fb fd a8 d0 eb fa fc fe be dc f0 df ed f7 c1 dd f1 9e ca e8 ce e5 f4 9c c9 e8 6b af dd ce e4 f3 9b c9 e8 5d a7 d9 fb fd fe fd fe fe 93 c4 e6 5f a8 da d6 e9 f5 46 9b d4 b6 d8 ee 53 a1 d7 68 ad dc a2 cc e9 d7 e9 f6 f5 fa fd 95 c6 e6 e1 ef f8 72 b3 de 8d c1 e4 ef f6 fb a5 ce ea c9 e2 f2 c3 de f1 88 be e3 e6 f1 f9 ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 14 00 3f 00 2c 00 00 00 00 cd 01 cd 01 00 06 ff c0 9f 70 48 2c 1a 8f c8 a4 72 c9 Data Ascii: GIF89a?}R:k]_FShr!NETSCAPE2.0!?,pH,r
2024-03-28 19:20:33 UTC	16384	IN	Data Raw: 4b ea d3 7e ea cf 8b ec d8 9e cc cb 6e be 9a 5e ee 9d 5e bb ad 8e ed b0 6e be 95 ae eb 98 ce ee e5 fe ee ec 1b ef ae be ee e3 3e ed e7 6e c0 e0 9e ea e2 6e c0 1e 7d eb bc ce c3 3f 70 ed b3 ae ed df 7e eb ab 3e ba e9 0e ea fa fe bf 2a 30 f0 96 6e 03 0d 6e f0 47 70 d8 96 ae d8 18 cf 04 1a 7f e8 1c df f1 1e 8f e2 53 1e f2 22 3f f2 7d 6e f2 27 8f f2 6e ae f2 2b ef f1 14 3f e3 22 fd f2 52 a0 02 0f ff e1 18 70 f1 34 8f 87 33 de f0 18 df d1 0a 3e f3 3b 7f 06 ff fe da 01 3f f4 4f e0 01 37 5f da 18 d0 ef 48 3f 05 00 80 ef 64 8d 00 f6 fe f4 54 00 00 be de d6 1b 50 f5 56 ff a9 0e c0 ed 36 2d 00 2d 0e e0 f4 5d bf 06 d8 1c f3 20 6d 03 e0 5c f6 ac 3d 00 06 20 f5 cc 8c 00 06 30 00 64 cf f6 81 10 cb 03 30 cb 7a bf f7 03 d0 cb 1d 17 04 00 21 f9 04 09 14 00 3f 00 2c 00 00 Data Ascii: K~n^^n>nn}?p~>*0nnGpS"?}n'n+?"Rp43>;?O7_H?dTPV6--] m\= 0d0z!?,
2024-03-28 19:20:33 UTC	11140	IN	Data Raw: f5 48 f0 e3 ae ee dd d8 eb da ae f0 00 c9 f0 d5 ee f0 e2 88 f0 d5 2e f1 04 49 ed de 7e ed cf 28 ee da 2e f0 0e 09 f1 b9 fe d4 23 09 dc cc 6e f0 f5 88 d6 d0 5e ee 09 19 ef c2 4e ef 28 49 f2 9d 6e f2 44 b9 ef 85 8e 02 54 4e 90 38 df e5 1e 8f 91 3d af e2 16 7f f3 a2 8e 02 43 bf 94 41 0f dd 3a 0f 98 5a dd e5 37 b0 f3 39 a9 00 f6 0e dd 3d f0 ee 33 b9 01 1c ff dd f9 4e 98 0f 30 f5 77 fd f4 8a 89 f5 50 b5 8d 02 ce 3e 98 9c fc d8 2b 60 f5 7e f9 01 14 ef cf 2b d0 ef 7d b9 03 59 ff ce 28 20 02 70 0f 98 56 dc f6 ae 9c c4 6a af 98 20 d0 01 28 ef c9 28 c0 f7 a1 39 04 1a a0 00 1d d0 03 81 5f c4 28 c0 c1 0f 00 f5 9e 79 f8 2e e2 22 90 ef 6e 41 00 00 21 f9 04 09 14 00 3f 00 2c 00 00 00 00 cd 01 cd 01 00 06 ff c0 9f 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a 45 7a 06 Data Ascii: H.I~(.#n^N(InDTN8=CA:Z79=3N0wP>+`~+}Y( pVj ((9_(y."nA!?,pH,rl:tJEz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49754	184.29.128.114	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 19:20:33 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=161328 Date: Thu, 28 Mar 2024 19:20:33 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49755	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	1707	OUT	GET /iconnect/login.html HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C
2024-03-28 19:20:34 UTC	1025	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:25 GMT Accept-Ranges: bytes X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Content-Length: 3165 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-929112277" Connection: close Content-Type: text/html; charset=UTF-8 Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:34 UTC	3165	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 20 50 61 67 65 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 39 5d 3e 0a 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 68 65 61 64 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6e 61 76 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 65 63 74 69 6f 6e 27 29 3b 0a 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"><title>Login Page</title> ...[if lt IE 9]> <script> document.createElement('header'); document.createElement('nav'); document.createElement('section');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49756	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:33 UTC	2071	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba&bp=3&app=3389b198b27ff03b&crc=2203798042&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 3068 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/loginTemp.html?data=pQ+aGAgOXbT9G/LWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; dtPC=3$453631282_842h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C
2024-03-28 19:20:33 UTC	3068	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 31 36 35 33 36 32 38 38 36 35 25 37 43 30 25 37 43 64 6e 25 37 43 2d 31 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 32 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 31 36 35 33 36 32 38 38 36 35 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 2d 31 25 35 45 70 66 25 37 43 56 43 44 25 37 43 38 25 37 43 56 43 44 53 25 37 43 30 25 37 43 56 43 53 25 37 43 33 35 32 33 25 37 43 56 43 4f 25 37 43 33 35 32 34 25 37 43 56 43 49 25 37 43 30 25 37 43 53 25 37 43 2d 31 25 32 43 32 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1711653628865%7C0%7Cdn%7C-1%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C2%7C_event_%7C1711653628865%7C_vc_%7CV%7C-1%5Epf%7CVCD%7C8%7CVCDS%7C0%7CVCS%7C3523%7CVCO%7C3524%7CVCI%7C0%7CS%7C-1%2C2
2024-03-28 19:20:34 UTC	843	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:34 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49757	184.29.128.114	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:34 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 19:20:34 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=161307 Date: Thu, 28 Mar 2024 19:20:34 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 19:20:34 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49758	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:34 UTC	1479	OUT	GET /js/lib/jquery-ui-1.13.2.min.js HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:20:34 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 253640 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="618907163" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 56 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 56 2e 75 69 3d 56 2e 75 69 7c 7c 7b 7d 2c 56 2e 75 69 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 31 33 2e 32 22 3b 76 61 72 20 6e 2c 73 2c 78 2c 6b 2c 6f 2c 61 2c 72 2c 6c 2c 68 2c 69 2c 4e 3d 30 2c 45 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 63 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 3b 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c Data Ascii: !function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(V){"use strict";V.ui=V.ui\|\|{},V.ui.version="1.13.2";var n,s,x,k,o,a,r,l,h,i,N=0,E=Array.prototype.hasOwnProperty,c=Array.prototype.slice;function C(t,
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 67 62 61 22 29 2c 67 28 66 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 2e 63 61 63 68 65 3d 22 5f 22 2b 74 2c 65 2e 70 72 6f 70 73 2e 61 6c 70 68 61 3d 7b 69 64 78 3a 33 2c 74 79 70 65 3a 22 70 65 72 63 65 6e 74 22 2c 64 65 66 3a 31 7d 7d 29 2c 75 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 64 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 65 2b 22 5d 22 5d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 2c 28 70 2e 66 6e 3d 75 2e 65 78 74 65 6e 64 28 70 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 61 72 Data Ascii: gba"),g(f,function(t,e){e.cache="_"+t,e.props.alpha={idx:3,type:"percent",def:1}}),u.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(t,e){d["[object "+e+"]"]=e.toLowerCase()}),(p.fn=u.extend(p.prototype,{par
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 6f 70 22 2c 22 68 69 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 56 28 74 68 69 73 29 2c 73 3d 22 73 68 6f 77 22 3d 3d 3d 74 2e 6d 6f 64 65 2c 6e 3d 74 2e 64 69 72 65 63 74 69 6f 6e 7c 7c 22 6c 65 66 74 22 2c 6f 3d 22 75 70 22 3d 3d 3d 6e 7c 7c 22 64 6f 77 6e 22 3d 3d 3d 6e 3f 22 74 6f 70 22 3a 22 6c 65 66 74 22 2c 61 3d 22 75 70 22 3d 3d 3d 6e 7c 7c 22 6c 65 66 74 22 3d 3d 3d 6e 3f 22 2d 3d 22 3a 22 2b 3d 22 2c 72 3d 22 2b 3d 22 3d 3d 61 3f 22 2d 3d 22 3a 22 2b 3d 22 2c 6c 3d 7b 6f 70 61 63 69 74 79 3a 30 7d 3b 56 2e 65 66 66 65 63 74 73 2e 63 72 65 61 74 65 50 6c 61 63 65 68 6f 6c 64 65 72 28 69 29 2c 6e 3d 74 2e 64 69 73 74 61 6e 63 65 7c 7c 69 5b 22 74 6f 70 22 3d 3d 6f 3f 22 6f 75 74 65 72 48 65 69 67 68 74 22 3a 22 6f 75 Data Ascii: op","hide",function(t,e){var i=V(this),s="show"===t.mode,n=t.direction\|\|"left",o="up"===n\|\|"down"===n?"top":"left",a="up"===n\|\|"left"===n?"-=":"+=",r="+="==a?"-=":"+=",l={opacity:0};V.effects.createPlaceholder(i),n=t.distance\|\|i["top"==o?"outerHeight":"ou
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 6c 61 73 73 28 73 2e 6e 65 78 74 28 29 2c 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 61 63 74 69 76 65 22 29 29 7d 2c 5f 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6e 65 77 50 61 6e 65 6c 2c 69 3d 74 68 69 73 2e 70 72 65 76 53 68 6f 77 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 70 72 65 76 53 68 6f 77 3a 74 2e 6f 6c 64 50 61 6e 65 6c 3b 74 68 69 73 2e 70 72 65 76 53 68 6f 77 2e 61 64 64 28 74 68 69 73 2e 70 72 65 76 48 69 64 65 29 2e 73 74 6f 70 28 21 30 2c 21 30 29 2c 74 68 69 73 2e 70 72 65 76 53 68 6f 77 3d 65 2c 74 68 69 73 2e 70 72 65 76 48 69 64 65 3d 69 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6e 69 6d 61 74 65 3f 74 68 69 73 2e 5f 61 6e 69 6d 61 74 65 28 65 2c 69 2c 74 29 3a 28 69 2e 68 Data Ascii: lass(s.next(),"ui-accordion-content-active"))},_toggle:function(t){var e=t.newPanel,i=this.prevShow.length?this.prevShow:t.oldPanel;this.prevShow.add(this.prevHide).stop(!0,!0),this.prevShow=e,this.prevHide=i,this.options.animate?this._animate(e,i,t):(i.h
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 69 6f 6e 73 2e 64 65 6c 61 79 29 7d 2c 73 65 61 72 63 68 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 21 3d 74 3f 74 3a 74 68 69 73 2e 5f 76 61 6c 75 65 28 29 2c 74 68 69 73 2e 74 65 72 6d 3d 74 68 69 73 2e 5f 76 61 6c 75 65 28 29 2c 74 2e 6c 65 6e 67 74 68 3c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 69 6e 4c 65 6e 67 74 68 3f 74 68 69 73 2e 63 6c 6f 73 65 28 65 29 3a 21 31 21 3d 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 73 65 61 72 63 68 22 2c 65 29 3f 74 68 69 73 2e 5f 73 65 61 72 63 68 28 74 29 3a 76 6f 69 64 20 30 7d 2c 5f 73 65 61 72 63 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 70 65 6e 64 69 6e 67 2b 2b 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 61 75 74 6f 63 6f 6d 70 6c Data Ascii: ions.delay)},search:function(t,e){return t=null!=t?t:this._value(),this.term=this._value(),t.length<this.options.minLength?this.close(e):!1!==this._trigger("search",e)?this._search(t):void 0},_search:function(t){this.pending++,this._addClass("ui-autocompl
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 61 63 65 7c 7c 28 74 68 69 73 2e 69 63 6f 6e 53 70 61 63 65 3d 56 28 22 3c 73 70 61 6e 3e 20 3c 2f 73 70 61 6e 3e 22 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 69 63 6f 6e 53 70 61 63 65 2c 22 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 73 70 61 63 65 22 29 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 69 63 6f 6e 2c 6e 75 6c 6c 2c 22 75 69 2d 77 69 67 65 74 2d 69 63 6f 6e 2d 62 6c 6f 63 6b 22 29 2c 74 68 69 73 2e 5f 61 74 74 61 63 68 49 63 6f 6e 53 70 61 63 65 28 73 29 29 7d 2c 5f 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 72 6f 6c 65 22 29 2c 74 68 69 73 2e 69 63 6f 6e 26 26 74 68 69 73 2e 69 63 6f 6e 2e 72 65 6d Data Ascii: ace\|\|(this.iconSpace=V("<span> </span>"),this._addClass(this.iconSpace,"ui-button-icon-space")),this._removeClass(this.icon,null,"ui-wiget-icon-block"),this._attachIconSpace(s))},_destroy:function(){this.element.removeAttr("role"),this.icon&&this.icon.rem
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 2b 28 69 3f 30 3a 56 28 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 29 2c 6c 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2b 28 69 3f 30 3a 56 28 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 65 2e 6c 65 66 74 2d 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 69 73 52 54 4c 22 29 3f 73 2d 6f 3a 30 2c 65 2e 6c 65 66 74 2d 3d 69 26 26 65 2e 6c 65 66 74 3d 3d 3d 74 2e 69 6e 70 75 74 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 3f 56 28 64 6f 63 75 6d 65 6e 74 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 3a 30 2c 65 2e 74 6f 70 2d 3d 69 26 26 65 2e 74 6f 70 3d 3d 3d 74 2e 69 6e 70 75 74 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2b 61 3f 56 Data Ascii: +(i?0:V(document).scrollLeft()),l=document.documentElement.clientHeight+(i?0:V(document).scrollTop());return e.left-=this._get(t,"isRTL")?s-o:0,e.left-=i&&e.left===t.input.offset().left?V(document).scrollLeft():0,e.top-=i&&e.top===t.input.offset().top+a?V
2024-03-28 19:20:35 UTC	16384	IN	Data Raw: 5f 67 65 74 28 74 2c 22 63 68 61 6e 67 65 4d 6f 6e 74 68 22 29 2c 67 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 63 68 61 6e 67 65 59 65 61 72 22 29 2c 6d 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 73 68 6f 77 4d 6f 6e 74 68 41 66 74 65 72 59 65 61 72 22 29 2c 5f 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 73 65 6c 65 63 74 4d 6f 6e 74 68 4c 61 62 65 6c 22 29 2c 76 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 73 65 6c 65 63 74 59 65 61 72 4c 61 62 65 6c 22 29 2c 62 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 74 69 74 6c 65 27 3e 22 2c 79 3d 22 22 3b 69 66 28 6f 7c 7c 21 66 29 79 2b 3d 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 6f 6e 74 68 27 3e 22 2b 61 5b 65 5d 2b 22 3c 2f 73 70 Data Ascii: _get(t,"changeMonth"),g=this._get(t,"changeYear"),m=this._get(t,"showMonthAfterYear"),_=this._get(t,"selectMonthLabel"),v=this._get(t,"selectYearLabel"),b="<div class='ui-datepicker-title'>",y="";if(o\|\|!f)y+="<span class='ui-datepicker-month'>"+a[e]+"</sp
2024-03-28 19:20:35 UTC	16384	IN	Data Raw: 74 2e 72 65 6c 61 74 69 76 65 2e 6c 65 66 74 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 70 61 72 65 6e 74 2e 6c 65 66 74 2c 56 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 72 65 6c 61 74 69 76 65 2e 74 6f 70 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 70 61 72 65 6e 74 2e 74 6f 70 2c 56 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2b 56 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2d 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2d 74 68 69 73 2e 6d 61 72 67 69 6e 73 2e 6c 65 66 74 2c 56 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2b 28 56 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 7c 7c 6e 2e 62 6f 64 79 2e 70 61 72 65 6e 74 4e Data Ascii: t.relative.left-this.offset.parent.left,V(window).scrollTop()-this.offset.relative.top-this.offset.parent.top,V(window).scrollLeft()+V(window).width()-this.helperProportions.width-this.margins.left,V(window).scrollTop()+(V(window).height()\|\|n.body.parentN
2024-03-28 19:20:35 UTC	16384	IN	Data Raw: 28 29 29 2c 74 68 69 73 2e 5f 61 70 70 6c 79 43 68 61 6e 67 65 73 28 29 29 29 2c 21 31 7d 2c 5f 6d 6f 75 73 65 53 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 72 65 73 69 7a 69 6e 67 3d 21 31 3b 76 61 72 20 65 2c 69 2c 73 2c 6e 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 68 65 6c 70 65 72 26 26 28 73 3d 28 65 3d 28 69 3d 74 68 69 73 2e 5f 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 6c 79 52 65 73 69 7a 65 45 6c 65 6d 65 6e 74 73 29 2e 6c 65 6e 67 74 68 26 26 2f 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 69 5b 30 5d 2e 6e 6f 64 65 4e 61 6d 65 29 29 26 26 74 68 69 73 2e 5f 68 61 73 53 63 72 6f 6c 6c 28 69 5b 30 5d 2c 22 6c 65 66 74 22 29 3f 30 3a 6f 2e 73 69 7a 65 44 69 66 66 2e 68 65 Data Ascii: ()),this._applyChanges())),!1},_mouseStop:function(t){this.resizing=!1;var e,i,s,n=this.options,o=this;return this._helper&&(s=(e=(i=this._proportionallyResizeElements).length&&/textarea/i.test(i[0].nodeName))&&this._hasScroll(i[0],"left")?0:o.sizeDiff.he

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49759	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:34 UTC	1485	OUT	GET /js/lib/jquery.validate-1.19.3.min.js HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:20:34 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 23950 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="742735022" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 2e 65 78 74 65 6e 64 28 64 2e 66 6e 2c 7b 76 61 6c 69 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 73 3b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 28 73 3d 64 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 Data Ascii: !function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof module&&module.exports?module.exports=t(require("jquery")):t(jQuery)}(function(d){d.extend(d.fn,{validate:function(t){var s;if(this.length)return(s=d.data(this[0],"va
