Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

Overview

General Information

Sample URL:	https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg
Analysis ID:	1417533
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Classification

×

Process Tree

System is w10x64_ra

chrome.exe (PID: 6808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1940,i,18419103110123412338,14174858769471850138,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: Number of links: 0

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: Title: 7 17 Credit Union Registration does not match URL

Source: Chrome DOM: 0.0

ML Model on OCR Text: Matched 89.3% probability on "CREDIT Secure Message Center UNION Register Account Enter your email address and a password to register and begin sending and receiving secure messages. Email Address: smckenzie@op-f.org Password: Re-enter Password: Password Rules Passwords must contain 8 to 32 characters, and meet the following conditions. Contain both alphabetic and numeric characters Contain both uppercase and lowercase characters Contain at least one special character, such as: Passwords cannot match email address. Cancel Register For Customer Support, send an email message to into@717cu.com. We use cookies, find out why in our cookie disclosure. NCUA LENDER s tasted by Zix on of 7 17 unen zix Secured by "

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: <input type="password" .../> found

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No favicon

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No <meta name="author".. found

Source: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49741 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.21.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10

Source: global traffic	HTTP traffic detected: GET /s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktopFallthrough.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobile.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-566f38d3/sevenseventeen_stylesheet_mobile.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobileLandscape.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_tablet.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktop.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/CON-3e12d828/sevenseventeen_stylesheet.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_print.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/stylesheets/skipnav.css HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/top_20180418_1239.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/footer_20180418_1303.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/securedbyzix.svg HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/default_validatorconstants_en.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/default_registerview_validator.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/emailfieldvalue.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/fieldvalue.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/userNotifier.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/attributeDefinitions.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/top_20180418_1239.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/sevenseventeen/footer_20180418_1303.gif HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /i/securedbyzix.svg HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/scripts/jquery/jquery.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /s/REL-6.3.13-release.3.41521/scripts/jqueryui/jquery-ui.js HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7vLLDg5WPava8OB&MD=MGu6ZWZk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail-sscu.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail-sscu.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7vLLDg5WPava8OB&MD=MGu6ZWZk HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: unknown

DNS traffic detected: queries for: securemail-sscu.net

Source: chromecache_70.1.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_70.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_70.1.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_70.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_70.1.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_70.1.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_76.1.dr	String found in binary or memory: http://photo-bugs.com/wp-content/uploads/2012/03/bananahuge.gif
Source: chromecache_70.1.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_70.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_77.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_70.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_70.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_77.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_70.1.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_70.1.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_77.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_70.1.dr, chromecache_77.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_77.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_77.1.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_77.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_77.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_77.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_77.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_77.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_77.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_77.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_77.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_77.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_77.1.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_77.1.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49741 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@14/53@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1940,i,18419103110123412338,14174858769471850138,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1940,i,18419103110123412338,14174858769471850138,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg	0%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://js.foundation/	0%	URL Reputation	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
https://securemail-sscu.net/i/sevenseventeen/top_20180418_1239.gif	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_print.css	0%	Avira URL Cloud	safe
https://securemail-sscu.net/favicon.ico	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/attributeDefinitions.js	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobileLandscape.css	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/default_registerview_validator.js	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/userNotifier.js	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/CON-3e12d828/sevenseventeen_stylesheet.css	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/stylesheets/skipnav.css	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/scripts/jquery/jquery.js	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/default_validatorconstants_en.js	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/emailfieldvalue.js	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktopFallthrough.css	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/fieldvalue.js	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_tablet.css	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/scripts/jqueryui/jquery-ui.js	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobile.css	0%	Avira URL Cloud	safe
https://securemail-sscu.net/s/CON-566f38d3/sevenseventeen_stylesheet_mobile.css	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	172.253.63.147	true	false		high
securemail-sscu.net	63.71.13.102	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_print.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg	false		unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/attributeDefinitions.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/i/sevenseventeen/top_20180418_1239.gif	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobileLandscape.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/favicon.ico	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/userNotifier.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/default_registerview_validator.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/CON-3e12d828/sevenseventeen_stylesheet.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/stylesheets/skipnav.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/scripts/jquery/jquery.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/default_validatorconstants_en.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/emailfieldvalue.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktopFallthrough.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/fieldvalue.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_tablet.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/scripts/jqueryui/jquery-ui.js	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobile.css	false	Avira URL Cloud: safe	unknown
https://securemail-sscu.net/s/CON-566f38d3/sevenseventeen_stylesheet_mobile.css	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/slide-effect/	chromecache_70.1.dr	false		high
http://jqueryui.com/accordion/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/data-selector/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/tooltip/	chromecache_70.1.dr	false		high
http://jqueryui.com	chromecache_70.1.dr	false		high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_77.1.dr	false		high
http://jsfiddle.net/JZSMt/3/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/mouse/	chromecache_70.1.dr	false		high
https://github.com/jquery/jquery-color	chromecache_70.1.dr	false		high
https://promisesaplus.com/#point-75	chromecache_77.1.dr	false	URL Reputation: safe	unknown
http://jqueryui.com/position/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_70.1.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_77.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_77.1.dr	false		high
http://jqueryui.com/button/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/focusable-selector/	chromecache_70.1.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_77.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_70.1.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_77.1.dr	false		high
http://api.jqueryui.com/fade-effect/	chromecache_70.1.dr	false		high
http://bugs.jquery.com/ticket/11778	chromecache_70.1.dr	false		high
http://api.jqueryui.com/draggable/	chromecache_70.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_70.1.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_77.1.dr	false		high
http://api.jqueryui.com/form-reset-mixin/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/fold-effect/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/button/	chromecache_70.1.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_77.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_77.1.dr	false		high
https://bugs.jquery.com/ticket/13378	chromecache_77.1.dr	false		high
http://jqueryui.com/spinner/	chromecache_70.1.dr	false		high
https://promisesaplus.com/#point-64	chromecache_77.1.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/size-effect/	chromecache_70.1.dr	false		high
https://promisesaplus.com/#point-61	chromecache_77.1.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/spinner/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/tabs/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/puff-effect/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/uniqueId/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/slider/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/checkboxradio/	chromecache_70.1.dr	false		high
https://html.spec.whatwg.org/#nonce-attributes	chromecache_77.1.dr	false		high
http://api.jqueryui.com/selectable/	chromecache_70.1.dr	false		high
http://jqueryui.com/slider/	chromecache_70.1.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_77.1.dr	false		high
http://api.jqueryui.com/disableSelection/	chromecache_70.1.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_70.1.dr	false		high
http://jqueryui.com/droppable/	chromecache_70.1.dr	false		high
http://jqueryui.com/controlgroup/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/pulsate-effect/	chromecache_70.1.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_77.1.dr	false		high
http://api.jqueryui.com/scrollParent/	chromecache_70.1.dr	false		high
https://jquery.com/	chromecache_77.1.dr	false		high
http://bugs.jqueryui.com/ticket/7552	chromecache_70.1.dr	false		high
http://jqueryui.com/draggable/	chromecache_70.1.dr	false		high
http://jqueryui.com/sortable/	chromecache_70.1.dr	false		high
https://github.com/jquery/jquery/issues/4382	chromecache_70.1.dr	false		high
http://api.jqueryui.com/resizable/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/transfer-effect/	chromecache_70.1.dr	false		high
https://github.com/jquery/sizzle/pull/225	chromecache_77.1.dr	false		high
https://bugs.jquery.com/ticket/4833	chromecache_77.1.dr	false		high
https://sizzlejs.com/	chromecache_77.1.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_77.1.dr	false		high
https://js.foundation/	chromecache_77.1.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/labels/	chromecache_70.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=47182	chromecache_70.1.dr	false		high
http://www.robertpenner.com/easing)	chromecache_70.1.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13393	chromecache_77.1.dr	false		high
http://api.jqueryui.com/sortable/	chromecache_70.1.dr	false		high
http://jqueryui.com/datepicker/	chromecache_70.1.dr	false		high
Http://bugs.jqueryui.com/ticket/9446	chromecache_70.1.dr	false		high
http://api.jqueryui.com/tabbable-selector/	chromecache_70.1.dr	false		high
http://api.jqueryui.com/datepicker/	chromecache_70.1.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_77.1.dr	false		high
http://jquery.org/license	chromecache_70.1.dr	false		high
http://api.jqueryui.com/highlight-effect/	chromecache_70.1.dr	false		high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_77.1.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_77.1.dr	false		high
https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG	chromecache_70.1.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_70.1.dr	false		high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_77.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
63.71.13.102	securemail-sscu.net	United States		13380	ASN-CUSTUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.253.63.147	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417533
Start date and time:	2024-03-29 15:15:26 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@14/53@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.163.94, 172.253.62.113, 172.253.62.102, 172.253.62.139, 172.253.62.100, 172.253.62.101, 172.253.62.138, 172.253.62.84, 34.104.35.123, 142.251.167.95, 172.253.62.95, 172.253.122.95, 142.251.111.95, 142.251.163.95, 142.251.16.95, 172.253.63.95, 142.250.31.95, 172.253.115.95, 142.251.16.94
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9933778012962646
Encrypted:	false
SSDEEP:	48:8/d8sTJtUH6idAKZdA1FehwiZUklqehgy+3:87/x/y
MD5:	A905B6FC38C374F588327534A4B11915
SHA1:	2726B754F88EB72FB1C169C1748E5522CD350DF1
SHA-256:	3368E4649F49900AC20D0DC7456F17D878AFCD12051366E1741A085CB0D31765
SHA-512:	E350D085FB66D7FE8C8075F256CDBB8C9B0DAD991093A1C382064392038F08614389EA3F3B07C4D310D432C932BF8182078C39468B6A366EE3FD2822FF802D4E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qP.@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.008690558228282
Encrypted:	false
SSDEEP:	48:8Wd8sTJtUH6idAKZdA1seh/iZUkAQkqehvy+2:8Y/n9QWy
MD5:	EDECD59F174383ECC7567447A27BC4C2
SHA1:	164653BBAAF22620128D0104D9E4259C848E828F
SHA-256:	4A18AD121B351E66821FDD4F028D2B39B2EC7C52EE1F953A68B058736C55E6B1
SHA-512:	B729237313F362DF66BF0AC91D7DCEB72EB744A21AC5055B7A76B64A54355CDD7C463EF19CF9E9C66E7A7840864755585809F190198663B7A417FAF04844F2CF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qP.@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0140097504228605
Encrypted:	false
SSDEEP:	48:8id8sTJtAH6idAKZdA14meh7sFiZUkmgqeh7sly+BX:8k/nnLy
MD5:	6AB088F8C72B59B3DFD05071319C1448
SHA1:	D460A3440A65B65545D47A596E451F6041E7E430
SHA-256:	93BDDFCCC21F3759FB67DC19B42A892ACB5549B584D360FD2C0AC0076FED8826
SHA-512:	242EA68911396A487C85954CFE6B5D59AAFFBA56E7C02D050EBAB96F588AD368C4F437BCFC86149FDBD417EB7F1E09217507DE0FBFE5089EDA79D149711954E6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qP.@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.006292256597025
Encrypted:	false
SSDEEP:	48:8Zd8sTJtUH6idAKZdA1TehDiZUkwqehTy+R:8t/UNy
MD5:	D93C29AB4EB8905A17B93FBC4A7D051E
SHA1:	9F0084CFD1F9A11C9E53C4072E6768D948D67D87
SHA-256:	3E4B0F8DEF5C5CD3A40B35B6F087E259677EBF90E23556F634249BF01DF5A085
SHA-512:	3DA69C43149F6004144F0A9F174555D2DD1A5A9D5062A4379F4385F1D663052350BE7C6C52DF308142D87F7491DC1DF1A41CBEFF19C03F1F58C80DBD320D6D28
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....w......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qP.@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9961222566728116
Encrypted:	false
SSDEEP:	48:8/d8sTJtUH6idAKZdA1dehBiZUk1W1qehBy+C:87/U9hy
MD5:	55BD93DA37CA2A526264BEDBFF5D241F
SHA1:	5A80C8A2BDFF1184AA73C4B65A2D590A8DAF4E2D
SHA-256:	3CC13CA6E07AD2EFA50425BBFABFA456EBDF2B568F28E9E608F0B1431A80CC9D
SHA-512:	4A612A24C487F4446DA692737E64759A180495EF60006AC70F0A1A18830E6AEFFA7F224FB81671E509584B69046A25A935D4874CCE45B4CFB447C9482CB6B3A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qP.@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Mar 29 13:15:56 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.007471159433728
Encrypted:	false
SSDEEP:	48:8UWd8sTJtUH6idAKZdA1duTeehOuTbbiZUk5OjqehOuTbLy+yT+:8j/mTfTbxWOvTbLy7T
MD5:	50EE848886D4EF82A374F44B765628AC
SHA1:	F008091B897D935F233EA2164EC20D6C3FEFC69B
SHA-256:	2424F98F4A67D055F27F39E7AA5CA56610380BCA7D2205E83923E29B32997C36
SHA-512:	F8179632665654DD370C96FF0BCFFCD99D86296271C5CF1D749E9D0A3BAFF775F1B6201497C4B27F17961C26B22C5BD7A0F1DB5301A94D49AD922D2ACE592E8F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I}X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V}X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V}X.q....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V}X.q..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V}X.q...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........qP.@.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (736)
Category:	downloaded
Size (bytes):	2795
Entropy (8bit):	5.033721859333416
Encrypted:	false
SSDEEP:	48:Lk4kRxYXLtL8t5SrYiLDmN+M5SwU0G+/26ImFBXuiI6:LkFwit5St6YM5S707eqr66
MD5:	63AEC865D81748A53F7C598A6303C0B1
SHA1:	5C900F1E3A55DDE914B0C2D918C1311D117B87EF
SHA-256:	88493528EA867C5990CF874EA57D2CA56FA4E08D91F8CBEE3CA5F9F9D3800C41
SHA-512:	4EB372D693780702C454A2CC6D092429DCEBC5D386F6DD4A7193B984845D4F4028EE1E02F70A25797AF075086C0AF3AC3CB1B53C670871EBCBB6867991B90BD1
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/CON-3e12d828/sevenseventeen_stylesheet.css
Preview:	#messagetextcontainer .cke_1 .cke_wrapper,#messagetextcontainer .cke_1_dialog .cke_dialog_contents,#messagetextcontainer .cke_1_dialog a.cke_dialog_tab,#messagetextcontainer .cke_1_dialog .cke_dialog_footer {background-color:#f2f2f2 !important;}.#topaccent1,#topaccent2,#bottomaccent1,#bottomaccent2 {border-top-color:#395566;}..topaccent3 {..border-top-color:#395566;..border-bottom-color:#395566;.}..navlinkon,#navbarpagelabel {color:#000000;}.#mailkey,#sentitemskey,#draftitemskey,#addressbookkey,#mailkey li,#sentitemskey li,#draftitemskey li,#addressbookkey li {border-color:#395566;}.#changepasswordlink a:hover,#createaccountlink a:hover,#helplink a:hover,#layerbrandheader .access:hover,#composebody #attach .button:hover,#replybody #attach .button:hover,#submitbutton input:hover,#actions input:hover,#changepassinfo #submitbutton:hover,#registerinfo #submitbutton:hover,#attachmentfiles .button:hover,#errorbody #submitbutton:hover,#acceptbody #submitbutton:hover,#cancelbody .button:hover,

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.847691161328113
Encrypted:	false
SSDEEP:	3:bum4ichcpaqgrmHhJpSh6YHYn:butbbshOhLYn
MD5:	B6BB6A31A466AD34A4696CF692B0D149
SHA1:	5B2294276DE4146EFC35013F4B2B7E9BED34ABDF
SHA-256:	8D3FA28651BE2AC741A2212692C764AFD157460A6DDD91EA1D0231A5FC2969A6
SHA-512:	0AB3FA1A461F511572404A71BFB79A5D3361D3877A974F94AB6B57F5B2D3F08D34527621C3F29DDF8ABE50BE754FD5774DCA8CBDF07E8F7A7D0D8C0A2DF00A1D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmIDSnp_H620xIFDcPxAUESBQ3iWAvgEgUNokXx2w==?alt=proto
Preview:	CjsKCw3D8QFBGgQIVhgCCh8N4lgL4BoECEwYAioSCApSDgoEISRAIxABGP////8PCgsNokXx2xoECF8YAg==

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	492
Entropy (8bit):	4.673424200155852
Encrypted:	false
SSDEEP:	12:NR6flcAp90WV14ERsLHCSLyBlOt4a42ZlloVii:NWcIAEOLHlLyOfll2ii
MD5:	37F0A98FA1E40956308C3FCAEE929744
SHA1:	39467A9D2ED951F9461F51032F354F3F03974776
SHA-256:	2A07A12EC6607580E1C9BD6BFE4EEC68A495563A224F82EB56CCE72BFC8348A4
SHA-512:	28C8ADF0A026BCB49993AF9A94BAEFB040B610DA9BDC2CA914D817783C47FCADD96437ACDFA7887C6461CE13A9906C497C2C35EC149BC3F478B4205F6A48BB38
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/stylesheets/skipnav.css
Preview:	.skipnav { text-align: left; }. .skipnav a { display: block; position: absolute; left: -10000px; width: 1px; height: 1px; overflow: hidden; }. .skipnav a:focus, .skipnav a:active { . .display: inline-block; . .position: static; . .left: 0; . .width: auto; . .height: auto; . .overflow: visible; . .text-decoration: underline; . .margin: 12px;. .padding: 1px;. .font-size: 16px;. .font-weight: normal;. .outline-width: 3px;. .outline-color: #bcddfa;. .outline-style: solid;. }

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004)
Category:	downloaded
Size (bytes):	529159
Entropy (8bit):	5.068587196203611
Encrypted:	false
SSDEEP:	12288:mFemHFgymkplyHCcmM0/W/EEwKvQRgPrVhDdRlY:wlyHCcmM0/W/EEwKbhhDdRlY
MD5:	CBC65FF85E08B21D7E0C0394FBF3A371
SHA1:	0EBABCD2C6DA47BDE11FADF331A02C98845B0A8D
SHA-256:	C4B0FB9E123AD9F72C1192B6FEFF0BB0171BE251BB76050B92E5E85C1FE3F757
SHA-512:	CA70D36E3179AD41EC5818F3EE7B258EBAD25AA2D33C968E47349EE5A1821713A28116519B0334E72FA4B82B716A8092CD5181D4ACB75DE459B0385B48B7735D
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/scripts/jqueryui/jquery-ui.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.649436196704237
Encrypted:	false
SSDEEP:	3:ewY9DQWQpkqY9JEW6w9QosZ/KsxFMFoJ9d:ewa0rpk7KWY//BP
MD5:	79DE66ECFAE36933B337F9D81CFD0AAD
SHA1:	CC14E85CDDAE0DDEBA1B14B50882975A02837765
SHA-256:	A9FEFF9CE2D0A12D3E823E83BC5C1D16EBC42C22DBDFA2771ABA4346404E9A78
SHA-512:	87D06911D044BD2D008061EA790F753466990D778245D740DE58D0A4B245178BC2DF0D036A4D4763C8EF828545242F14A21A5E93DD8BCE956624294F4F48EBE1
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/attributeDefinitions.js
Preview:	FIRST_NAME = "first_name";.LAST_NAME = "last_name";.MIDDLE_INITIAL = "middle_initial";

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	downloaded
Size (bytes):	1494
Entropy (8bit):	4.956290709089297
Encrypted:	false
SSDEEP:	24:OUGmzNvwNO8eJng6a+v6fEYpEb9f5IE2ED3/rc2sc5tsC:OcfxJFa+v68Ymb9hB2EDvY215CC
MD5:	402199F122593D31ED27C0EEFE093EF2
SHA1:	968DEEA426F88EB65F6D3D0A2BA8C24F5FFBF762
SHA-256:	BC8B1DED0DA0E857EC0848ACFCF605A8D193A0F8D25C62E7100964D69E79D7E8
SHA-512:	054258E82D799B2A6A92A04F3104C37BEE122A6581A70556AB9C6F40BCE9302CB661CCA317A1BF4897CF6F352999683D7C546436D5FA885223943BB737F451B5
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.css
Preview:	#primarybranding #smallBanner {background-color:transparent;}.#secondarybranding {background-color:#4d738a;}.#secondarybrandinghtml {width:100%;}.#brandingbottombanner {..background:url(/i/sevenseventeen/footer_20180418_1303.gif) no-repeat right center;..display:block;..height:90px;.}..messageselecton {background-color:#f2f2f2;}.#changepasswordlink,#createaccountlink,#helplink,#inputarea,#displayarea,#changepassinfo,#registerinfo,#actions {background-color:#f2f2f2;}.#topaccent1,#topaccent2,#bottomaccent1,#bottomaccent2 {border-top-color:#395566;}..topaccent3,#navtopaccent,#navbottomaccent {..border-bottom-color:#395566;..border-top-color:#395566;.}.#container ul {border-top:1px solid #395566;}.#container,#messageheader {border-color:#395566;}.#messageviewactions li input,#replyactions li input,#composeactions li input,#composebody #attach .button,#replybody #attach .button,#messagecenteractions li input,#sentitemsactions li input,#draftitemsactions li input,#submitbutton input,#registe