2024-03-28 19:20:34 UTC	7566	IN	Data Raw: 75 62 6d 69 74 74 65 64 3d 21 31 29 3a 21 65 26 26 30 3d 3d 3d 74 68 69 73 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 26 26 74 68 69 73 2e 66 6f 72 6d 53 75 62 6d 69 74 74 65 64 26 26 28 64 28 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 69 6e 76 61 6c 69 64 2d 66 6f 72 6d 22 2c 5b 74 68 69 73 5d 29 2c 74 68 69 73 2e 66 6f 72 6d 53 75 62 6d 69 74 74 65 64 3d 21 31 29 7d 2c 70 72 65 76 69 6f 75 73 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 7c 7c 22 72 65 6d 6f 74 65 22 2c 64 2e 64 61 74 61 28 74 2c 22 70 72 65 76 69 6f 75 73 56 61 6c 75 65 22 29 7c 7c 64 2e 64 61 74 61 28 74 2c 22 70 72 65 76 Data Ascii: ubmitted=!1):!e&&0===this.pendingRequest&&this.formSubmitted&&(d(this.currentForm).triggerHandler("invalid-form",[this]),this.formSubmitted=!1)},previousValue:function(t,e){return e="string"==typeof e&&e\|\|"remote",d.data(t,"previousValue")\|\|d.data(t,"prev

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49761	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:34 UTC	1479	OUT	GET /js/lib/handlebars-4.7.7.min.js HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:20:34 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 77217 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-746269911" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 48 61 6e 64 6c 65 62 61 72 73 3d 65 28 29 3a 74 2e 48 61 6e 64 6c 65 62 61 72 73 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 3d 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Handlebars=e():t.Handlebars=e()}(this,function(){return s=[function(t,e,r){"use strict"
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 72 6f 67 72 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 73 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 70 72 6f 67 72 61 6d 73 5b 74 5d 2c 6f 3d 74 68 69 73 2e 66 6e 28 74 29 3b 72 65 74 75 72 6e 20 69 3d 65 7c 7c 6e 7c 7c 73 7c 7c 72 3f 61 28 74 68 69 73 2c 74 2c 6f 2c 65 2c 72 2c 73 2c 6e 29 3a 69 7c 7c 28 74 68 69 73 2e 70 72 6f 67 72 61 6d 73 5b 74 5d 3d 61 28 74 68 69 73 2c 74 2c 6f 29 29 7d 2c 64 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 3b 74 26 26 65 2d 2d 3b 29 74 3d 74 2e 5f 70 61 72 65 6e 74 3b 72 65 74 75 72 6e 20 74 7d 2c 6d 65 72 67 65 49 66 4e 65 65 64 65 64 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 7c 7c 65 3b 72 65 74 75 72 6e 20 72 3d 74 26 26 65 26 26 74 21 3d 3d 65 3f 66 2e 65 Data Ascii: rogram:function(t,e,r,s,n){var i=this.programs[t],o=this.fn(t);return i=e\|\|n\|\|s\|\|r?a(this,t,o,e,r,s,n):i\|\|(this.programs[t]=a(this,t,o))},data:function(t,e){for(;t&&e--;)t=t._parent;return t},mergeIfNeeded:function(t,e){var r=t\|\|e;return r=t&&e&&t!==e?f.e
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 38 3a 32 36 2c 37 39 3a 32 37 2c 38 30 3a 5b 31 2c 32 38 5d 2c 38 31 3a 5b 31 2c 32 39 5d 2c 38 32 3a 5b 31 2c 33 30 5d 2c 38 33 3a 5b 31 2c 33 31 5d 2c 38 34 3a 5b 31 2c 33 32 5d 2c 38 35 3a 5b 31 2c 33 34 5d 2c 38 36 3a 33 33 7d 2c 7b 32 30 3a 37 34 2c 33 33 3a 5b 32 2c 36 36 5d 2c 33 36 3a 39 36 2c 36 33 3a 39 37 2c 36 34 3a 37 35 2c 36 35 3a 5b 31 2c 34 33 5d 2c 36 39 3a 39 38 2c 37 30 3a 37 36 2c 37 31 3a 37 37 2c 37 32 3a 5b 31 2c 37 38 5d 2c 37 35 3a 5b 32 2c 36 36 5d 2c 37 38 3a 32 36 2c 37 39 3a 32 37 2c 38 30 3a 5b 31 2c 32 38 5d 2c 38 31 3a 5b 31 2c 32 39 5d 2c 38 32 3a 5b 31 2c 33 30 5d 2c 38 33 3a 5b 31 2c 33 31 5d 2c 38 34 3a 5b 31 2c 33 32 5d 2c 38 35 3a 5b 31 2c 33 34 5d 2c 38 36 3a 33 33 7d 2c 7b 32 30 3a 37 34 2c 32 32 3a 39 39 2c 32 33 Data Ascii: 8:26,79:27,80:[1,28],81:[1,29],82:[1,30],83:[1,31],84:[1,32],85:[1,34],86:33},{20:74,33:[2,66],36:96,63:97,64:75,65:[1,43],69:98,70:76,71:77,72:[1,78],75:[2,66],78:26,79:27,80:[1,28],81:[1,29],82:[1,30],83:[1,31],84:[1,32],85:[1,34],86:33},{20:74,22:99,23
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 70 74 4b 65 79 28 74 2c 65 29 2c 74 5b 65 5d 7c 7c 28 74 2e 73 70 6c 69 63 65 28 65 2c 31 29 2c 65 2d 2d 2c 72 2d 2d 29 7d 2c 61 63 63 65 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 7b 69 66 28 21 74 68 69 73 5b 74 2e 74 79 70 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 63 2e 64 65 66 61 75 6c 74 28 22 55 6e 6b 6e 6f 77 6e 20 74 79 70 65 3a 20 22 2b 74 2e 74 79 70 65 2c 74 29 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 73 2e 75 6e 73 68 69 66 74 28 74 68 69 73 2e 63 75 72 72 65 6e 74 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 74 3b 76 61 72 20 65 3d 74 68 69 73 5b 74 2e 74 79 70 65 5d 28 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 73 2e 73 68 69 66 74 Data Ascii: ptKey(t,e),t[e]\|\|(t.splice(e,1),e--,r--)},accept:function(t){if(t){if(!this[t.type])throw new c.default("Unknown type: "+t.type,t);this.current&&this.parents.unshift(this.current),this.current=t;var e=this[t.type](t);return this.current=this.parents.shift
2024-03-28 19:20:34 UTC	11681	IN	Data Raw: 70 65 6e 64 54 6f 42 75 66 66 65 72 28 74 2c 76 6f 69 64 20 30 2c 21 30 29 2c 22 20 7d 22 5d 29 2c 74 68 69 73 2e 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 69 73 53 69 6d 70 6c 65 26 26 74 68 69 73 2e 70 75 73 68 53 6f 75 72 63 65 28 5b 22 65 6c 73 65 20 7b 20 22 2c 74 68 69 73 2e 61 70 70 65 6e 64 54 6f 42 75 66 66 65 72 28 22 27 27 22 2c 76 6f 69 64 20 30 2c 21 30 29 2c 22 20 7d 22 5d 29 29 7d 2c 61 70 70 65 6e 64 45 73 63 61 70 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 75 73 68 53 6f 75 72 63 65 28 74 68 69 73 2e 61 70 70 65 6e 64 54 6f 42 75 66 66 65 72 28 5b 74 68 69 73 2e 61 6c 69 61 73 61 62 6c 65 28 22 63 6f 6e 74 61 69 6e 65 72 2e 65 73 63 61 70 65 45 78 70 72 65 73 73 69 6f 6e 22 29 2c 22 28 22 2c 74 68 69 73 2e 70 6f 70 53 74 61 63 Data Ascii: pendToBuffer(t,void 0,!0)," }"]),this.environment.isSimple&&this.pushSource(["else { ",this.appendToBuffer("''",void 0,!0)," }"]))},appendEscaped:function(){this.pushSource(this.appendToBuffer([this.aliasable("container.escapeExpression"),"(",this.popStac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49763	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:34 UTC	1487	OUT	GET /js/lib/handlebars.runtime-4.7.7.min.js HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:20:34 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 18822 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="2023546053" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 48 61 6e 64 6c 65 62 61 72 73 3d 74 28 29 3a 65 2e 48 61 6e 64 6c 65 62 61 72 73 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.Handlebars=t():e.Handlebars=t()}(this,function(){return n=[function(e,t,r){"use strict"
2024-03-28 19:20:34 UTC	2438	IN	Data Raw: 65 2e 68 65 6c 70 65 72 73 29 2c 6f 3d 66 2c 61 28 6e 3d 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 6e 5b 65 5d 3b 6e 5b 65 5d 3d 28 74 3d 6f 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 2c 67 2e 77 72 61 70 48 65 6c 70 65 72 28 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 2e 65 78 74 65 6e 64 28 7b 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 3a 74 7d 2c 65 29 7d 29 29 7d 29 2c 66 2e 68 65 6c 70 65 72 73 3d 74 2c 6c 2e 75 73 65 50 61 72 74 69 61 6c 26 26 28 66 2e 70 61 72 74 69 61 6c 73 3d 66 2e 6d 65 72 67 65 49 66 4e 65 65 64 65 64 28 65 2e 70 61 72 74 69 61 6c 73 2c 73 2e 70 61 72 74 69 61 6c 73 29 29 2c 28 6c 2e 75 73 65 50 61 72 74 69 61 6c 7c 7c 6c 2e 75 73 65 44 65 63 6f 72 61 74 Data Ascii: e.helpers),o=f,a(n=t).forEach(function(e){var t,r=n[e];n[e]=(t=o.lookupProperty,g.wrapHelper(r,function(e){return d.extend({lookupProperty:t},e)}))}),f.helpers=t,l.usePartial&&(f.partials=f.mergeIfNeeded(e.partials,s.partials)),(l.usePartial\|\|l.useDecorat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49760	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:34 UTC	1486	OUT	GET /css/main.css?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; rxvt=1711655431367\|1711653631333; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=false%7C_load_%7C1%7C_load_%7C-%7C1711653628865%7C453631282_842%7Chttps%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2FloginTemp.html%3Fdata%3DpQ%2BaGAgOXbT9G%2FLWpC4zyJohffbTG2EuiTM9tbbmDOapbDHrXO4P2gNN13CGb0ba%7C%7C%7C%7C; dtPC=3$453631282_842h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:20:34 UTC	957	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:48:26 GMT Accept-Ranges: bytes Content-Length: 180129 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1779570975" Connection: close Content-Type: text/css Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 23 69 6e 4d 61 69 6e 2c 23 69 6e 4d 61 69 6e 20 2e 64 69 73 70 6c 61 79 44 69 76 2c 23 6f 75 74 4d 61 69 6e 2c 62 6f 64 79 7b 6d 69 6e 2d 77 69 64 74 68 3a 38 32 35 70 78 7d 2e 69 6e 66 6f 2d 74 6f 6f 6c 74 69 70 2c 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4c 75 63 69 64 61 20 53 61 6e 73 20 55 6e 69 63 6f 64 65 22 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 69 66 72 61 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c Data Ascii: @charset "UTF-8";#inMain,#inMain .displayDiv,#outMain,body{min-width:825px}.info-tooltip,html{font-family:"Lucida Sans Unicode",Arial,sans-serif}html{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;position:relative;height:100%}iframe{position:rel
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 2c 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 73 65 6c 65 63 74 2c 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 74 65 78 74 61 72 65 61 2c 2e 63 72 65 64 69 74 72 65 70 6f 72 74 2d 61 64 76 2d 75 70 64 61 74 65 73 20 2e 63 72 65 64 69 74 63 61 72 64 2d 63 6f 6e 74 65 6e 74 20 23 63 72 65 64 69 74 41 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 62 75 74 74 6f 6e 2c 2e 63 72 65 64 69 74 72 65 70 6f 72 74 2d 61 64 76 2d 75 70 64 61 74 65 73 20 2e 63 72 65 64 Data Ascii: ,.certificate-holders .certificate-holders-accordion .row-field select,.certificate-holders .certificate-holders-accordion .row-field textarea,.creditreport-adv-updates .creditcard-content #creditAccordion .row-field button,.creditreport-adv-updates .cred
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 20 2e 72 65 70 6f 72 74 2d 73 74 61 74 75 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 6f 6c 2d 31 35 2c 2e 73 65 72 76 69 63 65 57 69 64 67 65 74 44 69 61 6c 6f 67 20 2e 73 65 72 76 69 63 65 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 6f 6c 2d 31 35 2c 2e 75 70 67 72 61 64 65 2d 73 65 72 76 69 63 65 73 20 2e 64 69 73 70 6c 61 79 44 69 76 20 2e 73 65 72 76 69 63 65 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 6f 6c 2d 31 35 2c 2e 75 70 67 72 61 64 65 2d 73 65 72 76 69 63 65 73 20 2e 64 69 73 70 6c 61 79 44 69 76 20 2e 75 70 67 72 61 64 65 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 6f 6c 2d 31 35 2c 2e 77 69 64 67 65 74 2d 72 6f 77 66 69 65 6c Data Ascii: .report-status-accordion .row-field .col-15,.serviceWidgetDialog .service-accordion .row-field .col-15,.upgrade-services .displayDiv .service-accordion .row-field .col-15,.upgrade-services .displayDiv .upgrade-accordion .row-field .col-15,.widget-rowfiel
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 65 20 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 72 61 64 69 6f 20 23 61 70 70 72 61 69 73 61 6c 2c 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 20 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 2d 63 6f 6e 74 65 6e 74 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 72 61 64 69 6f 20 23 70 72 6f 70 65 72 74 79 2c 2e 6c 65 74 74 65 72 2d 67 65 6e 65 72 61 74 6f 72 20 2e 64 69 73 70 6c 61 79 44 69 76 20 2e 6c 65 74 74 65 72 67 65 6e 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 72 6f 77 2d 66 69 65 6c 64 20 2e 63 68 65 63 6b 62 6f 78 20 23 61 70 70 72 61 69 73 61 6c 2c 2e 6c 65 74 74 65 72 2d 67 65 6e 65 72 61 74 6f 72 20 2e 64 69 73 70 6c 61 79 44 69 76 20 2e 6c 65 74 74 65 72 67 65 6e 2d 61 63 Data Ascii: e .interfaceProfile-content .row-field .radio #appraisal,.interfaceProfile .interfaceProfile-content .row-field .radio #property,.letter-generator .displayDiv .lettergen-accordion .row-field .checkbox #appraisal,.letter-generator .displayDiv .lettergen-ac
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 63 68 65 63 6b 62 6f 78 2c 2e 68 6f 73 74 2d 62 72 6f 77 73 65 72 20 2e 68 6f 73 74 62 72 6f 77 73 65 72 2d 63 6f 6e 74 65 6e 74 20 23 68 6f 73 74 42 72 6f 77 73 65 72 41 63 63 6f 72 64 69 6f 6e 20 2e 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 63 68 65 63 6b 62 6f 78 2c 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 20 2e 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 2d 63 6f 6e 74 65 6e 74 20 23 69 6e 74 65 72 66 61 63 65 50 72 6f 66 69 6c 65 41 63 63 6f 72 64 69 6f 6e 20 2e 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 63 68 65 63 6b 62 6f 78 2c 2e 73 65 72 76 69 63 65 57 69 64 67 65 74 44 69 61 6c 6f 67 20 2e 73 65 72 76 69 63 65 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 77 69 64 Data Ascii: -accordion .widget-header-checkbox,.host-browser .hostbrowser-content #hostBrowserAccordion .widget-header-checkbox,.interfaceProfile .interfaceProfile-content #interfaceProfileAccordion .widget-header-checkbox,.serviceWidgetDialog .service-accordion .wid
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 20 23 68 6f 73 74 42 72 6f 77 73 65 72 41 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 2c 2e 68 6f 73 74 2d 62 72 6f 77 73 65 72 20 2e 68 6f 73 74 62 72 6f 77 73 65 72 2d 63 6f 6e 74 65 6e 74 20 23 68 6f 73 74 42 72 6f 77 73 65 72 41 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 65 64 30 65 61 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 6a 73 2f 6c 69 62 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2d 75 69 2d 31 2e 31 33 2e 32 2e 63 75 73 74 6f 6d 2e 63 75 70 65 72 74 69 6e 6f 2f 69 6d 61 67 65 73 Data Ascii: content #hostBrowserAccordion .ui-widget-content .ui-state-active,.host-browser .hostbrowser-content #hostBrowserAccordion .ui-widget-header .ui-state-active{border:1px solid #aed0ea;background:url(../js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images
2024-03-28 19:20:34 UTC	16384	IN	Data Raw: 61 75 74 6f 20 32 30 70 78 7d 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 7d 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 2c 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 2c 2e 63 65 72 74 69 66 69 63 61 74 65 2d 68 6f 6c 64 65 72 73 20 2e 63 65 72 74 69 Data Ascii: auto 20px}.certificate-holders .certificate-holders-accordion hr{border-top:1px solid #999}.certificate-holders .certificate-holders-accordion .ui-state-active,.certificate-holders .certificate-holders-accordion .ui-state-hover,.certificate-holders .certi
2024-03-28 19:20:35 UTC	16384	IN	Data Raw: 63 6c 69 65 6e 74 2d 69 6e 66 6f 20 75 6c 20 2e 63 6f 6c 2d 31 35 7b 77 69 64 74 68 3a 31 31 35 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 76 65 6e 64 6f 72 54 6f 67 67 6c 65 43 68 65 63 6b 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 36 70 78 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 73 75 62 6d 69 74 54 6c 42 74 6e 7b 77 69 64 74 68 3a 32 30 30 70 78 7d 23 74 72 61 64 65 4c 69 6e 65 41 55 44 69 61 6c 6f 67 7b 70 61 64 64 69 6e 67 3a 2e 35 65 6d 20 31 2e 37 65 6d 7d 23 74 72 61 64 65 4c 69 6e 65 41 55 44 69 61 6c 6f 67 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 74 72 61 64 65 4c 69 6e 65 41 55 44 69 61 6c 6f 67 20 69 6e 70 75 74 2c 23 74 72 61 64 65 4c 69 6e 65 41 55 44 69 61 6c 6f 67 20 73 65 6c Data Ascii: client-info ul .col-15{width:115px;word-wrap:break-word}.vendorToggleCheck{margin-left:406px;display:none}#submitTlBtn{width:200px}#tradeLineAUDialog{padding:.5em 1.7em}#tradeLineAUDialog label{display:block}#tradeLineAUDialog input,#tradeLineAUDialog sel
2024-03-28 19:20:35 UTC	16384	IN	Data Raw: 65 54 61 62 6c 65 20 23 64 65 6c 69 6e 71 75 65 6e 63 79 4c 69 6e 65 73 20 74 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 69 6e 71 75 69 72 79 49 6e 66 6f 20 2e 69 6e 71 75 69 72 79 54 61 62 6c 65 20 2e 74 72 61 64 65 6c 69 6e 65 54 61 62 6c 65 20 2e 61 64 76 2d 75 70 64 61 74 65 2d 64 65 74 61 69 6c 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 7d 2e 69 6e 71 75 69 72 79 49 6e 66 6f 20 2e 69 6e 71 75 69 72 79 54 61 62 6c 65 20 2e 74 72 61 64 65 6c 69 6e 65 54 61 62 6c 65 20 2e 61 64 76 2d 75 70 64 61 74 65 2d 64 65 74 61 69 6c 73 20 2e 75 70 64 61 74 65 2d 66 69 65 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 Data Ascii: eTable #delinquencyLines td{border-bottom:1px solid #000;line-height:22px}.inquiryInfo .inquiryTable .tradelineTable .adv-update-details{display:none;font-size:11px}.inquiryInfo .inquiryTable .tradelineTable .adv-update-details .update-field{border-top:1p