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4168
Entropy (8bit):	4.364207777843192
Encrypted:	false
SSDEEP:	96:hJrehsOr7vQ6663alj/zxNTmul41qL2qIuWB5VXZW8Hm:hJre6cCBfTmuC182qIuS5VXZC
MD5:	C5E7A96D9F08831036AF7261F519F8EF
SHA1:	13F265BBBEAEAED4E6D43995A7553893F514FB0A
SHA-256:	2EC8BFF74CFFA23AFAD4C372398FF59B7BDEA6C07DCE9B511112D9A4B743A560
SHA-512:	BB1132DACCAA7E5FDEDF21DF9DFFB3381787D7379C485159E8D1E66080C8D2160F85E3356A0B4395EB98031798518532FCA0905E0884E140AC78B09D30D1A8EC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="144" height="41" viewBox="0 0 144 41">. <defs>. <style>. .a {. fill: #14b1e7;. }.. .b {. fill: #0160a8;. }. </style>. </defs>. <title>securedbyzix</title>. <g>. <g>. <path class="a" d="M.68,34.93A3.44,3.44,0,0,0,3.26,36a2.35,2.35,0,0,0,2.5-2.16c0-2.14-4.36-1.89-4.36-4.65a3.47,3.47,0,0,1,3.67-3.11,3.78,3.78,0,0,1,2.8,1l-.61.79a3.18,3.18,0,0,0-2.17-.83,2.46,2.46,0,0,0-2.62,2.12c0,1.93,4.36,1.74,4.36,4.65A3.38,3.38,0,0,1,3.26,37,4.15,4.15,0,0,1,0,35.66Z"/>. <path class="a" d="M12.8,29.11a2.51,2.51,0,0,1,2.76,2.73,4.9,4.9,0,0,1-.23,1.27H9.54a3.24,3.24,0,0,0-.06.65A2.22,2.22,0,0,0,11.9,36.1a4.3,4.3,0,0,0,2.46-.92l.33.84a5,5,0,0,1-2.82,1,3.14,3.14,0,0,1-3.45-3.18A4.58,4.58,0,0,1,12.8,29.11Zm1.67,3.17a3.44,3.44,0,0,0,0-.53A1.61,1.61,0,0,0,12.8,30a3.32,3.32,0,0,0-3.06,2.31Z"/>. <path class="a" d="M21.33,29.11a3.46,3.46,0,0,1,2.73,1.08l-.62.69A2.83,2.83,0,0,0,21.38,30a3.72,3.72,0,0,0-3.6

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1200 x 130
Category:	dropped
Size (bytes):	17082
Entropy (8bit):	7.869069673501571
Encrypted:	false
SSDEEP:	384:wwDbNr/0aKxBoKWLiE7QYXOteQcx8iDFAcJ/wewQJoJEme75:weBL0aGit++7pT4eBMvW5
MD5:	03253B7B8F8F4D565E64FF36097A1B49
SHA1:	D04E01B6A2537CB6F7CA62FEC41C4488DD47B3AC
SHA-256:	CA53E78875450065BBCABCFA2BFA5E85AD7566C6E811CAE9F3D2E77E733B559E
SHA-512:	EF494EC7B85E2BE75A3C734B9C33A8D6A2FE0EB2C0C9CCD0E1999BFD02386E3289B0E82BEBCDCA8ADB5F71CD55285CB504E45E4E48EF0A8FBC3A08CDD1549565
Malicious:	false
Reputation:	low
Preview:	GIF89a........").%-.3./8 /9!2<%7A&9D(;G)=J4=B+@M:EL7@G.ES0HW3L[8IT7Rb9Uf:Wh=[m?_r:d~JPTMW]@OXFXe@_rQ[by[lr_p]cf\ekAbuDeyFi~NfuWi{]p\|aingfunruotxqw{p`r.6=.....".!%.%.(,.+/.-2.-1.28.26.69.9=.;C.>G.=A.KW.P].BL.EP.Tc.BF.IM.GJ.MQ.RU.Z].VY.^a.be.jm.fi.nq.pr.ru.x{El.In.Vn.Kp.Ms.Qv.Ty.Vt.V{.[~.kz..~.^..~..w..b..d..j..j..w..z..o..p..t..y..{..}.........................................................................................................................................................................................................................................................................................................................................................................................................................!.......,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`...,V.F..Eq.D..&N.(b.H.,cc............U.(Jz......4"/.1#.."M.5..w...C..M..i..^9Z..1..

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	6055
Entropy (8bit):	5.179218892050803
Encrypted:	false
SSDEEP:	96:D8kc/mfS6UD7FXLS9ePfdOdpkePoOwgfYJLnX0OeNxOAypvbnXL3oD0d:DHc/mfS6UPNLS95fk4R0LnX11tL3oDu
MD5:	F7C582BEF0D90EC28C1500B05F62EC63
SHA1:	79B2276C5C9D1131347EBC7183AC65EC6E2AD920
SHA-256:	A57E6E8ACE4AF732A75BE722FF22CAC47EC4253DE7220FCFF4881604FCCB2EAA
SHA-512:	D02D3458738F3AFA59B2A8551F4C061185E0EDE1BB2CBE5F96CE6A8215115E6775E76108B48BB11BAEF91036EF17A6F822B0D1FD25F999ABE3B068BAE2F2074D
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktopFallthrough.css
Preview:	@media screen {../* ------------------- /./ button hover effect /./ ------------------- */.#changepasswordlink a:hover, #createaccountlink a:hover, #helplink a:hover, #layerbrandheader .access:hover,.#composebody #attach .button:hover, #replybody #attach .button:hover,.#submitbutton input:hover, #actions input:hover, #changepassinfo #submitbutton:hover,.#registerinfo #submitbutton:hover, #attachmentfiles .button:hover,.#errorbody #submitbutton:hover, #acceptbody #submitbutton:hover, #cancelbody .button:hover, .#declinebody #submitbutton:hover, #infobody #submitbutton:hover, #confirmactionbody #submitbutton:hover,.#challengequestioninfo #submitbutton:hover.#verifyfields #submitbutton:hover {..background-color: #CCCCCC;..background: -webkit-gradient(linear, center top, center bottom, from(#CCCCCC), to(#999999) );..background: -moz-linear-gradient(top, #CCCCCC, #999999);.}...#changepassinfo #cancelbutton:hover, #registerinfo #cancelbutton:hover, #pinentryinfo #cancelbutton:hover,.#cha

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	36108
Entropy (8bit):	5.176033132020104
Encrypted:	false
SSDEEP:	768:hP4cw0LYi3IzLnHs1LnUnILnyJivj9zLKSc29LnyLn0DEyi5ji6LLnfcfLnTvwsk:hP4cw0LYNLnM1LnCILnHLKSc29LnyLn9
MD5:	32E9D431BD7BA52AACDAA3988B7A47DC
SHA1:	538C7ADBFA8E1588AC59931B3387462F116304D8
SHA-256:	7D110159015B3BF23A9F8D78E5D9DFC0AB06769988599213DC0417E6FE2A4CDC
SHA-512:	178186194061CCB950FBF514D45E64BFE60C5A7E18CDD8E36F07BD0AD202D80B0F367C106DD8297DBE2B201708BCA3B2CF877FABFDC44EA133966E6A6C61921E
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobile.css
Preview:	@media screen {.../* Reset ---------------------------------------------------- */.html,body,div,span,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,code,del,dfn,em,img,q,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td..{..margin: 0;..padding: 0;..border: 0;..font-weight: inherit;..font-style: inherit;..font-size: 100%;..font-family: inherit;..vertical-align: baseline;..-webkit-text-size-adjust: none;..-webkit-tap-highlight-color: rgba(0, 0, 0, 0);.}..#messagebody em {..font-style:italic;.}..#messagebody ul, #messagebody ol {..margin: 10px 40px;.}..body {..font-family: Arial, Helvetica, sans-serif;..background-color: white;..padding: 0 6px;..margin: 0 auto;.}..a {..text-decoration: underline;..color: #555555;..font-weight: bold;.}...positive_action.{. color: #00AA00;. border: 1px solid #00AA00;..}...negative_action.{. color: #AA0000;. border: 1px solid #AA0000;.}..#closelastaction.{. background: transparent;. colo

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	288580
Entropy (8bit):	5.066983843372853
Encrypted:	false
SSDEEP:	6144:rJshNVlG+TCtlFhTzeKpzcYmD2zK8E1JEjPx+WK+978FyW48L/dCaYeNzIPfTvI4:HjzcYmD4Y0Px+WK+978FyMhr+PfcA+up
MD5:	2849239B95F5A9A2AEA3F6ED9420BB88
SHA1:	AF32F706407AB08F800C5E697CCE92466E735847
SHA-256:	1FE2BB5390A75E5D61E72C107CAB528FC3C29A837D69AAB7D200E1DBB5DCD239
SHA-512:	9FFE201D6DDAB4CDD0A9171B0A7E9EC26A7170B00719A0E3A4406EE3165DE3B3745B6A10FBAABBA1CDCF5ECB6B2585DC6CD535387750D53EE900FFA08B962EF2
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/scripts/jquery/jquery.js
Preview:	/!. jQuery JavaScript Library v3.6.0. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2021-03-02T17:08Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return fa

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.682630221661915
Encrypted:	false
SSDEEP:	3:2GKhXO6LISDNRfUAWsNXOMLHTkVoBZDMZNRfUlur+31:hKNnRTpJLwLReuC31
MD5:	56A5BB37719239FD5EA38C789FBC0E39
SHA1:	079B63878CBDA4DF4B9534257E36F3734D3B13BD
SHA-256:	5F180D55F25EAEBF710C3ADF71EEC2D704C42EAEA452AA3120126D873F281509
SHA-512:	10DA22386141936B82350D0083FA4D1E42FF51D9DD7808FEE0963E6A05B2D4AA571AA82DBD4BC6C58FEDA9E6130BFD3F285FD58E7EFBB1F4C1266D22DC8E4F32
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/CON-566f38d3/sevenseventeen_stylesheet_mobile.css
Preview:	#secondarybranding {min-height:1em;}.#secondarybrandinginfotext {padding:6px;min-height:1em;font-size:0.7em}.

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (342)
Category:	downloaded
Size (bytes):	16544
Entropy (8bit):	5.096884809716413
Encrypted:	false
SSDEEP:	192:Dgey1XC/QYQb9/C2OusU6LKUGltU2zQeLbGNekwKulZ7sNU8xhnSiKP3AZI3e6fJ:DWtTbgKzQYnsvhSiKdE6
MD5:	D3C4BE0F7308A19FB17DB9376D7DEC7A
SHA1:	EE16C49C9B804EB7EE2988B38F5611AB85026678
SHA-256:	81103F073BE555414136AEA440D8F6272A80F08CE513607CB76040453712E25C
SHA-512:	EC82276ACA0BC62B8C72D69A401D7762A2975A07A81F1F3AF765AD0EDC658C745B0433A5AC90990DEFB87BF5FF7625FAA65B74B4D6E4C95607EE68F0D7EC1DA9
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_tablet.css
Preview:	@media screen and (min-width:801px) {../------ for all pages ------/..container {..max-width: 1200px;..margin: 0 auto;.}...nodata {..padding: 12px;.}..#navbarbutton {..display: none;..}...navlinkon {..color: #999999;..font-size: 1.25em;.}...navlinkoff {..font-size: 1.25em;.}..#navbar li {..border-style: solid none none none;..overflow: visible;.}...#navtopaccent {..display: none;.}..#navbottomaccent {..display: none;.}..#mfainputarea.{..margin: auto;..max-width: 720px;.}..#navexpansion {..width: 100%;..height: auto;..overflow: visible;..float: none;..margin-bottom: auto;.}..#navbar {..width: 100%;..border: none;..background-color: transparent;..margin: 6px 0 0 0;..display: block;..-moz-box-shadow: none;..-webkit-box-shadow: none;..z-index: 3;.}..#navexpansion ul {.}..#navbar #navofflogout {..display: block;..height: 0;..overflow: visible;..padding: 0;..text-align: right;..border: none;.}..#addressbookbody #actions, #draftitemsbody #actions {..min-height: 46px;.}..#navofflogout .navli

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3324
Entropy (8bit):	4.9057442951405115
Encrypted:	false
SSDEEP:	96:D9+qipIudoaFWIaALTcluk5T9U1dZkBp29rnLj8:DyW8kV9U1dZkBp29bLY
MD5:	1EE901EA2968D580CB3DBFC0D576A60E
SHA1:	D34381C10C8130EBAB70E589825FEEC7341DEE44
SHA-256:	E967764F603B517699D3C4AB4C8722211E0ACA5A5C3C8B55D666B2CA7FA44E8B
SHA-512:	01E1E54060AD4CBB6BE7C406DAB69C7786409B9A1A342611F650ECD2F69AEE99F4CA562FD1393EC4078AEBD7AAEF346D7A96096D8BAD83FB1CDAADDD16CCC737
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobileLandscape.css
Preview:	@media screen and (min-width:341px) {../-------- mc.jsp -----/.#actionmessages {..}..#newmsgcount, #replytomsg {..white-space: normal;..overflow: visible;.}..#lastlogin {..white-space: normal;..overflow: visible;.}....mailattachment,..sentitemsattachment, .recallmailattachment,..draftitemsattachment {. float: left;. align: right;. text-align: right;. padding: 9px 0px 0px 0px;. width: 5%;.}...mailsender,..sentitemsrecipient,..recallmailrecipient,..draftitemsrecipient,..multifactoritemsname,..addressbookname,..groupinfoname,..groupinfolistname {..float: left;..margin-left: 10%;..width: 46%;.}...multifactoritemstype {. float: left;. margin-left: 10%;. width: 85%;. padding: 4px 0px 0px 0px;.}..mailsubjectread, .mailsubjectunread,..sentitemssubject, .sentitemssubjectlong,..draftitemssubject, .draftitemssubjectlong {. float: left;. margin-left: 10%;. width: 85%;. padding: 4px 0px 12px 0px;.}...multifactoritemscategory {. f

Chrome Cache Entry: 81

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1200 x 130
Category:	downloaded
Size (bytes):	17082
Entropy (8bit):	7.869069673501571
Encrypted:	false
SSDEEP:	384:wwDbNr/0aKxBoKWLiE7QYXOteQcx8iDFAcJ/wewQJoJEme75:weBL0aGit++7pT4eBMvW5
MD5:	03253B7B8F8F4D565E64FF36097A1B49
SHA1:	D04E01B6A2537CB6F7CA62FEC41C4488DD47B3AC
SHA-256:	CA53E78875450065BBCABCFA2BFA5E85AD7566C6E811CAE9F3D2E77E733B559E
SHA-512:	EF494EC7B85E2BE75A3C734B9C33A8D6A2FE0EB2C0C9CCD0E1999BFD02386E3289B0E82BEBCDCA8ADB5F71CD55285CB504E45E4E48EF0A8FBC3A08CDD1549565
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/i/sevenseventeen/top_20180418_1239.gif
Preview:	GIF89a........").%-.3./8 /9!2<%7A&9D(;G)=J4=B+@M:EL7@G.ES0HW3L[8IT7Rb9Uf:Wh=[m?_r:d~JPTMW]@OXFXe@_rQ[by[lr_p]cf\ekAbuDeyFi~NfuWi{]p\|aingfunruotxqw{p`r.6=.....".!%.%.(,.+/.-2.-1.28.26.69.9=.;C.>G.=A.KW.P].BL.EP.Tc.BF.IM.GJ.MQ.RU.Z].VY.^a.be.jm.fi.nq.pr.ru.x{El.In.Vn.Kp.Ms.Qv.Ty.Vt.V{.[~.kz..~.^..~..w..b..d..j..j..w..z..o..p..t..y..{..}.........................................................................................................................................................................................................................................................................................................................................................................................................................!.......,...............H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`...,V.F..Eq.D..&N.(b.H.,cc............U.(Jz......4"/.1#.."M.5..w...C..M..i..^9Z..1..

Chrome Cache Entry: 82

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 185 x 60
Category:	dropped
Size (bytes):	5809
Entropy (8bit):	7.772571165501874
Encrypted:	false
SSDEEP:	96:ZwjJhDyqTiE6pN3jjDcfDhrJ6BOCLDKZEvbyuFhTeb+cZ5p4X2OLL3ZB:ZkJhB6p5DADhr4tOE+ohcfZ5mPLLpB
MD5:	A0F5ED9A23FCD41B9E9FD2C329CA8B41
SHA1:	77A7876E5A7344304FFE6A5D49A73559A914A239
SHA-256:	584AD90C6010AB170956E3F8CF658938D5F0E89673CC1D905262CF20FB8D635E
SHA-512:	9960E989718EA7C4CF75934F6675CCF439E29D6521515177787916758B4586BE9F10F73E971992E87F3CEC85D9E5AE602072FFEA62E4D6E07D51BF3E2ED3D43D
Malicious:	false
Reputation:	low
Preview:	GIF89a..<............................!!!&&&(((---222666999===.6w.6x.9y.<{.<\|.;{.<{.=\|.>}.@~.@~.A~AAAEEEIIIMMMQQQTTTZZZ]]]aaafffiiimmmqqquuuyyy}}}.A..B..D..B..E..F..G..H..F..J..L..J..L..N. N.!N."P.%R.&T.%U.)S.)S.(T.U.,U.,V.+Y..Y./Z.0Y.4[.4\.1Z.2\.4Z.5].6_.9[.8^.<_.6`.9`.9a.:d.<a.=a.=d.>e.Ab.Ae.Dg.Af.Ef.Bh.Ci.Cm.Fj.Gk.Fl.Hj.Il.Im.Mn.Ms.Kp.Mp.Po.Qq.St.Uq.Tu.Lr.Pr.Vs.Uu.Wx.[u.\z.^~.b}.a~.h~.i~.t..d..b..e..e..e..h..i..i..i..l..n..j..l..o..j..o..s..t..\|..v..\|..\|..............................................................................................................................................................................................................................................................................................................!.......,......<.....#H.H......\.....F......3V4w).%s.C..F..(S.\...0c.I3..,#s..!... ...j.$.H.].4..D3..d..U..........V.h.Kv..h.M.v..p..Kwm..8..S....V9.R.W.Q.].s....#K.L....)..d..n(...M E..$;..Wi...