2024-03-28 19:20:35 UTC	16384	IN	Data Raw: 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 20 35 70 78 20 30 20 30 7d 2e 6e 74 6c 66 43 72 65 64 69 74 48 69 73 74 6f 72 79 20 2e 6e 74 6c 66 43 72 65 64 69 74 48 69 73 74 6f 72 79 52 6f 77 20 2e 68 65 61 64 65 72 52 6f 77 20 2e 68 65 61 64 65 72 52 6f 77 4c 65 66 74 20 2e 64 69 76 69 64 65 72 4c 65 66 74 7b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 6e 74 6c 66 43 72 65 64 69 74 48 69 73 74 6f 72 79 20 2e 6e 74 6c 66 43 72 65 64 69 74 48 69 73 74 6f 72 79 52 6f 77 20 2e 68 65 61 64 65 72 52 6f 77 20 2e 68 65 61 64 65 72 52 6f 77 4c 65 66 74 20 2e 70 68 6f 6e 65 4e 75 6d 62 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 56 65 72 64 61 6e 61 2c 47 65 6e 65 76 61 2c 68 65 6c 76 65 74 69 63 61 2c 73 61 Data Ascii: oat:left;margin:0 5px 0 0}.ntlfCreditHistory .ntlfCreditHistoryRow .headerRow .headerRowLeft .dividerLeft{margin:0 5px;float:left}.ntlfCreditHistory .ntlfCreditHistoryRow .headerRow .headerRowLeft .phoneNumber{font-family:Arial,Verdana,Geneva,helvetica,sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49762	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:34 UTC	1260	OUT	GET /hbs/beforeLoginFooter.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
2024-03-28 19:20:34 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 2872 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2014645816" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:34 UTC	2872	IN	Data Raw: 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 3d 20 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 5b 22 62 65 66 6f 72 65 4c 6f 67 69 6e 46 6f 6f 74 65 72 22 5d 20 3d 20 48 61 6e 64 6c 65 62 61 72 73 2e 74 65 6d 70 6c 61 74 65 28 7b 22 31 22 3a 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 74 61 69 6e 65 72 2c 64 65 70 74 68 30 2c 68 65 6c 70 65 72 73 2c 70 61 72 74 69 61 6c 73 2c 64 61 74 61 29 20 7b 0a 20 20 20 20 76 61 72 20 68 65 6c 70 65 72 3b 0a 0a 20 20 72 65 74 75 72 6e 20 22 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 66 6c 6f 61 74 4c 65 66 74 5c 22 3e 54 68 69 73 20 63 6f 6e 74 65 6e 74 20 69 73 20 63 6f 70 79 72 69 67 68 74 65 Data Ascii: this["hbTemplates"] = this["hbTemplates"] \|\| {};this["hbTemplates"]["beforeLoginFooter"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) { var helper; return " <span class=\"floatLeft\">This content is copyrighte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49765	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:35 UTC	1260	OUT	GET /hbs/beforeLoginHeader.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
2024-03-28 19:20:35 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:35 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 1985 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1508881883" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:35 UTC	1985	IN	Data Raw: 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 3d 20 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 5b 22 62 65 66 6f 72 65 4c 6f 67 69 6e 48 65 61 64 65 72 22 5d 20 3d 20 48 61 6e 64 6c 65 62 61 72 73 2e 74 65 6d 70 6c 61 74 65 28 7b 22 63 6f 6d 70 69 6c 65 72 22 3a 5b 37 2c 22 3e 3d 20 34 2e 30 2e 30 22 5d 2c 22 6d 61 69 6e 22 3a 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 74 61 69 6e 65 72 2c 64 65 70 74 68 30 2c 68 65 6c 70 65 72 73 2c 70 61 72 74 69 61 6c 73 2c 64 61 74 61 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 22 3c 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 3e 5c 6e 20 20 20 20 24 28 20 64 6f 63 75 Data Ascii: this["hbTemplates"] = this["hbTemplates"] \|\| {};this["hbTemplates"]["beforeLoginHeader"] = Handlebars.template({"compiler":[7,">= 4.0.0"],"main":function(container,depth0,helpers,partials,data) { return "<script type=\"text/javascript\">\n $( docu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49766	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:35 UTC	1267	OUT	GET /hbs/helpers/handlebarHelpers.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
2024-03-28 19:20:35 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:35 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 26329 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="350930827" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:36 UTC	16384	IN	Data Raw: 48 61 6e 64 6c 65 62 61 72 73 2e 72 65 67 69 73 74 65 72 48 65 6c 70 65 72 28 22 61 64 76 65 72 74 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 61 29 7b 76 61 72 20 74 3d 22 22 3b 72 65 74 75 72 6e 20 74 3d 65 26 26 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 3f 28 65 3d 65 2e 73 70 6c 69 74 28 72 29 29 5b 30 5d 2b 27 20 3c 61 20 68 72 65 66 3d 22 27 2b 61 2b 27 22 20 63 6c 61 73 73 3d 22 72 65 64 22 3e 27 2b 72 2b 22 3c 2f 61 3e 22 2b 65 5b 31 5d 2b 22 3c 62 72 3e 22 3a 74 7d 29 2c 48 61 6e 64 6c 65 62 61 72 73 2e 72 65 67 69 73 74 65 72 48 65 6c 70 65 72 28 22 73 68 6f 77 53 75 62 48 65 61 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 3d 72 2e 64 61 74 61 2e 72 6f 6f 74 2e 67 65 74 41 64 76 61 6e 63 65 64 55 70 64 61 74 65 5b 30 5d 2e 61 Data Ascii: Handlebars.registerHelper("advertise",function(e,r,a){var t="";return t=e&&0!==e.length?(e=e.split(r))[0]+' <a href="'+a+'" class="red">'+r+"</a>"+e[1]+"<br>":t}),Handlebars.registerHelper("showSubHeader",function(e,r){r=r.data.root.getAdvancedUpdate[0].a
2024-03-28 19:20:36 UTC	9945	IN	Data Raw: 72 73 2e 72 65 67 69 73 74 65 72 48 65 6c 70 65 72 28 22 62 61 73 69 63 45 46 43 6f 6e 66 69 67 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 61 29 7b 76 61 72 20 74 3d 22 22 2c 6e 3d 22 22 2c 69 3d 22 22 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 3d 22 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 27 75 69 2d 62 75 74 74 6f 6e 20 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 20 75 69 2d 77 69 64 67 65 74 20 62 74 6e 20 62 61 73 69 63 43 6f 6e 66 69 67 27 20 76 61 6c 75 65 3d 27 22 2b 72 2b 22 27 3e 22 2b 28 72 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 29 5b 30 5d 2b 22 3c 2f 62 75 74 74 6f 6e 3e 22 2c 69 3d 22 3c 6c 61 62 65 6c 3e 22 2b 72 5b 31 5d 2b 22 3c 2f 6c 61 62 65 6c 3e 22 29 2c 74 2b 3d 6e 2b 69 2c 6e 65 77 20 48 61 6e 64 6c 65 62 61 72 73 2e 53 61 66 65 53 74 72 Data Ascii: rs.registerHelper("basicEFConfig",function(e,r,a){var t="",n="",i="";return e&&(n="<button class='ui-button ui-corner-all ui-widget btn basicConfig' value='"+r+"'>"+(r=e.split("-"))[0]+"</button>",i="<label>"+r[1]+"</label>"),t+=n+i,new Handlebars.SafeStr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49768	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:35 UTC	1248	OUT	GET /hbs/login.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
2024-03-28 19:20:35 UTC	967	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:35 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 8071 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="172124205" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:35 UTC	8071	IN	Data Raw: 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 3d 20 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 5b 22 6c 6f 67 69 6e 22 5d 20 3d 20 48 61 6e 64 6c 65 62 61 72 73 2e 74 65 6d 70 6c 61 74 65 28 7b 22 31 22 3a 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 74 61 69 6e 65 72 2c 64 65 70 74 68 30 2c 68 65 6c 70 65 72 73 2c 70 61 72 74 69 61 6c 73 2c 64 61 74 61 29 20 7b 0a 20 20 20 20 76 61 72 20 73 74 61 63 6b 31 2c 20 68 65 6c 70 65 72 2c 20 61 6c 69 61 73 31 3d 64 65 70 74 68 30 20 21 3d 20 6e 75 6c 6c 20 3f 20 64 65 70 74 68 30 20 3a 20 28 63 6f 6e 74 61 69 6e 65 72 2e 6e 75 6c 6c 43 6f 6e 74 65 78 74 20 7c 7c 20 7b 7d 29 2c 20 61 6c 69 61 73 32 3d 68 65 6c 70 Data Ascii: this["hbTemplates"] = this["hbTemplates"] \|\| {};this["hbTemplates"]["login"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) { var stack1, helper, alias1=depth0 != null ? depth0 : (container.nullContext \|\| {}), alias2=help

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49767	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:35 UTC	1265	OUT	GET /js/modules/login/login.min.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
2024-03-28 19:20:35 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:35 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 12163 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-613619227" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:35 UTC	12163	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 49 66 74 72 61 64 65 4c 69 6e 65 4f 72 55 70 67 72 61 64 65 41 63 63 65 73 73 28 29 7b 76 61 72 20 65 3d 67 65 74 43 6f 6f 6b 69 65 28 22 6e 65 78 74 50 61 67 65 50 61 72 61 6d 22 29 3b 72 65 74 75 72 6e 20 65 26 26 28 22 74 72 61 64 65 6c 69 6e 65 41 55 22 3d 3d 65 7c 7c 22 75 70 67 72 61 64 65 4f 72 64 65 72 22 3d 3d 65 29 7d 63 6c 65 61 72 43 6f 6f 6b 69 65 73 28 29 2c 24 2e 66 6e 2e 6c 6f 61 64 4c 6f 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 71 75 65 72 79 53 74 72 69 6e 67 55 74 69 6c 28 29 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 28 22 52 45 46 22 29 3b 74 3f 28 74 3d 22 3f 52 45 46 3d 22 2b 74 2c 6d 61 6b 65 41 6a 61 78 43 61 6c 6c 28 22 6c 6f 61 64 4c 6f 67 69 6e 22 Data Ascii: function checkIftradeLineOrUpgradeAccess(){var e=getCookie("nextPageParam");return e&&("tradelineAU"==e\|\|"upgradeOrder"==e)}clearCookies(),$.fn.loadLogin=function(){var e,t=queryStringUtil().getQueryParameter("REF");t?(t="?REF="+t,makeAjaxCall("loadLogin"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49764	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:36 UTC	1254	OUT	GET /hbs/showMessage.js?1705934910 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
2024-03-28 19:20:36 UTC	969	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:36 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 7082 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1187588813" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:36 UTC	7082	IN	Data Raw: 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 3d 20 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 5b 22 73 68 6f 77 4d 65 73 73 61 67 65 22 5d 20 3d 20 48 61 6e 64 6c 65 62 61 72 73 2e 74 65 6d 70 6c 61 74 65 28 7b 22 31 22 3a 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 74 61 69 6e 65 72 2c 64 65 70 74 68 30 2c 68 65 6c 70 65 72 73 2c 70 61 72 74 69 61 6c 73 2c 64 61 74 61 29 20 7b 0a 20 20 20 20 76 61 72 20 73 74 61 63 6b 31 2c 20 68 65 6c 70 65 72 3b 0a 0a 20 20 72 65 74 75 72 6e 20 22 09 09 09 20 20 20 20 20 20 20 20 09 3c 73 70 61 6e 20 69 64 3d 5c 22 65 72 72 6f 72 4d 73 67 54 65 78 74 53 65 72 76 65 72 5c 22 3e 22 0a 20 20 20 20 2b 20 28 28 73 74 61 63 Data Ascii: this["hbTemplates"] = this["hbTemplates"] \|\| {};this["hbTemplates"]["showMessage"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) { var stack1, helper; return " <span id=\"errorMsgTextServer\">" + ((stac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49769	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:36 UTC	1433	OUT	POST /gateway/loadLogin HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 57 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-XSRF-TOKEN: slc: sec-ch-ua-mobile: ?0 pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtPC=3$453632939_858h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtSa=-; rxvt=1711655432943\|1711653631333
2024-03-28 19:20:36 UTC	57	OUT	Data Raw: 72 65 71 75 65 73 74 54 79 70 65 3d 6f 6e 53 75 62 6d 69 74 26 62 72 6f 77 73 65 72 3d 6e 65 77 26 75 73 65 72 5f 63 6c 69 65 6e 74 3d 26 75 73 65 72 5f 6c 6f 67 49 64 3d Data Ascii: requestType=onSubmit&browser=new&user_client=&user_logId=
2024-03-28 19:20:37 UTC	1920	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Origin: https://www.creditbureaureports.com Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Set-Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; Path=/ Set-Cookie: XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; Path=/; Secure Set-Cookie: JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; Path=/; HttpOnly; Secure Set-Cookie: ut=; Max-Age=1711740037; Path=/; Expires=Sat, 25 Jun 2078 14:41:14 GMT; Secure Set-Cookie: slc=; Max-Age=10; Path=/; Expires=Thu, 28 Mar 2024 19:20:47 GMT; Secure Content-Type: application/json; charset=utf-8 Content-Length: 551 ETag: W/"227-m0ndVzTGmmGIrgmWq7wxFvhUGwU:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="-477370921", dtTao;desc="1" Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 19:20:37 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:37 UTC	551	IN	Data Raw: 7b 22 6c 6f 67 6f 66 66 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 70 61 67 65 4d 65 73 73 61 67 65 73 22 3a 5b 22 59 6f 75 20 68 61 76 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 6c 6f 67 67 65 64 20 6f 75 74 2e 22 5d 2c 22 6e 65 78 74 50 61 67 65 22 3a 22 6c 6f 67 69 6e 22 2c 22 72 65 64 69 72 65 63 74 55 52 4c 22 3a 22 22 2c 22 6c 6f 67 67 65 64 55 73 65 72 22 3a 22 22 7d 2c 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 2c 22 6c 6f 67 69 6e 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 70 61 67 65 4d 65 73 73 61 67 65 73 22 3a 5b 5d 2c 22 6e 65 78 74 50 61 67 65 22 3a 22 Data Ascii: {"logoff":{"success":true,"pageMessages":["You have successfully logged out."],"nextPage":"login","redirectURL":"","loggedUser":""},"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"},"login":{"success":true,"pageMessages":[],"nextPage":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49770	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:37 UTC	1296	OUT	GET /favicon.ico HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=94BC94F8F7FB805B45A17CC950F2CECF; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:20:37 UTC	447	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 19:20:37 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1036998922" Connection: close Set-Cookie: TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01; Path=/; Domain=.www.creditbureaureports.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49771	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:37 UTC	1708	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:38 UTC	1050	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 445 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1864033095" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:38 UTC	445	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 64 10 02 00 00 00 98 de 11 74 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 07 74 49 4d 45 07 e6 0b 09 0d 07 19 25 e3 81 f0 00 00 00 c1 49 44 41 54 28 cf e5 90 3d 6a c2 00 18 40 1f 1f b8 74 29 82 90 4e ed e0 e0 50 1c 85 74 ed 11 ba 25 f4 0e 3d 43 ce a0 f4 06 66 72 77 d4 45 4c a7 76 29 cd 94 40 45 0b e6 a7 6d 48 93 98 08 9f 83 87 50 e8 f4 96 07 0f 1e d9 ac 5a ec 5f 04 00 fe 0d 02 12 2a 51 1b 97 0f c1 d6 31 be a8 c5 18 9f ef 55 39 d8 1b a4 75 31 6d 42 d2 76 61 36 ae a8 a1 0e 1e f1 f5 5f af e9 13 Data Ascii: PNGIHDRdtgAMAa cHRMz&u0`:pQ<bKGDXtIME%IDAT(=j@t)NPt%=CfrwELv)@EmHPZ_*Q1U9u1mBva6_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49772	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:37 UTC	1698	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; nextPageParam=oOs%2BKFwYcFaCxdKAWvn0%2Bg%3D%3D; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:38 UTC	1051	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 404 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2092550974" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:38 UTC	404	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 01 90 10 02 00 00 00 b0 aa 41 cf 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 07 74 49 4d 45 07 e6 0b 09 0d 07 19 25 e3 81 f0 00 00 00 98 49 44 41 54 48 c7 ed cf 21 0e 82 00 18 05 e0 f7 de 66 73 d3 6a 70 63 1a 35 18 34 13 e4 10 6c 26 bd 11 07 30 38 4e 40 32 3b 3c 01 05 37 31 e8 1c 06 1c 41 12 48 f0 14 4e c3 9f be fc e1 1e bd fc 77 2e 00 00 0c c3 30 8c 6f 83 34 2d 8a ba c6 c9 7f 4e 9b ae 38 42 80 a9 b8 e4 0e 33 64 4e d9 6b b6 b8 c4 e5 b5 c9 a4 90 09 5d e9 c8 2b 3c 31 e6 0d 9e 14 32 81 8b 7c 5e 0d Data Ascii: PNGIHDRAgAMAa cHRMz&u0`:pQ<bKGDXtIME%IDATH!fsjpc54l&08N@2;<71AHNw.0o4-N8B3dNk]+<12\|^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49774	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:37 UTC	1590	OUT	GET /img/favorites.fw.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D
2024-03-28 19:20:38 UTC	1053	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 53469 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1317298607" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:38 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 34 2f 32 31 2f 31 36 d8 96 63 02 00 00 08 de 70 72 56 57 78 9c ed 5a 5d 76 a3 ca 11 d6 08 18 ba 19 60 44 ee d8 6a 5b dd b8 91 62 59 f3 98 a3 8d 64 0b 79 88 f2 7a b7 c3 66 b2 80 1c f6 92 1d 84 7c 55 0d 32 d8 92 2d 5b 8c 38 f7 1e 15 20 59 80 f9 7e aa ba 69 5a fa cf ff fe fd df c9 ef 93 df 6b 8a aa ae cb ba de d5 f5 b6 ae 27 75 55 d5 55 59 57 bb ba da d6 d5 a4 2e cb Data Ascii: PNGIHDRcsBIT\|dpHYsZtEXtSoftwareAdobe Fireworks CS6tEXtCreation Time04/21/16cprVWxZ]v`Dj[bYdyzf\|U2-[8 Y~iZk'uUUYW.
2024-03-28 19:20:38 UTC	16384	IN	Data Raw: 9c 8a 89 73 2a 3f 63 b1 ac ec 84 cc 36 9b 97 77 e0 e9 df 48 0c ba d3 8a 99 07 b8 e9 88 ba 8f 51 81 10 52 13 57 3b 45 9b d3 c2 f5 85 66 bb 58 ee 52 04 79 39 a6 cb a8 f2 10 7b f4 81 ed 67 a2 7b 1c ba 58 ff 09 ee 14 52 91 1e 09 a2 9e e0 fa 32 5f f7 51 91 12 84 bf 6f d6 fa df 94 4c c8 70 2c a2 ff 75 be 3e 44 b1 e7 d7 5d f0 d6 20 2f 41 cb c4 cc bd ad 6c 56 bf 4d de d6 66 f0 e6 d8 d5 63 fc 04 f7 ec 91 3d 07 24 c2 bb 9d e5 ae 10 87 24 b8 1b b8 56 67 a2 c6 d1 b1 7e a2 71 4c 5c 1f b1 50 eb 13 74 09 75 2c c8 f3 d0 f2 22 94 48 10 f9 f0 5a 70 ff 0e 91 cc 46 9e d9 e2 17 d2 d8 f2 57 d0 c3 e2 5c f7 7d e5 d3 ff 0b a9 af bc 2f cc c2 5f 11 1e bb 06 aa d7 53 b3 9e 13 9e 29 fb f0 d4 67 8c af 9f e3 0a f0 3a b8 41 8c 79 a8 79 cc c3 58 41 0a ff 82 7e be d8 4f 11 fd 8c 2a 9f f3 Data Ascii: s?c6wHQRW;EfXRy9{g{XR2_QoLp,u>D] /AlVMfc=$$Vg~qL\Ptu,"HZpFW\}/_S)g:AyyXA~O
2024-03-28 19:20:38 UTC	16384	IN	Data Raw: 8b e0 b6 49 15 ac 45 c7 38 58 c9 f8 49 72 d5 c4 0a 34 a8 13 96 2a 79 9e fd 62 1f cf 7f 8b cb bc d3 1a 2f 23 89 0d 78 b0 dd d1 dc 3b c6 32 52 7e 17 00 aa 8b 01 f5 e2 19 d6 e1 4f 37 cf ed a2 68 ef 93 d5 98 55 8e f3 5e 08 a7 6b 04 f4 0d bb 9a a5 e3 a7 28 e4 be a0 2c a5 88 9f 32 18 87 fc d7 29 cf 43 07 f7 3a 28 d9 90 3b 97 1c 51 33 3e bd fe 34 e1 29 fa 25 88 f9 d4 62 36 ee 17 42 38 01 fd 5c a0 14 1f b3 00 70 b5 f5 9a c9 ec ab 65 3c ea ba ed 53 e9 b9 10 90 82 d8 ec da 2b d3 6a 73 f0 c4 70 8c 84 b8 08 df 25 3c 26 19 74 7b 33 3f 8c a3 08 ac 7c 4e 06 29 70 37 11 62 99 d4 02 7f ee e3 e9 3f d4 61 a4 69 e4 44 13 b5 57 6c 08 7f 92 16 01 a1 bd f0 88 58 97 9f 02 c0 5a da 3e 3b 75 f8 9d 29 a4 6b 6f 03 29 23 57 e1 c8 cd 53 9a 6e ae 63 52 bd 78 f4 94 7b 5b c0 73 58 76 31 Data Ascii: IE8XIr4*yb/#x;2R~O7hU^k(,2)C:(;Q3>4)%b6B8\pe<S+jsp%<&t{3?\|N)p7b?aiDWlXZ>;u)ko)#WSncRx{[sXv1
2024-03-28 19:20:38 UTC	4317	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49773	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:37 UTC	1694	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-icons_ffffff_256x240.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/jquery-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D
2024-03-28 19:20:38 UTC	1051	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 6487 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1592278533" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:38 UTC	6487	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 f0 08 04 00 00 00 45 9e 72 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 00 07 74 49 4d 45 07 e6 0b 09 0d 07 1a bc ea d0 4a 00 00 18 3a 49 44 41 54 78 da ed 5d 6d 8c 5d c7 59 7e 8e 13 29 2a c1 c1 7c b9 26 71 b2 92 7f 34 01 21 4b be 4b 24 14 84 64 14 a1 6b 7e 04 15 95 c0 b5 23 3e 1a a3 75 aa d2 aa 08 c8 6e ac bb 3f c2 9a 76 ef 82 42 52 17 69 5d 39 90 3f 37 bb 5a 17 a5 b8 3f 58 53 9b 54 a6 31 16 ee ae 03 a5 38 a5 6a da b5 43 b7 e6 4f 69 fe 90 22 e1 97 1f e7 6b 3e de f9 38 e7 dc bb f7 ee ce 3c a3 dd 7b ef 79 Data Ascii: PNGIHDREr@gAMAa cHRMz&u0`:pQ<bKGDtIMEJ:IDATx]m]Y~)*\|&q4!KK$dk~#>un?vBRi]9?7Z?XST18jCOi"k>8<{y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49776	99.83.176.153	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:37 UTC	564	OUT	GET /2.2/w/w-893076/sync/js/ HTTP/1.1 Host: api-cbci.nd.nudatasecurity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 19:20:38 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Content-Type: application/javascript Content-Length: 53273 Connection: close Vary: Accept-Encoding x-xss-protection: 0 x-frame-options: SAMEORIGIN X-NDS-DataContractRequirement0: Placement, Placement page has not been detected. X-NDS-DataContractRequirement1: Placement, No matching URL placement for w-893076 at https://www.creditbureaureports.com/. X-NDS-DataContractRequirement2: Placement, Placement page number has not been detected. Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Cache-Control: no-store, max-age=0 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 19:20:38 UTC	3440	IN	Data Raw: 76 61 72 20 6e 64 6a 73 53 74 61 74 69 63 56 65 72 73 69 6f 6e 3d 22 73 79 6e 63 2d 31 22 2c 6e 73 6c 79 79 69 64 74 79 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 73 62 6f 70 69 66 6b 7a 28 29 7b 76 61 72 20 61 3d 22 22 3b 69 66 28 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 7c 7c 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 7c 7c 77 69 6e 64 6f 77 2e 5f 5f 70 68 61 6e 74 6f 6d 61 73 29 61 2b 3d 22 70 22 3b 77 69 6e 64 6f 77 2e 42 75 66 66 65 72 26 26 28 61 2b 3d 22 6e 22 29 3b 77 69 6e 64 6f 77 2e 65 6d 69 74 26 26 28 61 2b 3d 22 63 22 29 3b 77 69 6e 64 6f 77 2e 73 70 61 77 6e 26 26 28 61 2b 3d 22 72 22 29 3b 77 69 6e 64 6f 77 2e 77 65 62 64 72 69 76 65 72 26 26 28 61 2b 3d 22 73 22 29 3b 69 66 28 77 69 6e 64 6f 77 2e 64 6f 6d 41 75 74 6f 6d Data Ascii: var ndjsStaticVersion="sync-1",nslyyidtyi={};function nsbopifkz(){var a="";if(window._phantom\|\|window.callPhantom\|\|window.__phantomas)a+="p";window.Buffer&&(a+="n");window.emit&&(a+="c");window.spawn&&(a+="r");window.webdriver&&(a+="s");if(window.domAutom
2024-03-28 19:20:38 UTC	12288	IN	Data Raw: 6e 22 29 2c 61 5b 65 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 73 74 75 6b 28 61 29 7b 76 61 72 20 62 3d 7b 72 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 45 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 45 33 2c 73 69 64 3a 6e 64 73 2e 63 6f 6e 66 69 67 2e 73 65 73 73 69 6f 6e 49 64 2c 70 3a 6e 73 62 6f 70 69 66 6b 7a 28 29 2c 62 64 3a 6e 73 74 6e 61 67 76 28 29 2c 66 6f 72 63 65 49 50 3a 6e 64 73 2e 63 6f 6e 66 69 67 2e 66 6f 72 63 65 49 50 2c 64 74 72 6b 3a 6e 64 73 2e 63 6f 6e 66 69 67 2e 64 6f 4e 6f 74 54 72 61 63 6b 2c 6a 73 76 3a 76 65 72 73 69 6f 6e 2c 77 74 3a 22 22 2c 77 76 3a 6e 64 73 57 69 64 67 65 74 56 65 72 73 69 6f Data Ascii: n"),a[e].appendChild(d)),d.setAttribute("value",c)}function nstuk(a){var b={r:Math.floor(1E6*Math.random())+1E3,sid:nds.config.sessionId,p:nsbopifkz(),bd:nstnagv(),forceIP:nds.config.forceIP,dtrk:nds.config.doNotTrack,jsv:version,wt:"",wv:ndsWidgetVersio
2024-03-28 19:20:38 UTC	16384	IN	Data Raw: 72 20 63 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 73 67 75 6b 6b 2e 6e 64 73 69 64 43 6f 6e 66 69 67 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 73 67 75 6b 6b 2e 6e 64 73 69 64 43 6f 6e 66 69 67 2e 73 65 63 75 72 65 3f 6e 73 67 75 6b 6b 2e 6e 64 73 69 64 43 6f 6e 66 69 67 2e 73 65 63 75 72 65 3a 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 73 61 6d 68 6e 66 6b 69 28 61 29 29 7b 76 61 72 20 64 3d 61 2b 22 5c 78 33 64 22 2b 62 2b 22 3b 6d 61 78 2d 61 67 65 5c 78 33 64 22 2b 6e 73 66 6b 67 6a 6f 71 2b 22 3b 20 64 6f 6d 61 69 6e 5c 78 33 64 20 2e 22 2b 6e 73 6c 79 79 69 28 29 2b 22 20 3b 20 70 61 74 68 5c 78 33 64 2f 22 3b 21 30 3d 3d 3d 63 26 26 28 64 2b 3d 22 3b 20 73 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 5c 78 Data Ascii: r c="object"===typeof nsgukk.ndsidConfig&&"boolean"===typeof nsgukk.ndsidConfig.secure?nsgukk.ndsidConfig.secure:!1;if(null===nsamhnfki(a)){var d=a+"\x3d"+b+";max-age\x3d"+nsfkgjoq+"; domain\x3d ."+nslyyi()+" ; path\x3d/";!0===c&&(d+="; secure; SameSite\x
2024-03-28 19:20:38 UTC	12288	IN	Data Raw: 75 72 6e 20 64 2e 74 65 73 74 28 61 29 3f 27 22 27 2b 61 2e 72 65 70 6c 61 63 65 28 64 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 67 5b 61 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 3f 62 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 61 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2e 73 6c 69 63 65 28 2d 34 29 7d 29 2b 27 22 27 3a 27 22 27 2b 61 2b 27 22 27 7d 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 72 65 74 75 72 6e 20 31 30 3e 61 3f 22 30 22 2b 61 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 63 28 62 2c 64 29 7b 76 61 72 20 6e 3d 65 2c 68 3d 64 5b 62 5d 3b 68 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 68 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 Data Ascii: urn d.test(a)?'"'+a.replace(d,function(a){var b=g[a];return"string"===typeof b?b:"\\u"+("0000"+a.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+a+'"'}function b(a){return 10>a?"0"+a:a}function c(b,d){var n=e,h=d[b];h&&"object"===typeof h&&"function"===ty
2024-03-28 19:20:38 UTC	8873	IN	Data Raw: 3d 32 3d 3d 61 2e 62 75 74 74 6f 6e 29 3b 76 61 72 20 65 3d 67 28 61 29 2c 74 3d 7b 7d 3b 74 2e 61 3d 61 3b 74 5b 76 5d 3d 62 3b 74 2e 63 3d 64 3b 74 2e 64 3d 63 3b 74 2e 65 3d 65 2e 78 3b 74 2e 66 3d 65 2e 79 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 62 3d 63 28 29 3b 69 66 28 21 31 21 3d 3d 46 29 7b 76 61 72 20 64 3d 4d 61 74 68 2e 61 62 73 28 50 2e 78 2d 46 2e 70 6f 73 2e 78 29 2a 75 61 2c 65 3d 4d 61 74 68 2e 61 62 73 28 50 2e 79 2d 46 2e 70 6f 73 2e 79 29 2a 74 61 2c 66 3d 28 62 2d 46 2e 74 69 6d 65 29 2f 31 45 33 2c 67 3d 61 28 64 2f 66 2c 34 2c 21 30 29 2c 68 3d 0a 61 28 65 2f 66 2c 34 2c 21 30 29 3b 65 3d 4d 61 74 68 2e 73 71 72 74 28 4d 61 74 68 2e 70 6f 77 28 64 2c 32 29 2b 4d 61 74 68 2e 70 6f 77 28 65 2c Data Ascii: =2==a.button);var e=g(a),t={};t.a=a;t[v]=b;t.c=d;t.d=c;t.e=e.x;t.f=e.y;return t}function f(){var b=c();if(!1!==F){var d=Math.abs(P.x-F.pos.x)ua,e=Math.abs(P.y-F.pos.y)ta,f=(b-F.time)/1E3,g=a(d/f,4,!0),h=a(e/f,4,!0);e=Math.sqrt(Math.pow(d,2)+Math.pow(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49777	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:38 UTC	1224	OUT	GET /gateway/loadLogin HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4de452521b29133b61d824cc86f58b217afc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965b060ade48c072cfb14fa732bc508bf01
2024-03-28 19:20:38 UTC	1645	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Set-Cookie: ut=; Max-Age=10; Path=/; Expires=Thu, 28 Mar 2024 19:20:48 GMT; Secure Set-Cookie: ut=; Max-Age=1711740038; Path=/; Expires=Sat, 25 Jun 2078 14:41:16 GMT; Secure Set-Cookie: slc=; Max-Age=10; Path=/; Expires=Thu, 28 Mar 2024 19:20:48 GMT; Secure Content-Type: text/html; charset=utf-8 ETag: W/"2226-HgogZr1xBDLwOHktvzTvPVCCUZ8:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="-168575510" X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Date: Thu, 28 Mar 2024 19:20:38 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4dab5bb6ffe3dc5e0b5eac052fd5271e8dfc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a3cbf988371f59c98e592cad6d1e43965c06fa55de532b90fd2eeb322ace27dea72766f3d6b8a7b9ff67cb06d5348d8c95cd17d08c841b7dbd0068e3430527c7f49638553ae9aa99f5368c9a961f24786; Path=/; Domain=.www.creditbureaureports.com Transfer-Encoding: chunked
2024-03-28 19:20:38 UTC	8750	IN	Data Raw: 32 32 32 36 0d 0a 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 24 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 24 28 22 23 73 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 73 44 69 61 6c 6f 67 22 20 29 2e 64 69 61 6c 6f 67 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 4f 70 65 6e 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 32 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 7b 20 6d 79 3a 20 22 63 65 6e 74 65 72 22 2c 20 61 74 3a 20 22 74 6f 70 2b Data Ascii: 2226 <script type="text/javascript"> $( document ).ready(function() { $("#supportedBrowsersDialog" ).dialog({ autoOpen: false, width: 600, height: 225, position: { my: "center", at: "top+
2024-03-28 19:20:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49778	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:38 UTC	1399	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-soft_100_deedf7_1x100.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:38 UTC	1050	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 445 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1054162087" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:38 UTC	445	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 64 10 02 00 00 00 98 de 11 74 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 07 74 49 4d 45 07 e6 0b 09 0d 07 19 25 e3 81 f0 00 00 00 c1 49 44 41 54 28 cf e5 90 3d 6a c2 00 18 40 1f 1f b8 74 29 82 90 4e ed e0 e0 50 1c 85 74 ed 11 ba 25 f4 0e 3d 43 ce a0 f4 06 66 72 77 d4 45 4c a7 76 29 cd 94 40 45 0b e6 a7 6d 48 93 98 08 9f 83 87 50 e8 f4 96 07 0f 1e d9 ac 5a ec 5f 04 00 fe 0d 02 12 2a 51 1b 97 0f c1 d6 31 be a8 c5 18 9f ef 55 39 d8 1b a4 75 31 6d 42 d2 76 61 36 ae a8 a1 0e 1e f1 f5 5f af e9 13 Data Ascii: PNGIHDRdtgAMAa cHRMz&u0`:pQ<bKGDXtIME%IDAT(=j@t)NPt%=CfrwELv)@EmHPZ_*Q1U9u1mBva6_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49779	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:38 UTC	1389	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_glass_80_d7ebf9_1x400.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:38 UTC	1051	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 404 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2059472223" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:38 UTC	404	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 01 90 10 02 00 00 00 b0 aa 41 cf 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 07 74 49 4d 45 07 e6 0b 09 0d 07 19 25 e3 81 f0 00 00 00 98 49 44 41 54 48 c7 ed cf 21 0e 82 00 18 05 e0 f7 de 66 73 d3 6a 70 63 1a 35 18 34 13 e4 10 6c 26 bd 11 07 30 38 4e 40 32 3b 3c 01 05 37 31 e8 1c 06 1c 41 12 48 f0 14 4e c3 9f be fc e1 1e bd fc 77 2e 00 00 0c c3 30 8c 6f 83 34 2d 8a ba c6 c9 7f 4e 9b ae 38 42 80 a9 b8 e4 0e 33 64 4e d9 6b b6 b8 c4 e5 b5 c9 a4 90 09 5d e9 c8 2b 3c 31 e6 0d 9e 14 32 81 8b 7c 5e 0d Data Ascii: PNGIHDRAgAMAa cHRMz&u0`:pQ<bKGDXtIME%IDATH!fsjpc54l&08N@2;<71AHNw.0o4-N8B3dNk]+<12\|^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49780	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:38 UTC	1385	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-icons_ffffff_256x240.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:38 UTC	1050	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 6487 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="598798084" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:38 UTC	6487	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 f0 08 04 00 00 00 45 9e 72 40 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 00 07 74 49 4d 45 07 e6 0b 09 0d 07 1a bc ea d0 4a 00 00 18 3a 49 44 41 54 78 da ed 5d 6d 8c 5d c7 59 7e 8e 13 29 2a c1 c1 7c b9 26 71 b2 92 7f 34 01 21 4b be 4b 24 14 84 64 14 a1 6b 7e 04 15 95 c0 b5 23 3e 1a a3 75 aa d2 aa 08 c8 6e ac bb 3f c2 9a 76 ef 82 42 52 17 69 5d 39 90 3f 37 bb 5a 17 a5 b8 3f 58 53 9b 54 a6 31 16 ee ae 03 a5 38 a5 6a da b5 43 b7 e6 4f 69 fe 90 22 e1 97 1f e7 6b 3e de f9 38 e7 dc bb f7 ee ce 3c a3 dd 7b ef 79 Data Ascii: PNGIHDREr@gAMAa cHRMz&u0`:pQ<bKGDtIMEJ:IDATx]m]Y~)*\|&q4!KK$dk~#>un?vBRi]9?7Z?XST18jCOi"k>8<{y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49781	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:38 UTC	1323	OUT	GET /img/favorites.fw.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:38 UTC	1051	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:38 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 53469 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="333222169" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:39 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 34 2f 32 31 2f 31 36 d8 96 63 02 00 00 08 de 70 72 56 57 78 9c ed 5a 5d 76 a3 ca 11 d6 08 18 ba 19 60 44 ee d8 6a 5b dd b8 91 62 59 f3 98 a3 8d 64 0b 79 88 f2 7a b7 c3 66 b2 80 1c f6 92 1d 84 7c 55 0d 32 d8 92 2d 5b 8c 38 f7 1e 15 20 59 80 f9 7e aa ba 69 5a fa cf ff fe fd df c9 ef 93 df 6b 8a aa ae cb ba de d5 f5 b6 ae 27 75 55 d5 55 59 57 bb ba da d6 d5 a4 2e cb Data Ascii: PNGIHDRcsBIT\|dpHYsZtEXtSoftwareAdobe Fireworks CS6tEXtCreation Time04/21/16cprVWxZ]v`Dj[bYdyzf\|U2-[8 Y~iZk'uUUYW.