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4750
Entropy (8bit):	4.669394251827733
Encrypted:	false
SSDEEP:	96:xRvrLe0QFR2FASfKDU+DUnnDUISR9bE68AYtSC0AoHtZeI4pR2+SIgTyCb3vRUgY:n+0QRcaUmUDUIWE5AcAAoNsItLIM3vRS
MD5:	8DFC6D0E61703B900E5EBB4D5EC9E9FB
SHA1:	015B0A1EDCE4B4D07F5FFA406797E368B2E8612B
SHA-256:	EBED0465108C352AD4706496AE008FC85B1DDF2C06DD269AD42E53A37EEFB0C3
SHA-512:	6363ADDC886B006B18FAB20B9811DD07427F7910B2FDE8D4FF0AF9DC39C35903BF1BB3108F58970B13F0B072102E329892A3F3F80855C61437CC6ADAFF9E8E10
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/default_registerview_validator.js
Preview:	function validateVitals( sdForm, emailAddressId, passwordId, passwordRedundantId, elementID, displayClientErrorsInline ).{. if( isBlank( emailAddressId.value ) \|\| !isEmailValid( emailAddressId.value ) ). {. issueClientWarning( EMAIL_ADDRESS_WARN_INVALID, elementID, displayClientErrorsInline );. clearPasswords( passwordId, passwordRedundantId );. emailAddressId.focus();. return false;. }. return true; .}..function validatePasswords( passwordId, passwordRedundantId, elementID, displayClientErrorsInline ).{. // Check 1st password value. var first = passwordId.value;. var firstTrimmed = trim( passwordId.value );.. if( isBlank( firstTrimmed ) == true ). {. issueClientWarning( PASSWORD_WARN_MISSING, elementID, displayClientErrorsInline );. clearPasswords( passwordId, passwordRedundantId );. passwordId.focus();. return false;. }. . if( !containsOnly( first, PASSWORD_CHAR_SET ) ). {. issue

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4171
Entropy (8bit):	4.617307131461832
Encrypted:	false
SSDEEP:	96:YD9Y93Z9LYulTDcn9bQFEt6HrJqJdJUMWR9X6J8b/k8zr5yI2CcXOmk:G9Y93Z9LYulvc9bQA+JqJdJUnR9X6J6P
MD5:	BF9A0EAE8529030C24FB3E19C86E4FD0
SHA1:	788BB1FD37EE9C29D2FCE24F18B4697D25B5CF98
SHA-256:	50982BA9961B6C3F2BE89BC0C20948DDAD27AF428A44AA21B123AB5007BE8309
SHA-512:	7740863F1D149AB5374E176D6A1FD5FB39AC551EDBFE037497F2D0D4A55F02C63E779DA091CFC3A56E4137022CA887CD7470B1BED687FAFB3B417DB6C9A34DA6
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/emailfieldvalue.js
Preview:	function isEmailValid(emailAddress).{. if( emailAddress.length < 5 ). {. return false;. }. . // Exactly 1 @. var atPositions = find( emailAddress, "@" );. if( atPositions.length != 1 ). {. return false;. }. . // Does not begin with @. if( atPositions[0] == 0 ). {. return false;. }. . // Has a dot after the @. var dotPositions = find( emailAddress, "." );. if( dotPositions.length == 0 ). {. return false;. }. . if( dotPositions[dotPositions.length - 1] < atPositions[0] ). {. return false;. }.. // But not immediately after the @. if ( emailAddress.search(/\@\./) != -1 ). {..return false;. }. . // Has at least 2 characters after the final .. if( dotPositions[dotPositions.length - 1] >= emailAddress.length - 2 ). {. return false;. }. . // Does not have 2 dots in a row. if ( emailAddress.search(/\.\./) != -1 ). {..return false;. }. . // Check mailbox and domain. var mailbox = emailAddress.substring( 0, atPositions[0] ).toLowe

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1414
Entropy (8bit):	4.994494585610974
Encrypted:	false
SSDEEP:	24:LqK+C6uSb5S1fs0Yt2+9WAF5de3FOZcJtmsaLoVOJ8YpwXq/FI+SPw8L/FRslspX:O1CTc5S9s0Yt2+ks5UECjgLf8YiatdBS
MD5:	738806F6615E2BD7730F0E97EB375C98
SHA1:	F91D847E78830D8278B9F1CED3907AC13501EF98
SHA-256:	A63577E7A4896B28D2FF18374539681D675B6D6E815846315E51EAD479FE6B89
SHA-512:	4A3F1C1FE2BF5E9D5CF8322E1651EC0D91DDF57D3060C12512F940C3AFCFC49366AE3AFBBCF10FFD9FBF8CCA41F3E8BF29C7D6917B0DE3A68DA86EA23BCC9490
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/fieldvalue.js
Preview:	ALPHA_CHARS = "ABCDEFGHIGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";.NUMBERS = "0123456789";.PASSWORD_SYMBOLS = "!@#$%^&*)(_-=+{}[]:;\"'<>.?~";..function isBlank( field ).{. trimmedField = trim( field );. if( trimmedField.length == 0 ). {. return true;. }. . return false;.}...function containsOnly( field, validChars ).{. for( var i = 0; i < field.length; i++ ). {. var c = field.charAt( i );. if( validChars.indexOf( c ) == -1 ). {. return false;. }. }. . return true;.}..function find( field, searchString ).{. var positions = new Array();. var startindex = 0;. var foundindex = -1;. var arrayindex = 0;. while( true ). {. foundindex = field.indexOf( searchString, startindex );. if( foundindex.length == 0 ). {. return positions;. }.. if( foundindex < 0 ). {. return positions;. }. . positions[arrayindex] = foundindex;. arrayindex ++;. startindex = foundindex + searchString.length;. if( star

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	2731
Entropy (8bit):	4.918169128272672
Encrypted:	false
SSDEEP:	48:w6rQud2WKXCEUyQnumFHK/O1GOsbgyqWxeY2enkRyeN3L6hCHYB90m9UhdLzK/pw:SWKXCEUyclK/O1HsbgyFxL2enOyeN3LD
MD5:	78E5C476E160DC0D2F1E219A1AC54D12
SHA1:	64AA415D7522DA1BCF3581239B61EC2591E3097E
SHA-256:	BF714B969A60F049145EB5C2879309AE27CB4D4D6C557D1D71F1233E12F1755D
SHA-512:	5079D07CB4C3F8FDF6F8584CEE391EC944BBD3F89A49C2E5179CC9FDEC07EA8C9DE4FB058810D6878DE1BFE6F1D27E7980526AE32965B80DF4679443BC05F8B4
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_print.css
Preview:	@media print {..#topaccent1, #topaccent2, #bottomaccent1, #bottomaccent2, #navtopaccent, #navbottomaccent {..display: none;.}...access {..display: none;.}...body {.background: #fff; .margin: 10px;.font-family: arial, helvetica, sans-serif; .color:#000;.}..a:link, a:visited {.color:#000;.text-decoration:none;.}..a:active {.color:#000;.text-decoration:none;.}..ul {.list-style-type:none;.}..hr {.display:none;.}..#loginform #submitbutton {.display:none;.}..#passwordreminderlink {.line-height:2em;.}..#rememberme {.line-height:2em;.}..#changepasswordlink {.line-height:2em;.}..#helplink {.line-height:2em;.}..#messageheader input {.width:60%;.}..#messageheader #attach input {.display:none;.}..#messagecenterbody hr, #addressbookbody hr, #sentitemsbody hr, #recallmailbody hr, #draftitemsbody hr {.display:block;.}..#primarybranding {.font-size:1.4em;.margin-bottom: 12px;.}..#layerbrandheader {.display:none;.}..#navbar {.display:none;.}..#navbarfooter {.font-size:.9em;.font-weight:bold;.margin:0 0

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4168
Entropy (8bit):	4.364207777843192
Encrypted:	false
SSDEEP:	96:hJrehsOr7vQ6663alj/zxNTmul41qL2qIuWB5VXZW8Hm:hJre6cCBfTmuC182qIuS5VXZC
MD5:	C5E7A96D9F08831036AF7261F519F8EF
SHA1:	13F265BBBEAEAED4E6D43995A7553893F514FB0A
SHA-256:	2EC8BFF74CFFA23AFAD4C372398FF59B7BDEA6C07DCE9B511112D9A4B743A560
SHA-512:	BB1132DACCAA7E5FDEDF21DF9DFFB3381787D7379C485159E8D1E66080C8D2160F85E3356A0B4395EB98031798518532FCA0905E0884E140AC78B09D30D1A8EC
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/i/securedbyzix.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="144" height="41" viewBox="0 0 144 41">. <defs>. <style>. .a {. fill: #14b1e7;. }.. .b {. fill: #0160a8;. }. </style>. </defs>. <title>securedbyzix</title>. <g>. <g>. <path class="a" d="M.68,34.93A3.44,3.44,0,0,0,3.26,36a2.35,2.35,0,0,0,2.5-2.16c0-2.14-4.36-1.89-4.36-4.65a3.47,3.47,0,0,1,3.67-3.11,3.78,3.78,0,0,1,2.8,1l-.61.79a3.18,3.18,0,0,0-2.17-.83,2.46,2.46,0,0,0-2.62,2.12c0,1.93,4.36,1.74,4.36,4.65A3.38,3.38,0,0,1,3.26,37,4.15,4.15,0,0,1,0,35.66Z"/>. <path class="a" d="M12.8,29.11a2.51,2.51,0,0,1,2.76,2.73,4.9,4.9,0,0,1-.23,1.27H9.54a3.24,3.24,0,0,0-.06.65A2.22,2.22,0,0,0,11.9,36.1a4.3,4.3,0,0,0,2.46-.92l.33.84a5,5,0,0,1-2.82,1,3.14,3.14,0,0,1-3.45-3.18A4.58,4.58,0,0,1,12.8,29.11Zm1.67,3.17a3.44,3.44,0,0,0,0-.53A1.61,1.61,0,0,0,12.8,30a3.32,3.32,0,0,0-3.06,2.31Z"/>. <path class="a" d="M21.33,29.11a3.46,3.46,0,0,1,2.73,1.08l-.62.69A2.83,2.83,0,0,0,21.38,30a3.72,3.72,0,0,0-3.6

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 185 x 60
Category:	downloaded
Size (bytes):	5809
Entropy (8bit):	7.772571165501874
Encrypted:	false
SSDEEP:	96:ZwjJhDyqTiE6pN3jjDcfDhrJ6BOCLDKZEvbyuFhTeb+cZ5p4X2OLL3ZB:ZkJhB6p5DADhr4tOE+ohcfZ5mPLLpB
MD5:	A0F5ED9A23FCD41B9E9FD2C329CA8B41
SHA1:	77A7876E5A7344304FFE6A5D49A73559A914A239
SHA-256:	584AD90C6010AB170956E3F8CF658938D5F0E89673CC1D905262CF20FB8D635E
SHA-512:	9960E989718EA7C4CF75934F6675CCF439E29D6521515177787916758B4586BE9F10F73E971992E87F3CEC85D9E5AE602072FFEA62E4D6E07D51BF3E2ED3D43D
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/i/sevenseventeen/footer_20180418_1303.gif
Preview:	GIF89a..<............................!!!&&&(((---222666999===.6w.6x.9y.<{.<\|.;{.<{.=\|.>}.@~.@~.A~AAAEEEIIIMMMQQQTTTZZZ]]]aaafffiiimmmqqquuuyyy}}}.A..B..D..B..E..F..G..H..F..J..L..J..L..N. N.!N."P.%R.&T.%U.)S.)S.(T.U.,U.,V.+Y..Y./Z.0Y.4[.4\.1Z.2\.4Z.5].6_.9[.8^.<_.6`.9`.9a.:d.<a.=a.=d.>e.Ab.Ae.Dg.Af.Ef.Bh.Ci.Cm.Fj.Gk.Fl.Hj.Il.Im.Mn.Ms.Kp.Mp.Po.Qq.St.Uq.Tu.Lr.Pr.Vs.Uu.Wx.[u.\z.^~.b}.a~.h~.i~.t..d..b..e..e..e..h..i..i..i..l..n..j..l..o..j..o..s..t..\|..v..\|..\|..............................................................................................................................................................................................................................................................................................................!.......,......<.....#H.H......\.....F......3V4w).%s.C..F..(S.\...0c.I3..,#s..!... ...j.$.H.].4..D3..d..U..........V.h.Kv..h.M.v..p..Kwm..8..S....V9.R.W.Q.].s....#K.L....)..d..n(...M E..$;..Wi...

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2552
Entropy (8bit):	4.878673329767581
Encrypted:	false
SSDEEP:	48:sQv5Q8uiedVBsa/ymnc2rE3Z3vp2Do/12JnIR13k4lVtnXDXdBWknRAf9+8w8ntX:sQ5NnSsa5PY1180dEwy1+Xo/9
MD5:	372E5E534B2F2DD81AD3647ACA4782D4
SHA1:	CFAFD72458521B6896D16B17F47C31B5B20009D2
SHA-256:	FE8E6E29FD6FF507EB4320931B53996D1D20EB33CB2A3BE0DBA694AF8796EE06
SHA-512:	CA82CF38065B81B93109069F781299949AC4467119AFA2A5EDBD3F36A00A1E03156300783F52C11B9A3EA84312455CE8CC41EA53F1AC5C6068BA5942BD2CE064
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/userNotifier.js
Preview:	function issueClientWarning(inlineWarningText, elementID, displayInline).{. issueInlineAlert(inlineWarningText, elementID, false);.}..function issueServerWarning(inlineWarningText, elementID, displayInline).{. issueInlineAlert(inlineWarningText, elementID, false);.}..function issueClientLoginWarning(inlineWarningText, elementID, displayInline).{. issueInlineAlert(inlineWarningText, elementID, displayInline);.}..function issueInlineAlert(text, elementID, displayInline).{..if(text == null \|\| text == "null"). {. return;. }..var displayText = trim(text);. if(displayText == ""). {. return;. }.. if( displayInline ). {. document.getElementById(elementID).innerHTML = '<div id="errortext">' + displayText + '</div>';. }. else. {. alert(displayText);. }.}...function updateLastAction(text,isPositive).{. var div = document.getElementById('lastaction');. div.style.position="";. div.style.left="";. div.setAttribute("class", isP

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.439139114250231
Encrypted:	false
SSDEEP:	3:tM2Vx6IZ3Eev33oFcAP4IFFn:tZVv33PoFxP4ID
MD5:	496D4CD5A824E776DED961247841A2D6
SHA1:	57CAF10F2500D036438421A6196D359686B28B2C
SHA-256:	1CD23F829A9FDA20D675E4B312DE0F6C6D1E4E207EC60084C1DA519D6CF3CA62
SHA-512:	731026E71FB459995B9D8AE73B974B15B4DA475DFA700B8D268886CB7626DBE6BCFC0B8DF5EA058FCA4F82541D445FF16C14CF5B6BED1280B036C591CD2978A9
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktop.css
Preview:	@media screen and (min-width:950px) {.......} /* end of @media */

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3872
Entropy (8bit):	5.46034012764402
Encrypted:	false
SSDEEP:	48:xTEWpH2GHwTEKrRTEdWT39TEOWHucC+Rq3Y3ZrxLXWmA2KP9Nfw+x:9LHAH/TZYHucVRq3Y3Zx9A2KP39x
MD5:	1BB76B6E62A47BD8E54BAAF5DA382B78
SHA1:	EEEF314B661E68472400BBD9D477E86D77FCAAE5
SHA-256:	B0C0E3C8FCF8160433ADE6287C7022FE3E8AE2F9D473762238977712791629D2
SHA-512:	F4E1D3A6AFA901C23D779914DB5BB77D65C72EF8CE112BDCE098B874BBC072C168FF71C549A92C9B650A687A676290D53EE7ECF64A7540F111AC5BEE31BF0AA7
Malicious:	false
Reputation:	low
URL:	https://securemail-sscu.net/s/REL-6.3.13-release.3.41521/default_validatorconstants_en.js
Preview:	NAME_CHAR_SET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-'.~";.NAME_MIN_LENGTH = 1;.NAME_MAX_LENGTH = 254;..FIRST_NAME_WARN_MISSING = "Enter your first name.";.FIRST_NAME_WARN_CONTENT = "Your First Name must be corrected before continuing.\nYou must remove the prohibited characters from your First Name.";..LAST_NAME_WARN_MISSING = "You must enter your Last Name before continuing.";.LAST_NAME_WARN_CONTENT = "Your Last Name must be corrected before continuing.\nYou must remove the prohibited characters from your Last Name.";...MIDDLE_INITIAL_CHAR_SET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";.MIDDLE_INITIAL_MIN_LENGTH = 0;.MIDDLE_INITIAL_MAX_LENGTH = 1;..MIDDLE_INITIAL_WARN_CONTENT = "Your Middle Initial must be corrected before continuing.\nYou must remove the prohibited characters from your Middle Initial.";..EMAIL_ADDRESS_WARN_INVALID = "The email address you entered is invalid.";..PASSWORD_CHAR_SET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKL

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 29, 2024 15:15:55.220386028 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.220422029 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.220499992 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.220695019 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.220711946 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.220984936 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.221023083 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.221088886 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.221324921 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.221338987 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.624684095 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.624927044 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.624950886 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.626072884 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.626147032 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.627110004 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.627167940 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.627309084 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:55.627315998 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:55.679456949 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:56.147998095 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:56.148221016 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:56.148238897 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:56.149243116 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:56.149317026 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:56.149601936 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:56.149672031 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:56.204444885 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:56.204457998 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:15:56.252477884 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:15:59.924786091 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:15:59.924818039 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:15:59.924907923 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:15:59.925134897 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:15:59.925151110 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:00.152426958 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:00.152734995 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:00.152746916 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:00.153598070 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:00.153664112 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:00.154706001 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:00.154757977 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:00.198450089 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:00.198457003 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:00.246495008 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:00.409954071 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.409980059 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.409995079 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.410001993 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.410033941 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.410053968 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.410072088 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.410110950 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.410131931 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.410136938 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.410178900 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.428352118 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.428745031 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.428785086 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.428867102 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.429193974 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.429231882 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.429297924 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.429519892 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.429532051 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.429745913 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.429757118 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.430150032 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.430181026 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.430241108 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.430658102 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.430687904 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.430743933 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.431237936 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.431251049 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.431514025 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.431526899 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.472243071 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.539926052 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.539995909 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.540004015 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.540015936 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.540060997 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.540179014 CET	49702	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.540189028 CET	443	49702	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.540555000 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.540565968 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.540623903 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.540988922 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.541001081 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.561824083 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.561849117 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.561857939 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.561907053 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.561920881 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.561930895 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.561969995 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.562865019 CET	49703	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.562874079 CET	443	49703	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.563292027 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.563299894 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.563359022 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.564001083 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.564011097 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.736177921 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.736483097 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.736505032 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.737611055 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.737962008 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.738059998 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.738161087 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.751468897 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.751676083 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.751683950 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.751701117 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.751877069 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.751892090 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.752057076 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.752341032 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.752427101 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.752490997 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.752815008 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.752893925 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.753160000 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.753213882 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.753279924 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.753287077 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.784245014 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.800230980 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.803451061 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.805772066 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.805998087 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.806020021 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.807018995 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.807081938 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.807364941 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.807425976 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.807506084 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.807516098 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.828205109 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.828418016 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.828434944 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.829324007 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.829390049 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.829772949 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.829824924 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.829905033 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.829910994 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:00.851463079 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:00.882508039 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.000022888 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.000051022 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.000088930 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.000112057 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.000145912 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.000159979 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.000178099 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.000204086 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.003385067 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.003473997 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.003540039 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.003691912 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.003720045 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.003770113 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.003782034 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.003803015 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.003854036 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.004352093 CET	49708	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.004370928 CET	443	49708	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.004709005 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.004739046 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.004806995 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.005390882 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.005403996 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.005501032 CET	49707	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.005511999 CET	443	49707	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.005727053 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.005759001 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.005822897 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.006063938 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.006078005 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.068250895 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.068274021 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.068361044 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.068377972 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.068424940 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.069365978 CET	49710	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.069384098 CET	443	49710	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.069838047 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.069880962 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.069952965 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.070313931 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.070326090 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.092116117 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.092143059 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.092152119 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.092181921 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.092200041 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.092248917 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.092271090 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.092283964 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.092318058 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.130723000 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.130809069 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.130825043 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.131082058 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.132040977 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.132047892 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.135466099 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.138792992 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.138816118 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.139877081 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.139939070 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.140270948 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.140341997 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.140424013 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.185457945 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.186117887 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.186141968 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.223786116 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.223900080 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.223918915 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.223947048 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.223997116 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.224396944 CET	49711	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.224411964 CET	443	49711	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.227598906 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.227642059 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.227720976 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.227945089 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.227962971 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.233453035 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.260930061 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.260941982 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.261001110 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.261038065 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.261045933 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.261064053 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.261074066 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.261116028 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.261425972 CET	49706	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.261435032 CET	443	49706	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.263573885 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.263602972 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.263674974 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.263881922 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.263892889 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.277498007 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.277743101 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.277766943 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.278101921 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.278424025 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.278486013 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.278548956 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.324228048 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.338900089 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.339190960 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.339211941 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.340214968 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.340291977 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.340584993 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.340645075 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.340748072 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.384244919 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.392441988 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.392452002 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.397624969 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.397756100 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.397816896 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.398596048 CET	49709	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.398610115 CET	443	49709	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.440459013 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.492000103 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.492305994 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.492326975 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.492676020 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.492970943 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.493036985 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.493149042 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.526994944 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.530643940 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.530668974 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.531012058 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.533920050 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.533981085 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.534089088 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.536238909 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.541448116 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.541470051 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.541533947 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.541548014 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.541599035 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.542766094 CET	49713	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.542788029 CET	443	49713	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.576248884 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.606323957 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.606345892 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.606426001 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.606461048 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.606497049 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.607342958 CET	49714	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.607359886 CET	443	49714	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.610519886 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.610560894 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.610641003 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.610757113 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.610811949 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.611186981 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.611210108 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.611224890 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.611258030 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.611515999 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.611531019 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.611670971 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.611689091 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.611799955 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.611816883 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.754420042 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.754508972 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.754523039 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.754563093 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.755616903 CET	49715	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.755635977 CET	443	49715	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.757541895 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.757576942 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.758497000 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.758711100 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.758725882 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.895127058 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.895436049 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.895462990 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.895781040 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.896074057 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.896128893 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.896240950 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.903881073 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.903915882 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.904197931 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.904227018 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.904321909 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.904346943 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.904608965 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.904907942 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.904973030 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.905049086 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.905409098 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.905469894 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.905714989 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.905776978 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.905818939 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.922022104 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.922049999 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.922086000 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.922097921 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.922121048 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.922137022 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.926142931 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.940237999 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.948236942 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.948246956 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.950462103 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:01.950475931 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:01.998454094 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.023549080 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.023819923 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.023844957 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.024745941 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.024812937 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.025110960 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.025172949 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.025404930 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.025413036 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.052342892 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.052464962 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.052489996 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.052516937 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.052570105 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.057944059 CET	49716	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.057971001 CET	443	49716	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.058538914 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.058578968 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.058644056 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.059673071 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.059690952 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.078458071 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.159313917 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.159337044 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.159378052 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.159395933 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.159423113 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.159437895 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.159460068 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.159498930 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.161418915 CET	49718	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.161432981 CET	443	49718	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164170027 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164202929 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164249897 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.164274931 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164288044 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.164314985 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164352894 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.164450884 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.164473057 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164521933 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.164655924 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164675951 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164683104 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164721012 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.164743900 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164760113 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.164799929 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.165344954 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.165354967 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.166799068 CET	49717	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.166810989 CET	443	49717	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.167177916 CET	49719	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.167191982 CET	443	49719	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.168469906 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.168490887 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.168553114 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.168843031 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.168853045 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.169953108 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.169987917 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.170038939 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.170430899 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.170447111 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.287260056 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.287285089 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.287312031 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.287357092 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.287377119 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.287388086 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.287389040 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.287441015 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.288347006 CET	49720	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.288362026 CET	443	49720	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.290632010 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.290659904 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.290735960 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.290962934 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.290978909 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.325516939 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.325747013 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.325767994 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.326109886 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.326394081 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.326452017 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.326538086 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.344784975 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.344811916 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.344878912 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.344942093 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.344965935 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.345014095 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.345099926 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.345133066 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.345180035 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.345303059 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.345316887 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.345434904 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.345448971 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.345558882 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.345571995 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.368233919 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.434948921 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.435224056 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.435237885 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.435477018 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.435647011 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.435672045 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.436191082 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.436255932 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.436604977 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.436661005 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.436687946 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.436738014 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.436784983 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.436791897 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.437053919 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.437119007 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.437159061 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.478465080 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.478466034 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.478494883 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.526462078 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.559067965 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.559340954 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.559370041 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.560404062 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.560472012 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.560750008 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.560810089 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.560908079 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.560914993 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.593097925 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.593122005 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.593187094 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.593190908 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.593235016 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.594551086 CET	49721	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.594572067 CET	443	49721	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.606446028 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.653477907 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.653724909 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.653753996 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.655122042 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.655191898 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.655487061 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.655618906 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.655622959 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.655644894 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.658790112 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.658818007 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.658972025 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.659004927 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.659071922 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.659094095 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.660130024 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.660168886 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.660187006 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.660233974 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.660475016 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.660531998 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.660747051 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.660809994 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.660893917 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.660900116 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.660955906 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.660964012 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.696670055 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.696703911 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.696777105 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.696789026 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.696821928 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.697283983 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.697309017 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.697352886 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.697370052 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.697407007 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.697566986 CET	49723	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.697578907 CET	443	49723	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.699846029 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.699882984 CET	443	49724	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.699934959 CET	49724	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.700450897 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.700467110 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.700472116 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.700490952 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.748470068 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.752396107 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 15:16:02.900444031 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.900464058 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.900547028 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.900583029 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.900612116 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.901500940 CET	49726	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.901527882 CET	443	49726	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.901794910 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.901812077 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.901850939 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.901859045 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.901875019 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.901900053 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.901904106 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.901937962 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.902008057 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.902618885 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.902640104 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.902650118 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.902666092 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.902674913 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.902699947 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.902714014 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.902744055 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.903795004 CET	49728	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.903805017 CET	443	49728	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.954751015 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.954840899 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:02.954907894 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.955668926 CET	49725	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:02.955684900 CET	443	49725	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:03.032821894 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:03.032866001 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:03.032927990 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:03.032974958 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:03.032979012 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:03.033026934 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:03.033297062 CET	49727	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:03.033312082 CET	443	49727	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:03.051507950 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 15:16:03.652488947 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 15:16:04.273412943 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:04.273705959 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:04.273727894 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:04.274322987 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:04.274687052 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:04.274771929 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:04.275154114 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:04.316239119 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:04.690143108 CET	49688	443	192.168.2.16	13.107.21.200
Mar 29, 2024 15:16:04.858489037 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 15:16:05.057710886 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.057738066 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.057768106 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.057836056 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.057845116 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.057857037 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.057902098 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.431744099 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.432112932 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.432133913 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.432490110 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.432868958 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.432950974 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.433064938 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.453433990 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.453444958 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.453574896 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.453592062 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.480237007 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.495551109 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.584175110 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.584232092 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.584276915 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.584306955 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.803374052 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.803385019 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.803505898 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.803529978 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.845462084 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.933618069 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.933626890 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.933726072 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:05.933737993 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:05.988456011 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.064174891 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.064187050 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.064234972 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.064282894 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.064327955 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.195672035 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.195693016 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.195781946 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.195791960 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.217910051 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.217940092 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.217967033 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.217981100 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.218004942 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.218018055 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.218036890 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.218050957 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.238121986 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.238130093 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.238205910 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.238217115 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.263231039 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.263312101 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.263319016 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.282464027 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.314466000 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.368128061 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.368134975 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.368175983 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.368222952 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.368253946 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.478351116 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.478364944 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.478444099 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.478452921 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.519473076 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.631611109 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.631618977 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.631658077 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.631690979 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.631730080 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.701898098 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.701910019 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.702004910 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.702011108 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.719659090 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.719669104 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.719697952 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.719734907 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.719765902 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.756459951 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.762226105 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:06.762254953 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:06.762348890 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:06.763983011 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:06.763995886 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:06.891988993 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.891999006 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.892096996 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:06.892119884 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:06.932466984 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.001235008 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.001246929 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.001275063 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.001322031 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.001363993 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.022468090 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.022483110 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.022527933 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.022559881 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.022584915 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.152986050 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.152996063 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.153192043 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.153203964 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.154247999 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.154256105 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.154314041 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.154321909 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.186420918 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.186522961 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:07.190011978 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:07.190022945 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.190243959 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.204466105 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.236468077 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:07.246870041 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:07.262487888 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.262496948 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.262523890 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.262562037 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.262597084 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.268438101 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 15:16:07.284775019 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.284787893 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.284807920 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.284842014 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.284868002 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.292232037 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.414248943 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.414261103 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.414288998 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.414324999 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.414350986 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.415335894 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.415342093 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.415426016 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.415436029 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.460489988 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.482662916 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.482671976 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.482744932 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.482753992 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.523458004 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.590065956 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.590091944 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.590100050 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.590111017 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.590147972 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.590162039 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:07.590171099 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:07.590198040 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:07.590219975 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:07.784071922 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.784081936 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.784112930 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.784161091 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.784204006 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.806073904 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.806083918 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.806112051 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:07.806155920 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:07.806173086 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.136590004 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.136600971 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.138436079 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.138447046 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.193475008 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.198019028 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.198029995 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.198071003 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.198105097 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.198113918 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.198134899 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.198157072 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.198177099 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.267379045 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.267390966 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.267453909 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.267509937 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.267548084 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.351739883 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:08.351752043 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:08.351819992 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:08.351859093 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:08.351900101 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:08.352065086 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:08.352077007 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:08.352087975 CET	49734	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:08.352093935 CET	443	49734	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:08.398983002 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.398993015 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.399010897 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.399034023 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.399080992 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.460764885 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.460774899 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.460815907 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.460855961 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.460871935 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.460896015 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.460911036 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.529550076 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.529560089 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.529625893 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.529633999 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.576467037 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.658742905 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.658751011 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.658833981 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.658881903 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.658915043 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.720227957 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.720237017 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.720284939 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.720324039 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.720340014 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.720352888 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.720381021 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.789407015 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.789414883 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.789503098 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.789510012 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.829358101 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.829365015 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.829453945 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.829458952 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.878458023 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.981592894 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.981602907 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.981652975 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.981709003 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.981720924 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:08.981753111 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:08.981766939 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.017515898 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.017546892 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.017632961 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.018599033 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.018611908 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.181338072 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.181348085 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.181371927 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.181387901 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.181404114 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.181423903 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.181430101 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.181483030 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.220649004 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.220742941 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.223438025 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.223443985 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.223658085 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.242939949 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.242949009 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.242980957 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.243029118 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.243041039 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.243060112 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.243081093 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.260937929 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.308234930 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.419967890 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.420159101 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.420176029 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.420207024 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.420316935 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.420346022 CET	443	49736	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.420398951 CET	49736	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.453471899 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.453493118 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.453576088 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.453824043 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.453841925 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.505089998 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.505100965 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.505142927 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.505175114 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.505184889 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.505239010 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.574770927 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.574780941 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.574809074 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.574819088 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.574842930 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.574848890 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.574893951 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.637501001 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.637527943 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.637567043 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.637576103 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.637607098 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.637622118 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.652163982 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.652247906 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.653825998 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.653831005 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.654072046 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.655136108 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.700232983 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.898304939 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.898319960 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.898356915 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.898394108 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.898412943 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.898451090 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.898472071 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.899245024 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.899292946 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.899296999 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.899338007 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.899380922 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.899549007 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.899549007 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.899564028 CET	443	49712	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:09.899600029 CET	49712	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:09.948659897 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.948729038 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.948786020 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.949552059 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.949570894 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:09.949583054 CET	49737	443	192.168.2.16	23.221.242.90
Mar 29, 2024 15:16:09.949588060 CET	443	49737	23.221.242.90	192.168.2.16
Mar 29, 2024 15:16:10.165795088 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:10.165858030 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:10.165954113 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:10.227165937 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.227176905 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.227243900 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.227312088 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:10.227319956 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.227350950 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:10.227370977 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:10.622148037 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.622162104 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.622212887 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.622231960 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:10.622251987 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.622304916 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:10.883171082 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.883182049 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.883220911 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.883269072 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:10.883280993 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:10.883311987 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:10.883333921 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:10.922422886 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 15:16:11.192617893 CET	49705	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:11.192645073 CET	443	49705	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:11.222464085 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 15:16:11.275048971 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:11.275060892 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:11.275098085 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:11.275125980 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:11.275139093 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:11.275182009 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:11.669092894 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:11.669106960 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:11.669151068 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:11.669187069 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:11.669198990 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:11.669213057 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:11.669235945 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:11.824496984 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 15:16:12.080446005 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 15:16:12.192610979 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:12.192625999 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:12.192667007 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:12.192715883 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:12.192728996 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:12.192778111 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:12.892853975 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:12.892868996 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:12.892908096 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:12.892954111 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:12.892971039 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:12.893008947 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:12.893027067 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:13.037504911 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 15:16:13.417485952 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.417499065 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.417536020 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.417591095 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:13.417602062 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.417638063 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:13.417653084 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:13.548151016 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.548233032 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:13.548248053 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.596541882 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:13.941418886 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.941432953 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.941535950 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:13.941559076 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:13.996479988 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.072274923 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.072283030 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.072304010 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.072345972 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.072381020 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.202961922 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.202974081 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.203071117 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.203080893 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.250479937 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.333864927 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.333904982 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.333921909 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.333962917 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.334009886 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.595489979 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.595534086 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.595635891 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.595649958 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.650468111 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.726069927 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.726078987 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.726099968 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.726138115 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.726183891 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.987169981 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.987180948 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.987206936 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:14.987265110 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:14.987317085 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.116852045 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.116863966 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.116952896 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.116980076 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.162514925 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.249191046 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.249206066 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.249245882 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.249305964 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.249336004 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.380070925 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.380083084 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.380115032 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.380151987 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.380203009 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.380431890 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.380438089 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.380501986 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.380511045 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.384618998 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 15:16:15.432476044 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.448484898 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 15:16:15.511189938 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.511204004 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.511245966 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.511310101 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.511373997 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.641746998 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.641761065 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.641794920 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.641829014 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.641868114 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.642376900 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.642383099 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.642457962 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.642471075 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.686471939 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 15:16:15.686472893 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.773015976 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.773030043 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.773066044 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.773083925 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.773097038 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.773108006 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:15.773128986 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:15.773195028 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.164100885 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.164133072 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.164202929 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.164233923 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.164258003 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.164288998 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.289479017 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 15:16:16.306133986 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.306157112 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.306268930 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.306292057 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.306334972 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.568206072 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.568236113 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.568296909 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.568320990 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.568356037 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.568375111 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.829035997 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.829049110 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.829083920 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.829138994 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:16.829149961 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:16.829196930 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.089306116 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.089319944 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.089361906 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.089382887 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.089396954 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.089459896 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.260623932 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.260657072 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.260766029 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.260788918 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.260829926 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.474672079 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.474775076 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.474775076 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.474822998 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.475073099 CET	49722	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.475090027 CET	443	49722	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.499471903 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 15:16:17.507296085 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.507333040 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:17.507409096 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.507664919 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:17.507683992 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:19.911504030 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 15:16:20.261461020 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 15:16:20.773156881 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:20.773610115 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:20.773638010 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:20.773956060 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:20.774383068 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:20.774441004 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:20.774591923 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:20.820234060 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.168651104 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.168751001 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.168780088 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.168823004 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.169754028 CET	49738	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.169786930 CET	443	49738	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.173630953 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.173667908 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.173763990 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.173988104 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.174000978 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.437371016 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.437748909 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.437767982 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.438086033 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.438419104 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.438481092 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.438581944 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.484227896 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.681782007 CET	49673	443	192.168.2.16	204.79.197.203
Mar 29, 2024 15:16:21.699789047 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.699863911 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:21.699867010 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.699933052 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.700716019 CET	49740	443	192.168.2.16	63.71.13.102
Mar 29, 2024 15:16:21.700735092 CET	443	49740	63.71.13.102	192.168.2.16
Mar 29, 2024 15:16:24.715605974 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 15:16:29.876446962 CET	49678	443	192.168.2.16	20.189.173.10
Mar 29, 2024 15:16:34.320655107 CET	49680	80	192.168.2.16	192.229.211.108
Mar 29, 2024 15:16:42.385807037 CET	49696	80	192.168.2.16	23.207.202.38
Mar 29, 2024 15:16:42.481462002 CET	80	49696	23.207.202.38	192.168.2.16
Mar 29, 2024 15:16:42.481631041 CET	49696	80	192.168.2.16	23.207.202.38
Mar 29, 2024 15:16:44.756656885 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:44.756704092 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:44.756808043 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:44.757179976 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:44.757196903 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.180032015 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.180119991 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.181938887 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.181957006 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.182187080 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.183593035 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.224237919 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.591461897 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.591483116 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.591496944 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.591603041 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.591622114 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.591671944 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.591913939 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.591958046 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.591980934 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.591989040 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.592012882 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.592029095 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.592056036 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.594682932 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.594702005 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:45.594722033 CET	49741	443	192.168.2.16	52.165.165.26
Mar 29, 2024 15:16:45.594728947 CET	443	49741	52.165.165.26	192.168.2.16
Mar 29, 2024 15:16:59.884557009 CET	49743	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:59.884593010 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:16:59.884684086 CET	49743	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:59.884948015 CET	49743	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:16:59.884959936 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:17:00.114181042 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:17:00.114552021 CET	49743	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:17:00.114563942 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:17:00.114857912 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:17:00.115164995 CET	49743	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:17:00.115223885 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:17:00.154577971 CET	49743	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:17:10.121098995 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:17:10.121164083 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:17:10.121263981 CET	49743	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:17:11.182190895 CET	49743	443	192.168.2.16	172.253.63.147
Mar 29, 2024 15:17:11.182218075 CET	443	49743	172.253.63.147	192.168.2.16
Mar 29, 2024 15:17:34.869663000 CET	49698	80	192.168.2.16	192.229.211.108
Mar 29, 2024 15:17:34.966665983 CET	80	49698	192.229.211.108	192.168.2.16
Mar 29, 2024 15:17:34.966736078 CET	49698	80	192.168.2.16	192.229.211.108

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 29, 2024 15:15:54.963438988 CET	61047	53	192.168.2.16	1.1.1.1
Mar 29, 2024 15:15:54.963696957 CET	55346	53	192.168.2.16	1.1.1.1
Mar 29, 2024 15:15:55.060972929 CET	53	65281	1.1.1.1	192.168.2.16
Mar 29, 2024 15:15:55.068841934 CET	53	51134	1.1.1.1	192.168.2.16
Mar 29, 2024 15:15:55.204072952 CET	53	55346	1.1.1.1	192.168.2.16
Mar 29, 2024 15:15:55.219886065 CET	53	61047	1.1.1.1	192.168.2.16
Mar 29, 2024 15:15:58.170279026 CET	53	54565	1.1.1.1	192.168.2.16
Mar 29, 2024 15:15:59.827548981 CET	49799	53	192.168.2.16	1.1.1.1
Mar 29, 2024 15:15:59.827702999 CET	58629	53	192.168.2.16	1.1.1.1
Mar 29, 2024 15:15:59.923372984 CET	53	49799	1.1.1.1	192.168.2.16
Mar 29, 2024 15:15:59.923899889 CET	53	58629	1.1.1.1	192.168.2.16
Mar 29, 2024 15:16:02.064465046 CET	54827	53	192.168.2.16	1.1.1.1
Mar 29, 2024 15:16:02.064681053 CET	57522	53	192.168.2.16	1.1.1.1
Mar 29, 2024 15:16:02.304253101 CET	53	57522	1.1.1.1	192.168.2.16
Mar 29, 2024 15:16:02.344299078 CET	53	54827	1.1.1.1	192.168.2.16
Mar 29, 2024 15:16:14.063632011 CET	53	54684	1.1.1.1	192.168.2.16
Mar 29, 2024 15:16:17.587735891 CET	53	60460	1.1.1.1	192.168.2.16
Mar 29, 2024 15:16:32.849654913 CET	53	62955	1.1.1.1	192.168.2.16
Mar 29, 2024 15:16:55.061131001 CET	53	65165	1.1.1.1	192.168.2.16
Mar 29, 2024 15:16:55.169912100 CET	53	60180	1.1.1.1	192.168.2.16
Mar 29, 2024 15:17:07.098417044 CET	138	138	192.168.2.16	192.168.2.255
Mar 29, 2024 15:17:22.737394094 CET	53	57225	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 29, 2024 15:15:54.963438988 CET	192.168.2.16	1.1.1.1	0xc765	Standard query (0)	securemail-sscu.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:54.963696957 CET	192.168.2.16	1.1.1.1	0xf0c	Standard query (0)	securemail-sscu.net	65	IN (0x0001)	false
Mar 29, 2024 15:15:59.827548981 CET	192.168.2.16	1.1.1.1	0x4223	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:59.827702999 CET	192.168.2.16	1.1.1.1	0x7464	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 15:16:02.064465046 CET	192.168.2.16	1.1.1.1	0x383f	Standard query (0)	securemail-sscu.net	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:16:02.064681053 CET	192.168.2.16	1.1.1.1	0x2007	Standard query (0)	securemail-sscu.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 29, 2024 15:15:55.219886065 CET	1.1.1.1	192.168.2.16	0xc765	No error (0)	securemail-sscu.net		63.71.13.102	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:59.923372984 CET	1.1.1.1	192.168.2.16	0x4223	No error (0)	www.google.com		172.253.63.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:59.923372984 CET	1.1.1.1	192.168.2.16	0x4223	No error (0)	www.google.com		172.253.63.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:59.923372984 CET	1.1.1.1	192.168.2.16	0x4223	No error (0)	www.google.com		172.253.63.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:59.923372984 CET	1.1.1.1	192.168.2.16	0x4223	No error (0)	www.google.com		172.253.63.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:59.923372984 CET	1.1.1.1	192.168.2.16	0x4223	No error (0)	www.google.com		172.253.63.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:59.923372984 CET	1.1.1.1	192.168.2.16	0x4223	No error (0)	www.google.com		172.253.63.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 15:15:59.923899889 CET	1.1.1.1	192.168.2.16	0x7464	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 15:16:02.344299078 CET	1.1.1.1	192.168.2.16	0x383f	No error (0)	securemail-sscu.net		63.71.13.102	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

securemail-sscu.net

https:

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49702	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:15:55 UTC	747	OUT	GET /s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 14:16:00 UTC	3091	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:15:55 GMT Server: Apache Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net X-Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net X-WebKit-CSP: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net Strict-Transport-Security: max-age=31536000;includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cache-control: no-cache, no-store Pragma: no-cache expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Type: text/html;charset=utf-8 Set-Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; Secure; HttpOnly; Path=/s; Secure; HttpOnly; SameSite=Lax Set-Cookie: zixport.portal=sevenseventeen; Secure; HttpOnly; Secure; HttpOnly; SameSite=Lax Set-Cookie: zixport.portal=sevenseventeen; Secure; HttpOnly; SameSite=Lax P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Transfer-Encoding: chunked Connection: close Set-Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==; path=/; Httponly; Secure X-Robots-Tag: noindex X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:00 UTC	6621	IN	Data Raw: 31 66 66 38 0d 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 09 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 09 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 0a 0a 0a 0a 0a 0a 0a 0a 20 20 20 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 37 20 31 37 20 43 72 65 64 69 74 20 55 6e 69 6f 6e 20 52 65 67 69 73 74 72 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 0a 3c 6d 65 74 61 Data Ascii: 1ff8<!DOCTYPE HTML> <html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><title>7 17 Credit Union Registration</title><meta
2024-03-29 14:16:00 UTC	1569	IN	Data Raw: 6e 22 20 69 64 3d 22 63 6f 64 65 22 20 6e 61 6d 65 3d 22 63 6f 64 65 22 20 76 61 6c 75 65 3d 22 22 20 2f 3e 0a 20 20 20 20 3c 2f 66 6f 72 6d 3e 0a 0a 20 20 3c 2f 64 69 76 3e 20 0a 0a 20 20 0a 20 3c 64 69 76 20 69 64 3d 22 73 65 63 6f 6e 64 61 72 79 62 72 61 6e 64 69 6e 67 22 3e 0a 20 20 20 20 0a 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 65 63 6f 6e 64 61 72 79 62 72 61 6e 64 69 6e 67 68 74 6d 6c 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 72 61 6e 64 69 6e 67 62 6f 74 74 6f 6d 62 61 6e 6e 65 72 22 20 74 69 74 6c 65 3d 22 37 20 31 37 20 43 72 65 64 69 74 20 55 6e 69 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 63 65 73 73 22 3e 37 20 31 37 20 43 72 65 64 69 74 20 55 6e 69 6f 6e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 0a 20 20 20 Data Ascii: n" id="code" name="code" value="" /> </form> </div> <div id="secondarybranding"> <div id="secondarybrandinghtml"> <div id="brandingbottombanner" title="7 17 Credit Union"><span class="access">7 17 Credit Union</span></div>
2024-03-29 14:16:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-03-29 14:16:00 UTC	2519	IN	Data Raw: 39 63 62 0d 0a 75 65 2c 64 61 79 73 29 0a 7b 0a 20 20 69 66 20 28 64 61 79 73 29 20 7b 0a 20 20 20 20 76 61 72 20 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 64 61 74 65 2e 73 65 74 54 69 6d 65 28 64 61 74 65 2e 67 65 74 54 69 6d 65 28 29 2b 28 64 61 79 73 2a 32 34 2a 36 30 2a 36 30 2a 31 30 30 30 29 29 3b 0a 20 20 20 20 76 61 72 20 65 78 70 69 72 65 73 20 3d 20 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 64 61 74 65 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 3b 0a 20 20 7d 0a 20 20 65 6c 73 65 0a 20 20 7b 0a 20 20 20 20 76 61 72 20 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 64 61 74 65 2e 73 65 74 54 69 6d 65 28 64 61 74 65 2e 67 65 74 54 69 6d 65 28 29 2b 28 31 2a 32 34 2a 36 30 2a 36 30 2a 31 30 30 30 29 29 Data Ascii: 9cbue,days){ if (days) { var date = new Date(); date.setTime(date.getTime()+(days2460601000)); var expires = "; expires="+date.toGMTString(); } else { var date = new Date(); date.setTime(date.getTime()+(12460601000))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49703	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:00 UTC	947	OUT	GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktopFallthrough.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:00 UTC	1756	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:00 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:00 GMT Accept-Ranges: bytes ETag: W/"6055-1657852328000" Last-Modified: Fri, 15 Jul 2022 02:32:08 GMT Content-Type: text/css Content-Length: 6055 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:00 UTC	6055	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 7b 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2f 2a 20 62 75 74 74 6f 6e 20 68 6f 76 65 72 20 65 66 66 65 63 74 20 2a 2f 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 23 63 68 61 6e 67 65 70 61 73 73 77 6f 72 64 6c 69 6e 6b 20 61 3a 68 6f 76 65 72 2c 20 23 63 72 65 61 74 65 61 63 63 6f 75 6e 74 6c 69 6e 6b 20 61 3a 68 6f 76 65 72 2c 20 23 68 65 6c 70 6c 69 6e 6b 20 61 3a 68 6f 76 65 72 2c 20 23 6c 61 79 65 72 62 72 61 6e 64 68 65 61 64 65 72 20 2e 61 63 63 65 73 73 3a 68 6f 76 65 72 2c 0a 23 63 6f 6d 70 6f 73 65 62 6f 64 79 20 23 61 74 74 61 63 68 20 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 20 23 72 65 70 6c 79 62 6f 64 79 20 23 61 74 74 Data Ascii: @media screen {/* ------------------- // button hover effect // ------------------- */#changepasswordlink a:hover, #createaccountlink a:hover, #helplink a:hover, #layerbrandheader .access:hover,#composebody #attach .button:hover, #replybody #att