2024-03-28 19:20:39 UTC	16384	IN	Data Raw: 9c 8a 89 73 2a 3f 63 b1 ac ec 84 cc 36 9b 97 77 e0 e9 df 48 0c ba d3 8a 99 07 b8 e9 88 ba 8f 51 81 10 52 13 57 3b 45 9b d3 c2 f5 85 66 bb 58 ee 52 04 79 39 a6 cb a8 f2 10 7b f4 81 ed 67 a2 7b 1c ba 58 ff 09 ee 14 52 91 1e 09 a2 9e e0 fa 32 5f f7 51 91 12 84 bf 6f d6 fa df 94 4c c8 70 2c a2 ff 75 be 3e 44 b1 e7 d7 5d f0 d6 20 2f 41 cb c4 cc bd ad 6c 56 bf 4d de d6 66 f0 e6 d8 d5 63 fc 04 f7 ec 91 3d 07 24 c2 bb 9d e5 ae 10 87 24 b8 1b b8 56 67 a2 c6 d1 b1 7e a2 71 4c 5c 1f b1 50 eb 13 74 09 75 2c c8 f3 d0 f2 22 94 48 10 f9 f0 5a 70 ff 0e 91 cc 46 9e d9 e2 17 d2 d8 f2 57 d0 c3 e2 5c f7 7d e5 d3 ff 0b a9 af bc 2f cc c2 5f 11 1e bb 06 aa d7 53 b3 9e 13 9e 29 fb f0 d4 67 8c af 9f e3 0a f0 3a b8 41 8c 79 a8 79 cc c3 58 41 0a ff 82 7e be d8 4f 11 fd 8c 2a 9f f3 Data Ascii: s?c6wHQRW;EfXRy9{g{XR2_QoLp,u>D] /AlVMfc=$$Vg~qL\Ptu,"HZpFW\}/_S)g:AyyXA~O
2024-03-28 19:20:39 UTC	16384	IN	Data Raw: 8b e0 b6 49 15 ac 45 c7 38 58 c9 f8 49 72 d5 c4 0a 34 a8 13 96 2a 79 9e fd 62 1f cf 7f 8b cb bc d3 1a 2f 23 89 0d 78 b0 dd d1 dc 3b c6 32 52 7e 17 00 aa 8b 01 f5 e2 19 d6 e1 4f 37 cf ed a2 68 ef 93 d5 98 55 8e f3 5e 08 a7 6b 04 f4 0d bb 9a a5 e3 a7 28 e4 be a0 2c a5 88 9f 32 18 87 fc d7 29 cf 43 07 f7 3a 28 d9 90 3b 97 1c 51 33 3e bd fe 34 e1 29 fa 25 88 f9 d4 62 36 ee 17 42 38 01 fd 5c a0 14 1f b3 00 70 b5 f5 9a c9 ec ab 65 3c ea ba ed 53 e9 b9 10 90 82 d8 ec da 2b d3 6a 73 f0 c4 70 8c 84 b8 08 df 25 3c 26 19 74 7b 33 3f 8c a3 08 ac 7c 4e 06 29 70 37 11 62 99 d4 02 7f ee e3 e9 3f d4 61 a4 69 e4 44 13 b5 57 6c 08 7f 92 16 01 a1 bd f0 88 58 97 9f 02 c0 5a da 3e 3b 75 f8 9d 29 a4 6b 6f 03 29 23 57 e1 c8 cd 53 9a 6e ae 63 52 bd 78 f4 94 7b 5b c0 73 58 76 31 Data Ascii: IE8XIr4*yb/#x;2R~O7hU^k(,2)C:(;Q3>4)%b6B8\pe<S+jsp%<&t{3?\|N)p7b?aiDWlXZ>;u)ko)#WSncRx{[sXv1
2024-03-28 19:20:39 UTC	4317	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49784	99.83.176.153	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:40 UTC	1180	OUT	GET /2.2/w/w-893076/init/js/?q=%7B%22e%22%3A962415%2C%22oq%22%3A%221280%3A907%3A1280%3A984%3A1280%3A984%22%2C%22wfi%22%3A%22flap-1%22%2C%22ji%22%3A%222.3.1%22%2C%22yf%22%3A%7B%7D%2C%22jc%22%3A%22Ybtva%22%2C%22jcc%22%3A1%2C%22ov%22%3A%22o2%7C1280k1024%201280k984%2024%2024%7C-60%7Cra-HF%7Coc1-2501pp0s72219oop%7Csnyfr%7Cuggcf%3A%2F%2Fjjj.perqvgohernhercbegf.pbz%2Fvpbaarpg%2FybtvaGrzc.ugzy%3Fqngn%3DcD%2BnTNtBKoG9T%2FYJcP4mlWbussoGT2RhvGZ9goozQBncoQUeKB4C2tAA13GEHAP%7CZbmvyyn%2F5.0%20(Jvaqbjf%20AG%2010.0%3B%20Jva64%3B%20k64)%20NccyrJroXvg%2F537.36%20(XUGZY%2C%20yvxr%20Trpxb)%20Puebzr%2F117.0.0.0%20Fnsnev%2F537.36%7Cjt1-n46p01n68sp5740r%22%7D HTTP/1.1 Host: api-cbci.nd.nudatasecurity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 19:20:41 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:41 GMT Content-Type: application/javascript Content-Length: 537 Connection: close x-xss-protection: 0 x-frame-options: SAMEORIGIN Set-Cookie: ndcd=wc1.1.w-729460.1.2.6WI5pMGl5KWcUDJkyQAUkw%252C%252C.ywkItdC1_Hl3mJjL0DxwiXnIeYtAzRt1fPLw-vrsvOWXR-m8miOi1r1zxW7ECowJBXaiz6N_8h_t8ZY_uie_hhqPuXO4-hwmYIkK-IADg7Nx0NnSKqo3aVFsLgRB5Kr3Ozc6xDDXV6IYTL0Wyy4qR32TSnKL_4SgsV2xTu2ZihtrfY0_fWo64cZGHk-U2ylY; expires=Fri, 28-Mar-2025 19:20:41 GMT; Max-Age=31536000; path=/; domain=.nd.nudatasecurity.com Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Cache-Control: no-store, max-age=0 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 19:20:41 UTC	537	IN	Data Raw: 6e 64 77 74 69 28 7b 22 77 69 22 3a 22 77 2d 38 39 33 30 37 36 22 2c 22 63 6f 22 3a 7b 22 75 73 65 4e 64 78 22 3a 66 61 6c 73 65 7d 2c 22 77 6d 64 22 3a 7b 22 69 70 72 22 3a 7b 22 66 6d 22 3a 5b 5d 2c 22 6c 6d 22 3a 74 72 75 65 2c 22 74 6c 22 3a 32 30 30 30 30 2c 22 70 64 22 3a 7b 22 6d 6e 22 3a 22 30 22 2c 22 69 71 22 3a 22 30 22 7d 2c 22 69 6c 22 3a 32 35 7d 2c 22 77 6b 22 3a 7b 22 72 22 3a 22 74 65 73 74 22 7d 2c 22 64 69 22 3a 7b 22 72 74 22 3a 31 32 38 2c 22 75 74 22 3a 35 31 32 7d 2c 22 61 66 22 3a 5b 5d 7d 2c 22 66 64 22 3a 7b 22 69 70 72 22 3a 22 70 22 2c 22 62 69 22 3a 22 70 22 2c 22 77 74 22 3a 22 31 2e 77 2d 38 39 33 30 37 36 2e 31 2e 32 2e 59 62 41 6d 6f 5f 47 64 37 39 49 69 2d 44 6b 44 62 74 78 48 6d 67 2c 2c 2e 65 2d 41 63 37 79 34 6a 55 35 Data Ascii: ndwti({"wi":"w-893076","co":{"useNdx":false},"wmd":{"ipr":{"fm":[],"lm":true,"tl":20000,"pd":{"mn":"0","iq":"0"},"il":25},"wk":{"r":"test"},"di":{"rt":128,"ut":512},"af":[]},"fd":{"ipr":"p","bi":"p","wt":"1.w-893076.1.2.YbAmo_Gd79Ii-DkDbtxHmg,,.e-Ac7y4jU5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49785	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:40 UTC	1666	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:41 UTC	1050	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:41 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 390 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1529955237" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:41 UTC	390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 64 10 02 00 00 00 98 de 11 74 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 07 74 49 4d 45 07 e6 0b 09 0d 07 19 25 e3 81 f0 00 00 00 8a 49 44 41 54 28 cf ed cf a1 0d c2 40 14 80 e1 3f 17 0c 13 a0 1a 14 cc 82 a8 42 d6 e3 50 45 b3 02 0b 30 04 0d 1a 14 02 50 1d 80 34 0c 80 68 72 f4 ee de bb 6b 02 13 a0 09 09 ea d3 1f f1 9c 52 7f 35 00 f0 e7 13 16 8f 18 f6 9c a8 51 97 8a 7e 86 2e e2 23 b5 c8 25 96 69 83 64 da a6 09 61 a5 cb 78 c4 1f e4 1e 73 fc 40 e6 7a c3 15 a1 d6 92 6e 17 72 1d d2 8d 7d 23 95 79 Data Ascii: PNGIHDRdtgAMAa cHRMz&u0`:pQ<bKGDXtIME%IDAT(@?BPE0P4hrkR5Q~.#%idaxs@znr}#y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49786	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:41 UTC	1973	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=2754135240&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 1678 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:41 UTC	1678	OUT	Data Raw: 24 61 3d 73 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 34 35 33 36 33 31 32 38 32 5f 38 34 32 25 37 43 31 37 31 31 36 35 33 36 32 38 38 36 35 25 37 43 25 37 43 25 32 46 69 63 6f 6e 6e 65 63 74 25 32 46 6c 6f 67 69 6e 54 65 6d 70 2e 68 74 6d 6c 25 37 43 31 37 31 31 36 35 33 36 32 38 38 36 35 25 32 43 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 31 36 35 33 36 33 32 34 31 33 25 37 43 31 37 31 31 36 35 33 36 33 36 39 34 36 25 37 43 64 6e 25 37 43 33 32 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 Data Ascii: $a=s%7C1%7C_load_%7C_load_%7C-%7C453631282_842%7C1711653628865%7C%7C%2Ficonnect%2FloginTemp.html%7C1711653628865%2C1%7C1%7C_load_%7C_load_%7C-%7C1711653632413%7C1711653636946%7Cdn%7C32%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%
2024-03-28 19:20:41 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:41 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:41 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49787	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:41 UTC	1399	OUT	GET /js/lib/vendor/jquery-ui-1.13.2.custom.cupertino/images/ui-bg_highlight-hard_100_f2f5f7_1x100.png HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:41 UTC	1050	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:41 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 390 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-939007979" Connection: close Content-Type: image/png Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:41 UTC	390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 64 10 02 00 00 00 98 de 11 74 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 ff ff ff ff ff ff 09 58 f7 dc 00 00 00 07 74 49 4d 45 07 e6 0b 09 0d 07 19 25 e3 81 f0 00 00 00 8a 49 44 41 54 28 cf ed cf a1 0d c2 40 14 80 e1 3f 17 0c 13 a0 1a 14 cc 82 a8 42 d6 e3 50 45 b3 02 0b 30 04 0d 1a 14 02 50 1d 80 34 0c 80 68 72 f4 ee de bb 6b 02 13 a0 09 09 ea d3 1f f1 9c 52 7f 35 00 f0 e7 13 16 8f 18 f6 9c a8 51 97 8a 7e 86 2e e2 23 b5 c8 25 96 69 83 64 da a6 09 61 a5 cb 78 c4 1f e4 1e 73 fc 40 e6 7a c3 15 a1 d6 92 6e 17 72 1d d2 8d 7d 23 95 79 Data Ascii: PNGIHDRdtgAMAa cHRMz&u0`:pQ<bKGDXtIME%IDAT(@?BPE0P4hrkR5Q~.#%idaxs@znr}#y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49788	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:42 UTC	1662	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=2754135240&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:42 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:42 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:42 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49789	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:43 UTC	1631	OUT	GET /iconnect/forgot_password.html HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:43 UTC	668	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 19:20:43 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Location: https://www.creditbureaureports.com/iconnect/404.html Server-Timing: dtSInfo;desc="0", dtRpid;desc="1581932186" Content-Length: 237 Connection: close Content-Type: text/html; charset=iso-8859-1 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:43 UTC	237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 2f 69 63 6f 6e 6e 65 63 74 2f 34 30 34 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.creditbureaureports.com/iconnect/404.html">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49790	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:43 UTC	1973	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=1959665568&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 5165 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:43 UTC	5165	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 69 63 6f 6e 6e 65 63 74 25 32 46 6c 6f 67 69 6e 2e 68 74 6d 6c 24 74 76 74 3d 31 37 31 31 36 35 33 36 33 32 34 31 33 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 33 2e 36 24 72 74 3d 31 2d 31 37 31 31 36 35 33 36 33 32 34 31 33 25 33 42 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 25 32 46 6a 73 25 32 46 6c 69 62 25 32 46 6a 71 75 65 72 79 2d 33 2e 36 2e 30 2e 6d 69 6e 2e 6a 73 25 37 43 62 35 31 31 65 30 66 30 67 30 68 30 69 30 6a 30 6b 30 6c 30 6d 30 76 38 38 35 36 30 77 38 38 35 36 30 58 32 30 30 4b 31 49 31 32 4d 34 Data Ascii: $tvn=%2Ficonnect%2Flogin.html$tvt=1711653632413$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|3.6$rt=1-1711653632413%3Bhttps%3A%2F%2Fwww.creditbureaureports.com%2Fjs%2Flib%2Fjquery-3.6.0.min.js%7Cb511e0f0g0h0i0j0k0l0m0v88560w88560X200K1I12M4
2024-03-28 19:20:43 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:43 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:43 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49792	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:44 UTC	1619	OUT	GET /iconnect/404.html HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:44 UTC	1120	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:44 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:25 GMT Accept-Ranges: bytes X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Content-Length: 2275 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-41818265" Connection: close Content-Type: text/html; charset=UTF-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:44 UTC	2275	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 21 2d 2d 20 6a 51 75 65 72 79 20 2d 2d 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 72 75 78 69 74 61 67 65 6e 74 6a 73 5f 49 43 41 32 4e 56 66 68 71 72 75 5f 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 2e 6a 73 22 20 64 61 74 61 2d 64 74 63 6f 6e 66 69 67 3d 22 72 69 64 3d 52 49 44 5f 34 36 30 36 36 34 37 30 35 7c 72 70 69 64 3d 2d 34 31 38 31 38 32 36 35 7c 64 6f 6d 61 69 6e 3d 63 72 65 64 69 74 62 75 Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"><title>Error Page</title> ... jQuery --> <script type="text/javascript" src="/ruxitagentjs_ICA2NVfhqru_10283240308130508.js" data-dtconfig="rid=RID_460664705\|rpid=-41818265\|domain=creditbu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49793	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:44 UTC	1662	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=1959665568&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:44 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:44 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:44 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49794	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1542	OUT	GET /js/config/config.min.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:45 UTC	1063	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 889 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-170140121" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	889	IN	Data Raw: 76 61 72 20 46 35 5f 55 52 4c 53 3d 5b 22 64 65 76 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 71 61 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 69 72 69 73 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 70 65 67 61 73 75 73 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 71 74 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 75 61 74 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 6d 6c 2d 75 61 74 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 22 2c 22 75 61 2d 75 61 74 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 Data Ascii: var F5_URLS=["dev.creditbureaureports.com","qa.creditbureaureports.com","iris.creditbureaureports.com","pegasus.creditbureaureports.com","qt.creditbureaureports.com","uat.creditbureaureports.com","ml-uat.creditbureaureports.com","ua-uat.creditbureaureport

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49795	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1552	OUT	GET /js/lib/vendor/modernizr-custom.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; rxvt=1711655435459\|1711653631333; dtPC=3$453632939_858h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:45 UTC	1063	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 4675 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="453358229" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	4675	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 64 2c 75 2c 63 29 7b 76 61 72 20 6c 2c 6e 2c 6f 3d 5b 5d 2c 65 3d 7b 5f 76 65 72 73 69 6f 6e 3a 22 33 2e 33 2e 31 22 2c 5f 63 6f 6e 66 69 67 3a 7b 63 6c 61 73 73 50 72 65 66 69 78 3a 22 22 2c 65 6e 61 62 6c 65 43 6c 61 73 73 65 73 3a 21 30 2c 65 6e 61 62 6c 65 4a 53 43 6c 61 73 73 3a 21 30 2c 75 73 65 50 72 65 66 69 78 65 73 3a 21 30 7d 2c 5f 71 3a 5b 5d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 5b 65 5d 29 7d 2c 30 29 7d 2c 61 64 64 54 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 65 2c 66 6e 3a 74 2c 6f 70 74 69 6f 6e 73 3a 6e 7d 29 7d 2c 61 64 64 41 73 Data Ascii: !function(d,u,c){var l,n,o=[],e={_version:"3.3.1",_config:{classPrefix:"",enableClasses:!0,enableJSClass:!0,usePrefixes:!0},_q:[],on:function(e,t){var n=this;setTimeout(function(){t(n[e])},0)},addTest:function(e,t,n){o.push({name:e,fn:t,options:n})},addAs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49797	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1423	OUT	GET /common_config/commonConfig.min.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:45 UTC	1065	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 5066 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1016579676" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	5066	IN	Data Raw: 76 61 72 20 72 65 6c 65 61 73 65 56 65 72 73 69 6f 6e 3d 22 34 2e 31 30 2e 30 22 3b 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 6e 67 54 6f 48 61 73 68 28 65 29 7b 76 61 72 20 74 3d 30 3b 69 66 28 30 21 3d 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 3d 28 74 3c 3c 35 29 2d 74 2b 28 63 68 61 72 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 29 2c 74 26 3d 74 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 70 61 67 65 4e 61 6d 65 51 75 65 72 79 3d 73 74 72 69 6e 67 54 6f 48 61 73 68 28 72 65 6c 65 61 73 65 56 65 72 73 69 6f 6e 29 2c 70 61 67 65 4e 61 6d 65 4d 61 70 3d 7b 6e 65 77 50 77 3a 22 72 65 73 65 74 2d 70 61 73 73 77 6f 72 64 22 2c 66 6f 72 67 6f 74 50 77 3a 22 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 Data Ascii: var releaseVersion="4.10.0";function stringToHash(e){var t=0;if(0!=e.length)for(i=0;i<e.length;i++)t=(t<<5)-t+(char=e.charCodeAt(i)),t&=t;return t}var pageNameQuery=stringToHash(releaseVersion),pageNameMap={newPw:"reset-password",forgotPw:"forgot-password

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49799	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1414	OUT	GET /hbs/beforeLoginFooter.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:45 UTC	1063	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 2872 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="114140701" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	2872	IN	Data Raw: 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 3d 20 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 5b 22 62 65 66 6f 72 65 4c 6f 67 69 6e 46 6f 6f 74 65 72 22 5d 20 3d 20 48 61 6e 64 6c 65 62 61 72 73 2e 74 65 6d 70 6c 61 74 65 28 7b 22 31 22 3a 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 74 61 69 6e 65 72 2c 64 65 70 74 68 30 2c 68 65 6c 70 65 72 73 2c 70 61 72 74 69 61 6c 73 2c 64 61 74 61 29 20 7b 0a 20 20 20 20 76 61 72 20 68 65 6c 70 65 72 3b 0a 0a 20 20 72 65 74 75 72 6e 20 22 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 66 6c 6f 61 74 4c 65 66 74 5c 22 3e 54 68 69 73 20 63 6f 6e 74 65 6e 74 20 69 73 20 63 6f 70 79 72 69 67 68 74 65 Data Ascii: this["hbTemplates"] = this["hbTemplates"] \|\| {};this["hbTemplates"]["beforeLoginFooter"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) { var helper; return " <span class=\"floatLeft\">This content is copyrighte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49798	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1414	OUT	GET /hbs/beforeLoginHeader.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:45 UTC	1064	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 1985 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-754156357" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	1985	IN	Data Raw: 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 3d 20 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 5b 22 62 65 66 6f 72 65 4c 6f 67 69 6e 48 65 61 64 65 72 22 5d 20 3d 20 48 61 6e 64 6c 65 62 61 72 73 2e 74 65 6d 70 6c 61 74 65 28 7b 22 63 6f 6d 70 69 6c 65 72 22 3a 5b 37 2c 22 3e 3d 20 34 2e 30 2e 30 22 5d 2c 22 6d 61 69 6e 22 3a 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 74 61 69 6e 65 72 2c 64 65 70 74 68 30 2c 68 65 6c 70 65 72 73 2c 70 61 72 74 69 61 6c 73 2c 64 61 74 61 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 22 3c 73 63 72 69 70 74 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 3e 5c 6e 20 20 20 20 24 28 20 64 6f 63 75 Data Ascii: this["hbTemplates"] = this["hbTemplates"] \|\| {};this["hbTemplates"]["beforeLoginHeader"] = Handlebars.template({"compiler":[7,">= 4.0.0"],"main":function(container,depth0,helpers,partials,data) { return "<script type=\"text/javascript\">\n $( docu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49796	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1410	OUT	GET /hbs/activeSession.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:45 UTC	1063	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 986 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1788017004" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	986	IN	Data Raw: 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 3d 20 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 5b 22 61 63 74 69 76 65 53 65 73 73 69 6f 6e 22 5d 20 3d 20 48 61 6e 64 6c 65 62 61 72 73 2e 74 65 6d 70 6c 61 74 65 28 7b 22 31 22 3a 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 74 61 69 6e 65 72 2c 64 65 70 74 68 30 2c 68 65 6c 70 65 72 73 2c 70 61 72 74 69 61 6c 73 2c 64 61 74 61 29 20 7b 0a 20 20 20 20 76 61 72 20 68 65 6c 70 65 72 3b 0a 0a 20 20 72 65 74 75 72 6e 20 22 09 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 68 69 64 64 65 6e 5c 22 20 69 64 3d 5c 22 61 63 74 69 76 65 53 65 73 73 69 6f 6e 49 64 5c 22 20 76 61 6c 75 65 3d 5c 22 22 0a Data Ascii: this["hbTemplates"] = this["hbTemplates"] \|\| {};this["hbTemplates"]["activeSession"] = Handlebars.template({"1":function(container,depth0,helpers,partials,data) { var helper; return " <input type=\"hidden\" id=\"activeSessionId\" value=\""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49801	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1421	OUT	GET /hbs/helpers/handlebarHelpers.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:45 UTC	1066	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 26329 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2058497306" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	16384	IN	Data Raw: 48 61 6e 64 6c 65 62 61 72 73 2e 72 65 67 69 73 74 65 72 48 65 6c 70 65 72 28 22 61 64 76 65 72 74 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 61 29 7b 76 61 72 20 74 3d 22 22 3b 72 65 74 75 72 6e 20 74 3d 65 26 26 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 3f 28 65 3d 65 2e 73 70 6c 69 74 28 72 29 29 5b 30 5d 2b 27 20 3c 61 20 68 72 65 66 3d 22 27 2b 61 2b 27 22 20 63 6c 61 73 73 3d 22 72 65 64 22 3e 27 2b 72 2b 22 3c 2f 61 3e 22 2b 65 5b 31 5d 2b 22 3c 62 72 3e 22 3a 74 7d 29 2c 48 61 6e 64 6c 65 62 61 72 73 2e 72 65 67 69 73 74 65 72 48 65 6c 70 65 72 28 22 73 68 6f 77 53 75 62 48 65 61 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 3d 72 2e 64 61 74 61 2e 72 6f 6f 74 2e 67 65 74 41 64 76 61 6e 63 65 64 55 70 64 61 74 65 5b 30 5d 2e 61 Data Ascii: Handlebars.registerHelper("advertise",function(e,r,a){var t="";return t=e&&0!==e.length?(e=e.split(r))[0]+' <a href="'+a+'" class="red">'+r+"</a>"+e[1]+"<br>":t}),Handlebars.registerHelper("showSubHeader",function(e,r){r=r.data.root.getAdvancedUpdate[0].a