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49706	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:00 UTC	935	OUT	GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobile.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:00 UTC	1758	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:00 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:00 GMT Accept-Ranges: bytes ETag: W/"36108-1666210770000" Last-Modified: Wed, 19 Oct 2022 20:19:30 GMT Content-Type: text/css Content-Length: 36108 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:00 UTC	7801	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 7b 0a 0a 0a 2f 2a 20 52 65 73 65 74 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 6f 62 6a 65 63 74 2c 69 66 72 61 6d 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 63 6f 64 65 2c 64 65 6c 2c 64 66 6e 2c 65 6d 2c 69 6d 67 2c 71 2c 64 6c 2c 64 74 2c 64 64 2c 6f 6c 2c 75 6c 2c 6c 69 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 74 61 62 6c 65 2c 63 61 70 74 69 6f 6e 2c Data Ascii: @media screen {/* Reset ---------------------------------------------------- */html,body,div,span,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,code,del,dfn,em,img,q,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,
2024-03-29 14:16:00 UTC	383	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 32 35 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 0a 7d 0a 0a 2e 6c 6f 67 67 65 64 69 6e 68 31 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 2e 32 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 3b 0a 7d 0a 0a 23 64 69 73 61 62 6c 65 64 63 6f 6d 70 6f 73 65 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 32 35 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 63 6f 6c 6f 72 3a 20 23 63 63 63 63 63 63 3b 0a 7d 0a 0a 23 6e 61 76 62 61 72 66 6f 6f 74 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e Data Ascii: font-size: 1.125em;font-weight: normal;color: #666666;}.loggedinh1 { margin-top: 1.2em; margin-bottom: 1em;}#disabledcompose {text-decoration: none;font-size: 1.125em;font-weight: normal;color: #cccccc;}#navbarfooter {display: n
2024-03-29 14:16:01 UTC	8192	IN	Data Raw: 0a 09 63 6f 6c 6f 72 3a 20 23 39 39 39 39 39 39 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 34 30 70 78 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2a 2b 68 74 6d 6c 20 23 6e 61 76 62 61 72 66 6f 6f 74 65 72 20 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 35 35 70 78 3b 0a 7d 0a 0a 23 6e 61 76 65 78 70 61 6e 73 69 6f 6e 20 7b 0a 09 68 65 69 67 68 74 3a 20 34 34 70 78 3b 0a 09 77 69 64 74 68 3a 20 34 34 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 34 34 70 78 3b 0a 7d 0a 0a 0a 2a 2b 68 74 6d 6c 20 23 6e 61 76 65 78 70 61 6e 73 69 6f 6e 20 7b 0a 0a 7d 0a 0a 23 6e 61 76 62 61 72 20 23 6e 61 76 6f 66 66 6c 6f 67 6f 75 74 20 7b 0a 09 70 61 64 64 69 6e Data Ascii: color: #999999;margin-left: 20px;margin-top: -40px;cursor: pointer;}+html #navbarfooter {margin-top: -55px;}#navexpansion {height: 44px;width: 44px;margin-bottom: -44px;}+html #navexpansion {}#navbar #navofflogout {paddin
2024-03-29 14:16:01 UTC	8176	IN	Data Raw: 23 61 64 64 72 65 73 73 62 6f 6f 6b 6b 65 79 2c 20 23 6d 75 6c 74 69 66 61 63 74 6f 72 69 74 65 6d 73 6b 65 79 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 65 6d 61 69 6c 61 64 64 72 65 73 73 73 70 61 6e 2c 20 23 63 6f 6d 70 6f 73 65 62 6f 64 79 20 23 75 73 65 72 64 69 73 70 6c 61 79 20 73 70 61 6e 20 23 65 6d 61 69 6c 61 64 64 72 65 73 73 73 70 61 6e 69 64 2c 0a 23 6d 65 73 73 61 67 65 63 65 6e 74 65 72 62 6f 64 79 20 23 75 73 65 72 64 69 73 70 6c 61 79 20 73 70 61 6e 20 23 65 6d 61 69 6c 61 64 64 72 65 73 73 73 70 61 6e 69 64 2c 0a 23 6d 65 73 73 61 67 65 76 69 65 77 62 6f 64 79 20 23 75 73 65 72 64 69 73 70 6c 61 79 20 73 70 61 6e 20 23 65 6d 61 69 6c 61 64 64 72 65 73 73 73 70 61 6e 69 64 2c 0a 23 72 65 70 6c 79 62 6f 64 79 20 Data Ascii: #addressbookkey, #multifactoritemskey {display: none;}.emailaddressspan, #composebody #userdisplay span #emailaddressspanid,#messagecenterbody #userdisplay span #emailaddressspanid,#messageviewbody #userdisplay span #emailaddressspanid,#replybody
2024-03-29 14:16:01 UTC	8192	IN	Data Raw: 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 32 46 32 46 32 3b 0a 09 70 61 64 64 69 6e 67 3a 20 36 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 6d 61 72 67 69 6e 3a 20 36 70 78 20 30 70 78 20 36 70 78 20 30 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 23 72 65 67 69 73 74 65 72 69 6e 66 6f 20 70 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 23 72 65 67 69 73 74 65 72 69 6e 66 6f 20 6c 61 62 65 6c 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 32 35 65 6d 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 32 70 78 3b 0a 7d 0a 0a 23 65 6d 61 69 6c Data Ascii: splay: block;position: relative;background-color:#F2F2F2;padding: 6px;overflow: hidden;margin: 6px 0px 6px 0;text-align: right;}#registerinfo p {text-align: left;}#registerinfo label {font-size: 1.125em;margin-left: -12px;}#email
2024-03-29 14:16:01 UTC	3364	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 09 77 69 64 74 68 3a 31 36 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 61 74 74 61 63 68 6d 65 6e 74 3a 20 73 63 72 6f 6c 6c 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 69 2f 47 6f 6f 67 6c 65 5f 6c 6f 67 6f 2e 70 6e 67 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d Data Ascii: gin-left: auto; margin-right: auto; margin-top: 10px;height: 40px;width:160px;background-repeat: no-repeat;background-position: center center;background-attachment: scroll;background-image: url(/i/Google_logo.png);background-image: -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49707	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:00 UTC	926	OUT	GET /s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:00 UTC	1756	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:00 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:00 GMT Accept-Ranges: bytes ETag: W/"1494-1524082250000" Last-Modified: Wed, 18 Apr 2018 20:10:50 GMT Content-Type: text/css Content-Length: 1494 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:00 UTC	1494	IN	Data Raw: 23 70 72 69 6d 61 72 79 62 72 61 6e 64 69 6e 67 20 23 73 6d 61 6c 6c 42 61 6e 6e 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 7d 0a 23 73 65 63 6f 6e 64 61 72 79 62 72 61 6e 64 69 6e 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 64 37 33 38 61 3b 7d 0a 23 73 65 63 6f 6e 64 61 72 79 62 72 61 6e 64 69 6e 67 68 74 6d 6c 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 7d 0a 23 62 72 61 6e 64 69 6e 67 62 6f 74 74 6f 6d 62 61 6e 6e 65 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 69 2f 73 65 76 65 6e 73 65 76 65 6e 74 65 65 6e 2f 66 6f 6f 74 65 72 5f 32 30 31 38 30 34 31 38 5f 31 33 30 33 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 20 72 69 67 68 74 20 63 65 6e 74 65 72 3b 0a 09 Data Ascii: #primarybranding #smallBanner {background-color:transparent;}#secondarybranding {background-color:#4d738a;}#secondarybrandinghtml {width:100%;}#brandingbottombanner {background:url(/i/sevenseventeen/footer_20180418_1303.gif) no-repeat right center;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49708	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:00 UTC	924	OUT	GET /s/CON-566f38d3/sevenseventeen_stylesheet_mobile.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:00 UTC	1754	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:00 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:00 GMT Accept-Ranges: bytes ETag: W/"109-1319484819000" Last-Modified: Mon, 24 Oct 2011 19:33:39 GMT Content-Type: text/css Content-Length: 109 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:00 UTC	109	IN	Data Raw: 23 73 65 63 6f 6e 64 61 72 79 62 72 61 6e 64 69 6e 67 20 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 65 6d 3b 7d 0a 23 73 65 63 6f 6e 64 61 72 79 62 72 61 6e 64 69 6e 67 69 6e 66 6f 74 65 78 74 20 7b 70 61 64 64 69 6e 67 3a 36 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 37 65 6d 7d 0a Data Ascii: #secondarybranding {min-height:1em;}#secondarybrandinginfotext {padding:6px;min-height:1em;font-size:0.7em}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49710	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:00 UTC	944	OUT	GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_mobileLandscape.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:01 UTC	1756	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:00 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:00 GMT Accept-Ranges: bytes ETag: W/"3324-1659555122000" Last-Modified: Wed, 03 Aug 2022 19:32:02 GMT Content-Type: text/css Content-Length: 3324 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:01 UTC	3324	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 34 31 70 78 29 20 7b 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 20 6d 63 2e 6a 73 70 20 2d 2d 2d 2d 2d 2a 2f 0a 23 61 63 74 69 6f 6e 6d 65 73 73 61 67 65 73 20 7b 0a 0a 7d 0a 0a 23 6e 65 77 6d 73 67 63 6f 75 6e 74 2c 20 23 72 65 70 6c 79 74 6f 6d 73 67 20 7b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 7d 0a 0a 23 6c 61 73 74 6c 6f 67 69 6e 20 7b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 7d 0a 0a 0a 2e 6d 61 69 6c 61 74 74 61 63 68 6d 65 6e 74 2c 0a 2e 73 65 6e 74 69 74 65 6d 73 61 74 74 61 63 68 6d 65 6e Data Ascii: @media screen and (min-width:341px) {/-------- mc.jsp -----/#actionmessages {}#newmsgcount, #replytomsg {white-space: normal;overflow: visible;}#lastlogin {white-space: normal;overflow: visible;}.mailattachment,.sentitemsattachmen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49711	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:00 UTC	935	OUT	GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_tablet.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:01 UTC	1758	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:00 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:00 GMT Accept-Ranges: bytes ETag: W/"16544-1675909004000" Last-Modified: Thu, 09 Feb 2023 02:16:44 GMT Content-Type: text/css Content-Length: 16544 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:01 UTC	7801	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 30 31 70 78 29 20 7b 0a 0a 2f 2a 2d 2d 2d 2d 2d 2d 20 66 6f 72 20 61 6c 6c 20 70 61 67 65 73 20 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 6e 6f 64 61 74 61 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 3b 0a 7d 0a 0a 23 6e 61 76 62 61 72 62 75 74 74 6f 6e 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 0a 7d 0a 0a 2e 6e 61 76 6c 69 6e 6b 6f 6e 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 39 39 39 39 39 39 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 35 65 6d 3b 0a 7d 0a 0a 2e 6e 61 76 6c 69 6e 6b 6f 66 66 20 7b Data Ascii: @media screen and (min-width:801px) {/------ for all pages ------/.container {max-width: 1200px;margin: 0 auto;}.nodata {padding: 12px;}#navbarbutton {display: none;}.navlinkon {color: #999999;font-size: 1.25em;}.navlinkoff {
2024-03-29 14:16:01 UTC	383	IN	Data Raw: 30 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 20 35 70 78 20 30 20 30 20 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 20 35 70 78 20 30 20 30 3b 0a 7d 0a 0a 2e 6d 61 69 6c 6b 65 79 73 65 6c 65 63 74 2c 20 2e 73 65 6e 74 69 74 65 6d 73 6b 65 79 73 65 6c 65 63 74 2c 20 2e 72 65 63 61 6c 6c 6d 61 69 6c 6b 65 79 73 65 6c 65 63 74 2c 20 2e 64 72 61 66 74 69 74 65 6d 73 6b 65 79 73 65 6c 65 63 74 2c 20 2e 6d 75 6c 74 69 66 61 63 74 6f 72 69 74 65 6d 73 6b 65 79 73 65 6c 65 63 74 2c 20 2e 61 64 64 72 65 73 73 62 6f 6f 6b 6b 65 79 73 65 6c 65 63 74 20 7b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 61 61 61 61 61 3b 0a 09 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 20 Data Ascii: 0;-moz-border-radius: 5px 5px 0 0 ;-webkit-border-radius: 5px 5px 0 0;}.mailkeyselect, .sentitemskeyselect, .recallmailkeyselect, .draftitemskeyselect, .multifactoritemskeyselect, .addressbookkeyselect {border-color: #aaaaaa;border-style: none
2024-03-29 14:16:01 UTC	8192	IN	Data Raw: 36 25 3b 0a 7d 0a 0a 2e 6d 61 69 6c 6b 65 79 73 65 6e 64 65 72 2c 20 2e 73 65 6e 74 69 74 65 6d 73 6b 65 79 72 65 63 69 70 69 65 6e 74 2c 20 2e 72 65 63 61 6c 6c 6d 61 69 6c 6b 65 79 72 65 63 69 70 69 65 6e 74 2c 20 2e 64 72 61 66 74 69 74 65 6d 73 6b 65 79 72 65 63 69 70 69 65 6e 74 2c 20 2e 6d 75 6c 74 69 66 61 63 74 6f 72 69 74 65 6d 73 6b 65 79 6e 61 6d 65 2c 20 2e 61 64 64 72 65 73 73 62 6f 6f 6f 6b 6b 65 79 6e 61 6d 65 20 7b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 61 61 61 61 61 3b 0a 09 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 20 73 6f 6c 69 64 20 6e 6f 6e 65 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 3b 0a 09 77 69 64 74 68 3a 20 32 30 25 3b Data Ascii: 6%;}.mailkeysender, .sentitemskeyrecipient, .recallmailkeyrecipient, .draftitemskeyrecipient, .multifactoritemskeyname, .addressboookkeyname {border-color: #aaaaaa;border-style: none solid none none;border-width: 1px;padding: 12px;width: 20%;
2024-03-29 14:16:01 UTC	168	IN	Data Raw: 20 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 20 35 70 78 20 35 70 78 20 35 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 20 35 70 78 20 35 70 78 20 35 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 7d 0a 0a 2e 74 68 69 72 64 70 61 72 74 79 41 75 74 68 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 34 70 78 3b 0a 7d 0a 7d 20 2f 2a 20 65 6e 64 20 6f 66 20 40 6d 65 64 69 61 20 2a 2f Data Ascii: -moz-border-radius: 5px 5px 5px 5px;-webkit-border-radius: 5px 5px 5px 5px;border-radius: 5px;}.thirdpartyAuth {padding-left: 24px;}} /* end of @media */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49709	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:01 UTC	936	OUT	GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_desktop.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:01 UTC	1752	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:01 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:01 GMT Accept-Ranges: bytes ETag: W/"65-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: text/css Content-Length: 65 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:01 UTC	65	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 35 30 70 78 29 20 7b 0a 0a 0a 0a 0a 0a 0a 7d 20 2f 2a 20 65 6e 64 20 6f 66 20 40 6d 65 64 69 61 20 2a 2f Data Ascii: @media screen and (min-width:950px) {} /* end of @media */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49713	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:01 UTC	917	OUT	GET /s/CON-3e12d828/sevenseventeen_stylesheet.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:01 UTC	1756	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:01 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:01 GMT Accept-Ranges: bytes ETag: W/"2795-1524082231000" Last-Modified: Wed, 18 Apr 2018 20:10:31 GMT Content-Type: text/css Content-Length: 2795 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:01 UTC	2795	IN	Data Raw: 23 6d 65 73 73 61 67 65 74 65 78 74 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6b 65 5f 31 20 2e 63 6b 65 5f 77 72 61 70 70 65 72 2c 23 6d 65 73 73 61 67 65 74 65 78 74 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6b 65 5f 31 5f 64 69 61 6c 6f 67 20 2e 63 6b 65 5f 64 69 61 6c 6f 67 5f 63 6f 6e 74 65 6e 74 73 2c 23 6d 65 73 73 61 67 65 74 65 78 74 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6b 65 5f 31 5f 64 69 61 6c 6f 67 20 61 2e 63 6b 65 5f 64 69 61 6c 6f 67 5f 74 61 62 2c 23 6d 65 73 73 61 67 65 74 65 78 74 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6b 65 5f 31 5f 64 69 61 6c 6f 67 20 2e 63 6b 65 5f 64 69 61 6c 6f 67 5f 66 6f 6f 74 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 23 74 6f 70 61 63 63 65 6e Data Ascii: #messagetextcontainer .cke_1 .cke_wrapper,#messagetextcontainer .cke_1_dialog .cke_dialog_contents,#messagetextcontainer .cke_1_dialog a.cke_dialog_tab,#messagetextcontainer .cke_1_dialog .cke_dialog_footer {background-color:#f2f2f2 !important;}#topaccen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49714	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:01 UTC	934	OUT	GET /s/REL-6.3.13-release.3.41521/2ndGen/base/stylesheet_print.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:01 UTC	1756	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:01 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:01 GMT Accept-Ranges: bytes ETag: W/"2731-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: text/css Content-Length: 2731 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:01 UTC	2731	IN	Data Raw: 40 6d 65 64 69 61 20 70 72 69 6e 74 20 7b 0a 0a 23 74 6f 70 61 63 63 65 6e 74 31 2c 20 23 74 6f 70 61 63 63 65 6e 74 32 2c 20 23 62 6f 74 74 6f 6d 61 63 63 65 6e 74 31 2c 20 23 62 6f 74 74 6f 6d 61 63 63 65 6e 74 32 2c 20 23 6e 61 76 74 6f 70 61 63 63 65 6e 74 2c 20 23 6e 61 76 62 6f 74 74 6f 6d 61 63 63 65 6e 74 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 61 63 63 65 73 73 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 09 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 20 0a 6d 61 72 67 69 6e 3a 20 31 30 70 78 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 2c 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 0a 63 6f 6c 6f 72 3a 23 30 30 30 3b 0a 7d 0a Data Ascii: @media print {#topaccent1, #topaccent2, #bottomaccent1, #bottomaccent2, #navtopaccent, #navbottomaccent {display: none;}.access {display: none;}body {background: #fff; margin: 10px;font-family: arial, helvetica, sans-serif; color:#000;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49715	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:01 UTC	898	OUT	GET /s/stylesheets/skipnav.css HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:01 UTC	2682	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:01 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:01 GMT Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net X-Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net X-WebKit-CSP: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net Strict-Transport-Security: max-age=31536000;includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"492-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: text/css Content-Length: 492 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:01 UTC	492	IN	Data Raw: 2e 73 6b 69 70 6e 61 76 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 20 7d 0a 20 20 2e 73 6b 69 70 6e 61 76 20 61 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 2d 31 30 30 30 30 70 78 3b 20 77 69 64 74 68 3a 20 31 70 78 3b 20 68 65 69 67 68 74 3a 20 31 70 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 20 20 2e 73 6b 69 70 6e 61 76 20 61 3a 66 6f 63 75 73 2c 20 2e 73 6b 69 70 6e 61 76 20 61 3a 61 63 74 69 76 65 20 7b 20 0a 20 20 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 0a 20 20 09 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 20 0a 20 20 09 6c 65 66 74 3a 20 30 3b 20 0a 20 20 09 77 69 64 74 68 Data Ascii: .skipnav { text-align: left; } .skipnav a { display: block; position: absolute; left: -10000px; width: 1px; height: 1px; overflow: hidden; } .skipnav a:focus, .skipnav a:active { display: inline-block; position: static; left: 0; width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49716	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:01 UTC	881	OUT	GET /i/sevenseventeen/top_20180418_1239.gif HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:01 UTC	1657	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 14:16:01 GMT Server: Apache Last-Modified: Wed, 18 Apr 2018 20:10:16 GMT ETag: "42ba-56a250b17da00" Accept-Ranges: bytes Content-Length: 17082 Cache-Control: public P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Content-Type: image/gif Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:01 UTC	7879	IN	Data Raw: 47 49 46 38 39 61 b0 04 82 00 f7 c9 00 17 22 29 19 25 2d 1c 2a 33 1f 2f 38 20 2f 39 21 32 3c 25 37 41 26 39 44 28 3b 47 29 3d 4a 34 3d 42 2b 40 4d 3a 45 4c 37 40 47 2e 45 53 30 48 57 33 4c 5b 38 49 54 37 52 62 39 55 66 3a 57 68 3d 5b 6d 3f 5f 72 3a 64 7e 4a 50 54 4d 57 5d 40 4f 58 46 58 65 40 5f 72 51 5b 62 79 5b 6c 72 5f 70 5d 63 66 5c 65 6b 41 62 75 44 65 79 46 69 7e 4e 66 75 57 69 7b 5d 70 7c 61 69 6e 67 66 75 6e 72 75 6f 74 78 71 77 7b 70 60 72 bb 36 3d cc 17 1b cd 1e 22 ce 21 25 cf 25 2a cf 28 2c d0 2b 2f cc 2d 32 d0 2d 31 c3 32 38 d2 32 36 d2 36 39 d3 39 3d b4 3b 43 ae 3e 47 d4 3d 41 96 4b 57 8d 50 5d a7 42 4c a1 45 50 85 54 63 d5 42 46 d7 49 4d d6 47 4a d8 4d 51 d9 52 55 da 5a 5d da 56 59 db 5e 61 dc 62 65 de 6a 6d dd 66 69 df 6e 71 df 70 72 e0 72 Data Ascii: GIF89a")%-3/8 /9!2<%7A&9D(;G)=J4=B+@M:EL7@G.ES0HW3L[8IT7Rb9Uf:Wh=[m?_r:d~JPTMW]@OXFXe@_rQ[by[lr_p]cf\ekAbuDeyFi~NfuWi{]p\|aingfunruotxqw{p`r6="!%%(,+/-2-12826699=;C>G=AKWP]BLEPTcBFIMGJMQRUZ]VY^abejmfinqprr
2024-03-29 14:16:02 UTC	8000	IN	Data Raw: 95 8a 6e 41 d9 db ca 7e 67 00 00 6e 2b 22 79 f0 b5 18 38 81 27 b9 90 12 54 5f a4 87 65 22 64 0a 56 45 52 14 98 34 83 18 28 e1 8e 8d 68 db d9 8e 00 c9 b0 f2 24 16 60 0b 64 84 65 3c 63 fe 1a d7 d8 c6 a9 74 dc 5b 90 f2 85 0a f2 04 19 76 18 a8 41 9c b7 0b 15 14 f9 0b 6f 98 43 92 95 bc 64 3a c4 21 7c 4e 01 ea 6a e7 53 93 05 68 68 23 90 55 d4 77 44 6b 85 b1 20 8a a3 09 31 1f 1c 54 b0 02 16 80 81 0e 4b 46 f3 1c de 60 3e 37 f4 f3 ca 93 fd 56 21 78 92 81 08 a0 b2 76 c1 85 4b 38 61 5b 10 c2 09 af c8 65 3e 73 9a 95 4c 07 42 a0 84 13 e9 1a e6 08 36 10 32 94 f0 82 0f 65 ba ad 87 25 a0 1e 94 10 a3 13 2c b1 88 1a 8e 11 56 eb 06 73 5d 0d 43 a8 6b bf ec 61 0e 58 72 c0 43 2e f2 0a be 60 86 25 fb c1 0f 4c 76 f2 14 af 72 27 8c 90 2e b6 1f e9 73 28 fe 0c 06 24 0b 3a c9 74 e0 Data Ascii: nA~gn+"y8'T_e"dVER4(h$`de<ct[vAoCd:!\|NjShh#UwDk 1TKF`>7V!xvK8a[e>sLB62e%,Vs]CkaXrC.`%Lvr'.s($:t
2024-03-29 14:16:02 UTC	1203	IN	Data Raw: 37 77 33 1c 4b 42 0e 98 56 2b eb c0 23 7c 65 85 3e f3 0b da 52 df 02 43 14 6c a9 a2 ec b1 37 c7 b3 3c cf 33 3d d7 33 04 cb 82 ef ae 6d 0c 2c 01 36 5b 67 1e c0 f0 d4 2e 87 3a ef 6d 23 f4 40 35 d3 c0 21 18 b0 3d 2f 34 43 37 b4 43 3f f4 ed 1a c3 21 28 ca f0 d8 00 22 30 b3 4b 0c c3 27 b0 01 40 07 b4 9f 0c 74 d6 ba 82 12 b8 33 9d f4 00 bc 42 34 4a a7 b4 4a af 34 4b 1b ae 24 10 81 a2 18 71 0e 2c 02 46 67 f4 27 e8 c1 19 74 b4 0d 0a a0 40 66 2d 2c 38 01 97 52 b4 13 d4 74 4b 17 b5 51 1f 35 52 27 35 e9 21 82 32 89 04 0c e4 c0 21 c8 42 6b 68 74 1f e0 41 1a 6c 01 ac 5c 40 66 49 ac 32 68 42 13 c8 c0 41 0f 01 22 2b 35 59 97 b5 59 9f 75 37 bf 42 3e af ad 4e 34 81 2b 28 fe b4 4d 14 c3 30 e4 82 2e d4 42 8a aa d6 2f 38 02 11 c4 c0 1a 2f 0a 22 f0 31 5a 07 b6 60 0f 36 61 33 Data Ascii: 7w3KBV+#\|e>RCl7<3=3m,6[g.:m#@5!=/4C7C?!("0K'@t3B4JJ4K$q,Fg't@f-,8RtKQ5R'5!2!BkhtAl\@fI2hBA"+5YYu7B>N4+(M0.B/8/"1Z`6a3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49718	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:01 UTC	852	OUT	GET /i/sevenseventeen/footer_20180418_1303.gif HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail-sscu.net/s/CON-b3f2f0a9/sevenseventeen_stylesheet_HandHeld.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1656	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 14:16:01 GMT Server: Apache Last-Modified: Wed, 18 Apr 2018 20:10:14 GMT ETag: "16b1-56a250af95580" Accept-Ranges: bytes Content-Length: 5809 Cache-Control: public P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Content-Type: image/gif Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	5809	IN	Data Raw: 47 49 46 38 39 61 b9 00 3c 00 87 00 00 00 00 00 06 06 06 09 09 09 0d 0d 0d 11 11 11 15 15 15 19 19 19 1d 1d 1d 21 21 21 26 26 26 28 28 28 2d 2d 2d 32 32 32 36 36 36 39 39 39 3d 3d 3d 00 36 77 00 36 78 00 39 79 00 3c 7b 02 3c 7c 04 3b 7b 05 3c 7b 06 3d 7c 08 3e 7d 07 40 7e 0a 40 7e 0c 41 7e 41 41 41 45 45 45 49 49 49 4d 4d 4d 51 51 51 54 54 54 5a 5a 5a 5d 5d 5d 61 61 61 66 66 66 69 69 69 6d 6d 6d 71 71 71 75 75 75 79 79 79 7d 7d 7d 0b 41 80 0d 42 80 0e 44 81 10 42 80 11 45 81 14 46 82 14 47 84 15 48 83 18 46 83 19 4a 84 1a 4c 85 1c 4a 85 1d 4c 86 1e 4e 88 20 4e 86 21 4e 88 22 50 89 25 52 8a 26 54 8a 25 55 8d 29 53 8a 29 53 8c 28 54 8a 2a 55 8c 2c 55 8b 2c 56 8c 2b 59 8f 2e 59 8e 2f 5a 90 30 59 8e 34 5b 8f 34 5c 8f 31 5a 90 32 5c 90 34 5a 91 35 5d 91 36 5f Data Ascii: GIF89a<!!!&&&(((---222666999===6w6x9y<{<\|;{<{=\|>}@~@~A~AAAEEEIIIMMMQQQTTTZZZ]]]aaafffiiimmmqqquuuyyy}}}ABDBEFGHFJLJLN N!N"P%R&T%U)S)S(T*U,U,V+Y.Y/Z0Y4[4\1Z2\4Z5]6_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49717	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:01 UTC	861	OUT	GET /i/securedbyzix.svg HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1637	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 14:16:01 GMT Server: Apache Last-Modified: Wed, 31 Jan 2024 15:54:16 GMT ETag: "1048-6103fe4179a00" Accept-Ranges: bytes Content-Length: 4168 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Content-Type: image/svg+xml Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	4168	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 34 34 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 34 20 34 31 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 61 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 31 34 62 31 65 37 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 62 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 31 36 30 61 38 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 73 65 63 75 72 65 64 62 79 7a 69 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="144" height="41" viewBox="0 0 144 41"> <defs> <style> .a { fill: #14b1e7; } .b { fill: #0160a8; } </style> </defs> <title>securedbyzix</title> <g>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49719	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:01 UTC	920	OUT	GET /s/REL-6.3.13-release.3.41521/default_validatorconstants_en.js HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1747	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:01 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:01 GMT Accept-Ranges: bytes ETag: W/"3872-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: application/javascript Content-Length: 3872 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	3872	IN	Data Raw: 4e 41 4d 45 5f 43 48 41 52 5f 53 45 54 20 20 20 20 20 20 20 20 20 3d 20 22 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 2d 27 2e 7e 22 3b 0a 4e 41 4d 45 5f 4d 49 4e 5f 4c 45 4e 47 54 48 20 3d 20 31 3b 0a 4e 41 4d 45 5f 4d 41 58 5f 4c 45 4e 47 54 48 20 3d 20 32 35 34 3b 0a 0a 46 49 52 53 54 5f 4e 41 4d 45 5f 57 41 52 4e 5f 4d 49 53 53 49 4e 47 20 20 3d 20 22 45 6e 74 65 72 20 79 6f 75 72 20 66 69 72 73 74 20 6e 61 6d 65 2e 22 3b 0a 46 49 52 53 54 5f 4e 41 4d 45 5f 57 41 52 4e 5f 43 4f 4e 54 45 4e 54 20 20 3d 20 22 59 6f 75 72 20 46 69 72 73 74 20 4e 61 6d 65 20 6d 75 73 74 20 62 65 20 63 6f 72 72 65 63 74 65 64 20 62 65 66 6f 72 65 20 63 6f 6e 74 Data Ascii: NAME_CHAR_SET = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-'.~";NAME_MIN_LENGTH = 1;NAME_MAX_LENGTH = 254;FIRST_NAME_WARN_MISSING = "Enter your first name.";FIRST_NAME_WARN_CONTENT = "Your First Name must be corrected before cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49720	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:02 UTC	921	OUT	GET /s/REL-6.3.13-release.3.41521/default_registerview_validator.js HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1747	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:02 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:02 GMT Accept-Ranges: bytes ETag: W/"4750-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: application/javascript Content-Length: 4750 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	4750	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 76 61 6c 69 64 61 74 65 56 69 74 61 6c 73 28 20 73 64 46 6f 72 6d 2c 20 65 6d 61 69 6c 41 64 64 72 65 73 73 49 64 2c 20 70 61 73 73 77 6f 72 64 49 64 2c 20 70 61 73 73 77 6f 72 64 52 65 64 75 6e 64 61 6e 74 49 64 2c 20 65 6c 65 6d 65 6e 74 49 44 2c 20 64 69 73 70 6c 61 79 43 6c 69 65 6e 74 45 72 72 6f 72 73 49 6e 6c 69 6e 65 20 29 0a 7b 0a 20 20 20 20 69 66 28 20 69 73 42 6c 61 6e 6b 28 20 65 6d 61 69 6c 41 64 64 72 65 73 73 49 64 2e 76 61 6c 75 65 20 29 20 7c 7c 20 21 69 73 45 6d 61 69 6c 56 61 6c 69 64 28 20 65 6d 61 69 6c 41 64 64 72 65 73 73 49 64 2e 76 61 6c 75 65 20 29 20 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 69 73 73 75 65 43 6c 69 65 6e 74 57 61 72 6e 69 6e 67 28 20 45 4d 41 49 4c 5f 41 44 44 52 45 53 53 5f 57 Data Ascii: function validateVitals( sdForm, emailAddressId, passwordId, passwordRedundantId, elementID, displayClientErrorsInline ){ if( isBlank( emailAddressId.value ) \|\| !isEmailValid( emailAddressId.value ) ) { issueClientWarning( EMAIL_ADDRESS_W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49721	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:02 UTC	906	OUT	GET /s/REL-6.3.13-release.3.41521/emailfieldvalue.js HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1747	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:02 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:02 GMT Accept-Ranges: bytes ETag: W/"4171-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: application/javascript Content-Length: 4171 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	4171	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 73 45 6d 61 69 6c 56 61 6c 69 64 28 65 6d 61 69 6c 41 64 64 72 65 73 73 29 0a 7b 0a 20 20 69 66 28 20 65 6d 61 69 6c 41 64 64 72 65 73 73 2e 6c 65 6e 67 74 68 20 3c 20 35 20 29 0a 20 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 7d 0a 20 20 20 20 0a 20 20 2f 2f 20 45 78 61 63 74 6c 79 20 31 20 40 0a 20 20 76 61 72 20 61 74 50 6f 73 69 74 69 6f 6e 73 20 3d 20 66 69 6e 64 28 20 65 6d 61 69 6c 41 64 64 72 65 73 73 2c 20 22 40 22 20 29 3b 0a 20 20 69 66 28 20 61 74 50 6f 73 69 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 20 21 3d 20 31 20 29 0a 20 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 7d 0a 20 20 20 20 0a 20 20 2f 2f 20 44 6f 65 73 20 6e 6f 74 20 62 65 67 69 6e 20 77 69 74 68 20 40 0a Data Ascii: function isEmailValid(emailAddress){ if( emailAddress.length < 5 ) { return false; } // Exactly 1 @ var atPositions = find( emailAddress, "@" ); if( atPositions.length != 1 ) { return false; } // Does not begin with @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49723	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:02 UTC	901	OUT	GET /s/REL-6.3.13-release.3.41521/fieldvalue.js HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1747	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:02 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:02 GMT Accept-Ranges: bytes ETag: W/"1414-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: application/javascript Content-Length: 1414 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	1414	IN	Data Raw: 41 4c 50 48 41 5f 43 48 41 52 53 20 20 20 20 20 20 3d 20 22 41 42 43 44 45 46 47 48 49 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 22 3b 0a 4e 55 4d 42 45 52 53 20 20 20 20 20 20 20 20 20 20 3d 20 22 30 31 32 33 34 35 36 37 38 39 22 3b 0a 50 41 53 53 57 4f 52 44 5f 53 59 4d 42 4f 4c 53 20 3d 20 22 21 40 23 24 25 5e 26 2a 29 28 5f 2d 3d 2b 7b 7d 5b 5d 3a 3b 5c 22 27 3c 3e 2e 3f 7e 22 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 42 6c 61 6e 6b 28 20 66 69 65 6c 64 20 29 0a 7b 0a 20 20 74 72 69 6d 6d 65 64 46 69 65 6c 64 20 3d 20 74 72 69 6d 28 20 66 69 65 6c 64 20 29 3b 0a 20 20 69 66 28 20 74 72 69 6d 6d 65 64 46 69 65 6c 64 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 20 29 Data Ascii: ALPHA_CHARS = "ABCDEFGHIGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";NUMBERS = "0123456789";PASSWORD_SYMBOLS = "!@#$%^&*)(_-=+{}[]:;\"'<>.?~";function isBlank( field ){ trimmedField = trim( field ); if( trimmedField.length == 0 )