2024-03-28 19:20:45 UTC	9945	IN	Data Raw: 72 73 2e 72 65 67 69 73 74 65 72 48 65 6c 70 65 72 28 22 62 61 73 69 63 45 46 43 6f 6e 66 69 67 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 61 29 7b 76 61 72 20 74 3d 22 22 2c 6e 3d 22 22 2c 69 3d 22 22 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 3d 22 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 27 75 69 2d 62 75 74 74 6f 6e 20 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 20 75 69 2d 77 69 64 67 65 74 20 62 74 6e 20 62 61 73 69 63 43 6f 6e 66 69 67 27 20 76 61 6c 75 65 3d 27 22 2b 72 2b 22 27 3e 22 2b 28 72 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 29 5b 30 5d 2b 22 3c 2f 62 75 74 74 6f 6e 3e 22 2c 69 3d 22 3c 6c 61 62 65 6c 3e 22 2b 72 5b 31 5d 2b 22 3c 2f 6c 61 62 65 6c 3e 22 29 2c 74 2b 3d 6e 2b 69 2c 6e 65 77 20 48 61 6e 64 6c 65 62 61 72 73 2e 53 61 66 65 53 74 72 Data Ascii: rs.registerHelper("basicEFConfig",function(e,r,a){var t="",n="",i="";return e&&(n="<button class='ui-button ui-corner-all ui-widget btn basicConfig' value='"+r+"'>"+(r=e.split("-"))[0]+"</button>",i="<label>"+r[1]+"</label>"),t+=n+i,new Handlebars.SafeStr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49802	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1401	OUT	GET /js/utils.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:45 UTC	1065	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 24305 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-374219189" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 52 65 64 69 72 65 63 74 28 65 29 7b 76 61 72 20 74 2c 69 3d 67 65 74 43 6f 6f 6b 69 65 28 22 6e 65 78 74 50 61 67 65 50 61 72 61 6d 22 29 2c 6e 3d 72 65 64 69 72 65 63 74 50 61 67 65 28 29 2c 6f 3d 71 75 65 72 79 53 74 72 69 6e 67 55 74 69 6c 28 29 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 28 22 6e 65 78 74 50 61 67 65 22 29 3b 72 65 74 75 72 6e 22 74 72 61 64 65 6c 69 6e 65 41 55 22 3d 3d 69 7c 7c 22 75 70 67 72 61 64 65 4f 72 64 65 72 22 3d 3d 69 3f 28 65 26 26 22 6e 65 77 50 61 73 73 77 6f 72 64 22 21 3d 65 26 26 22 73 74 69 6c 6c 4c 6f 67 69 6e 22 21 3d 65 26 26 22 6c 6f 67 69 6e 22 21 3d 65 26 26 22 68 6f 73 74 42 72 6f 77 73 65 72 46 6f 72 6d 22 21 3d 65 26 26 28 6e 2e 73 65 74 4c 6f 63 61 74 69 Data Ascii: function checkRedirect(e){var t,i=getCookie("nextPageParam"),n=redirectPage(),o=queryStringUtil().getQueryParameter("nextPage");return"tradelineAU"==i\|\|"upgradeOrder"==i?(e&&"newPassword"!=e&&"stillLogin"!=e&&"login"!=e&&"hostBrowserForm"!=e&&(n.setLocati
2024-03-28 19:20:45 UTC	7921	IN	Data Raw: 22 2c 22 50 4f 53 54 22 2c 70 61 79 6c 6f 61 64 3d 7b 6e 61 6d 65 3a 72 7d 29 2c 28 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 73 75 62 68 65 6c 70 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 69 22 29 2e 65 78 65 63 28 72 29 29 3f 28 69 3d 22 22 2c 69 3d 22 55 73 65 72 20 54 65 72 6d 73 20 6f 66 20 41 67 72 65 65 6d 65 6e 74 22 3d 3d 6e 2e 74 65 78 74 28 29 3f 22 68 65 6c 70 55 73 65 72 41 67 72 65 65 6d 65 6e 74 2e 68 74 6d 6c 22 3a 22 2e 2e 2f 65 78 74 65 72 6e 61 6c 2f 22 2b 74 5b 31 5d 2c 6f 2e 73 65 74 4c 6f 63 61 74 69 6f 6e 28 69 29 29 3a 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 72 2c 22 5f 62 6c 61 6e 6b 22 29 29 2c 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 73 73 69 6f 6e 28 29 7b 6d 61 6b 65 41 6a 61 78 43 61 6c 6c 28 22 6c 6f 67 6f 66 66 22 2c Data Ascii: ","POST",payload={name:r}),(t=new RegExp("subhelp=([^&#]*)","i").exec(r))?(i="",i="User Terms of Agreement"==n.text()?"helpUserAgreement.html":"../external/"+t[1],o.setLocation(i)):window.open(r,"_blank")),!1}function clearSession(){makeAjaxCall("logoff",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49803	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1406	OUT	GET /hbs/errorPage.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:45 UTC	1063	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 1462 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="314491149" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	1462	IN	Data Raw: 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 3d 20 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 20 7c 7c 20 7b 7d 3b 0a 74 68 69 73 5b 22 68 62 54 65 6d 70 6c 61 74 65 73 22 5d 5b 22 65 72 72 6f 72 50 61 67 65 22 5d 20 3d 20 48 61 6e 64 6c 65 62 61 72 73 2e 74 65 6d 70 6c 61 74 65 28 7b 22 63 6f 6d 70 69 6c 65 72 22 3a 5b 37 2c 22 3e 3d 20 34 2e 30 2e 30 22 5d 2c 22 6d 61 69 6e 22 3a 66 75 6e 63 74 69 6f 6e 28 63 6f 6e 74 61 69 6e 65 72 2c 64 65 70 74 68 30 2c 68 65 6c 70 65 72 73 2c 70 61 72 74 69 61 6c 73 2c 64 61 74 61 29 20 7b 0a 20 20 20 20 76 61 72 20 73 74 61 63 6b 31 3b 0a 0a 20 20 72 65 74 75 72 6e 20 28 28 73 74 61 63 6b 31 20 3d 20 63 6f 6e 74 61 69 6e 65 72 2e 69 6e 76 6f 6b 65 50 61 72 74 69 61 6c 28 70 61 72 74 69 Data Ascii: this["hbTemplates"] = this["hbTemplates"] \|\| {};this["hbTemplates"]["errorPage"] = Handlebars.template({"compiler":[7,">= 4.0.0"],"main":function(container,depth0,helpers,partials,data) { var stack1; return ((stack1 = container.invokePartial(parti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49804	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:45 UTC	1427	OUT	GET /js/modules/errorPage/errorPage.min.js?1705934884 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:45 UTC	1064	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:45 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 362 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1802794080" Connection: close Content-Type: application/javascript Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:45 UTC	362	IN	Data Raw: 24 2e 66 6e 2e 65 72 72 6f 72 50 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 61 6b 65 41 6a 61 78 43 61 6c 6c 28 22 65 72 72 6f 72 50 61 67 65 22 2c 22 47 45 54 22 2c 76 6f 69 64 20 30 29 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6f 29 7b 69 73 4a 73 6f 6e 52 65 73 70 6f 6e 73 65 28 6f 29 3f 24 28 22 23 65 72 72 6f 72 5f 63 6f 6e 74 61 69 6e 65 72 22 29 2e 68 74 6d 6c 28 68 62 54 65 6d 70 6c 61 74 65 73 2e 65 72 72 6f 72 50 61 67 65 28 65 29 29 3a 24 28 22 23 65 72 72 6f 72 5f 63 6f 6e 74 61 69 6e 65 72 22 29 2e 68 74 6d 6c 28 65 29 2c 62 72 6f 77 73 65 72 5f 63 6f 6e 66 69 67 3d 67 65 74 5f 62 72 6f 77 73 65 72 5f 69 6e 66 6f 28 29 2c 73 65 74 41 64 64 54 6f 46 61 76 54 65 78 74 28 62 72 6f 77 73 65 72 5f 63 6f 6e 66 69 67 2e 6f 73 29 Data Ascii: $.fn.errorPage=function(){makeAjaxCall("errorPage","GET",void 0).done(function(e,r,o){isJsonResponse(o)?$("#error_container").html(hbTemplates.errorPage(e)):$("#error_container").html(e),browser_config=get_browser_info(),setAddToFavText(browser_config.os)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49808	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:46 UTC	1565	OUT	GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653643485 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-XSRF-TOKEN: 7ebf18ac-f933-4bca-a3c1-fa94ba5510f6 slc: sec-ch-ua-mobile: ?0 pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453643441_515h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655443464\|1711653631333
2024-03-28 19:20:46 UTC	1557	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Set-Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; Path=/ Set-Cookie: JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; Path=/; HttpOnly; Secure Content-Type: application/json; charset=utf-8 Content-Length: 70 ETag: W/"46-6JqvDO8by63odLOOMJYMOTZtHxk:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="352403133" Date: Thu, 28 Mar 2024 19:20:46 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d6613a51140fa12b9db01d861691c63f8fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05af054a1c6c2cc122d6f294b3aacf7e05577fad34d26deae00181814faed9b1d361c3fbe28dede5b9da1f31eae5fe7939ea8cc7fbc62f3684e1ad80a0fae8db96d2027d0fb32258d1065b4d54d94b21333; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:46 UTC	70	IN	Data Raw: 7b 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 7d Data Ascii: {"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49807	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:46 UTC	1450	OUT	GET /favicon.ico HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; JSESSIONID=9D6D0C0A20B24C2410CBD3FD4CC8EB2C; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:20:46 UTC	543	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 19:20:46 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1464941764" Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49810	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:47 UTC	1584	OUT	GET /img/whitehat.gif HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d6613a51140fa12b9db01d861691c63f8fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05af054a1c6c2cc122d6f294b3aacf7e05577fad34d26deae00181814faed9b1d361c3fbe28dede5b9da1f31eae5fe7939ea8cc7fbc62f3684e1ad80a0fae8db96d2027d0fb32258d1065b4d54d94b21333
2024-03-28 19:20:47 UTC	1050	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:47 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 1927 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="653954698" Connection: close Content-Type: image/gif Set-Cookie: TS01b7a93c=01fdb62b4d6613a51140fa12b9db01d861691c63f8fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05af054a1c6c2cc122d6f294b3aacf7e05577fad34d26deae00181814faed9b1d361c3fbe28dede5b9da1f31eae5fe7939ea8cc7fbc62f3684e1ad80a0fae8db96d2027d0fb32258d1065b4d54d94b21333; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:47 UTC	1927	IN	Data Raw: 47 49 46 38 39 61 78 00 2d 00 86 00 00 ff ff ff 00 66 a4 09 54 83 bf d9 e8 fd fd fd fa fa fa ed ed ed bc bc bc d5 d5 d5 85 84 84 80 b3 d2 40 8c bb 23 1f 1f c8 c7 c7 91 8f 8f df ec f4 fc fc fc f3 f3 f3 f8 f8 f8 8f bc d7 b9 b8 b8 cf e2 ee 20 79 af 5a 57 57 ef f5 f9 60 9f c6 30 83 b5 10 70 aa 70 a9 cc af cf e3 f1 f1 f1 50 96 c0 e4 e3 e3 ad ab ab fe fe fe 9f c6 dd 31 2d 2d ba b9 b9 76 73 73 d6 d5 d5 68 65 65 9f 9d 9d 83 81 81 3f 3b 3b 4c 49 49 f9 f9 f9 f7 f7 f7 f5 f5 f5 86 85 85 dd dd dd ee ee ee d8 d8 d8 e1 e1 e1 ef ef ef f2 f2 f2 0f 47 6a d6 d6 d6 e5 e5 e5 c0 c0 c0 bf bf bf c5 c4 c4 fb fb fb db db db c1 c0 c0 eb eb eb ce ce ce be bd bd f0 f0 f0 98 97 97 90 8f 8f ae ad ad c3 c3 c3 f4 f4 f4 bb ba ba c7 c7 c7 89 88 88 9f 9e 9e c7 c6 c6 a7 a6 a6 ec ec ec 88 87 Data Ascii: GIF89ax-fT@# yZWW`0ppP1--vsshee?;;LIIGj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49812	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:47 UTC	1392	OUT	GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653643485 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:47 UTC	1327	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Content-Type: application/json; charset=utf-8 Content-Length: 70 ETag: W/"46-6JqvDO8by63odLOOMJYMOTZtHxk:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2041297044" Date: Thu, 28 Mar 2024 19:20:47 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:47 UTC	70	IN	Data Raw: 7b 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 7d Data Ascii: {"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49813	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:47 UTC	1969	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2536432815&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 1346 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:47 UTC	1346	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 31 36 35 33 36 34 31 39 39 38 25 37 43 31 37 31 31 36 35 33 36 34 35 36 39 34 25 37 43 64 6e 25 37 43 32 35 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 62 67 25 37 43 31 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 31 36 35 33 36 34 31 39 39 38 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 33 36 39 36 25 35 45 70 62 25 37 43 56 43 44 25 37 43 31 32 32 39 25 37 43 56 43 44 53 25 37 43 30 25 37 43 56 43 53 25 37 43 32 37 38 33 25 37 43 56 43 4f 25 37 43 33 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1711653641998%7C1711653645694%7Cdn%7C25%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%7Cbg%7C1%2C2%7C3%7C_event_%7C1711653641998%7C_vc_%7CV%7C3696%5Epb%7CVCD%7C1229%7CVCDS%7C0%7CVCS%7C2783%7CVCO%7C3
2024-03-28 19:20:47 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:47 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:47 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49814	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:47 UTC	1319	OUT	GET /img/whitehat.gif HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:48 UTC	1051	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:47 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Last-Modified: Mon, 22 Jan 2024 14:47:26 GMT Accept-Ranges: bytes Content-Length: 1927 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Server-Timing: dtSInfo;desc="0", dtRpid;desc="2122174129" Connection: close Content-Type: image/gif Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:48 UTC	1927	IN	Data Raw: 47 49 46 38 39 61 78 00 2d 00 86 00 00 ff ff ff 00 66 a4 09 54 83 bf d9 e8 fd fd fd fa fa fa ed ed ed bc bc bc d5 d5 d5 85 84 84 80 b3 d2 40 8c bb 23 1f 1f c8 c7 c7 91 8f 8f df ec f4 fc fc fc f3 f3 f3 f8 f8 f8 8f bc d7 b9 b8 b8 cf e2 ee 20 79 af 5a 57 57 ef f5 f9 60 9f c6 30 83 b5 10 70 aa 70 a9 cc af cf e3 f1 f1 f1 50 96 c0 e4 e3 e3 ad ab ab fe fe fe 9f c6 dd 31 2d 2d ba b9 b9 76 73 73 d6 d5 d5 68 65 65 9f 9d 9d 83 81 81 3f 3b 3b 4c 49 49 f9 f9 f9 f7 f7 f7 f5 f5 f5 86 85 85 dd dd dd ee ee ee d8 d8 d8 e1 e1 e1 ef ef ef f2 f2 f2 0f 47 6a d6 d6 d6 e5 e5 e5 c0 c0 c0 bf bf bf c5 c4 c4 fb fb fb db db db c1 c0 c0 eb eb eb ce ce ce be bd bd f0 f0 f0 98 97 97 90 8f 8f ae ad ad c3 c3 c3 f4 f4 f4 bb ba ba c7 c7 c7 89 88 88 9f 9e 9e c7 c6 c6 a7 a6 a6 ec ec ec 88 87 Data Ascii: GIF89ax-fT@# yZWW`0ppP1--vsshee?;;LIIGj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49815	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:48 UTC	1660	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2536432815&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; slc=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:48 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:48 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:48 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49816	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:49 UTC	1963	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=1806900681&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 4189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:49 UTC	4189	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 69 63 6f 6e 6e 65 63 74 25 32 46 34 30 34 2e 68 74 6d 6c 24 74 76 74 3d 31 37 31 31 36 35 33 36 34 31 39 39 38 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 33 2e 36 24 72 74 3d 31 2d 31 37 31 31 36 35 33 36 34 31 39 39 38 25 33 42 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 25 32 46 6a 73 25 32 46 6c 69 62 25 32 46 6a 71 75 65 72 79 2d 33 2e 36 2e 30 2e 6d 69 6e 2e 6a 73 25 37 43 62 31 33 35 39 65 30 66 30 67 30 68 30 69 30 6a 30 6b 32 31 6c 32 38 6d 34 33 76 38 38 35 36 30 77 38 38 35 36 30 58 32 30 30 4b 31 49 31 32 Data Ascii: $tvn=%2Ficonnect%2F404.html$tvt=1711653641998$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|3.6$rt=1-1711653641998%3Bhttps%3A%2F%2Fwww.creditbureaureports.com%2Fjs%2Flib%2Fjquery-3.6.0.min.js%7Cb1359e0f0g0h0i0j0k21l28m43v88560w88560X200K1I12
2024-03-28 19:20:49 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:49 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:49 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49817	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:50 UTC	1654	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=1806900681&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:50 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:50 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:50 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49818	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:52 UTC	1962	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=3246155910&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:52 UTC	495	OUT	Data Raw: 24 61 3d 31 25 37 43 36 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 31 36 35 33 36 34 38 35 33 35 25 37 43 5f 77 76 5f 25 37 43 41 41 49 25 37 43 31 25 37 43 66 49 53 25 37 43 36 35 33 32 25 37 43 66 49 44 25 37 43 31 24 72 49 64 3d 52 49 44 5f 34 36 30 36 36 34 37 30 35 24 72 70 49 64 3d 2d 34 31 38 31 38 32 36 35 24 64 6f 6d 52 3d 31 37 31 31 36 35 33 36 34 34 37 30 37 24 74 76 6e 3d 25 32 46 69 63 6f 6e 6e 65 63 74 25 32 46 34 30 34 2e 68 74 6d 6c 24 74 76 74 3d 31 37 31 31 36 35 33 36 34 31 39 39 38 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 33 2e 36 24 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 Data Ascii: $a=1%7C6%7C_event_%7C1711653648535%7C_wv_%7CAAI%7C1%7CfIS%7C6532%7CfID%7C1$rId=RID_460664705$rpId=-41818265$domR=1711653644707$tvn=%2Ficonnect%2F404.html$tvt=1711653641998$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|3.6$url=https%3A%2F%2Fw
2024-03-28 19:20:52 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:52 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:52 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49819	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:52 UTC	1654	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=3246155910&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:52 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:52 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:52 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49820	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:55 UTC	1625	OUT	GET /iconnect/forgot_password.html HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655444710\|1711653631333; dtPC=3$453643441_515h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:20:55 UTC	668	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 19:20:55 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Location: https://www.creditbureaureports.com/iconnect/404.html Server-Timing: dtSInfo;desc="0", dtRpid;desc="1466639998" Content-Length: 237 Connection: close Content-Type: text/html; charset=iso-8859-1 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:55 UTC	237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 2f 69 63 6f 6e 6e 65 63 74 2f 34 30 34 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.creditbureaureports.com/iconnect/404.html">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49821	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:56 UTC	1559	OUT	GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653654703 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-XSRF-TOKEN: 7ebf18ac-f933-4bca-a3c1-fa94ba5510f6 slc: sec-ch-ua-mobile: ?0 pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453654670_913h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655454682\|1711653631333