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49724	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:02 UTC	903	OUT	GET /s/REL-6.3.13-release.3.41521/userNotifier.js HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1747	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:02 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:02 GMT Accept-Ranges: bytes ETag: W/"2552-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: application/javascript Content-Length: 2552 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	2552	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 73 73 75 65 43 6c 69 65 6e 74 57 61 72 6e 69 6e 67 28 69 6e 6c 69 6e 65 57 61 72 6e 69 6e 67 54 65 78 74 2c 20 65 6c 65 6d 65 6e 74 49 44 2c 20 64 69 73 70 6c 61 79 49 6e 6c 69 6e 65 29 0a 7b 0a 20 20 20 20 69 73 73 75 65 49 6e 6c 69 6e 65 41 6c 65 72 74 28 69 6e 6c 69 6e 65 57 61 72 6e 69 6e 67 54 65 78 74 2c 20 65 6c 65 6d 65 6e 74 49 44 2c 20 66 61 6c 73 65 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 73 75 65 53 65 72 76 65 72 57 61 72 6e 69 6e 67 28 69 6e 6c 69 6e 65 57 61 72 6e 69 6e 67 54 65 78 74 2c 20 65 6c 65 6d 65 6e 74 49 44 2c 20 64 69 73 70 6c 61 79 49 6e 6c 69 6e 65 29 0a 7b 0a 20 20 69 73 73 75 65 49 6e 6c 69 6e 65 41 6c 65 72 74 28 69 6e 6c 69 6e 65 57 61 72 6e 69 6e 67 54 65 78 74 2c 20 65 6c 65 6d 65 Data Ascii: function issueClientWarning(inlineWarningText, elementID, displayInline){ issueInlineAlert(inlineWarningText, elementID, false);}function issueServerWarning(inlineWarningText, elementID, displayInline){ issueInlineAlert(inlineWarningText, eleme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49725	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:02 UTC	911	OUT	GET /s/REL-6.3.13-release.3.41521/attributeDefinitions.js HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1766	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:02 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:02 GMT Accept-Ranges: bytes ETag: W/"86-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: application/javascript Content-Length: 86 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff Vary: Accept-Encoding
2024-03-29 14:16:02 UTC	86	IN	Data Raw: 46 49 52 53 54 5f 4e 41 4d 45 20 3d 20 22 66 69 72 73 74 5f 6e 61 6d 65 22 3b 0a 4c 41 53 54 5f 4e 41 4d 45 20 3d 20 22 6c 61 73 74 5f 6e 61 6d 65 22 3b 0a 4d 49 44 44 4c 45 5f 49 4e 49 54 49 41 4c 20 3d 20 22 6d 69 64 64 6c 65 5f 69 6e 69 74 69 61 6c 22 3b Data Ascii: FIRST_NAME = "first_name";LAST_NAME = "last_name";MIDDLE_INITIAL = "middle_initial";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49727	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:02 UTC	556	OUT	GET /i/sevenseventeen/top_20180418_1239.gif HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1657	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 14:16:02 GMT Server: Apache Last-Modified: Wed, 18 Apr 2018 20:10:16 GMT ETag: "42ba-56a250b17da00" Accept-Ranges: bytes Content-Length: 17082 Cache-Control: public P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Content-Type: image/gif Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	7879	IN	Data Raw: 47 49 46 38 39 61 b0 04 82 00 f7 c9 00 17 22 29 19 25 2d 1c 2a 33 1f 2f 38 20 2f 39 21 32 3c 25 37 41 26 39 44 28 3b 47 29 3d 4a 34 3d 42 2b 40 4d 3a 45 4c 37 40 47 2e 45 53 30 48 57 33 4c 5b 38 49 54 37 52 62 39 55 66 3a 57 68 3d 5b 6d 3f 5f 72 3a 64 7e 4a 50 54 4d 57 5d 40 4f 58 46 58 65 40 5f 72 51 5b 62 79 5b 6c 72 5f 70 5d 63 66 5c 65 6b 41 62 75 44 65 79 46 69 7e 4e 66 75 57 69 7b 5d 70 7c 61 69 6e 67 66 75 6e 72 75 6f 74 78 71 77 7b 70 60 72 bb 36 3d cc 17 1b cd 1e 22 ce 21 25 cf 25 2a cf 28 2c d0 2b 2f cc 2d 32 d0 2d 31 c3 32 38 d2 32 36 d2 36 39 d3 39 3d b4 3b 43 ae 3e 47 d4 3d 41 96 4b 57 8d 50 5d a7 42 4c a1 45 50 85 54 63 d5 42 46 d7 49 4d d6 47 4a d8 4d 51 d9 52 55 da 5a 5d da 56 59 db 5e 61 dc 62 65 de 6a 6d dd 66 69 df 6e 71 df 70 72 e0 72 Data Ascii: GIF89a")%-3/8 /9!2<%7A&9D(;G)=J4=B+@M:EL7@G.ES0HW3L[8IT7Rb9Uf:Wh=[m?_r:d~JPTMW]@OXFXe@_rQ[by[lr_p]cf\ekAbuDeyFi~NfuWi{]p\|aingfunruotxqw{p`r6="!%%(,+/-2-12826699=;C>G=AKWP]BLEPTcBFIMGJMQRUZ]VY^abejmfinqprr
2024-03-29 14:16:03 UTC	8000	IN	Data Raw: 95 8a 6e 41 d9 db ca 7e 67 00 00 6e 2b 22 79 f0 b5 18 38 81 27 b9 90 12 54 5f a4 87 65 22 64 0a 56 45 52 14 98 34 83 18 28 e1 8e 8d 68 db d9 8e 00 c9 b0 f2 24 16 60 0b 64 84 65 3c 63 fe 1a d7 d8 c6 a9 74 dc 5b 90 f2 85 0a f2 04 19 76 18 a8 41 9c b7 0b 15 14 f9 0b 6f 98 43 92 95 bc 64 3a c4 21 7c 4e 01 ea 6a e7 53 93 05 68 68 23 90 55 d4 77 44 6b 85 b1 20 8a a3 09 31 1f 1c 54 b0 02 16 80 81 0e 4b 46 f3 1c de 60 3e 37 f4 f3 ca 93 fd 56 21 78 92 81 08 a0 b2 76 c1 85 4b 38 61 5b 10 c2 09 af c8 65 3e 73 9a 95 4c 07 42 a0 84 13 e9 1a e6 08 36 10 32 94 f0 82 0f 65 ba ad 87 25 a0 1e 94 10 a3 13 2c b1 88 1a 8e 11 56 eb 06 73 5d 0d 43 a8 6b bf ec 61 0e 58 72 c0 43 2e f2 0a be 60 86 25 fb c1 0f 4c 76 f2 14 af 72 27 8c 90 2e b6 1f e9 73 28 fe 0c 06 24 0b 3a c9 74 e0 Data Ascii: nA~gn+"y8'T_e"dVER4(h$`de<ct[vAoCd:!\|NjShh#UwDk 1TKF`>7V!xvK8a[e>sLB62e%,Vs]CkaXrC.`%Lvr'.s($:t
2024-03-29 14:16:03 UTC	1203	IN	Data Raw: 37 77 33 1c 4b 42 0e 98 56 2b eb c0 23 7c 65 85 3e f3 0b da 52 df 02 43 14 6c a9 a2 ec b1 37 c7 b3 3c cf 33 3d d7 33 04 cb 82 ef ae 6d 0c 2c 01 36 5b 67 1e c0 f0 d4 2e 87 3a ef 6d 23 f4 40 35 d3 c0 21 18 b0 3d 2f 34 43 37 b4 43 3f f4 ed 1a c3 21 28 ca f0 d8 00 22 30 b3 4b 0c c3 27 b0 01 40 07 b4 9f 0c 74 d6 ba 82 12 b8 33 9d f4 00 bc 42 34 4a a7 b4 4a af 34 4b 1b ae 24 10 81 a2 18 71 0e 2c 02 46 67 f4 27 e8 c1 19 74 b4 0d 0a a0 40 66 2d 2c 38 01 97 52 b4 13 d4 74 4b 17 b5 51 1f 35 52 27 35 e9 21 82 32 89 04 0c e4 c0 21 c8 42 6b 68 74 1f e0 41 1a 6c 01 ac 5c 40 66 49 ac 32 68 42 13 c8 c0 41 0f 01 22 2b 35 59 97 b5 59 9f 75 37 bf 42 3e af ad 4e 34 81 2b 28 fe b4 4d 14 c3 30 e4 82 2e d4 42 8a aa d6 2f 38 02 11 c4 c0 1a 2f 0a 22 f0 31 5a 07 b6 60 0f 36 61 33 Data Ascii: 7w3KBV+#\|e>RCl7<3=3m,6[g.:m#@5!=/4C7C?!("0K'@t3B4JJ4K$q,Fg't@f-,8RtKQ5R'5!2!BkhtAl\@fI2hBA"+5YYu7B>N4+(M0.B/8/"1Z`6a3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49728	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:02 UTC	559	OUT	GET /i/sevenseventeen/footer_20180418_1303.gif HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1656	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 14:16:02 GMT Server: Apache Last-Modified: Wed, 18 Apr 2018 20:10:14 GMT ETag: "16b1-56a250af95580" Accept-Ranges: bytes Content-Length: 5809 Cache-Control: public P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Content-Type: image/gif Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	5809	IN	Data Raw: 47 49 46 38 39 61 b9 00 3c 00 87 00 00 00 00 00 06 06 06 09 09 09 0d 0d 0d 11 11 11 15 15 15 19 19 19 1d 1d 1d 21 21 21 26 26 26 28 28 28 2d 2d 2d 32 32 32 36 36 36 39 39 39 3d 3d 3d 00 36 77 00 36 78 00 39 79 00 3c 7b 02 3c 7c 04 3b 7b 05 3c 7b 06 3d 7c 08 3e 7d 07 40 7e 0a 40 7e 0c 41 7e 41 41 41 45 45 45 49 49 49 4d 4d 4d 51 51 51 54 54 54 5a 5a 5a 5d 5d 5d 61 61 61 66 66 66 69 69 69 6d 6d 6d 71 71 71 75 75 75 79 79 79 7d 7d 7d 0b 41 80 0d 42 80 0e 44 81 10 42 80 11 45 81 14 46 82 14 47 84 15 48 83 18 46 83 19 4a 84 1a 4c 85 1c 4a 85 1d 4c 86 1e 4e 88 20 4e 86 21 4e 88 22 50 89 25 52 8a 26 54 8a 25 55 8d 29 53 8a 29 53 8c 28 54 8a 2a 55 8c 2c 55 8b 2c 56 8c 2b 59 8f 2e 59 8e 2f 5a 90 30 59 8e 34 5b 8f 34 5c 8f 31 5a 90 32 5c 90 34 5a 91 35 5d 91 36 5f Data Ascii: GIF89a<!!!&&&(((---222666999===6w6x9y<{<\|;{<{=\|>}@~@~A~AAAEEEIIIMMMQQQTTTZZZ]]]aaafffiiimmmqqquuuyyy}}}ABDBEFGHFJLJLN N!N"P%R&T%U)S)S(T*U,U,V+Y.Y/Z0Y4[4\1Z2\4Z5]6_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49726	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:02 UTC	536	OUT	GET /i/securedbyzix.svg HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:02 UTC	1637	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 14:16:02 GMT Server: Apache Last-Modified: Wed, 31 Jan 2024 15:54:16 GMT ETag: "1048-6103fe4179a00" Accept-Ranges: bytes Content-Length: 4168 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Content-Type: image/svg+xml Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:02 UTC	4168	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 34 34 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 34 20 34 31 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 61 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 31 34 62 31 65 37 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 62 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 31 36 30 61 38 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 74 69 74 6c 65 3e 73 65 63 75 72 65 64 62 79 7a 69 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="144" height="41" viewBox="0 0 144 41"> <defs> <style> .a { fill: #14b1e7; } .b { fill: #0160a8; } </style> </defs> <title>securedbyzix</title> <g>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49712	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:04 UTC	912	OUT	GET /s/REL-6.3.13-release.3.41521/scripts/jquery/jquery.js HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:05 UTC	1751	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:04 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:04 GMT Accept-Ranges: bytes ETag: W/"288580-1653528066000" Last-Modified: Thu, 26 May 2022 01:21:06 GMT Content-Type: application/javascript Content-Length: 288580 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:05 UTC	7785	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 36 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 31 2d 30 33 2d 30 Data Ascii: /! jQuery JavaScript Library v3.6.0 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2021-03-0
2024-03-29 14:16:05 UTC	399	IN	Data Raw: 09 73 72 63 20 3d 20 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 3b 0a 0a 09 09 09 09 09 2f 2f 20 45 6e 73 75 72 65 20 70 72 6f 70 65 72 20 74 79 70 65 20 66 6f 72 20 74 68 65 20 73 6f 75 72 63 65 20 76 61 6c 75 65 0a 09 09 09 09 09 69 66 20 28 20 63 6f 70 79 49 73 41 72 72 61 79 20 26 26 20 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 20 73 72 63 20 29 20 29 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 5b 5d 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 70 79 49 73 41 72 72 61 79 20 26 26 20 21 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 20 73 72 63 20 29 20 29 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 7b 7d 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 73 72 Data Ascii: src = target[ name ];// Ensure proper type for the source valueif ( copyIsArray && !Array.isArray( src ) ) {clone = [];} else if ( !copyIsArray && !jQuery.isPlainObject( src ) ) {clone = {};} else {clone = sr
2024-03-29 14:16:05 UTC	8192	IN	Data Raw: 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 78 70 61 6e 64 6f 3a 20 22 6a 51 75 Data Ascii: // Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pageexpando: "jQu
2024-03-29 14:16:05 UTC	8176	IN	Data Raw: 73 28 29 0a 09 09 2f 2f 20 57 65 20 75 73 65 20 74 68 69 73 20 66 6f 72 20 50 4f 53 20 6d 61 74 63 68 69 6e 67 20 69 6e 20 60 73 65 6c 65 63 74 60 0a 09 09 22 6e 65 65 64 73 43 6f 6e 74 65 78 74 22 3a 20 6e 65 77 20 52 65 67 45 78 70 28 20 22 5e 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 0a 09 09 09 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 0a 09 09 09 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 20 22 69 22 20 29 0a 09 7d 2c 0a 0a 09 72 68 74 6d 6c 20 3d 20 2f 48 54 4d 4c 24 2f 69 2c 0a Data Ascii: s()// We use this for POS matching in `select`"needsContext": new RegExp( "^" + whitespace +"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\\(" + whitespace +"((?:-\\d)?\\d)" + whitespace + "\\)\|)(?=[^-]\|$)", "i" )},rhtml = /HTML$/i,
2024-03-29 14:16:05 UTC	8192	IN	Data Raw: 20 65 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 7d 20 66 69 6e 61 6c 6c 79 20 7b 0a 0a 09 09 2f 2f 20 52 65 6d 6f 76 65 20 66 72 6f 6d 20 69 74 73 20 70 61 72 65 6e 74 20 62 79 20 64 65 66 61 75 6c 74 0a 09 09 69 66 20 28 20 65 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 20 29 20 7b 0a 09 09 09 65 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 65 6c 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 72 65 6c 65 61 73 65 20 6d 65 6d 6f 72 79 20 69 6e 20 49 45 0a 09 09 65 6c 20 3d 20 6e 75 6c 6c 3b 0a 09 7d 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 41 64 64 73 20 74 68 65 20 73 61 6d 65 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 61 6c 6c 20 6f 66 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 61 74 74 72 73 0a 20 2a 20 40 70 61 72 61 Data Ascii: e ) {return false;} finally {// Remove from its parent by defaultif ( el.parentNode ) {el.parentNode.removeChild( el );}// release memory in IEel = null;}}/** * Adds the same handler for all of the specified attrs * @para
2024-03-29 14:16:05 UTC	8176	IN	Data Raw: 28 20 65 6c 20 29 2e 69 64 20 3d 20 65 78 70 61 6e 64 6f 3b 0a 09 09 72 65 74 75 72 6e 20 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 20 7c 7c 20 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 20 65 78 70 61 6e 64 6f 20 29 2e 6c 65 6e 67 74 68 3b 0a 09 7d 20 29 3b 0a 0a 09 2f 2f 20 49 44 20 66 69 6c 74 65 72 20 61 6e 64 20 66 69 6e 64 0a 09 69 66 20 28 20 73 75 70 70 6f 72 74 2e 67 65 74 42 79 49 64 20 29 20 7b 0a 09 09 45 78 70 72 2e 66 69 6c 74 65 72 5b 20 22 49 44 22 20 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 20 29 20 7b 0a 09 09 09 76 61 72 20 61 74 74 72 49 64 20 3d 20 69 64 2e 72 65 70 6c 61 63 65 28 20 72 75 6e 65 73 63 61 70 65 2c 20 66 75 6e 65 73 63 61 70 65 20 29 Data Ascii: ( el ).id = expando;return !document.getElementsByName \|\| !document.getElementsByName( expando ).length;} );// ID filter and findif ( support.getById ) {Expr.filter[ "ID" ] = function( id ) {var attrId = id.replace( runescape, funescape )
2024-03-29 14:16:06 UTC	8192	IN	Data Raw: 64 65 54 79 70 65 20 3d 3d 3d 20 39 20 3f 20 61 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 3a 20 61 2c 0a 09 09 09 09 62 75 70 20 3d 20 62 20 26 26 20 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 0a 09 09 09 72 65 74 75 72 6e 20 61 20 3d 3d 3d 20 62 75 70 20 7c 7c 20 21 21 28 20 62 75 70 20 26 26 20 62 75 70 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 28 0a 09 09 09 09 61 64 6f 77 6e 2e 63 6f 6e 74 61 69 6e 73 20 3f 0a 09 09 09 09 09 61 64 6f 77 6e 2e 63 6f 6e 74 61 69 6e 73 28 20 62 75 70 20 29 20 3a 0a 09 09 09 09 09 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 20 26 26 20 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 20 62 75 70 20 29 20 26 20 31 36 0a 09 09 09 29 20 29 3b 0a Data Ascii: deType === 9 ? a.documentElement : a,bup = b && b.parentNode;return a === bup \|\| !!( bup && bup.nodeType === 1 && (adown.contains ?adown.contains( bup ) :a.compareDocumentPosition && a.compareDocumentPosition( bup ) & 16) );
2024-03-29 14:16:06 UTC	8176	IN	Data Raw: 20 5d 2e 72 65 70 6c 61 63 65 28 20 72 75 6e 65 73 63 61 70 65 2c 20 66 75 6e 65 73 63 61 70 65 20 29 3b 0a 0a 09 09 09 2f 2f 20 4d 6f 76 65 20 74 68 65 20 67 69 76 65 6e 20 76 61 6c 75 65 20 74 6f 20 6d 61 74 63 68 5b 33 5d 20 77 68 65 74 68 65 72 20 71 75 6f 74 65 64 20 6f 72 20 75 6e 71 75 6f 74 65 64 0a 09 09 09 6d 61 74 63 68 5b 20 33 20 5d 20 3d 20 28 20 6d 61 74 63 68 5b 20 33 20 5d 20 7c 7c 20 6d 61 74 63 68 5b 20 34 20 5d 20 7c 7c 0a 09 09 09 09 6d 61 74 63 68 5b 20 35 20 5d 20 7c 7c 20 22 22 20 29 2e 72 65 70 6c 61 63 65 28 20 72 75 6e 65 73 63 61 70 65 2c 20 66 75 6e 65 73 63 61 70 65 20 29 3b 0a 0a 09 09 09 69 66 20 28 20 6d 61 74 63 68 5b 20 32 20 5d 20 3d 3d 3d 20 22 7e 3d 22 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 5b 20 33 20 5d 20 3d 20 Data Ascii: ].replace( runescape, funescape );// Move the given value to match[3] whether quoted or unquotedmatch[ 3 ] = ( match[ 3 ] \|\| match[ 4 ] \|\|match[ 5 ] \|\| "" ).replace( runescape, funescape );if ( match[ 2 ] === "~=" ) {match[ 3 ] =
2024-03-29 14:16:06 UTC	8192	IN	Data Raw: 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 20 2b 20 70 73 65 75 64 6f 20 29 3b 0a 0a 09 09 09 2f 2f 20 54 68 65 20 75 73 65 72 20 6d 61 79 20 75 73 65 20 63 72 65 61 74 65 50 73 65 75 64 6f 20 74 6f 20 69 6e 64 69 63 61 74 65 20 74 68 61 74 0a 09 09 09 2f 2f 20 61 72 67 75 6d 65 6e 74 73 20 61 72 65 20 6e 65 65 64 65 64 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 66 69 6c 74 65 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 09 2f 2f 20 6a 75 73 74 20 61 73 20 53 69 7a 7a 6c 65 20 64 6f 65 73 0a 09 09 09 69 66 20 28 20 66 6e 5b 20 65 78 70 61 6e 64 6f 20 5d 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 66 6e 28 20 61 72 67 75 6d 65 6e 74 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 42 75 74 20 6d 61 69 6e 74 61 69 6e 20 73 75 70 70 6f 72 74 20 66 6f Data Ascii: pported pseudo: " + pseudo );// The user may use createPseudo to indicate that// arguments are needed to create the filter function// just as Sizzle doesif ( fn[ expando ] ) {return fn( argument );}// But maintain support fo
2024-03-29 14:16:06 UTC	8176	IN	Data Raw: 6d 61 74 63 68 2e 73 68 69 66 74 28 29 3b 0a 09 09 09 09 74 6f 6b 65 6e 73 2e 70 75 73 68 28 20 7b 0a 09 09 09 09 09 76 61 6c 75 65 3a 20 6d 61 74 63 68 65 64 2c 0a 09 09 09 09 09 74 79 70 65 3a 20 74 79 70 65 2c 0a 09 09 09 09 09 6d 61 74 63 68 65 73 3a 20 6d 61 74 63 68 0a 09 09 09 09 7d 20 29 3b 0a 09 09 09 09 73 6f 46 61 72 20 3d 20 73 6f 46 61 72 2e 73 6c 69 63 65 28 20 6d 61 74 63 68 65 64 2e 6c 65 6e 67 74 68 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 69 66 20 28 20 21 6d 61 74 63 68 65 64 20 29 20 7b 0a 09 09 09 62 72 65 61 6b 3b 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6c 65 6e 67 74 68 20 6f 66 20 74 68 65 20 69 6e 76 61 6c 69 64 20 65 78 63 65 73 73 0a 09 2f 2f 20 69 66 20 77 65 27 72 65 20 6a 75 73 74 20 70 Data Ascii: match.shift();tokens.push( {value: matched,type: type,matches: match} );soFar = soFar.slice( matched.length );}}if ( !matched ) {break;}}// Return the length of the invalid excess// if we're just p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49722	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:05 UTC	917	OUT	GET /s/REL-6.3.13-release.3.41521/scripts/jqueryui/jquery-ui.js HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=D5933686CE6AC4DE1655A218152F4882; zixport.portal=sevenseventeen; BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:06 UTC	1751	IN	HTTP/1.1 200 200 Date: Fri, 29 Mar 2024 14:16:05 GMT Server: Apache Cache-Control: public, max-age=31536000, must-revalidate Expires: Sat, 29 Mar 2025 14:16:05 GMT Accept-Ranges: bytes ETag: W/"529159-1675386804000" Last-Modified: Fri, 03 Feb 2023 01:13:24 GMT Content-Type: application/javascript Content-Length: 529159 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff
2024-03-29 14:16:06 UTC	7785	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2024-03-29 14:16:06 UTC	399	IN	Data Raw: 29 20 7b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 69 6e 73 74 61 6e 63 65 3b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 69 66 20 28 20 21 69 6e 73 74 61 6e 63 65 20 29 20 7b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 24 2e 65 72 72 6f 72 28 20 22 63 61 6e 6e 6f 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 73 20 6f 6e 20 22 20 2b 20 6e 61 6d 65 20 2b 0a 09 09 09 09 09 09 09 22 20 70 72 69 6f 72 20 74 6f 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3b 20 22 20 2b 0a 09 09 09 09 09 09 09 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 27 22 20 2b 20 6f 70 74 69 6f 6e 73 20 2b 20 22 27 22 20 29 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 69 66 20 28 20 74 Data Ascii: ) {returnValue = instance;return false;}if ( !instance ) {return $.error( "cannot call methods on " + name +" prior to initialization; " +"attempted to call method '" + options + "'" );}if ( t
2024-03-29 14:16:06 UTC	8192	IN	Data Raw: 2b 20 6e 61 6d 65 20 2b 0a 09 09 09 09 09 09 09 22 20 77 69 64 67 65 74 20 69 6e 73 74 61 6e 63 65 22 20 29 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 6d 65 74 68 6f 64 56 61 6c 75 65 20 3d 20 69 6e 73 74 61 6e 63 65 5b 20 6f 70 74 69 6f 6e 73 20 5d 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 6d 65 74 68 6f 64 56 61 6c 75 65 20 21 3d 3d 20 69 6e 73 74 61 6e 63 65 20 26 26 20 6d 65 74 68 6f 64 56 61 6c 75 65 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 09 72 65 74 75 72 6e 56 61 6c 75 65 20 3d 20 6d 65 74 68 6f 64 56 61 6c 75 65 20 26 26 20 6d 65 74 68 6f 64 56 61 6c 75 65 2e 6a 71 75 65 72 79 20 3f 0a 09 09 09 09 09 09 09 72 65 74 75 72 6e 56 61 6c 75 65 2e 70 Data Ascii: + name +" widget instance" );}methodValue = instance[ options ].apply( instance, args );if ( methodValue !== instance && methodValue !== undefined ) {returnValue = methodValue && methodValue.jquery ?returnValue.p
2024-03-29 14:16:06 UTC	8176	IN	Data Raw: 72 61 2c 0a 09 09 09 09 6b 65 79 73 3a 20 73 68 69 66 74 20 3f 20 65 6c 65 6d 65 6e 74 20 3a 20 6b 65 79 73 2c 0a 09 09 09 09 65 6c 65 6d 65 6e 74 3a 20 73 68 69 66 74 20 3f 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 3a 20 65 6c 65 6d 65 6e 74 2c 0a 09 09 09 09 61 64 64 3a 20 61 64 64 0a 09 09 09 7d 3b 0a 09 09 6f 70 74 69 6f 6e 73 2e 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 20 74 68 69 73 2e 5f 63 6c 61 73 73 65 73 28 20 6f 70 74 69 6f 6e 73 20 29 2c 20 61 64 64 20 29 3b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 7d 2c 0a 0a 09 5f 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 75 70 70 72 65 73 73 44 69 73 61 62 6c 65 64 43 68 65 63 6b 2c 20 65 6c 65 6d 65 6e 74 2c 20 68 61 6e 64 6c 65 72 73 20 29 20 7b 0a 09 09 76 61 72 20 64 65 Data Ascii: ra,keys: shift ? element : keys,element: shift ? this.element : element,add: add};options.element.toggleClass( this._classes( options ), add );return this;},_on: function( suppressDisabledCheck, element, handlers ) {var de
2024-03-29 14:16:06 UTC	8192	IN	Data Raw: 6f 77 20 26 26 20 21 69 73 44 6f 63 75 6d 65 6e 74 3b 0a 09 09 72 65 74 75 72 6e 20 7b 0a 09 09 09 65 6c 65 6d 65 6e 74 3a 20 77 69 74 68 69 6e 45 6c 65 6d 65 6e 74 2c 0a 09 09 09 69 73 57 69 6e 64 6f 77 3a 20 69 73 45 6c 65 6d 57 69 6e 64 6f 77 2c 0a 09 09 09 69 73 44 6f 63 75 6d 65 6e 74 3a 20 69 73 44 6f 63 75 6d 65 6e 74 2c 0a 09 09 09 6f 66 66 73 65 74 3a 20 68 61 73 4f 66 66 73 65 74 20 3f 20 24 28 20 65 6c 65 6d 65 6e 74 20 29 2e 6f 66 66 73 65 74 28 29 20 3a 20 7b 20 6c 65 66 74 3a 20 30 2c 20 74 6f 70 3a 20 30 20 7d 2c 0a 09 09 09 73 63 72 6f 6c 6c 4c 65 66 74 3a 20 77 69 74 68 69 6e 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 0a 09 09 09 73 63 72 6f 6c 6c 54 6f 70 3a 20 77 69 74 68 69 6e 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c Data Ascii: ow && !isDocument;return {element: withinElement,isWindow: isElemWindow,isDocument: isDocument,offset: hasOffset ? $( element ).offset() : { left: 0, top: 0 },scrollLeft: withinElement.scrollLeft(),scrollTop: withinElement.scrol
2024-03-29 14:16:06 UTC	8176	IN	Data Raw: 6f 6e 2e 74 6f 70 20 3d 20 77 69 74 68 69 6e 4f 66 66 73 65 74 3b 0a 0a 09 09 09 09 2f 2f 20 45 6c 65 6d 65 6e 74 20 69 73 20 69 6e 69 74 69 61 6c 6c 79 20 6f 76 65 72 20 62 6f 74 68 20 74 6f 70 20 61 6e 64 20 62 6f 74 74 6f 6d 20 6f 66 20 77 69 74 68 69 6e 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 69 66 20 28 20 6f 76 65 72 54 6f 70 20 3e 20 6f 76 65 72 42 6f 74 74 6f 6d 20 29 20 7b 0a 09 09 09 09 09 09 70 6f 73 69 74 69 6f 6e 2e 74 6f 70 20 3d 20 77 69 74 68 69 6e 4f 66 66 73 65 74 20 2b 20 6f 75 74 65 72 48 65 69 67 68 74 20 2d 20 64 61 74 61 2e 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 70 6f 73 69 74 69 6f 6e 2e 74 6f 70 20 3d 20 77 69 74 68 69 6e 4f 66 66 73 65 74 3b Data Ascii: on.top = withinOffset;// Element is initially over both top and bottom of within} else {if ( overTop > overBottom ) {position.top = withinOffset + outerHeight - data.collisionHeight;} else {position.top = withinOffset;
2024-03-29 14:16:07 UTC	8192	IN	Data Raw: 0a 09 09 09 09 09 74 79 70 65 3a 20 22 70 65 72 63 65 6e 74 22 0a 09 09 09 09 7d 2c 0a 09 09 09 09 6c 69 67 68 74 6e 65 73 73 3a 20 7b 0a 09 09 09 09 09 69 64 78 3a 20 32 2c 0a 09 09 09 09 09 74 79 70 65 3a 20 22 70 65 72 63 65 6e 74 22 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 2c 0a 09 70 72 6f 70 54 79 70 65 73 20 3d 20 7b 0a 09 09 22 62 79 74 65 22 3a 20 7b 0a 09 09 09 66 6c 6f 6f 72 3a 20 74 72 75 65 2c 0a 09 09 09 6d 61 78 3a 20 32 35 35 0a 09 09 7d 2c 0a 09 09 22 70 65 72 63 65 6e 74 22 3a 20 7b 0a 09 09 09 6d 61 78 3a 20 31 0a 09 09 7d 2c 0a 09 09 22 64 65 67 72 65 65 73 22 3a 20 7b 0a 09 09 09 6d 6f 64 3a 20 33 36 30 2c 0a 09 09 09 66 6c 6f 6f 72 3a 20 74 72 75 65 0a 09 09 7d 0a 09 7d 2c 0a 09 73 75 70 70 6f 72 74 20 3d 20 63 6f 6c 6f Data Ascii: type: "percent"},lightness: {idx: 2,type: "percent"}}}},propTypes = {"byte": {floor: true,max: 255},"percent": {max: 1},"degrees": {mod: 360,floor: true}},support = colo
2024-03-29 14:16:07 UTC	8176	IN	Data Raw: 0a 7d 20 29 3b 0a 63 6f 6c 6f 72 2e 66 6e 2e 70 61 72 73 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 63 6f 6c 6f 72 2e 66 6e 3b 0a 0a 2f 2f 20 68 73 6c 61 20 63 6f 6e 76 65 72 73 69 6f 6e 73 20 61 64 61 70 74 65 64 20 66 72 6f 6d 3a 0a 2f 2f 20 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 6d 61 61 73 68 61 61 63 6b 2f 73 6f 75 72 63 65 2f 62 72 6f 77 73 65 2f 70 61 63 6b 61 67 65 73 2f 67 72 61 70 68 69 63 73 2f 74 72 75 6e 6b 2f 73 72 63 2f 67 72 61 70 68 69 63 73 2f 63 6f 6c 6f 72 73 2f 48 55 45 32 52 47 42 2e 61 73 3f 72 3d 35 30 32 31 0a 0a 66 75 6e 63 74 69 6f 6e 20 68 75 65 32 72 67 62 28 20 70 2c 20 71 2c 20 68 20 29 20 7b 0a 09 68 20 3d 20 28 20 68 20 2b 20 31 20 29 20 25 20 31 3b 0a 09 69 66 20 28 20 68 20 2a 20 36 Data Ascii: } );color.fn.parse.prototype = color.fn;// hsla conversions adapted from:// https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RGB.as?r=5021function hue2rgb( p, q, h ) {h = ( h + 1 ) % 1;if ( h * 6
2024-03-29 14:16:07 UTC	8192	IN	Data Raw: 75 72 6e 20 73 74 79 6c 65 73 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 74 79 6c 65 44 69 66 66 65 72 65 6e 63 65 28 20 6f 6c 64 53 74 79 6c 65 2c 20 6e 65 77 53 74 79 6c 65 20 29 20 7b 0a 09 76 61 72 20 64 69 66 66 20 3d 20 7b 7d 2c 0a 09 09 6e 61 6d 65 2c 20 76 61 6c 75 65 3b 0a 0a 09 66 6f 72 20 28 20 6e 61 6d 65 20 69 6e 20 6e 65 77 53 74 79 6c 65 20 29 20 7b 0a 09 09 76 61 6c 75 65 20 3d 20 6e 65 77 53 74 79 6c 65 5b 20 6e 61 6d 65 20 5d 3b 0a 09 09 69 66 20 28 20 6f 6c 64 53 74 79 6c 65 5b 20 6e 61 6d 65 20 5d 20 21 3d 3d 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 69 66 20 28 20 21 73 68 6f 72 74 68 61 6e 64 53 74 79 6c 65 73 5b 20 6e 61 6d 65 20 5d 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 24 2e 66 78 2e 73 74 65 70 5b 20 6e 61 6d 65 20 5d 20 7c Data Ascii: urn styles;}function styleDifference( oldStyle, newStyle ) {var diff = {},name, value;for ( name in newStyle ) {value = newStyle[ name ];if ( oldStyle[ name ] !== value ) {if ( !shorthandStyles[ name ] ) {if ( $.fx.step[ name ] \|
2024-03-29 14:16:08 UTC	8176	IN	Data Raw: 20 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 20 3f 20 28 20 28 20 70 65 72 63 65 6e 74 20 7c 7c 20 31 30 30 20 29 20 2f 20 31 30 30 20 29 20 3a 20 31 2c 0a 09 09 09 79 20 3d 20 64 69 72 65 63 74 69 6f 6e 20 21 3d 3d 20 22 76 65 72 74 69 63 61 6c 22 20 3f 20 28 20 28 20 70 65 72 63 65 6e 74 20 7c 7c 20 31 30 30 20 29 20 2f 20 31 30 30 20 29 20 3a 20 31 3b 0a 0a 09 09 72 65 74 75 72 6e 20 7b 0a 09 09 09 68 65 69 67 68 74 3a 20 65 6c 65 6d 65 6e 74 2e 68 65 69 67 68 74 28 29 20 2a 20 79 2c 0a 09 09 09 77 69 64 74 68 3a 20 65 6c 65 6d 65 6e 74 2e 77 69 64 74 68 28 29 20 2a 20 78 2c 0a 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 3a 20 65 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 2a 20 79 2c 0a 09 09 09 6f 75 74 65 72 57 69 64 74 68 3a 20 65 6c 65 Data Ascii: "horizontal" ? ( ( percent \|\| 100 ) / 100 ) : 1,y = direction !== "vertical" ? ( ( percent \|\| 100 ) / 100 ) : 1;return {height: element.height() * y,width: element.width() * x,outerHeight: element.outerHeight() * y,outerWidth: ele