2024-03-28 19:20:56 UTC	1475	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Set-Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; Path=/ Content-Type: application/json; charset=utf-8 Content-Length: 70 ETag: W/"46-6JqvDO8by63odLOOMJYMOTZtHxk:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="1175172491" Date: Thu, 28 Mar 2024 19:20:56 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:56 UTC	70	IN	Data Raw: 7b 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 7d Data Ascii: {"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49822	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:56 UTC	1444	OUT	GET /favicon.ico HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:20:56 UTC	543	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 19:20:56 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1100792220" Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49823	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:56 UTC	1386	OUT	GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653654703 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:20:56 UTC	1326	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Content-Type: application/json; charset=utf-8 Content-Length: 70 ETag: W/"46-6JqvDO8by63odLOOMJYMOTZtHxk:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="1023354225" Date: Thu, 28 Mar 2024 19:20:56 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:56 UTC	70	IN	Data Raw: 7b 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 7d Data Ascii: {"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49824	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:58 UTC	1963	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2314521492&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 1403 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:20:58 UTC	1403	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 31 36 35 33 36 35 33 39 38 31 25 37 43 31 37 31 31 36 35 33 36 35 35 32 32 39 25 37 43 64 6e 25 37 43 32 35 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 31 36 35 33 36 35 33 39 38 31 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 31 32 34 38 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 35 32 35 25 37 43 56 43 44 53 25 37 43 30 25 37 43 56 43 53 25 37 43 31 31 31 39 25 37 43 56 43 4f 25 37 43 32 35 39 30 25 37 43 56 43 49 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1711653653981%7C1711653655229%7Cdn%7C25%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1711653653981%7C_vc_%7CV%7C1248%5Epc%7CVCD%7C1525%7CVCDS%7C0%7CVCS%7C1119%7CVCO%7C2590%7CVCI
2024-03-28 19:20:58 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:58 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:58 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49825	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:20:58 UTC	1654	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2314521492&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:20:58 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:20:58 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:20:58 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49826	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:00 UTC	1963	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2037933061&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 3764 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:21:00 UTC	3764	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 69 63 6f 6e 6e 65 63 74 25 32 46 34 30 34 2e 68 74 6d 6c 24 74 76 74 3d 31 37 31 31 36 35 33 36 35 33 39 38 31 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 34 2e 32 35 24 72 74 3d 31 2d 31 37 31 31 36 35 33 36 35 33 39 38 31 25 33 42 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 25 32 46 6a 73 25 32 46 6c 69 62 25 32 46 6a 71 75 65 72 79 2d 33 2e 36 2e 30 2e 6d 69 6e 2e 6a 73 25 37 43 62 35 37 39 65 30 66 30 67 30 68 30 69 30 6a 30 6b 31 37 6c 32 30 6d 33 30 76 38 38 35 36 30 77 38 38 35 36 30 58 32 30 30 4b 31 49 31 32 Data Ascii: $tvn=%2Ficonnect%2F404.html$tvt=1711653653981$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|4.25$rt=1-1711653653981%3Bhttps%3A%2F%2Fwww.creditbureaureports.com%2Fjs%2Flib%2Fjquery-3.6.0.min.js%7Cb579e0f0g0h0i0j0k17l20m30v88560w88560X200K1I12
2024-03-28 19:21:00 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:00 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:00 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49827	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:00 UTC	1654	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2037933061&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:21:00 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:00 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:00 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49829	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:13 UTC	1625	OUT	GET /iconnect/forgot_password.html HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655455037\|1711653631333; dtPC=3$453654670_913h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:21:13 UTC	667	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 19:21:13 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Location: https://www.creditbureaureports.com/iconnect/404.html Server-Timing: dtSInfo;desc="0", dtRpid;desc="343578541" Content-Length: 237 Connection: close Content-Type: text/html; charset=iso-8859-1 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:13 UTC	237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 2f 69 63 6f 6e 6e 65 63 74 2f 34 30 34 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.creditbureaureports.com/iconnect/404.html">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49828	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:13 UTC	1559	OUT	GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653672582 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-XSRF-TOKEN: 7ebf18ac-f933-4bca-a3c1-fa94ba5510f6 slc: sec-ch-ua-mobile: ?0 pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453672565_762h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655472574\|1711653631333
2024-03-28 19:21:14 UTC	1475	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Set-Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; Path=/ Content-Type: application/json; charset=utf-8 Content-Length: 70 ETag: W/"46-6JqvDO8by63odLOOMJYMOTZtHxk:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="1750208634" Date: Thu, 28 Mar 2024 19:21:13 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:14 UTC	70	IN	Data Raw: 7b 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 7d Data Ascii: {"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49830	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:14 UTC	1444	OUT	GET /favicon.ico HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:21:14 UTC	542	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 19:21:14 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Server-Timing: dtSInfo;desc="0", dtRpid;desc="1837519698" Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49831	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:14 UTC	1386	OUT	GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653672582 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:21:14 UTC	1326	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Content-Type: application/json; charset=utf-8 Content-Length: 70 ETag: W/"46-6JqvDO8by63odLOOMJYMOTZtHxk:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="-241075658" Date: Thu, 28 Mar 2024 19:21:14 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:14 UTC	70	IN	Data Raw: 7b 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 7d Data Ascii: {"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49832	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:15 UTC	1963	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=3152934683&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 1391 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:21:15 UTC	1391	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 31 36 35 33 36 37 31 39 38 35 25 37 43 31 37 31 31 36 35 33 36 37 32 37 38 39 25 37 43 64 6e 25 37 43 32 35 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 31 36 35 33 36 37 31 39 38 35 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 38 30 34 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 35 32 30 25 37 43 56 43 44 53 25 37 43 31 25 37 43 56 43 53 25 37 43 37 31 32 25 37 43 56 43 4f 25 37 43 32 31 37 38 25 37 43 56 43 49 25 37 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1711653671985%7C1711653672789%7Cdn%7C25%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1711653671985%7C_vc_%7CV%7C804%5Epc%7CVCD%7C1520%7CVCDS%7C1%7CVCS%7C712%7CVCO%7C2178%7CVCI%7
2024-03-28 19:21:15 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:15 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:15 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49833	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:16 UTC	1654	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=3152934683&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:21:16 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:16 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:16 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49834	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:17 UTC	1962	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=693529100&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 3721 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:21:17 UTC	3721	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 69 63 6f 6e 6e 65 63 74 25 32 46 34 30 34 2e 68 74 6d 6c 24 74 76 74 3d 31 37 31 31 36 35 33 36 37 31 39 38 35 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 34 2e 33 24 72 74 3d 31 2d 31 37 31 31 36 35 33 36 37 31 39 38 35 25 33 42 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 25 32 46 6a 73 25 32 46 6c 69 62 25 32 46 6a 71 75 65 72 79 2d 33 2e 36 2e 30 2e 6d 69 6e 2e 6a 73 25 37 43 62 35 34 34 65 30 66 30 67 30 68 30 69 30 6a 30 6b 33 6c 38 6d 32 32 76 38 38 35 36 30 77 38 38 35 36 30 58 32 30 30 4b 31 49 31 32 4d 34 32 Data Ascii: $tvn=%2Ficonnect%2F404.html$tvt=1711653671985$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|4.3$rt=1-1711653671985%3Bhttps%3A%2F%2Fwww.creditbureaureports.com%2Fjs%2Flib%2Fjquery-3.6.0.min.js%7Cb544e0f0g0h0i0j0k3l8m22v88560w88560X200K1I12M42
2024-03-28 19:21:18 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:17 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:18 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49835	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:18 UTC	1653	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=693529100&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; XSRF-TOKEN=7ebf18ac-f933-4bca-a3c1-fa94ba5510f6; ut=; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655472642\|1711653631333; dtPC=3$453672565_762h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1
2024-03-28 19:21:18 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:18 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:18 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49838	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:23 UTC	1529	OUT	POST /gateway/loadLogin HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 57 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-XSRF-TOKEN: slc: sec-ch-ua-mobile: ?0 pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453682068_908h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655482079\|1711653631333
2024-03-28 19:21:23 UTC	57	OUT	Data Raw: 72 65 71 75 65 73 74 54 79 70 65 3d 6f 6e 53 75 62 6d 69 74 26 62 72 6f 77 73 65 72 3d 6e 65 77 26 75 73 65 72 5f 63 6c 69 65 6e 74 3d 26 75 73 65 72 5f 6c 6f 67 49 64 3d Data Ascii: requestType=onSubmit&browser=new&user_client=&user_logId=
2024-03-28 19:21:23 UTC	1920	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Origin: https://www.creditbureaureports.com Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Set-Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; Path=/ Set-Cookie: XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; Path=/; Secure Set-Cookie: JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; Path=/; HttpOnly; Secure Set-Cookie: ut=; Max-Age=1711740083; Path=/; Expires=Sat, 25 Jun 2078 14:42:46 GMT; Secure Set-Cookie: slc=; Max-Age=10; Path=/; Expires=Thu, 28 Mar 2024 19:21:33 GMT; Secure Content-Type: application/json; charset=utf-8 Content-Length: 551 ETag: W/"227-/wGmXlqxtk1wCeLIt31ArP5Nr7o:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="-167680589", dtTao;desc="1" Timing-Allow-Origin: * Date: Thu, 28 Mar 2024 19:21:23 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4da1b656920e030e987ec19dd1fdf81b8ffc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05af513e529838039f64108b444467941023338361d2e61481a8c0dbd013716504482f4b7c11917b9fb95140c2c9662a45562cbbbd81a07a78f064c3e997f9b900f460d4d7447d28411427783a7e08fb4f0; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:23 UTC	551	IN	Data Raw: 7b 22 6c 6f 67 6f 66 66 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 70 61 67 65 4d 65 73 73 61 67 65 73 22 3a 5b 22 59 6f 75 20 68 61 76 65 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 6c 6f 67 67 65 64 20 6f 75 74 2e 22 5d 2c 22 6e 65 78 74 50 61 67 65 22 3a 22 6c 6f 67 69 6e 22 2c 22 72 65 64 69 72 65 63 74 55 52 4c 22 3a 22 22 2c 22 6c 6f 67 67 65 64 55 73 65 72 22 3a 22 22 7d 2c 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 2c 22 6c 6f 67 69 6e 22 3a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 70 61 67 65 4d 65 73 73 61 67 65 73 22 3a 5b 5d 2c 22 6e 65 78 74 50 61 67 65 22 3a 22 Data Ascii: {"logoff":{"success":true,"pageMessages":["You have successfully logged out."],"nextPage":"login","redirectURL":"","loggedUser":""},"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"},"login":{"success":true,"pageMessages":[],"nextPage":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49837	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:23 UTC	1392	OUT	GET /favicon.ico HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; JSESSIONID=30098B3DFEF8BC846B883C0F375B2210; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:21:23 UTC	543	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 19:21:23 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1621390826" Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49839	99.83.176.153	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:24 UTC	564	OUT	GET /2.2/w/w-893076/sync/js/ HTTP/1.1 Host: api-cbci.nd.nudatasecurity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 19:21:24 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:24 GMT Content-Type: application/javascript Content-Length: 53273 Connection: close Vary: Accept-Encoding x-xss-protection: 0 x-frame-options: SAMEORIGIN X-NDS-DataContractRequirement0: Placement, Placement page has not been detected. X-NDS-DataContractRequirement1: Placement, No matching URL placement for w-893076 at https://www.creditbureaureports.com/. X-NDS-DataContractRequirement2: Placement, Placement page number has not been detected. Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Cache-Control: no-store, max-age=0 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 19:21:24 UTC	3440	IN	Data Raw: 76 61 72 20 6e 64 6a 73 53 74 61 74 69 63 56 65 72 73 69 6f 6e 3d 22 73 79 6e 63 2d 31 22 2c 6e 73 6c 79 79 69 64 74 79 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 73 62 6f 70 69 66 6b 7a 28 29 7b 76 61 72 20 61 3d 22 22 3b 69 66 28 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 7c 7c 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 7c 7c 77 69 6e 64 6f 77 2e 5f 5f 70 68 61 6e 74 6f 6d 61 73 29 61 2b 3d 22 70 22 3b 77 69 6e 64 6f 77 2e 42 75 66 66 65 72 26 26 28 61 2b 3d 22 6e 22 29 3b 77 69 6e 64 6f 77 2e 65 6d 69 74 26 26 28 61 2b 3d 22 63 22 29 3b 77 69 6e 64 6f 77 2e 73 70 61 77 6e 26 26 28 61 2b 3d 22 72 22 29 3b 77 69 6e 64 6f 77 2e 77 65 62 64 72 69 76 65 72 26 26 28 61 2b 3d 22 73 22 29 3b 69 66 28 77 69 6e 64 6f 77 2e 64 6f 6d 41 75 74 6f 6d Data Ascii: var ndjsStaticVersion="sync-1",nslyyidtyi={};function nsbopifkz(){var a="";if(window._phantom\|\|window.callPhantom\|\|window.__phantomas)a+="p";window.Buffer&&(a+="n");window.emit&&(a+="c");window.spawn&&(a+="r");window.webdriver&&(a+="s");if(window.domAutom
2024-03-28 19:21:24 UTC	16384	IN	Data Raw: 6e 22 29 2c 61 5b 65 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 29 2c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 73 74 75 6b 28 61 29 7b 76 61 72 20 62 3d 7b 72 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 45 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 45 33 2c 73 69 64 3a 6e 64 73 2e 63 6f 6e 66 69 67 2e 73 65 73 73 69 6f 6e 49 64 2c 70 3a 6e 73 62 6f 70 69 66 6b 7a 28 29 2c 62 64 3a 6e 73 74 6e 61 67 76 28 29 2c 66 6f 72 63 65 49 50 3a 6e 64 73 2e 63 6f 6e 66 69 67 2e 66 6f 72 63 65 49 50 2c 64 74 72 6b 3a 6e 64 73 2e 63 6f 6e 66 69 67 2e 64 6f 4e 6f 74 54 72 61 63 6b 2c 6a 73 76 3a 76 65 72 73 69 6f 6e 2c 77 74 3a 22 22 2c 77 76 3a 6e 64 73 57 69 64 67 65 74 56 65 72 73 69 6f Data Ascii: n"),a[e].appendChild(d)),d.setAttribute("value",c)}function nstuk(a){var b={r:Math.floor(1E6*Math.random())+1E3,sid:nds.config.sessionId,p:nsbopifkz(),bd:nstnagv(),forceIP:nds.config.forceIP,dtrk:nds.config.doNotTrack,jsv:version,wt:"",wv:ndsWidgetVersio
2024-03-28 19:21:24 UTC	16384	IN	Data Raw: 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 26 26 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3f 21 30 3a 21 31 3b 69 66 28 31 3d 3d 61 29 74 72 79 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 6e 63 6f 6f 6b 69 65 74 65 73 74 5c 78 33 64 31 3b 20 53 61 6d 65 53 69 74 65 5c 78 33 64 4e 6f 6e 65 3b 20 53 65 63 75 72 65 22 2c 62 3d 2d 31 21 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 6e 63 6f 6f 6b 69 65 74 65 73 74 5c 78 33 64 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 6e 63 6f 6f 6b 69 65 74 65 73 74 5c 78 33 64 31 3b 20 65 78 70 69 72 65 73 5c 78 33 64 54 68 75 2c 20 30 31 2d 4a 61 6e 2d 31 39 37 30 20 30 30 Data Ascii: ed"!==typeof navigator.cookieEnabled&&navigator.cookieEnabled?!0:!1;if(1==a)try{document.cookie="ncookietest\x3d1; SameSite\x3dNone; Secure",b=-1!=document.cookie.indexOf("ncookietest\x3d"),document.cookie="ncookietest\x3d1; expires\x3dThu, 01-Jan-1970 00
2024-03-28 19:21:24 UTC	8192	IN	Data Raw: 66 69 67 7c 7c 7b 7d 3b 61 2e 63 6f 6e 66 69 67 2e 74 68 72 65 65 44 53 43 6f 6e 66 69 67 3d 61 2e 63 6f 6e 66 69 67 2e 74 68 72 65 65 44 53 43 6f 6e 66 69 67 7c 7c 7b 7d 3b 61 2e 54 68 72 65 65 44 53 3d 7b 7d 3b 6e 73 65 6a 73 6e 66 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 21 31 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2e 63 6f 6e 66 69 67 2e 74 68 72 65 65 44 53 43 6f 6e 66 69 67 2c 64 29 26 26 28 61 2e 63 6f 6e 66 69 67 2e 74 68 72 65 65 44 53 43 6f 6e 66 69 67 5b 64 5d 3d 7b 7d 29 3b 61 2e 63 6f 6e 66 69 67 2e 74 68 72 65 65 44 53 43 6f 6e 66 69 67 5b 64 5d 3d 62 5b 64 5d 7d 29 7d 3b 61 2e 73 74 61 72 74 33 44 53 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 Data Ascii: fig\|\|{};a.config.threeDSConfig=a.config.threeDSConfig\|\|{};a.ThreeDS={};nsejsnf(b,function(c,d){!1===Object.prototype.hasOwnProperty.call(a.config.threeDSConfig,d)&&(a.config.threeDSConfig[d]={});a.config.threeDSConfig[d]=b[d]})};a.start3DS=function(b){if(
2024-03-28 19:21:24 UTC	8873	IN	Data Raw: 3d 32 3d 3d 61 2e 62 75 74 74 6f 6e 29 3b 76 61 72 20 65 3d 67 28 61 29 2c 74 3d 7b 7d 3b 74 2e 61 3d 61 3b 74 5b 76 5d 3d 62 3b 74 2e 63 3d 64 3b 74 2e 64 3d 63 3b 74 2e 65 3d 65 2e 78 3b 74 2e 66 3d 65 2e 79 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 62 3d 63 28 29 3b 69 66 28 21 31 21 3d 3d 46 29 7b 76 61 72 20 64 3d 4d 61 74 68 2e 61 62 73 28 50 2e 78 2d 46 2e 70 6f 73 2e 78 29 2a 75 61 2c 65 3d 4d 61 74 68 2e 61 62 73 28 50 2e 79 2d 46 2e 70 6f 73 2e 79 29 2a 74 61 2c 66 3d 28 62 2d 46 2e 74 69 6d 65 29 2f 31 45 33 2c 67 3d 61 28 64 2f 66 2c 34 2c 21 30 29 2c 68 3d 0a 61 28 65 2f 66 2c 34 2c 21 30 29 3b 65 3d 4d 61 74 68 2e 73 71 72 74 28 4d 61 74 68 2e 70 6f 77 28 64 2c 32 29 2b 4d 61 74 68 2e 70 6f 77 28 65 2c Data Ascii: =2==a.button);var e=g(a),t={};t.a=a;t[v]=b;t.c=d;t.d=c;t.e=e.x;t.f=e.y;return t}function f(){var b=c();if(!1!==F){var d=Math.abs(P.x-F.pos.x)ua,e=Math.abs(P.y-F.pos.y)ta,f=(b-F.time)/1E3,g=a(d/f,4,!0),h=a(e/f,4,!0);e=Math.sqrt(Math.pow(d,2)+Math.pow(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49840	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:24 UTC	1320	OUT	GET /gateway/loadLogin HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:24 UTC	1553	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Set-Cookie: ut=; Max-Age=10; Path=/; Expires=Thu, 28 Mar 2024 19:21:34 GMT; Secure Set-Cookie: slc=; Max-Age=10; Path=/; Expires=Thu, 28 Mar 2024 19:21:34 GMT; Secure Content-Type: text/html; charset=utf-8 ETag: W/"2226-XgOzDBarkLfUlsOwV42gTllDv50:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="1978658348" X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Date: Thu, 28 Mar 2024 19:21:24 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com Transfer-Encoding: chunked
2024-03-28 19:21:24 UTC	8750	IN	Data Raw: 32 32 32 36 0d 0a 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 24 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 24 28 22 23 73 75 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 73 44 69 61 6c 6f 67 22 20 29 2e 64 69 61 6c 6f 67 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 4f 70 65 6e 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 36 30 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 32 35 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 7b 20 6d 79 3a 20 22 63 65 6e 74 65 72 22 2c 20 61 74 3a 20 22 74 6f 70 2b Data Ascii: 2226 <script type="text/javascript"> $( document ).ready(function() { $("#supportedBrowsersDialog" ).dialog({ autoOpen: false, width: 600, height: 225, position: { my: "center", at: "top+
2024-03-28 19:21:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49841	99.83.176.153	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:25 UTC	1034	OUT	GET /2.2/w/w-893076/init/js/?q=%7B%22e%22%3A213152%2C%22oq%22%3A%221280%3A907%3A1280%3A984%3A1280%3A984%22%2C%22wfi%22%3A%22flap-1%22%2C%22ji%22%3A%222.3.1%22%2C%22yf%22%3A%7B%7D%2C%22jc%22%3A%22Ybtva%22%2C%22jcc%22%3A1%2C%22ov%22%3A%22o2%7C1280k1024%201280k984%2024%2024%7C-60%7Cra-HF%7Coc1-2501pp0s72219oop%7Csnyfr%7C%7CZbmvyyn%2F5.0%20(Jvaqbjf%20AG%2010.0%3B%20Jva64%3B%20k64)%20NccyrJroXvg%2F537.36%20(XUGZY%2C%20yvxr%20Trpxb)%20Puebzr%2F117.0.0.0%20Fnsnev%2F537.36%7Cjt1-n46p01n68sp5740r%22%7D HTTP/1.1 Host: api-cbci.nd.nudatasecurity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.creditbureaureports.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 19:21:25 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:25 GMT Content-Type: application/javascript Content-Length: 537 Connection: close x-xss-protection: 0 x-frame-options: SAMEORIGIN Set-Cookie: ndcd=wc1.1.w-729460.1.2.Q1nP3uBPP0vriCLky-HG6g%252C%252C.BULnTIN7y3-4HSprUxdaKZA8BhKixFGr8Kp0qTnHtQ-TLyshOzXgx4nFRxmacfUZo2dLMJDH2DQLZrl3osZKqzkJV_BtQowgO34cwXBHShexfpgWpf0BrmLt6773Ir2K9Ju8sWgE7s7dGZVxiF1W4zJPJF2tYVNg3029fHF7TM3Sl7udyuT1PFgcfh_s-ZmW; expires=Fri, 28-Mar-2025 19:21:25 GMT; Max-Age=31536000; path=/; domain=.nd.nudatasecurity.com Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST Cache-Control: no-store, max-age=0 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff
2024-03-28 19:21:25 UTC	537	IN	Data Raw: 6e 64 77 74 69 28 7b 22 77 69 22 3a 22 77 2d 38 39 33 30 37 36 22 2c 22 63 6f 22 3a 7b 22 75 73 65 4e 64 78 22 3a 66 61 6c 73 65 7d 2c 22 77 6d 64 22 3a 7b 22 69 70 72 22 3a 7b 22 66 6d 22 3a 5b 5d 2c 22 6c 6d 22 3a 74 72 75 65 2c 22 74 6c 22 3a 32 30 30 30 30 2c 22 70 64 22 3a 7b 22 6d 6e 22 3a 22 30 22 2c 22 69 71 22 3a 22 30 22 7d 2c 22 69 6c 22 3a 32 35 7d 2c 22 77 6b 22 3a 7b 22 72 22 3a 22 74 65 73 74 22 7d 2c 22 64 69 22 3a 7b 22 72 74 22 3a 31 32 38 2c 22 75 74 22 3a 35 31 32 7d 2c 22 61 66 22 3a 5b 5d 7d 2c 22 66 64 22 3a 7b 22 69 70 72 22 3a 22 70 22 2c 22 62 69 22 3a 22 70 22 2c 22 77 74 22 3a 22 31 2e 77 2d 38 39 33 30 37 36 2e 31 2e 32 2e 48 75 50 67 62 66 41 31 31 65 67 70 44 42 63 46 53 65 56 4c 39 77 2c 2c 2e 5a 4a 63 75 45 68 78 61 70 63 Data Ascii: ndwti({"wi":"w-893076","co":{"useNdx":false},"wmd":{"ipr":{"fm":[],"lm":true,"tl":20000,"pd":{"mn":"0","iq":"0"},"il":25},"wk":{"r":"test"},"di":{"rt":128,"ut":512},"af":[]},"fd":{"ipr":"p","bi":"p","wt":"1.w-893076.1.2.HuPgbfA11egpDBcFSeVL9w,,.ZJcuEhxapc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49842	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:26 UTC	1973	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=3149778170&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 1331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:26 UTC	1331	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 31 36 35 33 36 38 31 39 37 39 25 37 43 31 37 31 31 36 35 33 36 38 32 37 31 34 25 37 43 64 6e 25 37 43 33 32 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 31 36 35 33 36 38 31 39 37 39 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 37 33 35 25 35 45 70 63 25 37 43 56 43 44 25 37 43 32 38 37 36 25 37 43 56 43 44 53 25 37 43 30 25 37 43 56 43 53 25 37 43 33 38 37 25 37 43 56 43 4f 25 37 43 33 31 36 37 25 37 43 56 43 49 25 37 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1711653681979%7C1711653682714%7Cdn%7C32%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1711653681979%7C_vc_%7CV%7C735%5Epc%7CVCD%7C2876%7CVCDS%7C0%7CVCS%7C387%7CVCO%7C3167%7CVCI%7
2024-03-28 19:21:27 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:26 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:27 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49843	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:27 UTC	1662	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=3149778170&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:27 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:27 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:27 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49845	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:29 UTC	1973	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=1162880932&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 4697 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/login.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:29 UTC	4697	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 69 63 6f 6e 6e 65 63 74 25 32 46 6c 6f 67 69 6e 2e 68 74 6d 6c 24 74 76 74 3d 31 37 31 31 36 35 33 36 38 31 39 37 39 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 33 2e 35 24 72 74 3d 31 2d 31 37 31 31 36 35 33 36 38 31 39 37 39 25 33 42 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 25 32 46 6a 73 25 32 46 6c 69 62 25 32 46 6a 71 75 65 72 79 2d 33 2e 36 2e 30 2e 6d 69 6e 2e 6a 73 25 37 43 62 35 30 65 30 66 30 67 30 68 30 69 30 6a 30 6b 32 6c 31 34 6d 33 32 76 38 38 35 36 30 77 38 38 35 36 30 58 32 30 30 4b 31 49 31 32 4d Data Ascii: $tvn=%2Ficonnect%2Flogin.html$tvt=1711653681979$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|3.5$rt=1-1711653681979%3Bhttps%3A%2F%2Fwww.creditbureaureports.com%2Fjs%2Flib%2Fjquery-3.6.0.min.js%7Cb50e0f0g0h0i0j0k2l14m32v88560w88560X200K1I12M
2024-03-28 19:21:29 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:29 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:29 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49846	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:29 UTC	1662	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2Flogin.html&bp=3&app=3389b198b27ff03b&crc=1162880932&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:29 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:29 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:29 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49849	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:33 UTC	1631	OUT	GET /iconnect/forgot_password.html HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; rxvt=1711655482304\|1711653631333; dtPC=3$453682068_908h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:33 UTC	668	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 19:21:33 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Location: https://www.creditbureaureports.com/iconnect/404.html Server-Timing: dtSInfo;desc="0", dtRpid;desc="2078536272" Content-Length: 237 Connection: close Content-Type: text/html; charset=iso-8859-1 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:33 UTC	237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 2f 69 63 6f 6e 6e 65 63 74 2f 34 30 34 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.creditbureaureports.com/iconnect/404.html">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49848	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:34 UTC	1564	OUT	GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653692700 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-XSRF-TOKEN: 0d9b1ef3-f1cc-41e4-b516-96febc1062f4 slc: sec-ch-ua-mobile: ?0 pslc: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; dtPC=3$453692643_34h1vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; rxvt=1711655492679\|1711653631333
2024-03-28 19:21:34 UTC	1558	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Set-Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; Path=/ Set-Cookie: JSESSIONID=DAAB9CED5D0C5181A6BBBD1B75A9E702; Path=/; HttpOnly; Secure Content-Type: application/json; charset=utf-8 Content-Length: 70 ETag: W/"46-6JqvDO8by63odLOOMJYMOTZtHxk:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="-547675545" Date: Thu, 28 Mar 2024 19:21:34 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4dab6734563a25279961da4c23228adec9fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9107975590b828acfbc41915eee764b1f66f4f7efffb84d0779a3cd7d7791bb50cc71637b6355f55039ae50fba4b1229e3e769713cda52ac150bfcdd76a470370a1bf62a7209870660042f693e489865; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:34 UTC	70	IN	Data Raw: 7b 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 7d Data Ascii: {"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49850	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:34 UTC	1449	OUT	GET /favicon.ico HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:21:35 UTC	543	IN	HTTP/1.1 204 No Content Date: Thu, 28 Mar 2024 19:21:34 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1992844050" Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49851	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:34 UTC	1838	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=583385474&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 1171 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; JSESSIONID=CC1563654EC4DECE2F21D2CD8E39F443; ut=; slc=; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0
2024-03-28 19:21:34 UTC	1171	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 31 36 35 33 36 39 31 39 38 35 25 37 43 31 37 31 31 36 35 33 36 39 33 32 35 37 25 37 43 64 6e 25 37 43 32 35 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 62 67 25 37 43 31 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 31 36 35 33 36 39 31 39 38 35 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 2d 31 25 35 45 70 62 25 37 43 56 43 44 25 37 43 30 25 37 43 56 43 44 53 25 37 43 30 25 37 43 56 43 53 25 37 43 31 33 30 31 25 37 43 56 43 4f 25 37 43 2d 31 37 31 31 36 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1711653691985%7C1711653693257%7Cdn%7C25%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%7Cbg%7C1%2C2%7C3%7C_event_%7C1711653691985%7C_vc_%7CV%7C-1%5Epb%7CVCD%7C0%7CVCDS%7C0%7CVCS%7C1301%7CVCO%7C-17116
2024-03-28 19:21:35 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:35 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:35 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49852	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:35 UTC	1380	OUT	GET /gateway/errorPage?requestType=onLoad&browser=new&user_client=&user_logId=&_=1711653692700 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=DAAB9CED5D0C5181A6BBBD1B75A9E702; TS01b7a93c=01fdb62b4dab6734563a25279961da4c23228adec9fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9107975590b828acfbc41915eee764b1f66f4f7efffb84d0779a3cd7d7791bb50cc71637b6355f55039ae50fba4b1229e3e769713cda52ac150bfcdd76a470370a1bf62a7209870660042f693e489865
2024-03-28 19:21:35 UTC	1327	IN	HTTP/1.1 200 OK X-DNS-Prefetch-Control: off x-frame-options: SAMEORIGIN strict-transport-security: max-age=16070400; includeSubDomains x-content-type-options: nosniff x-xss-protection: 1; mode=block Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept,Authorization, X-XSRF-TOKEN, strict-transport-security, x-content-type-options, x-download-options, x-frame-options, x-robots-tag, x-xss-protection, slc, pslc,X-Permitted-Cross-Domain-Policies Access-Control-Allow-Methods: GET,PUT,POST,DELETE,OPTIONS,HEAD Access-Control-Allow-Credentials: true x-robots-tag: noindex, nofollow cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache x-permitted-cross-domain-policies: none Content-Type: application/json; charset=utf-8 Content-Length: 70 ETag: W/"46-6JqvDO8by63odLOOMJYMOTZtHxk:dtagent10283240308130508sMTo" Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2003434815" Date: Thu, 28 Mar 2024 19:21:35 GMT Connection: close Set-Cookie: TS01b7a93c=01fdb62b4dab6734563a25279961da4c23228adec9fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9107975590b828acfbc41915eee764b1f66f4f7efffb84d0779a3cd7d7791bb50cc71637b6355f55039ae50fba4b1229e3e769713cda52ac150bfcdd76a470370a1bf62a7209870660042f693e489865; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:35 UTC	70	IN	Data Raw: 7b 22 75 74 69 6c 69 74 79 41 63 74 69 6f 6e 22 3a 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 30 32 2e 31 36 35 2e 34 38 2e 34 33 22 2c 22 63 6f 70 79 72 69 67 68 74 59 65 61 72 22 3a 22 32 30 32 34 22 7d 7d Data Ascii: {"utilityAction":{"ipAddress":"102.165.48.43","copyrightYear":"2024"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49853	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:35 UTC	1647	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=583385474&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=DAAB9CED5D0C5181A6BBBD1B75A9E702; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:35 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:35 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:35 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49854	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:38 UTC	1957	OUT	POST /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2955867825&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive Content-Length: 3718 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.creditbureaureports.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.creditbureaureports.com/iconnect/404.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=DAAB9CED5D0C5181A6BBBD1B75A9E702; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:38 UTC	3718	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 69 63 6f 6e 6e 65 63 74 25 32 46 34 30 34 2e 68 74 6d 6c 24 74 76 74 3d 31 37 31 31 36 35 33 36 39 31 39 38 35 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 34 24 72 74 3d 31 2d 31 37 31 31 36 35 33 36 39 31 39 38 35 25 33 42 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 72 65 64 69 74 62 75 72 65 61 75 72 65 70 6f 72 74 73 2e 63 6f 6d 25 32 46 6a 73 25 32 46 6c 69 62 25 32 46 6a 71 75 65 72 79 2d 33 2e 36 2e 30 2e 6d 69 6e 2e 6a 73 25 37 43 62 35 34 39 65 30 66 30 67 30 68 30 69 30 6a 30 6b 32 32 6c 33 32 6d 37 36 76 38 38 35 36 30 77 38 38 35 36 30 58 32 30 30 4b 31 49 31 32 4d 34 32 Data Ascii: $tvn=%2Ficonnect%2F404.html$tvt=1711653691985$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|4$rt=1-1711653691985%3Bhttps%3A%2F%2Fwww.creditbureaureports.com%2Fjs%2Flib%2Fjquery-3.6.0.min.js%7Cb549e0f0g0h0i0j0k22l32m76v88560w88560X200K1I12M42
2024-03-28 19:21:39 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:39 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 118 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Content-Type: text/plain; charset=utf-8 Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:39 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 33 32 34 30 33 30 38 31 33 30 35 30 38 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 32 30 30 39 39 31 31 32 39 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10283240308130508\|lastModification=1710200991129

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49855	12.51.26.7	443	5352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 19:21:39 UTC	1648	OUT	GET /rb_cdc3d21d-b847-42a5-87d1-2574bc7efce0?type=js3&sn=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1&svrid=3&flavor=post&vi=MHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0&modifiedSince=1710200991129&rf=https%3A%2F%2Fwww.creditbureaureports.com%2Ficonnect%2F404.html&bp=3&app=3389b198b27ff03b&crc=2955867825&en=5eyzl3s4&end=1 HTTP/1.1 Host: www.creditbureaureports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1; rxVisitor=17116536312944SKPFJONP3T9I74Q277C77FQI0RHSOOB; data=jIXa9Y1FcbBUjWYt4xzpIGWfR9%2BIZMvDLaOH34K1xIHhzTxYxc6mVYhkclMeR8Ct2CMcgNjy1aydoNmILtkzWnbOES4OLZrHXidD5eJMIt4%3D; dtSa=-; nextPageParam=lUhuNQgoJU%2FHQ9Ab7X4B%2Bw%3D%3D; XSRF-TOKEN=0d9b1ef3-f1cc-41e4-b516-96febc1062f4; rxvt=1711655493256\|1711653631333; dtPC=3$453692643_34h-vMHGFWHFMPAKPUULRFUHVASBVLBFRAHCM-0e0; dtCookie=v_4_srv_3_sn_51323BBA3A31E90D675C94247720D60D_perc_100000_ol_0_mul_1_app-3A3389b198b27ff03b_1_app-3Aea7c4b59f27d43eb_1; JSESSIONID=DAAB9CED5D0C5181A6BBBD1B75A9E702; TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08
2024-03-28 19:21:39 UTC	896	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 19:21:39 GMT Strict-Transport-Security: max-age=16070400; includeSubDomains Content-Length: 6 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Download-Options: noopen X-Robots-Tag: noindex, nofollow Content-Security-Policy: frame-ancestors 'self' https://.creditbureaureports.com https://.consumer.meridianlink.com https://.loanspq.com https://.empowerfcu.com https://.wsecu.org https://.americafirst.com; X-Forwarded-For: 102.165.48.43 Connection: close Set-Cookie: TS01b7a93c=01fdb62b4d39304db62a8dddd9138ebafafb7a0860fc88acd91c83d144ac14e9592b495ce2eea2ab01df6f8dded18615fe3df8a05a9193a3e55f468bfaae4bee45a24cb4c69315cfb9ea9eeecf9b70c67899db6cc2ee6d97d722c1db05c0f81a1c59e5114c5da279b5d4ea442346489ccf151d80438c57519d84fbcfd54fb52dcf6a810c08; Path=/; Domain=.www.creditbureaureports.com
2024-03-28 19:21:39 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Target ID:	0
Start time:	20:20:23
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:20:26
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2012,i,7783744179106233875,4894796927445351254,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:20:28
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://www.creditbureaureports.com/iconnect/login.html	HTTP Parser: Invalid link: Privacy Policy

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://www.creditbureaureports.com/iconnect/urlHandler?command=changePassword&logid=cnadmtk