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49734	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:07 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7vLLDg5WPava8OB&MD=MGu6ZWZk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-29 14:16:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 290f62f1-2fcc-479f-8555-c035816444c6 MS-RequestId: f65fdabe-3620-47e1-92f2-4cf94a0f74ab MS-CV: GX6SBTGa9EOhZBDW.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 14:16:06 GMT Connection: close Content-Length: 24490
2024-03-29 14:16:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-03-29 14:16:08 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49736	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-29 14:16:09 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=146833 Date: Fri, 29 Mar 2024 14:16:09 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49737	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-29 14:16:09 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=146859 Date: Fri, 29 Mar 2024 14:16:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-29 14:16:09 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49738	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:20 UTC	854	OUT	GET /favicon.ico HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:21 UTC	1630	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 14:16:20 GMT Server: Apache Last-Modified: Wed, 31 Jan 2024 15:54:16 GMT ETag: "0-6103fe4179a00" Accept-Ranges: bytes Content-Length: 0 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Content-Type: image/x-icon Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49740	63.71.13.102	443	6996	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:21 UTC	529	OUT	GET /favicon.ico HTTP/1.1 Host: securemail-sscu.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServer~ZixPort~ZixPortVWeb=!A9j2IeX2sSzll3fDawEyA0g6FEKxPkT81JdvBQoz4rnfxcxVy2Ll+sH3YBpYAmCVQoSDQXfcOk/BO6BtkfKPZh0+YZRzafV91KCvt073zF0LXePSW7Q9/rZuKVMLf3Qz0g==
2024-03-29 14:16:21 UTC	1630	IN	HTTP/1.1 200 OK Date: Fri, 29 Mar 2024 14:16:21 GMT Server: Apache Last-Modified: Wed, 31 Jan 2024 15:54:16 GMT ETag: "0-6103fe4179a00" Accept-Ranges: bytes Content-Length: 0 P3P: CP='NOI NID CUR TAIa PSAa OUR NOR OTC' Content-Type: image/x-icon Connection: close X-Robots-Tag: noindex Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-WebKit-CSP-Report-Only: default-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src * data: zixx: zixxs: cid: file: blob:; font-src * data:; connect-src 'self' www.googleapis.com apis.live.net; report-uri https://9f6d44fa7a337e17c06fa2b687c19059.report-uri.com/r/t/csp/reportOnly X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49741	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 14:16:45 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=7vLLDg5WPava8OB&MD=MGu6ZWZk HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-29 14:16:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: f44b3e2c-cd5f-4620-9671-3a93c00a2c5d MS-RequestId: b14fd8b2-c81a-449b-9554-c1d54a2de1fb MS-CV: 43j2odGcRUiuqQ3M.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 14:16:44 GMT Connection: close Content-Length: 25457
2024-03-29 14:16:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-03-29 14:16:45 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6808, Parent PID: 6136

General

Target ID:	0
Start time:	15:15:53
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://securemail-sscu.net/s/e?m=ABAp6Mu6Zt2AaGYB32H369op&c=ABD8nOWzFGfOvucyDa774Okj&em=Smckenzie%40op%2df%2eorg
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6996, Parent PID: 6808

General

Target ID:	1
Start time:	15:15:54
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1940,i,18419103110123412338,14174858769471850138,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly