Edit tour

Windows Analysis Report
https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a

Overview

General Information

Sample URL:	https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a
Analysis ID:	1428963
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1880,i,9304512019144231151,15516723976325891686,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-TW8W88B
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-TW8W88B
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-TW8W88B

Source: https://cloud.sophos.com/idp/authenticate?backtrack=/manage/self-service	HTTP Parser: Number of links: 0
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: Number of links: 1

Source: https://cloud.sophos.com/idp/authenticate?backtrack=/manage/self-service	HTTP Parser: No <meta name="author".. found
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: No <meta name="author".. found
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: No <meta name="author".. found
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: No <meta name="author".. found

Source: https://cloud.sophos.com/idp/authenticate?backtrack=/manage/self-service	HTTP Parser: No <meta name="copyright".. found
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: No <meta name="copyright".. found
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: No <meta name="copyright".. found
Source: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a HTTP/1.1Host: mail-cloudstation-us-west-2.prod.hydra.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/logo.png HTTP/1.1Host: cloud.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/favicon.ico HTTP/1.1Host: cloud.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /assets/logo.png HTTP/1.1Host: cloud.sophos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /assets/favicon.ico HTTP/1.1Host: cloud.sophos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a/allowBlockConfirm HTTP/1.1Host: mail-cloudstation-us-west-2.prod.hydra.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=4BC5D059A6EF6310BADB5E0FCD34662A; SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /assets/logo.png HTTP/1.1Host: cloud.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /assets/success-icon.png HTTP/1.1Host: cloud.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /assets/logo.png HTTP/1.1Host: cloud.sophos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /assets/success-icon.png HTTP/1.1Host: cloud.sophos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /mail/manage/self-service HTTP/1.1Host: mail-cloudstation-us-west-2.prod.hydra.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=0C837F07464D45E4DA5064AD02D7EAF2; SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /manage/self-service HTTP/1.1Host: cloud.sophos.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
Source: global traffic	HTTP traffic detected: GET /idp/authenticate?backtrack=/manage/self-service HTTP/1.1Host: cloud.sophos.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: redirect_to=
Source: global traffic	HTTP traffic detected: GET /assets/loginwithb2c.js HTTP/1.1Host: cloud.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cloud.sophos.com/idp/authenticate?backtrack=/manage/self-serviceAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: redirect_to=; SESSION=OTgyNTRjZWEtZjVlNC00YmQ0LTlmY2UtNTZhNzNjM2VlY2Fj
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/fonts/Inter-Regular.woff2 HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.sophos.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/html/enter-email.html HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/images/sophos-logo.svg HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/css/email-ui.css HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.sophos.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/images/favicon.ico HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/scripts/jquery.js HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/scripts/include-footer.js HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/scripts/localize-footer.js HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/html/enter-email.html HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/scripts/user-agent.js HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/images/sophos-logo.svg HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/scripts/reload.js HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/images/favicon.ico HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js?did=2e456f46-6b86-42c8-be0a-01efd4471533 HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/html/footer.html HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/html, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/localize/en.json HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/css/claim-elements.css HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/css/welcome-animation.css HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/css/footer.css HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/2e456f46-6b86-42c8-be0a-01efd4471533/2e456f46-6b86-42c8-be0a-01efd4471533.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/images/icon-email.svg HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/localize/en.json HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/html/footer.html HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/2e456f46-6b86-42c8-be0a-01efd4471533/2e456f46-6b86-42c8-be0a-01efd4471533.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202311.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2024.18.03.04.17/2188/images/icon-email.svg HTTP/1.1Host: d2y1fnwu0z0lk0.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/2e456f46-6b86-42c8-be0a-01efd4471533/018ee767-7431-780c-bf78-4b67b48c194b/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202311.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202311.1.0/assets/v2/otPcTab.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202311.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/2e456f46-6b86-42c8-be0a-01efd4471533/018ee767-7431-780c-bf78-4b67b48c194b/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202311.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202311.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.sophos.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/8814ea97-7d41-4933-8a06-f5b8e65f6da8/f3c8d17e-040e-46f5-9c16-27efb793a7a7/8e4641b4-93aa-4176-880e-cb2950b9093e/sophos-logo-blue-rgb_(1).png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.sophos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202311.1.0/assets/v2/otPcTab.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/8814ea97-7d41-4933-8a06-f5b8e65f6da8/f3c8d17e-040e-46f5-9c16-27efb793a7a7/8e4641b4-93aa-4176-880e-cb2950b9093e/sophos-logo-blue-rgb_(1).png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_124.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Kz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Kz("fsl","nv.ids",[]):Kz("fsl","ids",[]);if(!p.length)return!0;var q=Gz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!rI(q, equals www.facebook.com (Facebook)
Source: chromecache_124.2.dr, chromecache_120.2.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: mail-cloudstation-us-west-2.prod.hydra.sophos.com

Source: chromecache_124.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_124.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_124.2.dr, chromecache_120.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_124.2.dr, chromecache_120.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_124.2.dr, chromecache_120.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_89.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_89.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_89.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_89.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_94.2.dr, chromecache_91.2.dr	String found in binary or memory: https://cloud.sophos.com/assets/favicon.ico
Source: chromecache_91.2.dr	String found in binary or memory: https://cloud.sophos.com/assets/logo
Source: chromecache_94.2.dr, chromecache_91.2.dr	String found in binary or memory: https://cloud.sophos.com/assets/logo.png
Source: chromecache_94.2.dr	String found in binary or memory: https://cloud.sophos.com/assets/success-icon
Source: chromecache_94.2.dr	String found in binary or memory: https://cloud.sophos.com/assets/success-icon.png
Source: chromecache_89.2.dr, chromecache_107.2.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.css
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/Inter-Regular.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/Inter-Regular.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/Inter-Regular.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.eot?#iefi
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.woff2
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.eot?#ief
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.svg#font
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.svg#flamabasic
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.ttf
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.woff
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/inter-regular.eot
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/inter-regular.eot?#iefix
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/inter-regular.svg#font
Source: chromecache_106.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/html/footer.html
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/favicon.ico
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/icon-email.svg
Source: chromecache_123.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/icon-password.svg
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/sophos-logo.svg
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/de.json
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/en.json
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/es.json
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/fr.json
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/it.json
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/ja.json
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/ko.json
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/pt.json
Source: chromecache_92.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/zh-hant.json
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/include-footer.js
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/jquery.js
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/localize-footer.js
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/reload.js
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/user-agent.js
Source: chromecache_89.2.dr, chromecache_107.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_124.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_124.2.dr	String found in binary or memory: https://google.com
Source: chromecache_124.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup&client_id=cb303009-a
Source: chromecache_120.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_124.2.dr, chromecache_120.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_120.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_120.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_124.2.dr, chromecache_120.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_120.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_124.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_124.2.dr, chromecache_120.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_124.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_70.2.dr, chromecache_77.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TW8W88B
Source: chromecache_120.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_124.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_71.2.dr, chromecache_97.2.dr	String found in binary or memory: https://www.sophos.com/en-us/legal.aspx
Source: chromecache_110.2.dr	String found in binary or memory: https://www.sophos.com/en-us/legal/cookie-information
Source: chromecache_71.2.dr, chromecache_97.2.dr	String found in binary or memory: https://www.sophos.com/en-us/legal/cookie-information.aspx
Source: chromecache_71.2.dr, chromecache_97.2.dr	String found in binary or memory: https://www.sophos.com/en-us/legal/sophos-group-privacy-policy.aspx
Source: chromecache_71.2.dr, chromecache_97.2.dr	String found in binary or memory: https://www.sophos.com/en-us/products/sophos-central.aspx

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@20/97@40/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1880,i,9304512019144231151,15516723976325891686,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1880,i,9304512019144231151,15516723976325891686,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mail-spinnaker-1148880338.us-west-2.elb.amazonaws.com	54.187.126.227	true	false	high
cloud.sophos.com	54.154.82.165	true	false	high
www.google.com	142.250.9.104	true	false	high
d2y1fnwu0z0lk0.cloudfront.net	18.64.156.27	true	false	high
cdn.cookielaw.org	104.19.178.52	true	false	high
geolocation.onetrust.com	172.64.155.119	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
mail-cloudstation-us-west-2.prod.hydra.sophos.com	unknown	unknown	false	high
s.go-mpulse.net	unknown	unknown	false	unknown
www.sophos.com	unknown	unknown	false	high
cloud-assets.sophos.com	unknown	unknown	false	high
dc.services.visualstudio.com	unknown	unknown	false	high
c.go-mpulse.net	unknown	unknown	false	unknown
login.sophos.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/manage/self-service	false	high
https://cloud.sophos.com/assets/loginwithb2c.js	false	high
https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a	false	high
https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup_signin&client_id=a2909672-3668-457e-ba5b-5bbd4508f6e2&redirect_uri=https://cloud.sophos.com/idp/azureb2c&scope=openid&response_type=id_token&prompt=login	false	high
https://cdn.cookielaw.org/scripttemplates/202311.1.0/assets/v2/otPcTab.json	false	high
about:blank	false	low
https://cdn.cookielaw.org/logos/static/powered_by_logo.svg	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/welcome-animation.css	false	high
https://cdn.cookielaw.org/scripttemplates/202311.1.0/assets/otFlat.json	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/Inter-Regular.woff2	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/icon-email.svg	false	high
https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/html/footer.html	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/en.json	false	high
https://cloud.sophos.com/assets/favicon.ico	false	high
https://cloud.sophos.com/idp/authenticate?backtrack=/manage/self-service	false	high
https://cloud.sophos.com/assets/success-icon.png	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/html/enter-email.html	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/sophos-logo.svg	false	high
https://cdn.cookielaw.org/scripttemplates/202311.1.0/otBannerSdk.js	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/include-footer.js	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/localize-footer.js	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/user-agent.js	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/favicon.ico	false	high
https://cdn.cookielaw.org/consent/2e456f46-6b86-42c8-be0a-01efd4471533/018ee767-7431-780c-bf78-4b67b48c194b/en.json	false	high
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=2e456f46-6b86-42c8-be0a-01efd4471533	false	high
https://cdn.cookielaw.org/consent/2e456f46-6b86-42c8-be0a-01efd4471533/2e456f46-6b86-42c8-be0a-01efd4471533.json	false	high
https://cloud.sophos.com/manage/self-service	false	high
https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location	false	high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/footer.css	false	high
https://cloud.sophos.com/assets/logo.png	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.woff	chromecache_123.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_120.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.ttf	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.eot?#iefi	chromecache_123.2.dr	false		high
https://login.sophos.com/login.sophos.com/oauth2/v2.0/authorize?p=B2C_1A_signup&client_id=cb303009-a	chromecache_70.2.dr, chromecache_77.2.dr	false		high
https://www.redditstatic.com/ads/pixel.js	chromecache_124.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.svg#font	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.svg#flamabasic	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.woff2	chromecache_123.2.dr	false		high
https://cloud.sophos.com/assets/logo	chromecache_91.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.eot	chromecache_123.2.dr	false		high
https://www.google.com	chromecache_120.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.woff	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.woff2	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.woff	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/icon-password.svg	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.woff	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/inter-regular.svg#font	chromecache_123.2.dr	false		high
https://github.com/krux/postscribe/blob/master/LICENSE.	chromecache_124.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/fr.json	chromecache_92.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.eot	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.svg#font	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.woff2	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.woff2	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.ttf	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.eot?#iefix	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.eot?#iefix	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/zh-hant.json	chromecache_92.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/inter-regular.eot	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/de.json	chromecache_92.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/pt.json	chromecache_92.2.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_124.2.dr, chromecache_120.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-MediumItalic.ttf	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.eot	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/it.json	chromecache_92.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_124.2.dr, chromecache_120.2.dr	false	URL Reputation: safe	unknown
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.eot?#iefix	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/es.json	chromecache_92.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_120.2.dr	false		high
https://www.sophos.com/en-us/legal/cookie-information	chromecache_110.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.svg#font	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.ttf	chromecache_123.2.dr	false		high
https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck	chromecache_89.2.dr, chromecache_107.2.dr	false	URL Reputation: safe	unknown
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.ttf	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.eot	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/Inter-Regular.woff	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Semibold.svg#font	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.woff	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.woff2	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.eot	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.svg#font	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-LightItalic.woff2	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.woff	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-BoldItalic.eot?#iefix	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.svg#font	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.eot	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-RegularItalic.svg#font	chromecache_123.2.dr	false		high
https://cloud.sophos.com/assets/success-icon	chromecache_94.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.ttf	chromecache_123.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_89.2.dr, chromecache_107.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Bold.woff2	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Light.ttf	chromecache_123.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/iabData.json	chromecache_89.2.dr, chromecache_107.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Medium.eot	chromecache_123.2.dr	false		high
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_89.2.dr, chromecache_107.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/ja.json	chromecache_92.2.dr	false		high
https://www.sophos.com/en-us/legal/cookie-information.aspx	chromecache_71.2.dr, chromecache_97.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-Regular.eot?#iefix	chromecache_123.2.dr	false		high
https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.eot	chromecache_123.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.154.82.165	cloud.sophos.com	United States	16509	AMAZON-02US	false
142.250.9.104	www.google.com	United States	15169	GOOGLEUS	false
54.171.140.60	unknown	United States	16509	AMAZON-02US	false
54.187.126.227	mail-spinnaker-1148880338.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.19.178.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
18.64.156.27	d2y1fnwu0z0lk0.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428963
Start date and time:	2024-04-19 23:08:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@20/97@40/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a/allowBlockConfirm Browse: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/manage/self-service Browse: https://www.sophos.com/en-us/legal.aspx Browse: https://www.sophos.com/en-us/legal/cookie-information.aspx

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.9.94, 64.233.177.113, 64.233.177.138, 64.233.177.101, 64.233.177.100, 64.233.177.139, 64.233.177.102, 64.233.177.84, 34.104.35.123, 13.85.23.86, 72.21.81.240, 20.3.187.198, 192.229.211.108, 184.31.50.40, 20.242.39.171, 23.208.128.182, 23.223.31.153, 23.223.31.159, 72.21.81.200, 64.233.177.97, 23.195.0.177, 52.179.73.36, 74.125.138.95, 64.233.177.95, 64.233.176.95, 64.233.185.95, 74.125.136.95, 142.251.15.95, 142.250.105.95, 173.194.219.95, 172.217.215.95, 142.250.9.95, 172.253.124.95, 23.207.52.129, 23.201.212.156, 23.218.93.193, 23.218.93.227, 52.188.247.151, 74.125.136.102, 74.125.136.139, 74.125.136.100, 74.125.136.138, 74.125.136.113, 74.125.136.101, 23.194.116.15, 23.194.116.36, 173.194.219.94, 74.125.136.94, 173.194.219.113, 173.194.219.101, 173.194.219.102, 173.194.219.100, 173.194.219.139, 173.194.219.138
Excluded domains from analysis (whitelisted): login.sophos.com.edgekey.net, gig-ai-g-prod-eastus-5-app-v4-tag.eastus.cloudapp.azure.com, slscr.update.microsoft.com, e131187.b.akamaiedge.net, clientservices.googleapis.com, wu.azureedge.net, prod-san-0-dd.sophosdelivery.edgekey.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, gig-ai-prod-eastus-global.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, e4518.dscx.akamaiedge.net, www.google-analytics.com, ip46.go-mpulse.net.edgekey.net, clients1.google.com, www.sophos.com.edgekey.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, e131187.x.akamaiedge.net, wu-bg-shim.trafficmanager.net, gig-ai-g-prod-eastus-10-app-v4-tag.eastus.cloudapp.azure.co
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	4.763579544480486
Encrypted:	false
SSDEEP:	12:UP5Ux/JSLWpm1Hyk9nF9qEVrA0rnHijTRAu:0ex/JGskF9HVrGau
MD5:	848C2C7AAB8FEE97355D524339D8E45A
SHA1:	FD5F1A39C575A127577B6CA64BD6010A4C33DEDE
SHA-256:	40255F5D38B31B2EB0DDAC892A4ADFDB6670745B005738914F7CD36F3A54C26B
SHA-512:	675CBCB25F22CC3FE6BEA6475152955F84541156A131CDCFAFB5A89DD25DD08B43B4CE02C97B89BC222109115A5F7F4935174B30C7376DB6125668AEA8B05180
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/reload.js
Preview:	/*. Copyright 2024 Sophos Limited. All rights reserved.. . 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product. * and company names mentioned are trademarks or registered trademarks of their respective owners.. */.const min=601000;const reloadAfter=45*min;setTimeout(reloadPage,reloadAfter);function reloadPage(){location.reload();}

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2483
Entropy (8bit):	4.063471736913329
Encrypted:	false
SSDEEP:	48:WNfLd0OSkd48kMWnVqLpSlN7iOcFVJ0KqEoG025X82PuhNkKmH:Kp3Skd48mMVsN72VOh7o82GfkKy
MD5:	55CA11EE6B441DDE05CF1219E1CCA259
SHA1:	EE382917D260A2D2980A393BCA6CB5B71DF4BA70
SHA-256:	112D161523AB8A3D0E753CFA9F3A119C37DCB9518C432736F553536637F5DE2B
SHA-512:	8001494D02F3171E64B4282BCA1F0E808C97A7BA9947F78350659E52F16F7660D79878788A140B6E0FD26AA7B0EBB650B5D2B5004F125C391C2D5D8BA9DE7C81
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="113" height="20" viewBox="0 0 113 20">. <g fill="#FFF" fill-rule="evenodd">. <path d="M95.324 16.31h9.583c1.49 0 2.305-.15 2.782-.476.59-.385.925-1.038.925-1.808 0-.918-.448-1.717-1.206-2.103-.395-.238-1.124-.356-2.024-.356h-4c-2.246 0-3.706-.415-4.689-1.303-1.124-1.037-1.77-2.636-1.77-4.357 0-2.517 1.32-4.71 3.257-5.42.845-.328 1.825-.416 4.018-.416h9.768v3.526h-8.87c-1.77.03-2.453.03-3.044.177-.786.208-1.264.978-1.264 2.015 0 .89.393 1.6 1.068 1.927.561.266 1.555.325 2.904.325h3.004c2.755 0 4.243.445 5.34 1.63.841.888 1.403 2.637 1.403 4.355 0 2.104-.928 4.06-2.388 5.008-.926.62-2.107.8-4.888.8h-9.91v-3.525zM80.596 5.416c-.58.96-.856 2.5-.856 4.565 0 4.533 1.489 6.598 4.796 6.598 3.253 0 4.741-2.065 4.741-6.541 0-4.536-1.46-6.57-4.74-6.57-1.791 0-3.198.697-3.94 1.948m11.216-2.237c1.132 1.569 1.764 4.125 1.764 7.121 0 3.4-1.02 6.192-2.838 7.731-1.38 1.162-3.473 1.803-5.954 1.803-3.528 0-6.31-1.221-7.744-3.402-1.075-1.598-1.6-3.7

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.1659573209491745
Encrypted:	false
SSDEEP:	3:ez3iCnVnCk8oTnKk:y3iCQk8o7
MD5:	E1B85DF275113DFC425A6F5381722152
SHA1:	441097AE5F5B9390CC9C649DFB31FE45502B7AA8
SHA-256:	4CF4C74FF2728BB5FD95320B6B09F4604BC601B98A7D877761FEFC0C50FD0AE8
SHA-512:	81C85047FD13B03CC6B69BA06B64CDB180AF755708D796F4249BE630C6C15032F01942845EB7439ACACDF3B93A58C7E1AC66BFA6253888EB7CD80AD5D99C3B7F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmyrqmKGBWoTBIFDVNVgbUSBQ2UJxtw?alt=proto
Preview:	ChwKEQ1TVYG1GgQICRgBGgQIZBgCCgcNlCcbcBoA

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	52
Entropy (8bit):	4.313151920306138
Encrypted:	false
SSDEEP:	3:YWMmqelAQD5oJtZlCn:YWMm9PdoJt6
MD5:	69A7AA720A14F891F699ADAFD46867BF
SHA1:	BB3C49577C1B4AD6E74A1E576A121651E4D88A8E
SHA-256:	858627F0520671360AEAB506B6C661F9EDB36BE56D46EA3995E45DD9AD453C68
SHA-512:	564289A6B839AE6433F69482128368539E878AFE62B52DA51A0142D2EDF53CAC436A00C528BDB0CBF2B45532C05810D12B45C3F3F6E462BEBB101BB8EE06349E
Malicious:	false
Reputation:	low
Preview:	{"site_domain":"arlid:1034553","rate_limited":true}.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	3.7612657704003114
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HptOE9HhEyRHfHyY:YGKed2pHDO4ElhZyY
MD5:	980C16696A6C7FB6C8242B74F5EDF52A
SHA1:	872854FDCD64A81655D447293D1E96AD0AD1C0BA
SHA-256:	5B719538163FA24625A0742209D09A4481C7589E767D9EA8BCB16008035F681A
SHA-512:	66AEF5D9B0D7C5B4D3BD91C87AA035FB5EB797A35755DAE5B6324941581186EFC4CC038DC3C99B0C3C5AA0C48F38B2E3C7F2437F112985CD92648AE937BAD2D3
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"","stateName":"","continent":"NA"}

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65254)
Category:	downloaded
Size (bytes):	87654
Entropy (8bit):	5.263176122251929
Encrypted:	false
SSDEEP:	1536:TKRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKF:Tu1zNwcv9qBy1HOg8SMpQ47GKF
MD5:	6C216960AB2D4F6342D17C748EA91D4D
SHA1:	AD6F96EFC3FCEC1D7515C39D6B344D4B9299C236
SHA-256:	552AD8BF18678060B7E770C5E2A9606E1DC9B675485450C82D42BBD10155B94F
SHA-512:	5C7DABF6E6498FB13146AC915F43FEE6BF390D6E3323ABBD6D40AE03E7107D6679D890519BEF77C902543C052515B6BE18B9CC02F4BE19A7935E532B6D6A168D
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/jquery.js
Preview:	/*. Copyright 2024 Sophos Limited. All rights reserved.. . 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product. * and company names mentioned are trademarks or registered trademarks of their respective owners.. **/.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	396
Entropy (8bit):	4.971273478434532
Encrypted:	false
SSDEEP:	12:UP5Ux/JSLWpm1Hyk9nF9qE27mPM1G2vAJX:0ex/JGskF9H2oGGVX
MD5:	2D6100B08125ED447769974A40A813E8
SHA1:	8EA483BD350173DA9F359556151EF7795543EFBE
SHA-256:	924723EE155691668B05266DA43D8D3F40F52444A5688883C0F8F9D5551F463A
SHA-512:	82CBE546BC22D2ECB7469D7E2EB2BA09DB1D7ADFFF4DFD8E3BB460B0078CF02CF846CA8A60A34555EFCD05F36B08C3B85B8F214CE2F125816F85DFA378D8720D
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/include-footer.js
Preview:	/*. Copyright 2024 Sophos Limited. All rights reserved.. . 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product. * and company names mentioned are trademarks or registered trademarks of their respective owners.. **/.$(function(){$("#footer").load("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/html/footer.html");});

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4609
Entropy (8bit):	4.880965705081661
Encrypted:	false
SSDEEP:	96:npyIf440wvduECwpaGHxYa6ATTvPWOD1tY3j39jse2jJjeW5h9jF:F/VlCwpN6o7P3DjYT1seCJt3B
MD5:	17D74FCFC797FB09BCA6E83DBB37E2E0
SHA1:	19B87359586DEAF447CC568AA08F055870531E10
SHA-256:	5D265DA94B9820F7707B9F8C3E7D367428B43262534EC286942B8614AD3A0610
SHA-512:	47A9F5012A277A66F0A8C84D11D9868836640AC90EEB9E09A5085C83C50BDD607A8DB9938890AA3E5AA77F4C0B43DCA05CF02A54629A09FDE5177BFB7145DD9B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/2e456f46-6b86-42c8-be0a-01efd4471533/2e456f46-6b86-42c8-be0a-01efd4471533.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202311.1.0","OptanonDataJSON":"2e456f46-6b86-42c8-be0a-01efd4471533","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018ee767-7431-780c-bf78-4b67b48c194b","Name":"Global excluding GDPR countries","Countries":["pr","ps","pw","py","qa","ae","af","ag","ai","am","ao","aq","ar","as","au","aw","az","bb","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","sg","bv","sh","bw","sj","bz","sl","sn","so","ca","sr","cc","ss","st","cd","sv","cf","cg","sx","ci","sy","sz","ck","cl","cm","cn","co","tc","cr","td","tf","cu","tg","cv","th","cw","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","dj","tz","dm","

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36201), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2305827
Entropy (8bit):	5.043500837436822
Encrypted:	false
SSDEEP:	24576:WEb2lxj3WTvL+DpFt2aHtugNBz2+UBKCXbsAR9ha1oH:WE2xj3WTvL+DpFt2aHtugNBz2+UBKCzH
MD5:	00A32F75B291702B744B6FE7DE230331
SHA1:	1C9C6FE1DB7C9F88AB0CC32E60C8263AC24E1DA0
SHA-256:	97510BD75F19D6A1AD3EEB0B48F7F419DCB066BC41C6203B76D94DF4A98235BC
SHA-512:	4AB33ADD56C1E20FAE877CE4852110FC2780D1E7057F7429E410680E5E259A82EE32676E08F00EBB8333914B914EA67AB7711BA163A3DF42009FD9E7DA3264A5
Malicious:	false
Reputation:	low
URL:	https://cloud-assets.sophos.com/assets/6e3e9029cd33ceb547fb063093e87f01234c6982/ssp/sophos.css
Preview:	.nvd3 .nv-axis{pointer-events:none;opacity:1.}.nvd3 .nv-axis path{fill:none;stroke:#000;stroke-opacity:.75;shape-rendering:crispEdges}.nvd3 .nv-axis path.domain{stroke-opacity:.75}.nvd3 .nv-axis.nv-x path.domain{stroke-opacity:0}.nvd3 .nv-axis line{fill:none;stroke:#e5e5e5;shape-rendering:crispEdges}.nvd3 .nv-axis .zero line,.nvd3 .nv-axis line.zero{stroke-opacity:.75}.nvd3 .nv-axis .nv-axisMaxMin text{font-weight:700}.nvd3 .x2 .nv-axis .nv-axisMaxMin text,.nvd3 .x3 .nv-axis .nv-axisMaxMin text,.nvd3 .x .nv-axis .nv-axisMaxMin text{text-anchor:middle}.nvd3 .nv-axis.nv-disabled{opacity:0}.nvd3 .nv-bars rect{fill-opacity:.75;transition:fill-opacity .25s linear;-moz-transition:fill-opacity .25s linear;-webkit-transition:fill-opacity .25s linear}.nvd3 .nv-bars rect.hover{fill-opacity:1}.nvd3 .nv-bars .hover rect{fill:#add8e6}.nvd3 .nv-bars text{fill:transparent}.nvd3 .nv-bars .hover text{fill:#000}.nvd3 .nv-discretebar .nv-groups rect,.nvd3 .nv-multibar .nv-groups rect,.nvd3 .nv-multibarHo

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	531
Entropy (8bit):	4.746623201829143
Encrypted:	false
SSDEEP:	12:YpGyjpv/JSL2pvbHykv9ppnF9qEUidU68/yfJ:kN/JlGmF9HaH6fJ
MD5:	79E25ADDED5098E4C6BCCD7C6E695F67
SHA1:	5B5575B59D1B265EDD784E4B7D22D588BC200CA1
SHA-256:	5579F796A6FBA4C9CD590F9B95134707355CE47CA2DD8CEA711D2B40964F928D
SHA-512:	7E08D51D2F7111C57339018DEDDD697FD629E7671458E1DF78C4158F550F5375F842327CC813434B44ABC191948642B354472B4B9E67AB7985967FD34A85352E
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/localize/en.json
Preview:	{. "_comment1": "Copyright 2022 Sophos Limited. All rights reserved.",. "_comment2": "'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group.",. "_comment3": "All other product and company names mentioned are trademarks ",. "_comment4": "or registered trademarks of their respective owners.",. "createSophosId": "Create Sophos ID.",. "legalLink": "Legal",. "privacyLink": "Privacy",. "cookiesLink": "Cookies",. "learnMoreLink": "Learn More",. "passwordPlaceholder" : "Password".}.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	139898
Entropy (8bit):	5.120712214692029
Encrypted:	false
SSDEEP:	1536:gTX7rD6Y2CDZW+tagnCRw85ZEYli392iC4+NCWOk7aLluczguSlYRJyD7B:KX7rD6Y2CDBww85ZEQA92vIk7d1YiD7B
MD5:	4AC27B534BF2325CA5691108348A7C0F
SHA1:	343394DAB0334E499C285BF5522FDA7E43C2BAA9
SHA-256:	8E55003BDB6B1C546DA0375C2E54653F6802564E2363F8D9B15CFCA5182E44A6
SHA-512:	841256C92954BE2BCA42D08BB9DB40B7F3CD91FD160623C853D6D3A9DE85C4918057F9E6A35C0F641CAB2E15AE89D1C817671303D70089AF05B2BEF6C7457F30
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/2e456f46-6b86-42c8-be0a-01efd4471533/018ee767-7431-780c-bf78-4b67b48c194b/en.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2483
Entropy (8bit):	4.063471736913329
Encrypted:	false
SSDEEP:	48:WNfLd0OSkd48kMWnVqLpSlN7iOcFVJ0KqEoG025X82PuhNkKmH:Kp3Skd48mMVsN72VOh7o82GfkKy
MD5:	55CA11EE6B441DDE05CF1219E1CCA259
SHA1:	EE382917D260A2D2980A393BCA6CB5B71DF4BA70
SHA-256:	112D161523AB8A3D0E753CFA9F3A119C37DCB9518C432736F553536637F5DE2B
SHA-512:	8001494D02F3171E64B4282BCA1F0E808C97A7BA9947F78350659E52F16F7660D79878788A140B6E0FD26AA7B0EBB650B5D2B5004F125C391C2D5D8BA9DE7C81
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/sophos-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="113" height="20" viewBox="0 0 113 20">. <g fill="#FFF" fill-rule="evenodd">. <path d="M95.324 16.31h9.583c1.49 0 2.305-.15 2.782-.476.59-.385.925-1.038.925-1.808 0-.918-.448-1.717-1.206-2.103-.395-.238-1.124-.356-2.024-.356h-4c-2.246 0-3.706-.415-4.689-1.303-1.124-1.037-1.77-2.636-1.77-4.357 0-2.517 1.32-4.71 3.257-5.42.845-.328 1.825-.416 4.018-.416h9.768v3.526h-8.87c-1.77.03-2.453.03-3.044.177-.786.208-1.264.978-1.264 2.015 0 .89.393 1.6 1.068 1.927.561.266 1.555.325 2.904.325h3.004c2.755 0 4.243.445 5.34 1.63.841.888 1.403 2.637 1.403 4.355 0 2.104-.928 4.06-2.388 5.008-.926.62-2.107.8-4.888.8h-9.91v-3.525zM80.596 5.416c-.58.96-.856 2.5-.856 4.565 0 4.533 1.489 6.598 4.796 6.598 3.253 0 4.741-2.065 4.741-6.541 0-4.536-1.46-6.57-4.74-6.57-1.791 0-3.198.697-3.94 1.948m11.216-2.237c1.132 1.569 1.764 4.125 1.764 7.121 0 3.4-1.02 6.192-2.838 7.731-1.38 1.162-3.473 1.803-5.954 1.803-3.528 0-6.31-1.221-7.744-3.402-1.075-1.598-1.6-3.7

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.2089208565325789
Encrypted:	false
SSDEEP:	6:G70CfYI/i4jnOgfCPnR/7Iegfjn4jawl:G70LI/xi4CJTIe4jnGawl
MD5:	E68882B760C3F603DFD1C5A5A85065CF
SHA1:	9017435FCBEC47CAB2E24336F4DAEA5C96AD19AF
SHA-256:	590BB01B416F6CFB689B2016D7C291CBB1F0EF5D35327862C3C700204A2843D1
SHA-512:	830804F53B96659C5917F723C25491542BAE430ADFECCF39DA8636FDF57D84A18A40DCDE8212180171547296FC550D264EE410FD8AD8C17AB003F508F197EF36
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/favicon.ico
Preview:	..............h.......(....... ................................@..........p.. .........w............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	64205
Entropy (8bit):	5.446555104384715
Encrypted:	false
SSDEEP:	768:DpYAoeiWAWutSAYif8pxObicq3JsJLPqji:7pLm+36JmG
MD5:	C9D589BA7445ABE239CF89FB7E69A1A8
SHA1:	B4EE79A0A61E29B0F9FBC51F9C556D0BDCB0EFE0
SHA-256:	2BC6A125D698416498CDF5EF60CD959AEF01DB95A6E3E0D74A95F9B6D3D78FEB
SHA-512:	F3C23702719C7052A7CD6C0FE0F924023B846008702C25F379E07A015707757717D0CB2820C25FA3B09C1EA554282454E796A7C75788BC441F4DD6169860DE9D
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcTab",. "html": "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

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 142340, version 0.0
Category:	downloaded
Size (bytes):	142340
Entropy (8bit):	7.993511863725989
Encrypted:	true
SSDEEP:	3072:1EqGHwgRgE91xHUDe9TuA3+tN7JQQLuCaM1E51sU1ZiZCm:1hZQ1BUuyA3YfLH1Ebm
MD5:	5CE3E4DB9634913232403F166B2447DE
SHA1:	E1ED0FEB06835626A35E96BB71FFA06A6802A09B
SHA-256:	68D52E74E8171DDB2C94CA60A2596DC8A46407320449881FD09369DBC317624C
SHA-512:	9F156D12C885C0662A58576B48209EAC0F82ABF0CD22DBEB9E9F83FD967909F5824E411211C5B3F77A869E28B3AF32020AE3ED55A2FB3A218D0F2AD2E50EEA0D
Malicious:	false
Reputation:	low
URL:	https://cloud-assets.sophos.com/assets/6e3e9029cd33ceb547fb063093e87f01234c6982/ssp/eec0ea57721daa33c7a2e060d38e2309.woff
Preview:	wOFF......,.................................GDEF............-..!GPOS...0..U3....D.oGSUB...d..)...VL....OS/2.......V...`+..icmap.......Q..e<.3>.glyf..U...-.....d}..head...0...2...6...hhea...d... ...$....hmtx..........'..E.loca..A.............maxp........... ....name................post......%...d.1...x.c`d```f.....x~...... p;%..J.}_..F&...ec`.Q....z..x.c`d`.Z.7..A..../.d.."(..3.....x.c`d`...P. ......!.V.6.1...x.%...0.....\..0...5.V..2.;....}D.3N....t-....y#)...Qc..\`Yo..9....Rcx@q....s..O..x..u\|T.....g7A..R......R.$5$...V.m.R.j.. ..P$8..R..nK....4...{....\....\|?.;.#gf...l\|.{t.0rp.?.....F.s..KL.!y..*.Kc\.@)..h.Gz4mVA..K..`......,K=9.X.......y.....)j..>.g..Co.f..>.c.;.c..mNA/3...P....)Jf.. .%W..$.."qI..r.N......lB.....].<+.[...k.b._.f.\|l.ea.o7..............O.+1.#.3.,!+H.....Q....l..}....'....8l.U. F.R.!W.-z.6.Q..[.G.E..\m.r......6./{...A.".......d.is..?...3........3j3..../W.].b$"p2..p...vF8..t2.9...Q..../..OKc.N...Dg.).....v.d.b..?...h.,...f...J.#.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 821 x 137, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7963
Entropy (8bit):	7.941377153202951
Encrypted:	false
SSDEEP:	192:WEf3073rIo/MviFWWgW57tpdM16nXuYrOl+XiFQk6E5Zx:WEf38Cvwg2pXuYrOlMIV5T
MD5:	776532C2A804F14979D901C210CE6EE7
SHA1:	40FD6AF3CCE3EDDC123EF711518D521089D52F02
SHA-256:	4DEF6D9AD0B93FA285D5783527CAB94B9B8040B650AFBC808ED69E2ACE347BB4
SHA-512:	BDEADA87758FC393B8C157F509C920FE011C00487CC99E3B0C0091E3018770A5815CD9185FCDFA8666A2CBE4EBE6A3EC778C27B5D77516EFA8A958F009A7A497
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...5.................pHYs...#...#.x.?v....IDATx..AR#..[....O.>.....'.......9...<...".7.....p....:..Q..F @.....P...g.Rue.2.2{.....h..(.}-..>U.o,.>U...m9...o......j[...T..6h..EQ.W..{.3...p!j.p.....^..........J....#,d.J.t.."[C............t_...h>..b....g...i-..<.[..l2.W..p.V\|.........^.Frg.g.../.M.>...].f..V...J..h>\.k]..u.8...h^..............N..Xqjn..$.b`.`..V/..k.....3}.......?.......d.=....pE.Z....l...j...)..VPTr......L..F........U...;W.=u..l..eG.51.3.p..N.L8...Lx.......#`...Q.#\|........X{-..fO./....=w.l.'.p...m.KS...^....9..4.c0.r&."p....D.FJ...4*j$f&...C..)k.s.....8\|$pN1<.%.."....'d..~...$A!...p..X....j..:x.x'....h~....P.l.......E......"...F.p~...\... p..>:..9.=.8=Q0."ckQ#5{J}!..: ........................A.......U.p..n..z..D... R>l..r.....b.7........Q.[...u.+:{.G. Y....s..a8..9P..V...^..-e.DL-QS...r_@h.p`.F.k.....J........W.....@.l..U.9..{.2^ .6.5...l.h...Se..W.`t...a...e.a.......?.3[..............a#QS.4

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13186
Entropy (8bit):	5.230333531204009
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXfn/OoH6iAHyPtJJAR:7Iy5P/i
MD5:	4D4429A2DFAA8A27FBE9659E8E717F74
SHA1:	28AD4885FF33594FA46ECED61BD42874926AA17C
SHA-256:	EA5DB5581E262D77D1A43FBB3F0FA3661B51D097B40CA38F584B4943F47CF2E0
SHA-512:	708D4DE5F9147040A26202060CEC1199E36A16AACD1CE967E0A4ED8FAE34081DC1584E4E490B57C2A430259EDFD7EF84F050F275487D2496FB824A787CBF8AC4
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202311.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	1721
Entropy (8bit):	4.591756229561154
Encrypted:	false
SSDEEP:	48:isaK6CaK6kgfwZgX0KNbnogfrnaIlnDoFYogJ:aJnJkgfwZgX0KNbnogfz/UFYogJ
MD5:	8E534923429C32129307DA74827500BD
SHA1:	EBF2E4A4C9024D1AC8C3792DB8DB6EE9914DAAF3
SHA-256:	EF20DF26204E6168A637458FF4D3782F3CD42F0207309B46B9C130F728BD83D0
SHA-512:	DD82C511A3D4C0E72C7BCD9596A0AA1EF0AF1793659BD8EABAB7C03A57BEE6852709CB432A15422EC1C034DEC766031FDAB36A28670803AF963D43FC27BE83D2
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/welcome-animation.css
Preview:	:root {. --easing-default: cubic-bezier(0.645, 0.045, 0.355, 1);.}..@keyframes cardheader {. 0% {. opacity: 0;. -webkit-transform: translateY(230px);. transform: translateY(230px);. }. 40%,. 50% {. opacity: 1;. -webkit-transform: translateY(230px);. transform: translateY(230px);. }. 100% {. opacity: 1;. -webkit-transform: translateY(0);. transform: translateY(0);. }.}..@keyframes panelentry {. 0% {. opacity: 0;. -webkit-transform: scaleY(0);. transform: scaleY(0);. }. 100% {. opacity: 1;. -webkit-transform: scaleY(1);. transform: scaleY(1);. }.}..@keyframes innerpanelentry {. 0% {. opacity: 0;. -webkit-transform: translateY(1rem);. transform: translateY(1rem);. }. 100% {. opacity: 10;. -webkit-transform: translateY(0);. transform: translateY(0);. }.}..login-page {. display: flex;. width:

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 133856, version 0.0
Category:	downloaded
Size (bytes):	133856
Entropy (8bit):	7.991211041314446
Encrypted:	true
SSDEEP:	3072:wdJVqGxK6l7L8NEcHOW3d7TA/O0PcGt6TstGUPResU1ZiZCm:wdJVa6NLjcHZ3BAWcjybm
MD5:	14D1275C67676CC5D911232D0C890D97
SHA1:	B5541B2654EEEFFB8E709CFE141A75644E53E9BA
SHA-256:	3710E2CE073EC0EB39274DECC63768B52091A27E35F5C28D6ABB7A5FCEF0B7FC
SHA-512:	F29574B0D8173A667ED53DD2BEC01A0D0B126637D61A011220C82957C303053B066308681ED05AB7AAE999625A750E44D8FC09F9B6665815D86D08F9944EBB7B
Malicious:	false
Reputation:	low
URL:	https://cloud-assets.sophos.com/assets/6e3e9029cd33ceb547fb063093e87f01234c6982/ssp/e148c4a1158f8cee82857dd0dcac4374.woff
Preview:	wOFF..............k.........................GDEF...D........-..!GPOS......Mo...z.}4(GSUB...@..)...VL....OS/2.......W...`-._cmap...x...Q..e<.3>.glyf..Q...........head...0...3...6D..hhea...d... ...$....hmtx..........'...M.loca..=...........\cmaxp........... ....name..h..........post..kH..%...d.1...x.c`d```f......x~...... p;%e;........,......D.....'.x.c`d`.Z.7..A..../_d.."(..3..W..x.c`d`...P. ......!.V.6.1\|..x.%...0....m.... .....B.p....p(..>...k.00].......F:.)C.Ub...aYo.f.(.w..T.0:....R....x...dk...Iv..Is..s\E..Q.E..#FP.......b.A.......#LQ.u.'....7APOg.F...~...=...z..Lo.w.W>...[..g....Z...E._..gb...y7.......p...\|..C...>`l...:...l..=KO..X..S.}.....E.?.d...N<.~@.N.A.v...m7.l..3...{....W.=._H.4\.yEK..%GK...,z...H..t,.O-*....Mr3....d..:pf....A..T5T\|.v..UL.F.C.9L..+k....o.O..C/.'.4S.....6.vl..`...b..>....wK.Q......\|.....q..A.q.A.^..........S...ld{...Z...-.]..$.=E\|,ul.>...^&...?..x.)q.s.f..hK.&.OPs..y...\.v...y..O.h...y.9...c..S..E....Si...B.>.6,.r.....

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	248883
Entropy (8bit):	5.567557184837791
Encrypted:	false
SSDEEP:	3072:iVf3AZVNSNcMzszFeIJk8GjCBPIrTWRvYElfh6St2nBsLqayVXDeltzvsXzh9A:a3AFMgzFemDLfh6St+aqayVXDelJsXM
MD5:	4B278863D02BDFC4403B80E1AD31ADE1
SHA1:	350F5ADBDA01507F410B421D3DDAC7B00B68E5BA
SHA-256:	2AAA549E7CA5E1E735CB146EAAB73C0BF252BD13054BCA382E5173EFC4AB51B7
SHA-512:	AFDD178CCDC35C77DFDE5C6EB57EB28485B243C8804F75C36184896BBF9B179FD114B7F84E1825069152A60714A27CD8B67B784BD62A8082F87B3F60BF74B796
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-V88TEQ7EYL&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":17,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":17},{"function":"__ogt_cookie_settings","priority":7,"vtp_gaCookieExpiration":15768000,"vtp_gaCookieUpdate":false,"vtp_isEnabled":true,"tag_id":19},{"function":"__ogt_ip_mark","priority":7,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":20},{"function":"__ogt_dma","

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 821 x 137, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7963
Entropy (8bit):	7.941377153202951
Encrypted:	false
SSDEEP:	192:WEf3073rIo/MviFWWgW57tpdM16nXuYrOl+XiFQk6E5Zx:WEf38Cvwg2pXuYrOlMIV5T
MD5:	776532C2A804F14979D901C210CE6EE7
SHA1:	40FD6AF3CCE3EDDC123EF711518D521089D52F02
SHA-256:	4DEF6D9AD0B93FA285D5783527CAB94B9B8040B650AFBC808ED69E2ACE347BB4
SHA-512:	BDEADA87758FC393B8C157F509C920FE011C00487CC99E3B0C0091E3018770A5815CD9185FCDFA8666A2CBE4EBE6A3EC778C27B5D77516EFA8A958F009A7A497
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/8814ea97-7d41-4933-8a06-f5b8e65f6da8/f3c8d17e-040e-46f5-9c16-27efb793a7a7/8e4641b4-93aa-4176-880e-cb2950b9093e/sophos-logo-blue-rgb_(1).png
Preview:	.PNG........IHDR...5.................pHYs...#...#.x.?v....IDATx..AR#..[....O.>.....'.......9...<...".7.....p....:..Q..F @.....P...g.Rue.2.2{.....h..(.}-..>U.o,.>U...m9...o......j[...T..6h..EQ.W..{.3...p!j.p.....^..........J....#,d.J.t.."[C............t_...h>..b....g...i-..<.[..l2.W..p.V\|.........^.Frg.g.../.M.>...].f..V...J..h>\.k]..u.8...h^..............N..Xqjn..$.b`.`..V/..k.....3}.......?.......d.=....pE.Z....l...j...)..VPTr......L..F........U...;W.=u..l..eG.51.3.p..N.L8...Lx.......#`...Q.#\|........X{-..fO./....=w.l.'.p...m.KS...^....9..4.c0.r&."p....D.FJ...4*j$f&...C..)k.s.....8\|$pN1<.%.."....'d..~...$A!...p..X....j..:x.x'....h~....P.l.......E......"...F.p~...\... p..>:..9.=.8=Q0."ckQ#5{J}!..: ........................A.......U.p..n..z..D... R>l..r.....b.7........Q.[...u.+:{.G. Y....s..a8..9P..V...^..-e.DL-QS...r_@h.p`.F.k.....J........W.....@.l..U.9..{.2^ .6.5...l.h...Se..W.`t...a...e.a.......?.3[..............a#QS.4

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23974
Entropy (8bit):	5.162833454986545
Encrypted:	false
SSDEEP:	192:rCmIPHa0mGkwsOqiEt7Cng2w+mXnMaryqmse4xHv4cYWj+qQd1PU9xZFWm6fVdQK:rCiyE4nlAKYFIOQ
MD5:	E01B3596527E9EC6EF0C7732592412E7
SHA1:	449EACB14BF554E9762CFC64288D94A86873E3DB
SHA-256:	AD8423ACBCC35731728911499EA16AD1FCC2AF2564322676DDC9C790F3CAA7C3
SHA-512:	2D336056CBE2D6B02380C422114F451EE6945A8F3FB00441FF31917B539159B0FE1016D3C49A63F73286D7F0784B0EC1AAA1E10E0D17221571039C5194FBD5B2
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.css
Preview:	@import "claim-elements.css";.@import "welcome-animation.css";.@import "footer.css";..@font-face {. font-family: "Flama-Basic";. src: url("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.eot");. /* IE9 Compat Modes /. src: url("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.eot?#iefix") format("embedded-opentype"),. url("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.woff") format("woff"),. url("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.ttf") format("truetype"),. url("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.svg#flamabasic") format("svg");. / Legacy iOS */. font-weight: normal;. font-style: normal;. text-rendering: optimizeLegibility;.}.@font-face {. font-family: "SophosSansLight";. src: url("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57048)
Category:	downloaded
Size (bytes):	434918
Entropy (8bit):	5.549340353020367
Encrypted:	false
SSDEEP:	3072:tLh4jQGuz+9CbQ9PKpwaJhZEAdB8rroVXdwAZVNSNcOzszbINF8u9CBPIrTWR6cV:tuE1dwAFOgzbZXozfK6St+aqez99y8
MD5:	D3FB38DC35EDF3DAA6629B4AFFF56E5B
SHA1:	148D10C510B87EC04D08555D65A1104E8FD265E3
SHA-256:	1D65B81CDCE6F4C6157C4D4A54E1E13790B2889F844DC1D6809F80F39ADA3109
SHA-512:	231AE4F5FA7EC2E55B30CD4F67DFD7501A4B9408746E0FCC8E339D49E8B938C3690A3F82AD0751AE2E85CB883C153BD0510B6B24EF309F44732BD1401020CEDC
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TW8W88B
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"110",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__r"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_s

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	downloaded
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202311.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.313151920306138
Encrypted:	false
SSDEEP:	3:YWMmqelAQD5oJtZlCn:YWMm9PdoJt6
MD5:	69A7AA720A14F891F699ADAFD46867BF
SHA1:	BB3C49577C1B4AD6E74A1E576A121651E4D88A8E
SHA-256:	858627F0520671360AEAB506B6C661F9EDB36BE56D46EA3995E45DD9AD453C68
SHA-512:	564289A6B839AE6433F69482128368539E878AFE62B52DA51A0142D2EDF53CAC436A00C528BDB0CBF2B45532C05810D12B45C3F3F6E462BEBB101BB8EE06349E
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=RDWGF-UPRHD-XS89W-PHRJ5-TMW6V&d=login.sophos.com&t=5711870&v=1.720.0&sl=0&si=21184723-ba6a-4b9a-8fb6-eaf54f5869bb-sc7k3u&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=1034553"
Preview:	{"site_domain":"arlid:1034553","rate_limited":true}.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (374)
Category:	dropped
Size (bytes):	3927
Entropy (8bit):	5.275936532439634
Encrypted:	false
SSDEEP:	48:1/nkqeAjJwiIlI3pYcXhWHjQE8dMWBnpOpPpkG6UeTGaMTkaK1xKVbx5KRTKRk:5nkqeAq2ZYcoHsxjDGhkhUzH/v4RuRk
MD5:	7929FC310C9A89084233C3F53312E86C
SHA1:	5935BE67882E492F6519199F1C0BE4B6CC57F167
SHA-256:	6680FB36B9E834D3DFC678AC2B6BEE909532F4795951A2058D1764248B2FE57F
SHA-512:	8369750F4A4435A836B023B9CA16D99C1582738FA4539947D76A4D47EB0B5EAFD1F74076F3B0A324348A5478E98702D3302B622238741768FB977B7FC2312A27
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. . ~ Copyright 2019-2023 Sophos Limited. All rights reserved.. ~. ~ 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product. ~ and company names mentioned are trademarks or registered trademarks of their respective owners.. -->.<html>. <head> . <script src="https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/jquery.js"></script> . <script src="https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/include-footer.js"></script> . Google Tag Manager --> . <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-TW8W88B');</script> . End Google Tag Manager --> .

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	836
Entropy (8bit):	4.840279310471344
Encrypted:	false
SSDEEP:	12:TLO/M8kumPOk5WAee8BZ5WAC74e81PD5WAMe8IuHcY5WATQve81wn2xyllH/u3oi:TS/MxuMOdRBI4R1PSRIBvR102xa2pMmz
MD5:	2BF6E8E677DF575FC3F9DF6337FE0C95
SHA1:	CB33D8148EB93436EF3C2A765BEDFE761FB767D3
SHA-256:	037E280119146F1C1F865CD13828723C04E7DA74162325A8FDA8FA21E4133E04
SHA-512:	697FEB1BDA5E0CEFB559D9170AB1169B5560675C149D4410EF9688D59125339D4D2E1CBB2036A3D78FBA15A8CD971482FA072115B26A6F0A095EF7A9EFEAAB22
Malicious:	false
Reputation:	low
Preview:	<html>. <head></head>. <body>. <div class="body-footer small"> . <ul class="list-inline small mb-1"> . <li class="list-inline-item"><a class="white-links" id="legalLink" href="https://www.sophos.com/en-us/legal.aspx">Legal</a></li> . <li class="list-inline-item"><a class="white-links" id="privacyLink" href="https://www.sophos.com/en-us/legal/sophos-group-privacy-policy.aspx">Privacy</a></li> . <li class="list-inline-item"><a class="white-links" id="cookiesLink" href="https://www.sophos.com/en-us/legal/cookie-information.aspx">Cookies</a></li> . <li class="list-inline-item"><a class="white-links" id="learnMoreLink" href="https://www.sophos.com/en-us/products/sophos-central.aspx">Learn More</a></li> . </ul> . <p class="small">© 1997 - 2024 Sophos Ltd. All rights reserved.</p> . </div> . </body>.</html>

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.10370516063324
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HptOE9HhEyRHfHyI:x2pHDO4ElhZyI
MD5:	B0F41DFDB39537EAD363417D80CFC0A7
SHA1:	93C53BC2B37815BF7574FF54D923979054DE4057
SHA-256:	413FA819EBD01D88E44A674D282AB109B747DB63592C57E099706B364D8C2DEB
SHA-512:	273AD5ECF19EDBE8F81006676558110F122A50E8BED71E2D69E8A7D6474189256198B38803086AFA21EF14F457B6FB1CB1EB4E633A9DF50505A8E9C84F6F8AB4
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65103)
Category:	downloaded
Size (bytes):	209939
Entropy (8bit):	5.366006952026174
Encrypted:	false
SSDEEP:	3072:1P6RsHIwj0PdUgdbs8kvdYkODdlm9AZoZXs+eSc:1msHIxHMvd8dtZoZDc
MD5:	FA4C76A7FDE62B18054CF7EB8E946012
SHA1:	B20150066A879D2B78DD3D4908F4ACD148EE66F8
SHA-256:	09EBD7F407439990AAC227E70DA23E1A819E8E30282928E324370805F480BEC4
SHA-512:	D72F5D078675C7ADBF6BFC1980712542A10668AEC9163137A2EC70A5E117F8FFDD0F06A6C4C6636E35C04F2754F33D40C65C59D452AFAA8EA4A382F24F200ABD
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/RDWGF-UPRHD-XS89W-PHRJ5-TMW6V
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.720.0 b17966bb92f8ac2ddcda4ac1d9c0aaea6d2eda7b */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document.doma

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	64205
Entropy (8bit):	5.446555104384715
Encrypted:	false
SSDEEP:	768:DpYAoeiWAWutSAYif8pxObicq3JsJLPqji:7pLm+36JmG
MD5:	C9D589BA7445ABE239CF89FB7E69A1A8
SHA1:	B4EE79A0A61E29B0F9FBC51F9C556D0BDCB0EFE0
SHA-256:	2BC6A125D698416498CDF5EF60CD959AEF01DB95A6E3E0D74A95F9B6D3D78FEB
SHA-512:	F3C23702719C7052A7CD6C0FE0F924023B846008702C25F379E07A015707757717D0CB2820C25FA3B09C1EA554282454E796A7C75788BC441F4DD6169860DE9D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202311.1.0/assets/v2/otPcTab.json
Preview:	. {. "name": "otPcTab",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1RhYiBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjwhLS0gcGMgaGVhZGVyIC0tPjxkaXYgY2xhc3M9Im90LXBjLWhlYWRlciIgcm9sZT0icHJlc2VudGF0aW9uIj48IS0tIEhlYWRlciBsb2dvIC0tPjxkaXYgY2xhc3M9Im90LXBjLWxvZ28iIHJvbGU9ImltZyIgYXJpYS1sYWJlbD0iQ29tcGFueSBMb2dvIj48L2Rpdj48ZGl2IGNsYXNzPSJvdC10aXRsZS1jbnRyIj48aDIgaWQ9Im90LXBjLXRpdGxlIj5Qcml2YWN5PC9oMj48ZGl2IGNsYXNzPSJvdC1jbG9zZS1jbnRyIj48YnV0dG9uIGlkPSJjbG9zZS1wYy1idG4taGFuZGxlciIgY2xhc3M9Im90LWNsb3NlLWljb24iIGFyaWEtbGFiZWw9IkNsb3NlIj48L2J1dHRvbj48L2Rpdj48L2Rpdj48L2Rpdj48IS0tIGNvbnRlbnQgLS0+PCEtLSBHcm91cHMgLyBTdWIgZ3JvdXBzIHdpdGggY29va2llcyAtLT48ZGl2IGlkPSJvdC1wYy1jb250ZW50IiBjbGFzcz0ib3QtcGMtc2Nyb2xsYmFyIG90LXNkay1yb3ciPjxkaXYgY2xhc3M9Im90LXNkay1jb250YWluZXIgb3QtZ3Jwcy1jbnRyIG90LXNkay1jb2x1bW4iPjxkaXYgY2xhc3M9Im90LXNkay1mb3VyIG90LXNkay1jb2x1bW5zIG90LXRhYi1saXN0IiBhcmlhL

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21778), with no line terminators
Category:	dropped
Size (bytes):	21778
Entropy (8bit):	4.769188103585108
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFjlCS7FGAVsq1nwGfg4xqsQMPNE:JmJ
MD5:	73BC4067D312180A1B19A4D883F42D6A
SHA1:	AD328A9A572FBEA43F295E7769835FF08F6FF1FD
SHA-256:	D3F7B0EC4DE079928A999641E781E80F33597A392A561BC460276DFB4EFB6EEC
SHA-512:	20B89462521684C258A8CE15E94DA67182C66397B0DE528357E01294FF06883C1AD96037A9D739E4575DB8722B1A1967578709A0C844CD45A49E6A51E1B6479D
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 98804, version 1.0
Category:	downloaded
Size (bytes):	98804
Entropy (8bit):	7.996955859445496
Encrypted:	true
SSDEEP:	1536:Vx00Nn0S2TXXRWSk0Ns/aS8pDyNn3VMxJHXyS/q5WJDpM15Gpg65pMQ:Vx00Nn0dTxWTx8pDyGXn//tpdtpMQ
MD5:	8070997696B1C91905FECBA458F96640
SHA1:	7B52AC6F38F16EF83EDF01D3BD1C90EE2B29E357
SHA-256:	3787E2F283651744E0B93D1FEFB5936C7AF26DB8014C0DEF6651D050C56DD47E
SHA-512:	82E807240E912803E4466EFC2A595F6F8B8ADC346312BE4C1EA99641D4E3D7B54F4EAF69036DE0AC173B0C1591F448CA7DBB0885BED3B90437ACF84799F253D7
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/Inter-Regular.woff2
Preview:	wOF2..............s...................................z...L.`...<...h..9..j..6.$..N. ..r.../[....O......5..h7.,..(.....BI..H.....}..0pVM;'.Ct@.Au.].yGP7Ljq.\.mKj...>...................K.J:5 ... ...WPX....L.,.UI.T.....2..e.V.^..! .Ax.#...8)DQ..0I...D.4.l.....E...},.(`9F.^...F.Rq...c.?.(.J.V.t...>.D..i.Zj......N<V]. hJIA..TIb.....xJ.-(.C...:>.dt3..&:...\l.I{.d...h....U..U.J.\.Duq.`..6.Gt..;..'..-..`.C.Y..b.t.4>..Un...W..Qk..{..q...K.L...n.\|.~V/.j7.41...o.Q....].%l.!..q....:.#a....+r.+-E...:P..F.l...C...x..F\.e.</.n"([A..E!....#.'.G..D.Ka..JC.].\.....C+f...(..N.....gT..._.J_.....$....+.H..j9Vqj.u.......ML...f.....a.<Q.H/8..#c......O...b.. .G.......Q...&iU(k.o...g....9..bX....a.uT,...Q..z....}t....f[......N..pRR.B..c....&..]...........?.....j..7.`..G....T...P.....Dyx....zb>..zyMg........8.M...<..#..mrf(De.f...0...(~Wu.eY..@..F.T..R.).]L^.o.6I...(....s.N.....w..{..J..$(IJZ..*.^P[G\`./}......B....$%1.Jg..^.:.O{.C...Nh.Jwq.j..w.}.c~.......<...I.?.zW-

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (374)
Category:	downloaded
Size (bytes):	3927
Entropy (8bit):	5.275936532439634
Encrypted:	false
SSDEEP:	48:1/nkqeAjJwiIlI3pYcXhWHjQE8dMWBnpOpPpkG6UeTGaMTkaK1xKVbx5KRTKRk:5nkqeAq2ZYcoHsxjDGhkhUzH/v4RuRk
MD5:	7929FC310C9A89084233C3F53312E86C
SHA1:	5935BE67882E492F6519199F1C0BE4B6CC57F167
SHA-256:	6680FB36B9E834D3DFC678AC2B6BEE909532F4795951A2058D1764248B2FE57F
SHA-512:	8369750F4A4435A836B023B9CA16D99C1582738FA4539947D76A4D47EB0B5EAFD1F74076F3B0A324348A5478E98702D3302B622238741768FB977B7FC2312A27
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/html/enter-email.html
Preview:	<!DOCTYPE html>. . ~ Copyright 2019-2023 Sophos Limited. All rights reserved.. ~. ~ 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product. ~ and company names mentioned are trademarks or registered trademarks of their respective owners.. -->.<html>. <head> . <script src="https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/jquery.js"></script> . <script src="https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/include-footer.js"></script> . Google Tag Manager --> . <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-TW8W88B');</script> . End Google Tag Manager --> .

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	394
Entropy (8bit):	4.774361395573784
Encrypted:	false
SSDEEP:	12:UP5Ux/JSLWpm1Hyk9nF9qEj8DRR9VfDRR9nPSeY:0ex/JGskF9HjgRRnRRJtY
MD5:	32E9DCCFFFE7F095A8DAD17D7995FC2F
SHA1:	C7C0785F61DA7780F6C4221E1BEE4D439333AE6D
SHA-256:	E80546B0EDBF879D2B1045D62CD454D6D24E560A74161808B8933F2690BF810C
SHA-512:	4EC69573DC21FF69E55E1453E607756149C5786BAED6B809F1C52A2E5394077FF655C17EBEE93864272286E2B9D76A1868DCFD5F92A399FB2E8F6D66DDCFA773
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/user-agent.js
Preview:	/*. Copyright 2024 Sophos Limited. All rights reserved.. . 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product. * and company names mentioned are trademarks or registered trademarks of their respective owners.. **/.if(document.getElementById("userAgent")){document.getElementById("userAgent").defaultValue=navigator.userAgent;}

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	531
Entropy (8bit):	4.746623201829143
Encrypted:	false
SSDEEP:	12:YpGyjpv/JSL2pvbHykv9ppnF9qEUidU68/yfJ:kN/JlGmF9HaH6fJ
MD5:	79E25ADDED5098E4C6BCCD7C6E695F67
SHA1:	5B5575B59D1B265EDD784E4B7D22D588BC200CA1
SHA-256:	5579F796A6FBA4C9CD590F9B95134707355CE47CA2DD8CEA711D2B40964F928D
SHA-512:	7E08D51D2F7111C57339018DEDDD697FD629E7671458E1DF78C4158F550F5375F842327CC813434B44ABC191948642B354472B4B9E67AB7985967FD34A85352E
Malicious:	false
Reputation:	low
Preview:	{. "_comment1": "Copyright 2022 Sophos Limited. All rights reserved.",. "_comment2": "'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group.",. "_comment3": "All other product and company names mentioned are trademarks ",. "_comment4": "or registered trademarks of their respective owners.",. "createSophosId": "Create Sophos ID.",. "legalLink": "Legal",. "privacyLink": "Privacy",. "cookiesLink": "Cookies",. "learnMoreLink": "Learn More",. "passwordPlaceholder" : "Password".}.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13186
Entropy (8bit):	5.230333531204009
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXfn/OoH6iAHyPtJJAR:7Iy5P/i
MD5:	4D4429A2DFAA8A27FBE9659E8E717F74
SHA1:	28AD4885FF33594FA46ECED61BD42874926AA17C
SHA-256:	EA5DB5581E262D77D1A43FBB3F0FA3661B51D097B40CA38F584B4943F47CF2E0
SHA-512:	708D4DE5F9147040A26202060CEC1199E36A16AACD1CE967E0A4ED8FAE34081DC1584E4E490B57C2A430259EDFD7EF84F050F275487D2496FB824A787CBF8AC4
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.2089208565325789
Encrypted:	false
SSDEEP:	6:G70CfYI/i4jnOgfCPnR/7Iegfjn4jawl:G70LI/xi4CJTIe4jnGawl
MD5:	E68882B760C3F603DFD1C5A5A85065CF
SHA1:	9017435FCBEC47CAB2E24336F4DAEA5C96AD19AF
SHA-256:	590BB01B416F6CFB689B2016D7C291CBB1F0EF5D35327862C3C700204A2843D1
SHA-512:	830804F53B96659C5917F723C25491542BAE430ADFECCF39DA8636FDF57D84A18A40DCDE8212180171547296FC550D264EE410FD8AD8C17AB003F508F197EF36
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... ................................@..........p.. .........w............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2475
Entropy (8bit):	4.064553641509912
Encrypted:	false
SSDEEP:	48:WNfLd0OSkd48kMWnVqLpSlN7iOcFVJ0KqEoG025X82PuhNkKm3:Cp3Skd48mMVsN72VOh7o82GfkK6
MD5:	7D146458D9B7A8C4DA7A42D28D6267EE
SHA1:	1D41759C46D747CB437B53369AE4FBF04F8CFDCC
SHA-256:	ADC418A2BAE255B9B9FD4EFD55FC11210FBD940201AED3634B3905E99634B484
SHA-512:	5E30BEC995629B6D8FDF87C387DC8C948A9FBC692E4ACB469453256295F7F89221B31AF27FB2FE662C879E962EC7017DA3284BFF473561183FBD644CA17A0566
Malicious:	false
Reputation:	low
URL:	https://cloud-assets.sophos.com/assets/6e3e9029cd33ceb547fb063093e87f01234c6982/ssp/251ae4cfb36fc6561bb1a0bf17e7552f.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="113" height="20" viewBox="0 0 113 20">. <g fill="#FFF" fill-rule="evenodd">. <path d="M95.324 16.31h9.583c1.49 0 2.305-.15 2.782-.476.59-.385.925-1.038.925-1.808 0-.918-.448-1.717-1.206-2.103-.395-.238-1.124-.356-2.024-.356h-4c-2.246 0-3.706-.415-4.689-1.303-1.124-1.037-1.77-2.636-1.77-4.357 0-2.517 1.32-4.71 3.257-5.42.845-.328 1.825-.416 4.018-.416h9.768v3.526h-8.87c-1.77.03-2.453.03-3.044.177-.786.208-1.264.978-1.264 2.015 0 .89.393 1.6 1.068 1.927.561.266 1.555.325 2.904.325h3.004c2.755 0 4.243.445 5.34 1.63.841.888 1.403 2.637 1.403 4.355 0 2.104-.928 4.06-2.388 5.008-.926.62-2.107.8-4.888.8h-9.91v-3.525zM80.596 5.416c-.58.96-.856 2.5-.856 4.565 0 4.533 1.489 6.598 4.796 6.598 3.253 0 4.741-2.065 4.741-6.541 0-4.536-1.46-6.57-4.74-6.57-1.791 0-3.198.697-3.94 1.948m11.216-2.237c1.132 1.569 1.764 4.125 1.764 7.121 0 3.4-1.02 6.192-2.838 7.731-1.38 1.162-3.473 1.803-5.954 1.803-3.528 0-6.31-1.221-7.744-3.402-1.075-1.598-1.6-3.72-1.6-

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	522
Entropy (8bit):	4.73715095599041
Encrypted:	false
SSDEEP:	6:tI9mc4slzczUcWzMxRIXqTrL8LSJx8/O2RaUglTKIuGLRyQNngI/4lQcLNaRIZVI:t4CzjWzMoXq/A+x8225xIFHnvYdzZ/xM
MD5:	9CD0033D77DFA55A69696736A8A021BC
SHA1:	D2683B93BE6839C07E401C4EB349D6863A7D7E99
SHA-256:	CC3AA36C04DBB2EC7F492EA68667C727486887BA35FCEE62869CA5AFC4D26EAF
SHA-512:	5B8352AA18B1D2FC77E1A39C6E8E9A3244C45D420365552EFCC1267A2058AC84FDC3C6445DE67979E61E211528E2B8ECA22E9CC8C8F1A1167E343971C684EAA4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="12" viewBox="0 0 16 12">. <g fill="#E0E2E4" fill-rule="evenodd">. <path d="M15.76.737l-4.846 4.636-3.01 2.751-2.987-2.73L.05.737C.02.84 0 .946 0 1.058v9.808c0 .064.007.125.018.185.077.497.464.879.93.879h13.906c.419 0 .772-.31.896-.733l.005.006c.033-.107.054-.219.054-.337V1.058c0-.112-.02-.219-.05-.32"/>. <path d="M6.55 5.629l1.354 1.232L9.95 5 15.129.048A.844.844 0 0 0 14.862 0H.947A.84.84 0 0 0 .68.048l5.182 4.956.687.625"/>. </g>.</svg>.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	96705
Entropy (8bit):	5.228470338380378
Encrypted:	false
SSDEEP:	1536:EVpXOWPGHRGUvJEzxPNLgyLuG6XV3yV/QtJ+j1YeO4PFWYit:EVoWPGHRGUvJEzxOMQV3yV/ERaNWYit
MD5:	1DD63DE72CF1F702324245441844BE13
SHA1:	58A8BDCDCB398AF7DB424357DF70DF18E7B30E9D
SHA-256:	5201C813C37A4168CC5C20C701D4391FD0A55625F97EB9F263A74FB52B52FD0E
SHA-512:	532D1E907B433AB97785CF632D9637A957152BAF0BA57879C856CBAA469BFFECA22C4F99485679539944B27068D39E70F7D44282594F999142454DA57329A11B
Malicious:	false
Reputation:	low
URL:	https://az416426.vo.msecnd.net/scripts/a/ai.0.js
Preview:	"use strict";var AI,Microsoft,__extends=this&&this.__extends\|\|function(){var i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])};return function(e,t){function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}}();function _endsWith(e,t){var n=e.length,i=n-t.length;return e.substring(0<=i?i:0,n)===t}!function(e){e.ApplicationInsights\|\|(e.ApplicationInsights={})}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){},(e.Telemetry\|\|(e.Telemetry={})).Base=t}(Microsoft\|\|(Microsoft={})),function(e){var t;t=function n(){this.ver=1,this.sampleRate=100,this.tags={}},(e.Telemetry\|\|(e.Telemetry={})).Envelope=t}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Context={})}(Microsoft\|\|(Microsoft={})),function(e){var t;(t=e.ApplicationInsights\|\|(e.ApplicationInsights={})).Context\|\|(t.Co

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=2e456f46-6b86-42c8-be0a-01efd4471533
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	54
Entropy (8bit):	4.349511290831417
Encrypted:	false
SSDEEP:	3:SjXkXR6J1V00eK:SryR6JfTeK
MD5:	9B06B5451E58B45D0B436D72983503FB
SHA1:	2DD7146CAABBE78E7776AF37A5FF5A54E59424C3
SHA-256:	856FD57ABD32242EBD8ACA9008F24702671A4207700A9A4365230B74A16E0344
SHA-512:	E6C4920A86B57059AF8B8537FFFFDBFBD5587F498E6617B65DBADAD5AB51516830C5B3C04D92884DAC01323E66AC3EAB7CD72D904A534A4B99EBF68E92292096
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/claim-elements.css
Preview:	#attributeList li.userAgent_li {. display: none;.}.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4609
Entropy (8bit):	4.880965705081661
Encrypted:	false
SSDEEP:	96:npyIf440wvduECwpaGHxYa6ATTvPWOD1tY3j39jse2jJjeW5h9jF:F/VlCwpN6o7P3DjYT1seCJt3B
MD5:	17D74FCFC797FB09BCA6E83DBB37E2E0
SHA1:	19B87359586DEAF447CC568AA08F055870531E10
SHA-256:	5D265DA94B9820F7707B9F8C3E7D367428B43262534EC286942B8614AD3A0610
SHA-512:	47A9F5012A277A66F0A8C84D11D9868836640AC90EEB9E09A5085C83C50BDD607A8DB9938890AA3E5AA77F4C0B43DCA05CF02A54629A09FDE5177BFB7145DD9B
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202311.1.0","OptanonDataJSON":"2e456f46-6b86-42c8-be0a-01efd4471533","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018ee767-7431-780c-bf78-4b67b48c194b","Name":"Global excluding GDPR countries","Countries":["pr","ps","pw","py","qa","ae","af","ag","ai","am","ao","aq","ar","as","au","aw","az","bb","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","sg","bv","sh","bw","sj","bz","sl","sn","so","ca","sr","cc","ss","st","cd","sv","cf","cg","sx","ci","sy","sz","ck","cl","cm","cn","co","tc","cr","td","tf","cu","tg","cv","th","cw","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","dj","tz","dm","

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	522
Entropy (8bit):	4.73715095599041
Encrypted:	false
SSDEEP:	6:tI9mc4slzczUcWzMxRIXqTrL8LSJx8/O2RaUglTKIuGLRyQNngI/4lQcLNaRIZVI:t4CzjWzMoXq/A+x8225xIFHnvYdzZ/xM
MD5:	9CD0033D77DFA55A69696736A8A021BC
SHA1:	D2683B93BE6839C07E401C4EB349D6863A7D7E99
SHA-256:	CC3AA36C04DBB2EC7F492EA68667C727486887BA35FCEE62869CA5AFC4D26EAF
SHA-512:	5B8352AA18B1D2FC77E1A39C6E8E9A3244C45D420365552EFCC1267A2058AC84FDC3C6445DE67979E61E211528E2B8ECA22E9CC8C8F1A1167E343971C684EAA4
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/images/icon-email.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="12" viewBox="0 0 16 12">. <g fill="#E0E2E4" fill-rule="evenodd">. <path d="M15.76.737l-4.846 4.636-3.01 2.751-2.987-2.73L.05.737C.02.84 0 .946 0 1.058v9.808c0 .064.007.125.018.185.077.497.464.879.93.879h13.906c.419 0 .772-.31.896-.733l.005.006c.033-.107.054-.219.054-.337V1.058c0-.112-.02-.219-.05-.32"/>. <path d="M6.55 5.629l1.354 1.232L9.95 5 15.129.048A.844.844 0 0 0 14.862 0H.947A.84.84 0 0 0 .68.048l5.182 4.956.687.625"/>. </g>.</svg>.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2091
Entropy (8bit):	4.6373181619844
Encrypted:	false
SSDEEP:	48:pR/5HMZKQKODSABCVrX0YGaUDqFV5TDo9cG0Yc:H/x0KQnDQVAYGaUDqFV54OR
MD5:	A0D517EF41B946D8E0B60033D06F287C
SHA1:	CF5EDDF0B8D71F0172351D9929EB3319526A20FC
SHA-256:	D108851E907774514E5C8DE4EEA9FEF7479172CC00FE3B02042E4A42EB0AAD70
SHA-512:	747BDB604E02195E933A42FFA845F1CD9B81B7D18A1C1B1822AF6BFFD164CD63F62986BE04E6BE310EBF7B036F22DC85F5B22822950D591EA4EB395B4A9164F7
Malicious:	false
Reputation:	low
URL:	https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a
Preview:	.......<!DOCTYPE html>.<html lang="en-US">.<head>. Sophos Central Version: 2024.15.187 -->. <meta charset="utf-8">. <title>Sophos Central</title>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <link rel="shortcut icon" href="https://cloud.sophos.com/assets/favicon.ico" />. <style type="text/css">. . html, body { height: 99%; margin: 0; line-height: 20px; padding-left: 0; padding-right: 0; }. body,div,dl,dt,dd,th,ul,ol,li,p,h1,h2,h3,h4,h5,h6,pre,form,fieldset,input,textarea,blockquote,label {. font-family: Arial, Helvetica, sans-serif;. font-size: 12px;. color: #262626;. }. .serverMsg {. width: 900px;. margin: 100px auto;. display: flex;. flex-direction: column;. justify-content: center;. align-items: center;. }.. .logo {. width: 104px;. height: 55px;. objec

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2519)
Category:	downloaded
Size (bytes):	2801
Entropy (8bit):	5.355761527238405
Encrypted:	false
SSDEEP:	48:f/EskNDVbUAs69vqZbAGt0hvb8kDW+vtsZV:nNkdaA0avDWjZV
MD5:	6EC09CBE7FAFD476FFD1E96575D71A02
SHA1:	4EAADA5B99A1BE4C0408A57D1BDE42E40AFB48CB
SHA-256:	58254751DB0F7B5FF46D21F843C41553E4A4BDD96F41CF8541593B0460FD220C
SHA-512:	B670C36AD9CA23C05D80074EBEBAD3F68DCDF1CF5A1A67A515E113C931ADF4330A01D01C843D6327C806DBF2A13DAE2F0784997C52D437F77B74F17A3D9C1E4A
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/scripts/localize-footer.js
Preview:	/*. Copyright 2024 Sophos Limited. All rights reserved.. . 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product. * and company names mentioned are trademarks or registered trademarks of their respective owners.. **/.function readTextFile(file,lang,callback){var rawFile=new XMLHttpRequest();rawFile.overrideMimeType("application/json");rawFile.open("GET",file,true);rawFile.onreadystatechange=function(){if(rawFile.readyState===4&&rawFile.status=="200"){var data=JSON.parse(rawFile.responseText);var createSophosIdText=data.createSophosId;var legalLinkText=data.legalLink;var privacyLinkText=data.privacyLink;var cookiesLinkText=data.cookiesLink;var learnMoreLinkText=data.learnMoreLink;if(document.getElementById('createSophosId')!==null){document.getElementById("createSophosId").innerHTML=createSophosIdText;}if(document.getElementById('legalLink')!==null){document.getElementById("legalLink").innerHTML=legalLinkText;}if(document.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	139898
Entropy (8bit):	5.120712214692029
Encrypted:	false
SSDEEP:	1536:gTX7rD6Y2CDZW+tagnCRw85ZEYli392iC4+NCWOk7aLluczguSlYRJyD7B:KX7rD6Y2CDBww85ZEQA92vIk7d1YiD7B
MD5:	4AC27B534BF2325CA5691108348A7C0F
SHA1:	343394DAB0334E499C285BF5522FDA7E43C2BAA9
SHA-256:	8E55003BDB6B1C546DA0375C2E54653F6802564E2363F8D9B15CFCA5182E44A6
SHA-512:	841256C92954BE2BCA42D08BB9DB40B7F3CD91FD160623C853D6D3A9DE85C4918057F9E6A35C0F641CAB2E15AE89D1C817671303D70089AF05B2BEF6C7457F30
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2263
Entropy (8bit):	4.611724897155832
Encrypted:	false
SSDEEP:	48:pR/5HMZKQKODSABCrGei00fYxrKuzHAiw8L:H/x0KQnDQrGvFfqrKuz2m
MD5:	09708543058C4D8D876C5DF9695FBDCA
SHA1:	3C121D696D9553B50CC36FACC80DE5D6FFE83678
SHA-256:	986B48CC464341132B8E060BC689C05B97E0765AD3297D99F65D20065FCE64B1
SHA-512:	AD55CCDC0D92CF9D613DCD7A05307B4D1640C980EDCA0CA70AC17435F62ED8BD7A1835A0FE0A0ABA80637FCB76DDF39384CD3B561346FBCC368E6D6921050CF8
Malicious:	false
Reputation:	low
URL:	https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a/allowBlockConfirm
Preview:	.......<!DOCTYPE html>.<html lang="en-US">.<head>. Sophos Central Version: 2024.15.187 -->. <meta charset="utf-8">. <title>Sophos Central</title>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <link rel="shortcut icon" href="https://cloud.sophos.com/assets/favicon.ico" />. <style type="text/css">. . html, body { height: 99%; margin: 0; line-height: 20px; padding-left: 0; padding-right: 0; }. body,div,dl,dt,dd,th,ul,ol,li,p,h1,h2,h3,h4,h5,h6,pre,form,fieldset,input,textarea,blockquote,label {. font-family: Arial, Helvetica, sans-serif;. font-size: 12px;. color: #262626;. }. .serverMsg {. width: 620px;. height: 200px;. margin: 72px auto;. }. .serverMsg img { float: left; margin-right: 20px; }. .serverMsg span { display: block;}. .logo {. width: 104px;. height: 55px;. object-fi

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2475
Entropy (8bit):	4.064553641509912
Encrypted:	false
SSDEEP:	48:WNfLd0OSkd48kMWnVqLpSlN7iOcFVJ0KqEoG025X82PuhNkKm3:Cp3Skd48mMVsN72VOh7o82GfkK6
MD5:	7D146458D9B7A8C4DA7A42D28D6267EE
SHA1:	1D41759C46D747CB437B53369AE4FBF04F8CFDCC
SHA-256:	ADC418A2BAE255B9B9FD4EFD55FC11210FBD940201AED3634B3905E99634B484
SHA-512:	5E30BEC995629B6D8FDF87C387DC8C948A9FBC692E4ACB469453256295F7F89221B31AF27FB2FE662C879E962EC7017DA3284BFF473561183FBD644CA17A0566
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="113" height="20" viewBox="0 0 113 20">. <g fill="#FFF" fill-rule="evenodd">. <path d="M95.324 16.31h9.583c1.49 0 2.305-.15 2.782-.476.59-.385.925-1.038.925-1.808 0-.918-.448-1.717-1.206-2.103-.395-.238-1.124-.356-2.024-.356h-4c-2.246 0-3.706-.415-4.689-1.303-1.124-1.037-1.77-2.636-1.77-4.357 0-2.517 1.32-4.71 3.257-5.42.845-.328 1.825-.416 4.018-.416h9.768v3.526h-8.87c-1.77.03-2.453.03-3.044.177-.786.208-1.264.978-1.264 2.015 0 .89.393 1.6 1.068 1.927.561.266 1.555.325 2.904.325h3.004c2.755 0 4.243.445 5.34 1.63.841.888 1.403 2.637 1.403 4.355 0 2.104-.928 4.06-2.388 5.008-.926.62-2.107.8-4.888.8h-9.91v-3.525zM80.596 5.416c-.58.96-.856 2.5-.856 4.565 0 4.533 1.489 6.598 4.796 6.598 3.253 0 4.741-2.065 4.741-6.541 0-4.536-1.46-6.57-4.74-6.57-1.791 0-3.198.697-3.94 1.948m11.216-2.237c1.132 1.569 1.764 4.125 1.764 7.121 0 3.4-1.02 6.192-2.838 7.731-1.38 1.162-3.473 1.803-5.954 1.803-3.528 0-6.31-1.221-7.744-3.402-1.075-1.598-1.6-3.72-1.6-

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	451
Entropy (8bit):	4.630482458686244
Encrypted:	false
SSDEEP:	12:xduFZ0v/TZXOLdP+7wCVf14t6ZEl4WdZZOid+Yi:xduFZWbZwdOwsfqY6l44jdO
MD5:	77B2BD6C47E62F4061AC324008FF1EE5
SHA1:	F986552931B54871267122D59F562059BFE4A3B1
SHA-256:	16068F1D1E445DEDA600E853166FD6428207CCC856E3971E1EF9BC6C0C57AC2B
SHA-512:	59F21682D70706E1F0513435C1063B1A720A6D230608D2C0EFBF8216B86E044D195F98C3B804D4A07D399ADFD7EBE6A44A15FE46DDD7E72C8B0FCF0C66EBEA26
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/footer.css
Preview:	.white-links {. color:#FFFFFF;. text-decoration: none;.}...body-footer {. color: #FFFFFF;. text-align: center;. padding-top: 7px;.}...list-inline {. padding-left: 0;. list-style: none;.}...list-inline-item {. display: inline-block;.}...list-inline-item:not(:last-child) {. margin-right: 0.5rem;.}...small {. font-size: 12px;. line-height: 20px;. font-weight: 500;.}...mb-1{. margin-bottom: 0.25rem !important;.}.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	836
Entropy (8bit):	4.840279310471344
Encrypted:	false
SSDEEP:	12:TLO/M8kumPOk5WAee8BZ5WAC74e81PD5WAMe8IuHcY5WATQve81wn2xyllH/u3oi:TS/MxuMOdRBI4R1PSRIBvR102xa2pMmz
MD5:	2BF6E8E677DF575FC3F9DF6337FE0C95
SHA1:	CB33D8148EB93436EF3C2A765BEDFE761FB767D3
SHA-256:	037E280119146F1C1F865CD13828723C04E7DA74162325A8FDA8FA21E4133E04
SHA-512:	697FEB1BDA5E0CEFB559D9170AB1169B5560675C149D4410EF9688D59125339D4D2E1CBB2036A3D78FBA15A8CD971482FA072115B26A6F0A095EF7A9EFEAAB22
Malicious:	false
Reputation:	low
URL:	https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/html/footer.html
Preview:	<html>. <head></head>. <body>. <div class="body-footer small"> . <ul class="list-inline small mb-1"> . <li class="list-inline-item"><a class="white-links" id="legalLink" href="https://www.sophos.com/en-us/legal.aspx">Legal</a></li> . <li class="list-inline-item"><a class="white-links" id="privacyLink" href="https://www.sophos.com/en-us/legal/sophos-group-privacy-policy.aspx">Privacy</a></li> . <li class="list-inline-item"><a class="white-links" id="cookiesLink" href="https://www.sophos.com/en-us/legal/cookie-information.aspx">Cookies</a></li> . <li class="list-inline-item"><a class="white-links" id="learnMoreLink" href="https://www.sophos.com/en-us/products/sophos-central.aspx">Learn More</a></li> . </ul> . <p class="small">© 1997 - 2024 Sophos Ltd. All rights reserved.</p> . </div> . </body>.</html>

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	437017
Entropy (8bit):	5.34909931213215
Encrypted:	false
SSDEEP:	6144:yuDr0bx2FTb4M6/XinkklOnE7q1uHBJUZUjZQn54Nis:vsbx2FTHCE7qZZUEWd
MD5:	1778C7B999E7D61597F0B0A2D32164F2
SHA1:	0D3EADEAEF144C1C51A4A469048E4D3CF2278446
SHA-256:	35B480DF2D3690B7262690598F87598BC6E3AB6303E94911F2C1B77A721D7B49
SHA-512:	C521A07E6862A622D9B32AF389F23D9A1C690965AE927815042FE13D20F883271FB045F570F8E8EA4C430F77FF71530EBB5E26610A62E578B7A69891CCBC7030
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202311.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202311.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var D=function(e,t){return(D=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function N(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}D(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function R(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.38903488696438
Encrypted:	false
SSDEEP:	3:ez3iCnVnCk8oTnKaOoAOfaY:y3iCQk8oYoAOfaY
MD5:	A3956F4AB89D76145E2D250140623D04
SHA1:	0324FCB18475594011EB63B79B0C430971967662
SHA-256:	3503CCF7B1993CB572AE11ED9898EC92D08D771F3E4312928AA3BEF0A8F259AF
SHA-512:	CC5183B242D571665F470602CAEF2DEB31FD736E6C94170113B94E1FA44063D42034723514AF7AE954A0E14C804446F2FF872E205F73CC544552D33DD3678914
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmyrqmKGBWoTBIFDVNVgbUSBQ2UJxtwEhAJvfSBbJ10D0ISBQ2lkzYk?alt=proto
Preview:	ChwKEQ1TVYG1GgQICRgBGgQIZBgCCgcNlCcbcBoACgkKBw2lkzYkGgA=

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 23:08:51.586925030 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 23:09:01.202167988 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 23:09:03.473030090 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:03.473113060 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:03.473195076 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:03.473722935 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:03.473803997 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:03.473845959 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:03.473880053 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:03.473881006 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:03.474221945 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:03.474303007 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.020452976 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.021022081 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.021083117 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.022758007 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.022778034 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.022926092 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.023288965 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.023350954 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.024559975 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.024657011 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.024791002 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.024806976 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.025043011 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.025118113 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.026292086 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.026388884 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.073168993 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.073209047 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.073296070 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.120031118 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.213637114 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.213687897 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.213778973 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.213840961 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.213880062 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.213953018 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.258527994 CEST	49736	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:04.258544922 CEST	443	49736	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:04.381975889 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:04.382060051 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:04.382137060 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:04.383109093 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:04.383143902 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.042275906 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.042606115 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.042656898 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.044341087 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.044414043 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.046508074 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.046608925 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.047180891 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.047203064 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.087310076 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.262650967 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.262712002 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.262758017 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.262790918 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.262876034 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.262912989 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.262913942 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.263310909 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.281333923 CEST	49739	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.281369925 CEST	443	49739	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.298055887 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.298098087 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.298330069 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.300107002 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.300128937 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.428436041 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:05.428488970 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:05.428827047 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:05.429183960 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:05.429200888 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:05.713023901 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.713375092 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.713432074 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.714890003 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.715322018 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.715467930 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.715497971 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.715785027 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:05.762247086 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:05.961049080 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:05.961096048 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:05.962629080 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:05.963001013 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:05.963022947 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:06.053666115 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.074208975 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.074225903 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.078068018 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.078227043 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.081861973 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.082070112 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.085658073 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.085679054 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.124880075 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:06.125307083 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:06.125371933 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:06.139183998 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.189919949 CEST	49740	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:06.189979076 CEST	443	49740	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:06.193922997 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:06.199152946 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:06.199171066 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:06.200998068 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:06.201066971 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:06.206892014 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:06.206998110 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:06.248503923 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.248563051 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:06.248581886 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:06.248583078 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.248656034 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.250914097 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.250938892 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.295449972 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:06.298321962 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.298379898 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.298435926 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.298444986 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.298463106 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.298500061 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.298542023 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.298686981 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.302170992 CEST	49741	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.302185059 CEST	443	49741	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.677237034 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.677812099 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.677865028 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.679377079 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.706226110 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.706469059 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.706691027 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:06.757683992 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:06.955360889 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:06.955411911 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:06.955610991 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:06.961106062 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:06.961123943 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.102261066 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:07.102443933 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:07.102523088 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:07.102832079 CEST	49743	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:07.102866888 CEST	443	49743	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:07.187069893 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.187140942 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.190884113 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.190898895 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.191591024 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.235150099 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.276160955 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.382735014 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.382863998 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.382932901 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.383220911 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.383239985 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.383275986 CEST	49745	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.383282900 CEST	443	49745	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.419720888 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.419749975 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.419819117 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.420082092 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.420089960 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.638711929 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.638781071 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.662914991 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.662930965 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.663686991 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.686382055 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.728162050 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.843467951 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.843632936 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.843688011 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.846563101 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.846575975 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:07.846615076 CEST	49746	443	192.168.2.4	184.31.62.93
Apr 19, 2024 23:09:07.846620083 CEST	443	49746	184.31.62.93	192.168.2.4
Apr 19, 2024 23:09:14.172955036 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 19, 2024 23:09:14.172992945 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 19, 2024 23:09:15.803318024 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 19, 2024 23:09:15.904819965 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:15.904881954 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:15.904956102 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:15.907242060 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 19, 2024 23:09:15.907283068 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 19, 2024 23:09:15.907423019 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 19, 2024 23:09:15.908427954 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:15.908451080 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:15.936017990 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:15.976138115 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.200299025 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.200351954 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.200442076 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:16.200479031 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.200517893 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.200577021 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:16.201255083 CEST	49735	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:16.201281071 CEST	443	49735	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.215104103 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:16.215267897 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:16.215395927 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:16.266123056 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.266552925 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:16.266576052 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.268011093 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.268438101 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:16.268625975 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:16.445904970 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:16.492398024 CEST	49742	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:09:16.492428064 CEST	443	49742	142.250.9.104	192.168.2.4
Apr 19, 2024 23:09:16.493051052 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.493103027 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.493262053 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.494757891 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.494771957 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.496131897 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.496212006 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.496335030 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.496702909 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.496737003 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.909490108 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.910146952 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.910192966 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.910999060 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.911617994 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.911818981 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.911988020 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.919667959 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.919982910 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.920015097 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.921176910 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.922236919 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.922411919 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.922581911 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:16.952145100 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:16.964143038 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.323360920 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.323419094 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.323468924 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.323493004 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:17.323515892 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.323532104 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:17.323591948 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.323649883 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:17.328990936 CEST	49753	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:17.329026937 CEST	443	49753	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.338325977 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.338421106 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.338515997 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.338915110 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.338949919 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.343641996 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.343664885 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.343733072 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:17.343751907 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.343761921 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.343794107 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:17.344692945 CEST	49752	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:17.344705105 CEST	443	49752	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:17.361466885 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.361514091 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.361589909 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.362132072 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.362159014 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.756383896 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.756678104 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.756725073 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.757863998 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.758207083 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.758368015 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.758398056 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.781380892 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.781614065 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.781675100 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.782016993 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.782313108 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.782392025 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:17.782426119 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.807358980 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.824632883 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:17.824692965 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.171226025 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.171292067 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.171339035 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.171385050 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:18.171428919 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.171449900 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:18.171566963 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.171622992 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:18.203731060 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.203782082 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.203879118 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:18.203922987 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.203952074 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.205064058 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:18.221182108 CEST	49756	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:18.221220970 CEST	443	49756	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:18.221496105 CEST	49755	443	192.168.2.4	54.171.140.60
Apr 19, 2024 23:09:18.221513987 CEST	443	49755	54.171.140.60	192.168.2.4
Apr 19, 2024 23:09:25.877794981 CEST	49758	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:25.877876997 CEST	443	49758	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:25.877978086 CEST	49758	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:25.879626989 CEST	49758	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:25.879707098 CEST	443	49758	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:25.886121988 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:25.932117939 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:26.063479900 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:26.063658953 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:26.063718081 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:26.063910961 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:26.063927889 CEST	443	49750	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:26.063935041 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:26.064013004 CEST	49750	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:26.066001892 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.066050053 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.066133976 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.066368103 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.066386938 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.235542059 CEST	443	49758	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:26.235882044 CEST	49758	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:26.235924959 CEST	443	49758	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:26.236428976 CEST	443	49758	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:26.236816883 CEST	49758	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:26.236911058 CEST	443	49758	54.187.126.227	192.168.2.4
Apr 19, 2024 23:09:26.276478052 CEST	49758	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:09:26.493941069 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.494409084 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.494462967 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.495603085 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.496057987 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.496192932 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.496206999 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.496280909 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.545259953 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.920953035 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.921112061 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.921185970 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.921740055 CEST	49759	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.921786070 CEST	443	49759	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.923614025 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.923712015 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:26.923800945 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.923985004 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:26.924002886 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.336087942 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.355617046 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.355669022 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.356930971 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.357701063 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.357889891 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.357894897 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.398457050 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.398488045 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952127934 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952200890 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952222109 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952239990 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952269077 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.952284098 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952299118 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.952306986 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952327013 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.952337027 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952343941 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.952380896 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:27.952450991 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952610970 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:27.952754021 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.061707973 CEST	49760	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.061796904 CEST	443	49760	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.074835062 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.074913025 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.074997902 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.075311899 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.075337887 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.501650095 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.501935959 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.501980066 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.503130913 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.503674984 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.503806114 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.503818989 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.503870964 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.556006908 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.928555012 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.928620100 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.928639889 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.928695917 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.928741932 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.928792000 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.928803921 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:28.928863049 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.929286003 CEST	49761	443	192.168.2.4	54.154.82.165
Apr 19, 2024 23:09:28.929312944 CEST	443	49761	54.154.82.165	192.168.2.4
Apr 19, 2024 23:09:32.077934027 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.078016043 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.078217030 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.079144955 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:32.079154015 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:32.079240084 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:32.079817057 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.079866886 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.079955101 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.081515074 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.081542015 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.081708908 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:32.081724882 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:32.082593918 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.082611084 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.302623034 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:32.302845001 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:32.302862883 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:32.303621054 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.303824902 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.303838968 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.304339886 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:32.304390907 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:32.305437088 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.305485964 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.306287050 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:32.306370974 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:32.307411909 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.307512045 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.313749075 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.313954115 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.313982964 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.315587044 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.315669060 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.316513062 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.316596031 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.316643000 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.339926958 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.340033054 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.340130091 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.340419054 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.340459108 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.360152006 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.361145973 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.361145973 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:32.361157894 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.361172915 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:32.361193895 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.361210108 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.406570911 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.406570911 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:32.406575918 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.524796009 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.524857998 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.524878025 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.524916887 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.524928093 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.524935961 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.524960041 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.524969101 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.524981976 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.524988890 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.525012970 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.525048971 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.542032957 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.542059898 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.542094946 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.542103052 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.542145967 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.542166948 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.560648918 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.561019897 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.561062098 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.562180042 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.562593937 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.562731028 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.562741995 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.562778950 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.616066933 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.621718884 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.621742010 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.621782064 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.621788979 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.621817112 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.621848106 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.641964912 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.641983986 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.642024994 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.642030001 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.642059088 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.642077923 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.661014080 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.661034107 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.661075115 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.661079884 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.661117077 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.719321966 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.719357014 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.719388962 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.719403028 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.719418049 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.719444036 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.720120907 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.720208883 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.720328093 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.720418930 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.720432043 CEST	443	49770	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:32.720443010 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:32.720479012 CEST	49770	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.112095118 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.112123013 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.112173080 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.112236977 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.112308979 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.113023996 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.113076925 CEST	443	49775	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.113127947 CEST	49775	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.118704081 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.126163006 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.126202106 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.126256943 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.126502991 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.126518011 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.146037102 CEST	49779	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.146101952 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.146179914 CEST	49779	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.150538921 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.150563955 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.150623083 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.153135061 CEST	49779	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.153176069 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.153279066 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.153292894 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.154400110 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.154426098 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.154476881 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.155489922 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.155514956 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.155997992 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.156065941 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.156130075 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.156481028 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.156507015 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.164115906 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.227571011 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.227608919 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.227659941 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.227823019 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.227833033 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.339011908 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.339303970 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.339323044 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.340348959 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.340440989 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.340827942 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.340886116 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.340940952 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.375718117 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.376020908 CEST	49779	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.376032114 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.377743959 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.378890038 CEST	49779	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.378911972 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.378983974 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.379100084 CEST	49779	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.379300117 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.379312038 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.380012989 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.380085945 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.380352974 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.380445957 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.380506992 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.380526066 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.380614042 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.381043911 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.381222010 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.381251097 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.382160902 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.382225990 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.382646084 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.382731915 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.382756948 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.382885933 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.382957935 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.383219957 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.383312941 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.383332014 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.384118080 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.390083075 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.390091896 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.420166016 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.424113035 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.424118042 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.424138069 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.424801111 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.424802065 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.424818993 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.424819946 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.432272911 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.445914984 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.446110964 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.446135998 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.449120998 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.449188948 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.449678898 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.449758053 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.449868917 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.449877024 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.467822075 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.467828035 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.499885082 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.560816050 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.560842991 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.560905933 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.560914993 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.561078072 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.561449051 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.564764977 CEST	49773	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.564774990 CEST	443	49773	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.574850082 CEST	49787	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.574882030 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.574935913 CEST	49787	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.575165987 CEST	49787	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.575179100 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.579349995 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.579399109 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.579497099 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.580034971 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.580065012 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.617214918 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.617419958 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.617475033 CEST	49779	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.619024038 CEST	49779	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.619039059 CEST	443	49779	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.626816034 CEST	49789	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.626851082 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.627069950 CEST	49789	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.627253056 CEST	49789	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.627268076 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.636033058 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.636050940 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.636154890 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.636425972 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.636437893 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.789060116 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.800069094 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.805649042 CEST	49787	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.805679083 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.806155920 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.806588888 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.806615114 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.807250023 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.807290077 CEST	49787	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.807373047 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.807728052 CEST	49787	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.808003902 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.808130980 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.808223963 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.845848083 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.846143961 CEST	49789	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.846162081 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.847263098 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.848124981 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.848311901 CEST	49789	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.848495007 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.848730087 CEST	49789	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.851397991 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.851661921 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.851675034 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.852041960 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.852066040 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.852161884 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.852926970 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.853004932 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.853039980 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.872083902 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.878181934 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.878190041 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.878232002 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.878271103 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.878285885 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.878315926 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.892148018 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.893162966 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.893173933 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.909967899 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.910193920 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.910255909 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.911169052 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.911226988 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.911287069 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.911315918 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.911406994 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.911508083 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.928478956 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:33.933603048 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.951092005 CEST	49781	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.951119900 CEST	443	49781	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.953373909 CEST	49782	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.953397989 CEST	443	49782	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.957269907 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.957278967 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.957340956 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.957376003 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.957391977 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.957391977 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.957406998 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.957417965 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.957433939 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.957474947 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.962255001 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.962315083 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.962358952 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.962371111 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.962387085 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.962414026 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.962435007 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.962447882 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.962855101 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.962918997 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.962980032 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.962991953 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.963027000 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.964629889 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.964762926 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.964864969 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.972115993 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:33.978072882 CEST	49792	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.978101015 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.978219032 CEST	49792	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.978773117 CEST	49793	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.978838921 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.978898048 CEST	49793	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.979528904 CEST	49793	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.979557037 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.980073929 CEST	49792	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.980087996 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.981034040 CEST	49778	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.981045961 CEST	443	49778	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.989173889 CEST	49794	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.989249945 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.989315033 CEST	49794	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.989849091 CEST	49794	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.989882946 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.990842104 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.990885019 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.991079092 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.991386890 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.991408110 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.992352009 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.992410898 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.992490053 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.992767096 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.992800951 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.994848013 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.994864941 CEST	443	49783	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:33.994875908 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:33.994910002 CEST	49783	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.011368990 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.027477026 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.027527094 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.027750015 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.027767897 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.028178930 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.028247118 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.028760910 CEST	49788	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.028773069 CEST	443	49788	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.039652109 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.039719105 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.039722919 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.039747000 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.039783001 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.039804935 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.043770075 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.043844938 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.051101923 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051161051 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051233053 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051242113 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.051263094 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051312923 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051354885 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051357985 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.051367998 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051389933 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.051455021 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051496029 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051536083 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.051536083 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051547050 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051578045 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.051616907 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.051671028 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.051678896 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.052274942 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.052314997 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.052345037 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.052351952 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.052387953 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.052434921 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.052439928 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.052479982 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.052484989 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.052496910 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.052540064 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.054032087 CEST	49772	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.054047108 CEST	443	49772	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.062707901 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.062957048 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.063021898 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.065119028 CEST	49790	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.065129042 CEST	443	49790	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.065967083 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.066015959 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.066052914 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.066061020 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.066104889 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.066128969 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.103965044 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.104011059 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.104083061 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.104348898 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.104367018 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.107616901 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.130081892 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.130105972 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.130146980 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.130182981 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.130182981 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.130196095 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.130206108 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.130232096 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.146822929 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.146888018 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.146902084 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.146909952 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.146960020 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.152581930 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.152647972 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.152653933 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.152713060 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.153014898 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.153088093 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.157305956 CEST	49780	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.157311916 CEST	443	49780	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.192745924 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.193028927 CEST	49792	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.193043947 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.193418026 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.194367886 CEST	49792	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.194444895 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.194577932 CEST	49792	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.199318886 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.199759960 CEST	49793	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.199822903 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.200242043 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.200617075 CEST	49793	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.200689077 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.200898886 CEST	49793	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.205189943 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.205447912 CEST	49794	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.205495119 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.205986977 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.206543922 CEST	49794	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.206665039 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.206871033 CEST	49794	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.210165024 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.212450027 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.212471008 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.212965012 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.213723898 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.213831902 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.213901997 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.213910103 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.213972092 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.214246035 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.214257956 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.217772961 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.217870951 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.218394995 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.218555927 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.218640089 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.218648911 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.240122080 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.244144917 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.248143911 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.260909081 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.260909081 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.313855886 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.314138889 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.314191103 CEST	49787	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.315063953 CEST	49787	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.315083027 CEST	443	49787	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.319322109 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.319803953 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.319819927 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.321253061 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.321319103 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.322041035 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.322122097 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.322314024 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.322324991 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.363085032 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.386229038 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.386387110 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.386434078 CEST	49789	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.387181997 CEST	49789	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.387190104 CEST	443	49789	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.590029001 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.590090036 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.590137959 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.590156078 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.590186119 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.590261936 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.590266943 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.590277910 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.590323925 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.590332985 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.590348959 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.590411901 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.590791941 CEST	49797	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:34.590811014 CEST	443	49797	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:34.730251074 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.730596066 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.730681896 CEST	49793	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.730916023 CEST	49793	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.730952978 CEST	443	49793	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.739923000 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.740308046 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.740364075 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.740591049 CEST	49796	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.740603924 CEST	443	49796	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.744288921 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.744318008 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.744360924 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.744380951 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.744440079 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.744488955 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.744904995 CEST	49795	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.744920015 CEST	443	49795	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.757530928 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.757698059 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.757813931 CEST	49794	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.758125067 CEST	49794	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.758160114 CEST	443	49794	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.758196115 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.758402109 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.758625984 CEST	49792	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.759891987 CEST	49792	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.759907007 CEST	443	49792	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.989001989 CEST	49801	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.989047050 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:34.989408016 CEST	49801	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.990027905 CEST	49801	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:34.990046024 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.006666899 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.006690025 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.006815910 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.007086039 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.007112980 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.011177063 CEST	49803	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.011241913 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.011346102 CEST	49803	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.011518955 CEST	49803	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.011563063 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.093231916 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.093271017 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.093334913 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.093841076 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.093858004 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.110037088 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.110086918 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.110198975 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.110728025 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.110759020 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.203283072 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.217819929 CEST	49801	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.217843056 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.218398094 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.218976974 CEST	49801	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.219063997 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.219574928 CEST	49801	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.220293999 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.220566034 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.220582008 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.221041918 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.221666098 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.221746922 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.221777916 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.224571943 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.225204945 CEST	49803	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.225238085 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.225749016 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.227264881 CEST	49803	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.227397919 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.227547884 CEST	49803	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.260126114 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.263135910 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.263147116 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.268142939 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.313133001 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.313600063 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.313627005 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.315495014 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.315557957 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.316721916 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.316800117 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.317003012 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.317012072 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.323060036 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.323302984 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.323344946 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.324790955 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.324862957 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.325418949 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.325506926 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.325534105 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.368114948 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.371856928 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.371862888 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.371866941 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.417449951 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.578634024 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.578701019 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.578880072 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.617145061 CEST	49804	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.617165089 CEST	443	49804	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.618272066 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.618338108 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.618390083 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.618419886 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.618437052 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.618490934 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.618529081 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.618622065 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.618679047 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.639870882 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.639909029 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.639972925 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.649116039 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.649132967 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.676367044 CEST	49805	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.676430941 CEST	443	49805	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.761182070 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.761390924 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.762444019 CEST	49801	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.772308111 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.772459030 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.773171902 CEST	49803	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.784734964 CEST	49803	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.784769058 CEST	443	49803	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.786413908 CEST	49801	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.786449909 CEST	443	49801	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.789773941 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.789889097 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.789952993 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.794975042 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.795013905 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.795084000 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.795509100 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:35.795526981 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:35.801337004 CEST	49802	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.801372051 CEST	443	49802	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.810600996 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.810611010 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.810890913 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.811120033 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:35.811134100 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:35.861656904 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.862262964 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.862282991 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.862730980 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.863301992 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.863388062 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:35.863679886 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:35.904164076 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.008470058 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:36.008750916 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:36.008764982 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:36.009608030 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:36.009668112 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:36.010008097 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:36.010059118 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:36.010270119 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:36.010277987 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:36.034908056 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:36.035116911 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:36.035126925 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:36.036703110 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:36.037096024 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:36.037204027 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:36.037307978 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:36.064821959 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:36.080373049 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:36.128504992 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.128626108 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.128695011 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.128717899 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.128746986 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.128792048 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.128837109 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129004002 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129106998 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129163027 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.129179001 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129267931 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129324913 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.129334927 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129371881 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.129384041 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129493952 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129539013 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.129548073 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129688978 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129738092 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.129748106 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129848957 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.129892111 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.129904032 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.130481005 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.130541086 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.130549908 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.130637884 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.130692959 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.130700111 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.130804062 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.130909920 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.130918980 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.131431103 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.131474972 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.131488085 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.131584883 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.131628036 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.131639957 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.131742001 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.131786108 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.131797075 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.132232904 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.132282972 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.132292032 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.132384062 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.132426023 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.132437944 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.133059978 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.133112907 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.133121967 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.133219957 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.133310080 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.133361101 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.133369923 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.133415937 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.133428097 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.133985996 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.134041071 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.134052038 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.134145975 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.134203911 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.134224892 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.134237051 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.188354969 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.232445955 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.232485056 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.232516050 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.233006954 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.233088017 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.233099937 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.233505964 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.233584881 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.233593941 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.233633995 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.234404087 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.234486103 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.234499931 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.234550953 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.235358953 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.235431910 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.235461950 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.235518932 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.236057997 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.236123085 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.236192942 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.236242056 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.237050056 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.237128019 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.237159014 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.237217903 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.237922907 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.237988949 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.238013029 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.238069057 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.238729954 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.238794088 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.238818884 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.238877058 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.259011030 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:36.259104967 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:36.259294033 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:36.259892941 CEST	49809	443	192.168.2.4	18.64.156.27
Apr 19, 2024 23:09:36.259910107 CEST	443	49809	18.64.156.27	192.168.2.4
Apr 19, 2024 23:09:36.297301054 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:36.297369957 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:36.297519922 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:36.298135996 CEST	49808	443	192.168.2.4	172.64.155.119
Apr 19, 2024 23:09:36.298144102 CEST	443	49808	172.64.155.119	192.168.2.4
Apr 19, 2024 23:09:36.336404085 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.336473942 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.336478949 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.336507082 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.336530924 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.336545944 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.336944103 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.337011099 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.337038994 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.337110043 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.337591887 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.337656975 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.337707043 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.337769985 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.338550091 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.338608980 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.339329004 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.339397907 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.339417934 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.339476109 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.339499950 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.339544058 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.340349913 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.340421915 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.340429068 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.340439081 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.340470076 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.341185093 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.341250896 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.342139006 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.342199087 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.342220068 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.342277050 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.342961073 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.343019009 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.343039036 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.343086958 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.343929052 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.343982935 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.344018936 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.344069958 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.344835043 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.344896078 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.344896078 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.344918966 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.344940901 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.345721006 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.345787048 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.345793009 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.345813990 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.345840931 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.347774982 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.347825050 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.347855091 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.347863913 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.347892046 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.349411964 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.349468946 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.349490881 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.349503040 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.349519968 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.351147890 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.351192951 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.351218939 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.351227999 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.351243019 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.352897882 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.352943897 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.352973938 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.352983952 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.353009939 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.355089903 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.355153084 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.355154991 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.355178118 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.355210066 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.356895924 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.356966019 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.356970072 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.356996059 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.357028961 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.358620882 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.358664989 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.358695030 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.358705044 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.358829975 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.365679026 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.365685940 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.365757942 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.440393925 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.440443993 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.440470934 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.440485954 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.440515041 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.440526962 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.441796064 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.441879034 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.441894054 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.441901922 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.441956997 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.441956997 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.441968918 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.443898916 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.443954945 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.443965912 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.443979979 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.444005966 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.445647001 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.445688963 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.445722103 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.445735931 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.445766926 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.447443962 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.447501898 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.447510958 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.447526932 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.447560072 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.449228048 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.449270010 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.449289083 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.449299097 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.449326038 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.450917006 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.450970888 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.451003075 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.451010942 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.451029062 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.451147079 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.451208115 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.452475071 CEST	49807	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.452490091 CEST	443	49807	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.484957933 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.485064030 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.485143900 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.485954046 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.485994101 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.698662043 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.699501991 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.699573040 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.700043917 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.700494051 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.700591087 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.700911999 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.748117924 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.970679998 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.970760107 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.970844030 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.970896959 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.970954895 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971004009 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971072912 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971451998 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.971491098 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971551895 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.971738100 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971817970 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971868992 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971915960 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971925020 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.971934080 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.971961021 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.972629070 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.972678900 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.972678900 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.972698927 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.972774029 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.972775936 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.972790003 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.972829103 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.972845078 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.973500013 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.973543882 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.973551035 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.973606110 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.973651886 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.973656893 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.973668098 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.973707914 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.973718882 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.974590063 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.974630117 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.974638939 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.974693060 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.974742889 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.974786043 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.974793911 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.974832058 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.974838972 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.975502968 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.975553036 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.975555897 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.975568056 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.975634098 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.975641966 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.975693941 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.975742102 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.975749016 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.976383924 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.976444006 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:36.976452112 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:36.976531982 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.074599981 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.074686050 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.075195074 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.075263977 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.075776100 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.075829983 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.075849056 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.075885057 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.075917006 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.075922012 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.075979948 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.075995922 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.076041937 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.076910019 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.076956034 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.076992035 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.077004910 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.077038050 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.077056885 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.077790022 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.077843904 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.078793049 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.078871965 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.078885078 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.078937054 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.079814911 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.079869986 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.079883099 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.079895020 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.079922915 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.080848932 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.080909014 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.080914974 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.080929041 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.080957890 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.081226110 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.081269026 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.081285954 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.081298113 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.081324100 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.132817984 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.178738117 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.178802013 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.178814888 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.178834915 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.178864956 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.178886890 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.179297924 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.179359913 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.179373026 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.179419994 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.179431915 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.179531097 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.179615021 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.180183887 CEST	49810	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.180217028 CEST	443	49810	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.261090040 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.261133909 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.261255026 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.261631966 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.261646986 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.262360096 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.262389898 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.262511969 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.262870073 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.262892962 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.263288975 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.263324976 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.263521910 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.263679028 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.263690948 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.266303062 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.266356945 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.266494989 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.266732931 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.266748905 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.475272894 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.475579023 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.475600004 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.475950956 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.476161003 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.476321936 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.476387978 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.476599932 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.476613998 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.476747036 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.477134943 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.477560997 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.477611065 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.477643013 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.481024981 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.481210947 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.481235027 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.484715939 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.484827042 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.484891891 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.484910011 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.484939098 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.485258102 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.485380888 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.485389948 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.485429049 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.486025095 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.486305952 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.486397982 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.486478090 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.520112991 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.523454905 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.539050102 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.539061069 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.539110899 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.585928917 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.737404108 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.737427950 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.737456083 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.737469912 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.737605095 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.737605095 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.737636089 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.737692118 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.737736940 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.737746000 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.738084078 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.738104105 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.738131046 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.738138914 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.738181114 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.738442898 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.738516092 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.738578081 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.746237040 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746300936 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746337891 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746376038 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746383905 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.746404886 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746423006 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.746458054 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746495962 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746525049 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746535063 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.746545076 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746586084 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.746854067 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746896982 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.746903896 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746954918 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.746992111 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.746993065 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.747010946 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.747051954 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.747689962 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.747750998 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.747791052 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.747838020 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.747847080 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.747869015 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.747911930 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.749716997 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.749792099 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.749835968 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.749877930 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.749906063 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.749922037 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.749965906 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.750004053 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.750004053 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.750011921 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.750134945 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.750175953 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.750190020 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.750197887 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.750232935 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.750247955 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.750879049 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.750957012 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.750962973 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751000881 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751070023 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751084089 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.751091957 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751138926 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751178980 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.751184940 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751282930 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.751749039 CEST	49812	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.751765013 CEST	443	49812	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751869917 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751940966 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.751981974 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752021074 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752052069 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.752058983 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752068043 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.752767086 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752808094 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752846956 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752846956 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.752861023 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752918005 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.752922058 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752935886 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.752954960 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.753825903 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.753866911 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.753891945 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.753905058 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.753916979 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.753966093 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.753988981 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.754029036 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.754044056 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.754673004 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.754719973 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.754755974 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.754757881 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.754767895 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.754803896 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.754831076 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.754924059 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.754940987 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.755609035 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.755847931 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.755858898 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.757488966 CEST	49813	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.757505894 CEST	443	49813	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.757627010 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.757757902 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.757849932 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.757867098 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.757942915 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.757993937 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.758002043 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758080006 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758126020 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.758131981 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758238077 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758315086 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758328915 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.758336067 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758405924 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.758411884 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758527994 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758573055 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.758579016 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758829117 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758904934 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.758950949 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.758958101 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.759037971 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.759084940 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.759090900 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.759131908 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.759136915 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.759646893 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.759696960 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.759704113 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.759782076 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.759829044 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.759835005 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.760421038 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.760466099 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.760472059 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.760582924 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.760628939 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.760636091 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.760718107 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.760792017 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.760834932 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.760842085 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.761004925 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.761306047 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.761661053 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.761709929 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.761717081 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.761795044 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.761866093 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.761872053 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.761890888 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.762188911 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.762275934 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.762448072 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.762522936 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.762564898 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.762572050 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.762654066 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.762700081 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.762706041 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.762972116 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.763269901 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.763338089 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.800458908 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.800498009 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.800601006 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.801001072 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.801021099 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.803172112 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.803260088 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.803605080 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.803985119 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.804018974 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.804667950 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.853817940 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.853836060 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.853907108 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.854218960 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.854321003 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.854406118 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.863671064 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.863745928 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.863851070 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.863965988 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864022970 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.864032030 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864061117 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864108086 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.864115000 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864188910 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864247084 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.864253044 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864281893 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864331961 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.864339113 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864383936 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864440918 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.864448071 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864898920 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.864945889 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.864953041 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.865477085 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.865533113 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.865539074 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.868693113 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.868762016 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.868767977 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.868782043 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.868832111 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.868840933 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.869469881 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.869512081 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.869518995 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.869575977 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.869626045 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.869632006 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.869667053 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.869724989 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.869730949 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.869749069 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.869793892 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.869800091 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.912503004 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.912601948 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.912612915 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.912652016 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.912659883 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.912691116 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.912718058 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.944128990 CEST	49811	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.944149017 CEST	443	49811	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.957968950 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:37.969604969 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.969626904 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.969744921 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.970212936 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.970235109 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.970345020 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.970583916 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:37.971159935 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.012536049 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.017442942 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.020905972 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.020947933 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.021015882 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.021044970 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.021356106 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.021469116 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.021704912 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.021760941 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.021827936 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.022738934 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.022830009 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.022839069 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.030147076 CEST	49817	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.030177116 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.030399084 CEST	49817	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.030476093 CEST	49817	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.030482054 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.030711889 CEST	49814	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.030730963 CEST	443	49814	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.064116001 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.064151049 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.064176083 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.089456081 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.089499950 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.089557886 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.090775013 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.090841055 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.090914965 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.091018915 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.091034889 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.091321945 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.091356993 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.235527992 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.235567093 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.235647917 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.235903025 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.235920906 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.244128942 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.244386911 CEST	49817	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.244407892 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.244858027 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.246191978 CEST	49817	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.246272087 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.246511936 CEST	49817	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283018112 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283061028 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283071041 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283092022 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283097982 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283114910 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283124924 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283132076 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283159971 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283160925 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283173084 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283185959 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283190966 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283216000 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283233881 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283288956 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283288956 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283364058 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283381939 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283401966 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283409119 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283449888 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283593893 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283632040 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283651114 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283663988 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283703089 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283708096 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283723116 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283725023 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283770084 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283772945 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283798933 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283809900 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283817053 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283853054 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.283857107 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283868074 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.283906937 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.284153938 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.284243107 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.284281015 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.284281969 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.284293890 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.284328938 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.284341097 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.285074949 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.285145998 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.288193941 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.303982973 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.306879997 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.306942940 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.307271957 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.307975054 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.308048964 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.308137894 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.310586929 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.310805082 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.310828924 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.311903954 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.312441111 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.312536001 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.312541008 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.312608957 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.352169037 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.361558914 CEST	49815	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.361569881 CEST	443	49815	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.363837957 CEST	49816	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.363872051 CEST	443	49816	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.367100954 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.453737020 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.485116959 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.485143900 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.486268044 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.487602949 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.487777948 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.488491058 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.507904053 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.507982969 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.508035898 CEST	49817	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.516643047 CEST	49817	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.516671896 CEST	443	49817	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.532129049 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.549909115 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.549935102 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.549994946 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.550229073 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.550242901 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568619013 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568660021 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568691015 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568710089 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.568720102 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568732023 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568766117 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.568789005 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568814039 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568833113 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.568856955 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568912029 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.568916082 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.568964958 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.574376106 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.574498892 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.574556112 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.574582100 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.574665070 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.574713945 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.574721098 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.574862957 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.574908018 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.668571949 CEST	49818	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.668600082 CEST	443	49818	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.669682980 CEST	49819	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.669722080 CEST	443	49819	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.676898003 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.676928997 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.676987886 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.677211046 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.677223921 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.678565025 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.678602934 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.678666115 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.678885937 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.678904057 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.720684052 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.720815897 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.720870972 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.720895052 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.720993042 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721039057 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.721046925 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721175909 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721220970 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.721227884 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721333027 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721375942 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.721381903 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721493006 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721538067 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.721544981 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721663952 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721712112 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.721718073 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721818924 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.721863031 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.721869946 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.722064018 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.722109079 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.722115040 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.722218990 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.722263098 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.722269058 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.722383022 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.722423077 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.722429037 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.722951889 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.722997904 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.723006964 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.723120928 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.723170996 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.723177910 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.723741055 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.723788977 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.723795891 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.723922014 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.723969936 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.723975897 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.724073887 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.724119902 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.724126101 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.724735975 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.724786997 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.724792957 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.724894047 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.724973917 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.724983931 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.725042105 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.725086927 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.725092888 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.725646973 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.725693941 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.725699902 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.725825071 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.725872040 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.725883007 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.726541042 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.726612091 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.726618052 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.764884949 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.765094042 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.765110970 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.765547037 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.765811920 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.765882015 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.765908957 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.773601055 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.808140993 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.820554018 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.826689005 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.826772928 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.826798916 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.826853037 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.826890945 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.827039003 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.827090025 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.827404022 CEST	49821	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.827415943 CEST	443	49821	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.891582966 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.891911983 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.891936064 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.892224073 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.892647982 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.892705917 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.892894030 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.895545959 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.895764112 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.895826101 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.897329092 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.897402048 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.897880077 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.897973061 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.898010969 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.936115980 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.940125942 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.945499897 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:38.945558071 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:38.992361069 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.028531075 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.028628111 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.028678894 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.029562950 CEST	49822	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.029575109 CEST	443	49822	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.158885002 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.158937931 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.158967972 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.158981085 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.159002066 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.159030914 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.159040928 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.159048080 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.159075022 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.159090042 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.159111977 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.159765959 CEST	49823	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.159781933 CEST	443	49823	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.172810078 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.172873020 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.172915936 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.172954082 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.172991991 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.173028946 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.173054934 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.173054934 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.173120975 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.173158884 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:09:39.173166037 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.173202038 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.173743010 CEST	49824	443	192.168.2.4	104.19.178.52
Apr 19, 2024 23:09:39.173770905 CEST	443	49824	104.19.178.52	192.168.2.4
Apr 19, 2024 23:10:05.044992924 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 19, 2024 23:10:05.148669958 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 19, 2024 23:10:05.148709059 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 19, 2024 23:10:05.148772955 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 19, 2024 23:10:05.494395018 CEST	49831	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:10:05.494442940 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:05.494507074 CEST	49831	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:10:05.494772911 CEST	49831	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:10:05.494791985 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:05.738176107 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:05.738748074 CEST	49831	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:10:05.738799095 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:05.739330053 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:05.739928007 CEST	49831	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:10:05.740024090 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:05.790468931 CEST	49831	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:10:11.242398977 CEST	49758	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:10:11.242424011 CEST	443	49758	54.187.126.227	192.168.2.4
Apr 19, 2024 23:10:15.738646984 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:15.738724947 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:15.738781929 CEST	49831	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:10:15.854711056 CEST	49831	443	192.168.2.4	142.250.9.104
Apr 19, 2024 23:10:15.854753017 CEST	443	49831	142.250.9.104	192.168.2.4
Apr 19, 2024 23:10:27.848460913 CEST	49758	443	192.168.2.4	54.187.126.227
Apr 19, 2024 23:10:27.848675966 CEST	443	49758	54.187.126.227	192.168.2.4
Apr 19, 2024 23:10:27.848762035 CEST	49758	443	192.168.2.4	54.187.126.227

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 23:09:01.658823967 CEST	53	51571	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:01.739080906 CEST	53	49747	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:02.335884094 CEST	53	64572	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:03.349903107 CEST	59192	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:03.350002050 CEST	55387	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:03.458959103 CEST	53	59192	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:03.472203016 CEST	53	55387	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:04.273732901 CEST	55715	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:04.274207115 CEST	59333	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:04.379424095 CEST	53	59333	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:04.380729914 CEST	53	55715	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:05.309068918 CEST	54128	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:05.309664011 CEST	65065	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:05.417521954 CEST	53	65065	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:05.427556038 CEST	53	54128	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:05.440295935 CEST	49894	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:05.441066027 CEST	61082	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:05.545152903 CEST	53	49894	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:05.545902967 CEST	53	61082	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:16.839678049 CEST	138	138	192.168.2.4	192.168.2.255
Apr 19, 2024 23:09:19.380759954 CEST	53	49672	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:28.073931932 CEST	51490	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:28.074084997 CEST	49181	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:30.080758095 CEST	59560	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:30.080931902 CEST	60329	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:30.448653936 CEST	52039	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:30.448844910 CEST	55766	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:31.965565920 CEST	62987	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:31.965939045 CEST	62135	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:31.966623068 CEST	52085	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:31.970257044 CEST	57842	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:32.071541071 CEST	53	52085	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:32.072396040 CEST	53	62135	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:32.072673082 CEST	53	62987	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:32.074575901 CEST	53	57842	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:32.185585022 CEST	53	65224	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:32.350415945 CEST	56052	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:32.350802898 CEST	50195	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:32.835638046 CEST	64252	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:32.836167097 CEST	49816	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:33.120179892 CEST	55546	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:33.120369911 CEST	59501	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:33.225508928 CEST	53	55546	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:33.227219105 CEST	53	59501	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:33.294703960 CEST	62585	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:33.294956923 CEST	60946	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:33.352128029 CEST	53	59385	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:34.265850067 CEST	54413	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:34.266097069 CEST	55676	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:34.268609047 CEST	54927	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:34.268882990 CEST	54856	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:34.271320105 CEST	60469	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:34.271699905 CEST	61095	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:34.987622976 CEST	50404	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:34.987826109 CEST	53364	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:35.003928900 CEST	64936	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:35.004205942 CEST	60310	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:35.092108011 CEST	53	50404	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:35.092359066 CEST	53	53364	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:35.109040022 CEST	53	60310	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:35.109447002 CEST	53	64936	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:35.538654089 CEST	53	65510	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:35.686111927 CEST	63612	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:35.686460972 CEST	60888	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:35.791876078 CEST	53	63612	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:35.791897058 CEST	53	60888	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:38.321083069 CEST	53	51733	1.1.1.1	192.168.2.4
Apr 19, 2024 23:09:39.879744053 CEST	60511	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:09:39.879987001 CEST	55668	53	192.168.2.4	1.1.1.1
Apr 19, 2024 23:10:01.137703896 CEST	53	59121	1.1.1.1	192.168.2.4
Apr 19, 2024 23:10:01.449716091 CEST	53	65472	1.1.1.1	192.168.2.4
Apr 19, 2024 23:10:10.011626005 CEST	53	57004	1.1.1.1	192.168.2.4
Apr 19, 2024 23:10:29.173084974 CEST	53	64603	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 19, 2024 23:09:28.225405931 CEST	192.168.2.4	1.1.1.1	c27f	(Port unreachable)	Destination Unreachable
Apr 19, 2024 23:09:30.639471054 CEST	192.168.2.4	1.1.1.1	c26d	(Port unreachable)	Destination Unreachable
Apr 19, 2024 23:09:34.472424030 CEST	192.168.2.4	1.1.1.1	c26d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 23:09:03.349903107 CEST	192.168.2.4	1.1.1.1	0x4ded	Standard query (0)	mail-cloudstation-us-west-2.prod.hydra.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:03.350002050 CEST	192.168.2.4	1.1.1.1	0xf321	Standard query (0)	mail-cloudstation-us-west-2.prod.hydra.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:04.273732901 CEST	192.168.2.4	1.1.1.1	0x84fb	Standard query (0)	cloud.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:04.274207115 CEST	192.168.2.4	1.1.1.1	0x1ce	Standard query (0)	cloud.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:05.309068918 CEST	192.168.2.4	1.1.1.1	0xfdac	Standard query (0)	cloud.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.309664011 CEST	192.168.2.4	1.1.1.1	0x644b	Standard query (0)	cloud.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:05.440295935 CEST	192.168.2.4	1.1.1.1	0xdc42	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.441066027 CEST	192.168.2.4	1.1.1.1	0x17ea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:28.073931932 CEST	192.168.2.4	1.1.1.1	0xe80b	Standard query (0)	cloud-assets.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:28.074084997 CEST	192.168.2.4	1.1.1.1	0x8299	Standard query (0)	cloud-assets.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:30.080758095 CEST	192.168.2.4	1.1.1.1	0xaeba	Standard query (0)	cloud-assets.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:30.080931902 CEST	192.168.2.4	1.1.1.1	0x5321	Standard query (0)	cloud-assets.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:30.448653936 CEST	192.168.2.4	1.1.1.1	0x28ff	Standard query (0)	login.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:30.448844910 CEST	192.168.2.4	1.1.1.1	0x5525	Standard query (0)	login.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:31.965565920 CEST	192.168.2.4	1.1.1.1	0xff37	Standard query (0)	d2y1fnwu0z0lk0.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:31.965939045 CEST	192.168.2.4	1.1.1.1	0x9598	Standard query (0)	d2y1fnwu0z0lk0.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 23:09:31.966623068 CEST	192.168.2.4	1.1.1.1	0xfced	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:31.970257044 CEST	192.168.2.4	1.1.1.1	0xf5b3	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 19, 2024 23:09:32.350415945 CEST	192.168.2.4	1.1.1.1	0x8513	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:32.350802898 CEST	192.168.2.4	1.1.1.1	0x2dbc	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Apr 19, 2024 23:09:32.835638046 CEST	192.168.2.4	1.1.1.1	0xb6c8	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:32.836167097 CEST	192.168.2.4	1.1.1.1	0x59df	Standard query (0)	dc.services.visualstudio.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:33.120179892 CEST	192.168.2.4	1.1.1.1	0xff41	Standard query (0)	d2y1fnwu0z0lk0.cloudfront.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:33.120369911 CEST	192.168.2.4	1.1.1.1	0xd874	Standard query (0)	d2y1fnwu0z0lk0.cloudfront.net	65	IN (0x0001)	false
Apr 19, 2024 23:09:33.294703960 CEST	192.168.2.4	1.1.1.1	0x7dec	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:33.294956923 CEST	192.168.2.4	1.1.1.1	0x95fd	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Apr 19, 2024 23:09:34.265850067 CEST	192.168.2.4	1.1.1.1	0xcac6	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:34.266097069 CEST	192.168.2.4	1.1.1.1	0x6756	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Apr 19, 2024 23:09:34.268609047 CEST	192.168.2.4	1.1.1.1	0x402b	Standard query (0)	login.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:34.268882990 CEST	192.168.2.4	1.1.1.1	0x40dd	Standard query (0)	login.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:34.271320105 CEST	192.168.2.4	1.1.1.1	0xbe4d	Standard query (0)	dc.services.visualstudio.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:34.271699905 CEST	192.168.2.4	1.1.1.1	0x12b6	Standard query (0)	dc.services.visualstudio.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:34.987622976 CEST	192.168.2.4	1.1.1.1	0x7c7d	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:34.987826109 CEST	192.168.2.4	1.1.1.1	0x81cb	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:35.003928900 CEST	192.168.2.4	1.1.1.1	0xe751	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:35.004205942 CEST	192.168.2.4	1.1.1.1	0xcf89	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 19, 2024 23:09:35.686111927 CEST	192.168.2.4	1.1.1.1	0xac0f	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:35.686460972 CEST	192.168.2.4	1.1.1.1	0xdfae	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 19, 2024 23:09:39.879744053 CEST	192.168.2.4	1.1.1.1	0xc216	Standard query (0)	www.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:39.879987001 CEST	192.168.2.4	1.1.1.1	0x9b5a	Standard query (0)	www.sophos.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 23:09:03.458959103 CEST	1.1.1.1	192.168.2.4	0x4ded	No error (0)	mail-cloudstation-us-west-2.prod.hydra.sophos.com	mail-spinnaker-1148880338.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:03.458959103 CEST	1.1.1.1	192.168.2.4	0x4ded	No error (0)	mail-spinnaker-1148880338.us-west-2.elb.amazonaws.com		54.187.126.227	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:03.458959103 CEST	1.1.1.1	192.168.2.4	0x4ded	No error (0)	mail-spinnaker-1148880338.us-west-2.elb.amazonaws.com		44.240.188.192	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:03.458959103 CEST	1.1.1.1	192.168.2.4	0x4ded	No error (0)	mail-spinnaker-1148880338.us-west-2.elb.amazonaws.com		54.149.22.143	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:03.472203016 CEST	1.1.1.1	192.168.2.4	0xf321	No error (0)	mail-cloudstation-us-west-2.prod.hydra.sophos.com	mail-spinnaker-1148880338.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:04.380729914 CEST	1.1.1.1	192.168.2.4	0x84fb	No error (0)	cloud.sophos.com		54.154.82.165	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:04.380729914 CEST	1.1.1.1	192.168.2.4	0x84fb	No error (0)	cloud.sophos.com		54.171.140.60	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:04.380729914 CEST	1.1.1.1	192.168.2.4	0x84fb	No error (0)	cloud.sophos.com		52.51.41.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.427556038 CEST	1.1.1.1	192.168.2.4	0xfdac	No error (0)	cloud.sophos.com		54.171.140.60	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.427556038 CEST	1.1.1.1	192.168.2.4	0xfdac	No error (0)	cloud.sophos.com		52.51.41.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.427556038 CEST	1.1.1.1	192.168.2.4	0xfdac	No error (0)	cloud.sophos.com		54.154.82.165	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.545152903 CEST	1.1.1.1	192.168.2.4	0xdc42	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.545152903 CEST	1.1.1.1	192.168.2.4	0xdc42	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.545152903 CEST	1.1.1.1	192.168.2.4	0xdc42	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.545152903 CEST	1.1.1.1	192.168.2.4	0xdc42	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.545152903 CEST	1.1.1.1	192.168.2.4	0xdc42	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.545152903 CEST	1.1.1.1	192.168.2.4	0xdc42	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:05.545902967 CEST	1.1.1.1	192.168.2.4	0x17ea	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 23:09:16.928235054 CEST	1.1.1.1	192.168.2.4	0x6bcf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:16.928235054 CEST	1.1.1.1	192.168.2.4	0x6bcf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:28.179771900 CEST	1.1.1.1	192.168.2.4	0xe80b	No error (0)	cloud-assets.sophos.com	prod-san-0-dd.sophosdelivery.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:28.225325108 CEST	1.1.1.1	192.168.2.4	0x8299	No error (0)	cloud-assets.sophos.com	prod-san-0-dd.sophosdelivery.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:30.213030100 CEST	1.1.1.1	192.168.2.4	0xaeba	No error (0)	cloud-assets.sophos.com	prod-san-0-dd.sophosdelivery.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:30.228585958 CEST	1.1.1.1	192.168.2.4	0x5321	No error (0)	cloud-assets.sophos.com	prod-san-0-dd.sophosdelivery.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:30.553946972 CEST	1.1.1.1	192.168.2.4	0x28ff	No error (0)	login.sophos.com	login.sophos.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:30.639373064 CEST	1.1.1.1	192.168.2.4	0x5525	No error (0)	login.sophos.com	login.sophos.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.071541071 CEST	1.1.1.1	192.168.2.4	0xfced	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:32.071541071 CEST	1.1.1.1	192.168.2.4	0xfced	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:32.072673082 CEST	1.1.1.1	192.168.2.4	0xff37	No error (0)	d2y1fnwu0z0lk0.cloudfront.net		18.64.156.27	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:32.072673082 CEST	1.1.1.1	192.168.2.4	0xff37	No error (0)	d2y1fnwu0z0lk0.cloudfront.net		18.64.156.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:32.072673082 CEST	1.1.1.1	192.168.2.4	0xff37	No error (0)	d2y1fnwu0z0lk0.cloudfront.net		18.64.156.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:32.072673082 CEST	1.1.1.1	192.168.2.4	0xff37	No error (0)	d2y1fnwu0z0lk0.cloudfront.net		18.64.156.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:32.074575901 CEST	1.1.1.1	192.168.2.4	0xf5b3	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 19, 2024 23:09:32.455620050 CEST	1.1.1.1	192.168.2.4	0x8513	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.455692053 CEST	1.1.1.1	192.168.2.4	0x2dbc	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.940324068 CEST	1.1.1.1	192.168.2.4	0xb6c8	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.940324068 CEST	1.1.1.1	192.168.2.4	0xb6c8	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.940324068 CEST	1.1.1.1	192.168.2.4	0xb6c8	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.940324068 CEST	1.1.1.1	192.168.2.4	0xb6c8	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.940324068 CEST	1.1.1.1	192.168.2.4	0xb6c8	No error (0)	eastus-global.in.applicationinsights.azure.com	gig-ai-prod-eastus-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.941782951 CEST	1.1.1.1	192.168.2.4	0x59df	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.941782951 CEST	1.1.1.1	192.168.2.4	0x59df	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.941782951 CEST	1.1.1.1	192.168.2.4	0x59df	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.941782951 CEST	1.1.1.1	192.168.2.4	0x59df	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:32.941782951 CEST	1.1.1.1	192.168.2.4	0x59df	No error (0)	eastus-global.in.applicationinsights.azure.com	gig-ai-prod-eastus-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:33.225508928 CEST	1.1.1.1	192.168.2.4	0xff41	No error (0)	d2y1fnwu0z0lk0.cloudfront.net		18.64.156.27	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:33.225508928 CEST	1.1.1.1	192.168.2.4	0xff41	No error (0)	d2y1fnwu0z0lk0.cloudfront.net		18.64.156.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:33.225508928 CEST	1.1.1.1	192.168.2.4	0xff41	No error (0)	d2y1fnwu0z0lk0.cloudfront.net		18.64.156.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:33.225508928 CEST	1.1.1.1	192.168.2.4	0xff41	No error (0)	d2y1fnwu0z0lk0.cloudfront.net		18.64.156.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:33.399575949 CEST	1.1.1.1	192.168.2.4	0x7dec	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:33.399641037 CEST	1.1.1.1	192.168.2.4	0x95fd	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.370258093 CEST	1.1.1.1	192.168.2.4	0xcac6	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.370538950 CEST	1.1.1.1	192.168.2.4	0x6756	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.375164032 CEST	1.1.1.1	192.168.2.4	0x402b	No error (0)	login.sophos.com	login.sophos.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376810074 CEST	1.1.1.1	192.168.2.4	0x12b6	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376810074 CEST	1.1.1.1	192.168.2.4	0x12b6	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376810074 CEST	1.1.1.1	192.168.2.4	0x12b6	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376810074 CEST	1.1.1.1	192.168.2.4	0x12b6	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376810074 CEST	1.1.1.1	192.168.2.4	0x12b6	No error (0)	eastus-global.in.applicationinsights.azure.com	gig-ai-prod-eastus-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376983881 CEST	1.1.1.1	192.168.2.4	0xbe4d	No error (0)	dc.services.visualstudio.com	dc.applicationinsights.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376983881 CEST	1.1.1.1	192.168.2.4	0xbe4d	No error (0)	dc.applicationinsights.azure.com	global.in.ai.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376983881 CEST	1.1.1.1	192.168.2.4	0xbe4d	No error (0)	global.in.ai.monitor.azure.com	global.in.ai.privatelink.monitor.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376983881 CEST	1.1.1.1	192.168.2.4	0xbe4d	No error (0)	global.in.ai.privatelink.monitor.azure.com	dc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.376983881 CEST	1.1.1.1	192.168.2.4	0xbe4d	No error (0)	eastus-global.in.applicationinsights.azure.com	gig-ai-prod-eastus-global.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.469926119 CEST	1.1.1.1	192.168.2.4	0x1168	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:34.469926119 CEST	1.1.1.1	192.168.2.4	0x1168	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:34.472323895 CEST	1.1.1.1	192.168.2.4	0x40dd	No error (0)	login.sophos.com	login.sophos.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:35.092108011 CEST	1.1.1.1	192.168.2.4	0x7c7d	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:35.092108011 CEST	1.1.1.1	192.168.2.4	0x7c7d	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:35.092359066 CEST	1.1.1.1	192.168.2.4	0x81cb	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 19, 2024 23:09:35.109040022 CEST	1.1.1.1	192.168.2.4	0xcf89	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 19, 2024 23:09:35.109447002 CEST	1.1.1.1	192.168.2.4	0xe751	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:35.109447002 CEST	1.1.1.1	192.168.2.4	0xe751	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:35.791876078 CEST	1.1.1.1	192.168.2.4	0xac0f	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:35.791876078 CEST	1.1.1.1	192.168.2.4	0xac0f	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:09:35.791897058 CEST	1.1.1.1	192.168.2.4	0xdfae	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 19, 2024 23:09:40.022711992 CEST	1.1.1.1	192.168.2.4	0x9b5a	No error (0)	www.sophos.com	www.sophos.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:40.067768097 CEST	1.1.1.1	192.168.2.4	0xc216	No error (0)	www.sophos.com	www.sophos.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:53.466316938 CEST	1.1.1.1	192.168.2.4	0xd3a7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:09:53.466316938 CEST	1.1.1.1	192.168.2.4	0xd3a7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:10:14.193326950 CEST	1.1.1.1	192.168.2.4	0xcffd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:10:14.193326950 CEST	1.1.1.1	192.168.2.4	0xcffd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 23:10:44.270585060 CEST	1.1.1.1	192.168.2.4	0xb216	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 23:10:44.270585060 CEST	1.1.1.1	192.168.2.4	0xb216	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mail-cloudstation-us-west-2.prod.hydra.sophos.com

https:

cloud.sophos.com

d2y1fnwu0z0lk0.cloudfront.net

cdn.cookielaw.org

geolocation.onetrust.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	54.187.126.227	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:04 UTC	754	OUT	GET /mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a HTTP/1.1 Host: mail-cloudstation-us-west-2.prod.hydra.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:04 UTC	247	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:04 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2091 Connection: close Set-Cookie: JSESSIONID=4BC5D059A6EF6310BADB5E0FCD34662A; Path=/mail; HttpOnly vary: accept-encoding Server: -
2024-04-19 21:09:04 UTC	2091	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 53 6f 70 68 6f 73 20 43 65 6e 74 72 61 6c 20 56 65 72 73 69 6f 6e 3a 20 32 30 32 34 2e 31 35 2e 31 38 37 20 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 6f 70 68 6f 73 20 43 65 6e 74 72 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 Data Ascii: <!DOCTYPE html><html lang="en-US"><head> ... Sophos Central Version: 2024.15.187 --> <meta charset="utf-8"> <title>Sophos Central</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <link rel="shortc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	54.154.82.165	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:05 UTC	623	OUT	GET /assets/logo.png HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:05 UTC	663	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:05 GMT Content-Type: image/png;charset=UTF-8 Content-Length: 4346 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Set-Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw; Domain=sophos.com; Path=/; Secure; HttpOnly; SameSite=Lax Server: -
2024-04-19 21:09:05 UTC	4346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 68 00 00 00 33 08 06 00 00 00 7b 55 4d 95 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 10 b4 49 44 41 54 78 01 ed 5c 09 74 56 c5 15 be f7 fd 4b 0c 92 80 40 b1 50 2c 65 3b 2a 96 90 b0 85 44 8f 85 22 ad 0b 11 b4 54 a9 b6 b5 d8 ba 6f 15 f7 2c f2 20 0b 56 2c f5 e8 b1 1e 7a 3c 2a 16 b5 e2 52 89 88 22 58 c0 25 0b 04 92 40 41 45 d9 c4 05 15 d0 40 22 c9 bf bc e9 37 ef e5 bd ff bd f7 ff c9 9f 8d 48 8f ff 9c f3 fe 37 f7 ce 9d 3b 73 67 b9 73 e7 ce bc 9f c9 0c 79 95 e3 48 68 b7 10 d3 58 22 d1 97 04 f9 10 67 33 39 f6 9b 77 52 71 d6 b8 a8 34 75 f7 09 14 fc 3c 87 88 d3 c0 67 28 b8 0c 05 8d 02 be 5f 01 b7 8d 3c fc 3a 29 99 eb 49 65 2d 2a 6f 7e c5 4c d4 63 6a 14 de 81 e0 00 31 1f 25 21 76 11 fb 56 53 d1 b8 9d 8e e4 Data Ascii: PNGIHDRh3{UMsRGBIDATx\tVK@P,e;D"To, V,z<R"X%@AE@"7H7;sgsyHhX"g39wRq4u<g(_<:)Ie-*o~Lcj1%!vVS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	54.154.82.165	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:05 UTC	692	OUT	GET /assets/favicon.ico HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:06 UTC	537	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:06 GMT Content-Type: image/x-icon;charset=UTF-8 Content-Length: 1406 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Server: -
2024-04-19 21:09:06 UTC	1406	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 00 00 00 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 d0 99 40 00 d4 d4 d6 00 ff ff ff 00 dc b3 70 00 c8 88 20 00 e7 cc 9f 00 99 99 99 00 c0 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( @p w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	54.171.140.60	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:06 UTC	421	OUT	GET /assets/logo.png HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:06 UTC	534	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:06 GMT Content-Type: image/png;charset=UTF-8 Content-Length: 4346 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Server: -
2024-04-19 21:09:06 UTC	4346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 68 00 00 00 33 08 06 00 00 00 7b 55 4d 95 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 10 b4 49 44 41 54 78 01 ed 5c 09 74 56 c5 15 be f7 fd 4b 0c 92 80 40 b1 50 2c 65 3b 2a 96 90 b0 85 44 8f 85 22 ad 0b 11 b4 54 a9 b6 b5 d8 ba 6f 15 f7 2c f2 20 0b 56 2c f5 e8 b1 1e 7a 3c 2a 16 b5 e2 52 89 88 22 58 c0 25 0b 04 92 40 41 45 d9 c4 05 15 d0 40 22 c9 bf bc e9 37 ef e5 bd ff bd f7 ff c9 9f 8d 48 8f ff 9c f3 fe 37 f7 ce 9d 3b 73 67 b9 73 e7 ce bc 9f c9 0c 79 95 e3 48 68 b7 10 d3 58 22 d1 97 04 f9 10 67 33 39 f6 9b 77 52 71 d6 b8 a8 34 75 f7 09 14 fc 3c 87 88 d3 c0 67 28 b8 0c 05 8d 02 be 5f 01 b7 8d 3c fc 3a 29 99 eb 49 65 2d 2a 6f 7e c5 4c d4 63 6a 14 de 81 e0 00 31 1f 25 21 76 11 fb 56 53 d1 b8 9d 8e e4 Data Ascii: PNGIHDRh3{UMsRGBIDATx\tVK@P,e;D"To, V,z<R"X%@AE@"7H7;sgsyHhX"g39wRq4u<g(_<:)Ie-*o~Lcj1%!vVS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	54.171.140.60	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:06 UTC	424	OUT	GET /assets/favicon.ico HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:07 UTC	537	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:07 GMT Content-Type: image/x-icon;charset=UTF-8 Content-Length: 1406 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Server: -
2024-04-19 21:09:07 UTC	1406	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 00 00 00 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 d0 99 40 00 d4 d4 d6 00 ff ff ff 00 dc b3 70 00 c8 88 20 00 e7 cc 9f 00 99 99 99 00 c0 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( @p w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 21:09:07 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=122054 Date: Fri, 19 Apr 2024 21:09:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 21:09:07 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=122075 Date: Fri, 19 Apr 2024 21:09:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 21:09:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49735	54.187.126.227	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:15 UTC	863	OUT	GET /mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a/allowBlockConfirm HTTP/1.1 Host: mail-cloudstation-us-west-2.prod.hydra.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=4BC5D059A6EF6310BADB5E0FCD34662A; SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:16 UTC	247	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:16 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2263 Connection: close Set-Cookie: JSESSIONID=0C837F07464D45E4DA5064AD02D7EAF2; Path=/mail; HttpOnly vary: accept-encoding Server: -
2024-04-19 21:09:16 UTC	2263	IN	Data Raw: 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 21 2d 2d 20 53 6f 70 68 6f 73 20 43 65 6e 74 72 61 6c 20 56 65 72 73 69 6f 6e 3a 20 32 30 32 34 2e 31 35 2e 31 38 37 20 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 6f 70 68 6f 73 20 43 65 6e 74 72 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 Data Ascii: <!DOCTYPE html><html lang="en-US"><head> ... Sophos Central Version: 2024.15.187 --> <meta charset="utf-8"> <title>Sophos Central</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <link rel="shortc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49753	54.154.82.165	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:16 UTC	689	OUT	GET /assets/logo.png HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:17 UTC	534	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:17 GMT Content-Type: image/png;charset=UTF-8 Content-Length: 4346 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Server: -
2024-04-19 21:09:17 UTC	4346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 68 00 00 00 33 08 06 00 00 00 7b 55 4d 95 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 10 b4 49 44 41 54 78 01 ed 5c 09 74 56 c5 15 be f7 fd 4b 0c 92 80 40 b1 50 2c 65 3b 2a 96 90 b0 85 44 8f 85 22 ad 0b 11 b4 54 a9 b6 b5 d8 ba 6f 15 f7 2c f2 20 0b 56 2c f5 e8 b1 1e 7a 3c 2a 16 b5 e2 52 89 88 22 58 c0 25 0b 04 92 40 41 45 d9 c4 05 15 d0 40 22 c9 bf bc e9 37 ef e5 bd ff bd f7 ff c9 9f 8d 48 8f ff 9c f3 fe 37 f7 ce 9d 3b 73 67 b9 73 e7 ce bc 9f c9 0c 79 95 e3 48 68 b7 10 d3 58 22 d1 97 04 f9 10 67 33 39 f6 9b 77 52 71 d6 b8 a8 34 75 f7 09 14 fc 3c 87 88 d3 c0 67 28 b8 0c 05 8d 02 be 5f 01 b7 8d 3c fc 3a 29 99 eb 49 65 2d 2a 6f 7e c5 4c d4 63 6a 14 de 81 e0 00 31 1f 25 21 76 11 fb 56 53 d1 b8 9d 8e e4 Data Ascii: PNGIHDRh3{UMsRGBIDATx\tVK@P,e;D"To, V,z<R"X%@AE@"7H7;sgsyHhX"g39wRq4u<g(_<:)Ie-*o~Lcj1%!vVS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	54.154.82.165	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:16 UTC	697	OUT	GET /assets/success-icon.png HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:17 UTC	534	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:17 GMT Content-Type: image/png;charset=UTF-8 Content-Length: 4709 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Server: -
2024-04-19 21:09:17 UTC	4709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 5c 08 06 00 00 00 e3 ef d2 58 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 12 1f 49 44 41 54 78 01 ed 5d 0b 74 5c 45 19 9e b9 9b dd 4d d2 06 db 23 09 0f ed 03 fb 08 c9 2e a5 50 2c 6a 3d 64 37 69 4b 5b 9a 26 1b 2c da 2a 54 51 0a 02 55 11 d1 23 a8 54 54 7c 81 9e 23 28 2a da 23 ad b6 da 42 36 8f 96 d2 47 b2 1b 04 ab 48 79 b4 d9 84 46 aa b4 55 b1 2d 47 90 b6 49 93 ec de f1 fb 67 73 73 6e b6 37 dd bd 77 ef 2e 9b b4 f7 9c 3d f7 35 f3 cf cc 77 e7 ce fd e7 ff bf f9 97 b3 1c de 56 8b d5 ca d3 0d 8f 5f 84 2a 4e 11 4c 14 09 c6 f0 13 45 38 1f 3b 50 ed e3 9c f1 63 9c 31 fc f8 31 5c db 7f 55 ed 47 fe b1 9a af 56 07 ee e7 dc 0e 75 cd 8d 6d e5 f3 b3 9c 5d 07 4f 5e 29 38 f3 33 a1 5e c6 38 2f 65 82 4d 45 Data Ascii: PNGIHDR\\XsRGBIDATx]t\EM#.P,j=d7iK[&,TQU#TT\|#(#B6GHyFU-GIgssn7w.=5wV_*NLE8;Pc11\UGVum]O^)83^8/eME

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	54.171.140.60	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:17 UTC	421	OUT	GET /assets/logo.png HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:18 UTC	534	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:18 GMT Content-Type: image/png;charset=UTF-8 Content-Length: 4346 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Server: -
2024-04-19 21:09:18 UTC	4346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 68 00 00 00 33 08 06 00 00 00 7b 55 4d 95 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 10 b4 49 44 41 54 78 01 ed 5c 09 74 56 c5 15 be f7 fd 4b 0c 92 80 40 b1 50 2c 65 3b 2a 96 90 b0 85 44 8f 85 22 ad 0b 11 b4 54 a9 b6 b5 d8 ba 6f 15 f7 2c f2 20 0b 56 2c f5 e8 b1 1e 7a 3c 2a 16 b5 e2 52 89 88 22 58 c0 25 0b 04 92 40 41 45 d9 c4 05 15 d0 40 22 c9 bf bc e9 37 ef e5 bd ff bd f7 ff c9 9f 8d 48 8f ff 9c f3 fe 37 f7 ce 9d 3b 73 67 b9 73 e7 ce bc 9f c9 0c 79 95 e3 48 68 b7 10 d3 58 22 d1 97 04 f9 10 67 33 39 f6 9b 77 52 71 d6 b8 a8 34 75 f7 09 14 fc 3c 87 88 d3 c0 67 28 b8 0c 05 8d 02 be 5f 01 b7 8d 3c fc 3a 29 99 eb 49 65 2d 2a 6f 7e c5 4c d4 63 6a 14 de 81 e0 00 31 1f 25 21 76 11 fb 56 53 d1 b8 9d 8e e4 Data Ascii: PNGIHDRh3{UMsRGBIDATx\tVK@P,e;D"To, V,z<R"X%@AE@"7H7;sgsyHhX"g39wRq4u<g(_<:)Ie-*o~Lcj1%!vVS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	54.171.140.60	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:17 UTC	429	OUT	GET /assets/success-icon.png HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:18 UTC	534	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:18 GMT Content-Type: image/png;charset=UTF-8 Content-Length: 4709 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Server: -
2024-04-19 21:09:18 UTC	4709	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 5c 08 06 00 00 00 e3 ef d2 58 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 12 1f 49 44 41 54 78 01 ed 5d 0b 74 5c 45 19 9e b9 9b dd 4d d2 06 db 23 09 0f ed 03 fb 08 c9 2e a5 50 2c 6a 3d 64 37 69 4b 5b 9a 26 1b 2c da 2a 54 51 0a 02 55 11 d1 23 a8 54 54 7c 81 9e 23 28 2a da 23 ad b6 da 42 36 8f 96 d2 47 b2 1b 04 ab 48 79 b4 d9 84 46 aa b4 55 b1 2d 47 90 b6 49 93 ec de f1 fb 67 73 73 6e b6 37 dd bd 77 ef 2e 9b b4 f7 9c 3d f7 35 f3 cf cc 77 e7 ce fd e7 ff bf f9 97 b3 1c de 56 8b d5 ca d3 0d 8f 5f 84 2a 4e 11 4c 14 09 c6 f0 13 45 38 1f 3b 50 ed e3 9c f1 63 9c 31 fc f8 31 5c db 7f 55 ed 47 fe b1 9a af 56 07 ee e7 dc 0e 75 cd 8d 6d e5 f3 b3 9c 5d 07 4f 5e 29 38 f3 33 a1 5e c6 38 2f 65 82 4d 45 Data Ascii: PNGIHDR\\XsRGBIDATx]t\EM#.P,j=d7iK[&,TQU#TT\|#(#B6GHyFU-GIgssn7w.=5wV_*NLE8;Pc11\UGVum]O^)83^8/eME

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	54.187.126.227	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:25 UTC	807	OUT	GET /mail/manage/self-service HTTP/1.1 Host: mail-cloudstation-us-west-2.prod.hydra.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=0C837F07464D45E4DA5064AD02D7EAF2; SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:26 UTC	159	IN	HTTP/1.1 302 Date: Fri, 19 Apr 2024 21:09:25 GMT Content-Length: 0 Connection: close Location: https://cloud.sophos.com/manage/self-service Server: -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	54.154.82.165	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:26 UTC	724	OUT	GET /manage/self-service HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SESSION=NWM4OTU4YmItOTlmMC00YTNiLTllZWUtNzA4ZTUwZDQxODUw
2024-04-19 21:09:26 UTC	424	IN	HTTP/1.1 302 Date: Fri, 19 Apr 2024 21:09:26 GMT Content-Length: 0 Connection: close Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Set-Cookie: redirect_to=; Path=/; Secure Set-Cookie: SESSION=; Max-Age=0; Expires=Thu, 1 Jan 1970 00:00:00 GMT; Domain=sophos.com; Path=/; Secure; HttpOnly; SameSite=Lax Location: /idp/authenticate?backtrack=/manage/self-service Server: -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49760	54.154.82.165	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:27 UTC	708	OUT	GET /idp/authenticate?backtrack=/manage/self-service HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: redirect_to=
2024-04-19 21:09:27 UTC	628	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:27 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Set-Cookie: SESSION=OTgyNTRjZWEtZjVlNC00YmQ0LTlmY2UtNTZhNzNjM2VlY2Fj; Domain=sophos.com; Path=/; Secure; HttpOnly; SameSite=Lax Content-Language: en-US Server: -
2024-04-19 21:09:27 UTC	15080	IN	Data Raw: 33 61 65 30 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 0a 0a 0a 0a 0a 0a 0a 0a 20 20 20 20 3c 21 2d 2d 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 7e 0a 0a 20 20 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 20 20 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c Data Ascii: 3ae0<!doctype html> ...~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Copyright 2019 Sophos Limited. All rights reserved. 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos L
2024-04-19 21:09:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49761	54.154.82.165	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:28 UTC	666	OUT	GET /assets/loginwithb2c.js HTTP/1.1 Host: cloud.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cloud.sophos.com/idp/authenticate?backtrack=/manage/self-service Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: redirect_to=; SESSION=OTgyNTRjZWEtZjVlNC00YmQ0LTlmY2UtNTZhNzNjM2VlY2Fj
2024-04-19 21:09:28 UTC	542	IN	HTTP/1.1 200 Date: Fri, 19 Apr 2024 21:09:28 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 6666 Connection: close Vary: origin,access-control-request-method,access-control-request-headers,accept-encoding Cache-Control: no-store,no-cache,must-revalidate,max-age=0; Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Content-Security-Policy: frame-ancestors 'none' Last-Modified: Fri, 12 Apr 2024 01:17:56 GMT Accept-Ranges: bytes Server: -
2024-04-19 21:09:28 UTC	6666	IN	Data Raw: 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 2d 32 30 32 32 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 0a 20 2a 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 72 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 Data Ascii: /* * Copyright 2019-2022 Sophos Limited. All rights reserved. * * 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product * and company names mentioned are trademarks or registered trademarks of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49770	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:32 UTC	605	OUT	GET /2024.18.03.04.17/2188/fonts/Inter-Regular.woff2 HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.sophos.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:32 UTC	881	IN	HTTP/1.1 200 OK Content-Type: binary/octet-stream Content-Length: 98804 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: x-ms-version, Date, x-ms-lease-state, ETag, x-ms-blob-type, x-ms-request-id, Last-Modified, x-ms-lease-status, Accept-Ranges, Content-Type, Content-Length, Transfer-Encoding Access-Control-Max-Age: 0 Last-Modified: Thu, 18 Apr 2024 01:42:27 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 20:52:01 GMT ETag: "8070997696b1c91905fecba458f96640" Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 5ea39bd71e7885927f29b0bf01ce3b66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: ovZysLzj7K6qh5alGosKxt0l3ISRtl17IkiGob_s-uVKuMMJk7uwSw== Age: 1849
2024-04-19 21:09:32 UTC	15503	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 81 f4 00 0d 00 00 00 04 73 8c 00 01 81 96 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 06 1b 84 a0 7a 1c 81 ac 4c 06 60 00 81 ca 3c 0a 87 f5 68 86 cc 39 0b a7 6a 00 01 36 02 24 03 cf 4e 04 20 05 8c 72 07 81 c9 2f 5b 09 0a b4 d4 4f d9 cf f7 ae bd e2 35 cd 2a db a0 68 37 d0 2c 91 a0 28 fb 7f 0e b7 02 42 49 f5 bb 48 84 ff bd 8c df 7d 0a fb 30 70 56 4d 3b 27 1d 43 74 40 02 41 75 b5 5d ff 79 47 50 37 4c 6a 71 ee 5c cf 6d 4b 6a 8f c8 15 3e fb ff ff ff ff ff ff ff ff ff ff ff ff 7f 7f b2 08 dd 9a dd 4b e6 4a 3a 35 20 84 12 da a3 20 2a 0f a2 e2 57 50 58 d0 d1 13 01 4c d2 2c d7 ac 55 49 95 54 0b 1a 97 95 16 32 91 11 65 c7 56 dd 5e 7f 90 21 20 cb 86 41 78 d4 23 87 f1 c3 38 29 44 51 c0 ba 30 49 b2 0a d3 Data Ascii: wOF2szL`<h9j6$N r/[O5h7,(BIH}0pVM;'Ct@Au]yGP7Ljq\mKj>KJ:5 WPXL,UIT2eV^! Ax#8)DQ0I
2024-04-19 21:09:32 UTC	16384	IN	Data Raw: b2 ab 6a ce 2b 51 01 64 88 96 8a 54 26 d0 15 ce 75 25 02 db 8b 54 0c 68 3a 37 5f 46 e3 b9 95 16 22 54 0c 08 cc fd 44 bd a1 36 e5 a9 4e b5 6a 6a 9e 29 d1 90 62 6a 76 cd e7 4f ce a7 01 bf 4d 3c 03 1a 6d c3 44 2d 84 8f 6d 01 2f 31 55 6f 0e f9 6b 40 72 67 cb b1 cb 3d ad 20 7a 4f b5 a3 e2 e5 f2 26 59 7d 56 ce be f9 ca 03 6c f2 c7 04 21 0c a1 b8 75 02 35 6b 74 2e c4 ef 73 6d da ee b3 1c 25 b6 46 71 99 07 91 8b 82 4d 71 b3 6a 5a 11 66 a7 65 93 48 75 df 89 79 8f 6e 04 02 03 31 cc c1 18 eb 2b c7 cc 76 a9 17 55 6d 80 e7 a2 66 80 e7 e2 48 bd 2b f0 92 88 80 2c b0 45 10 d7 f9 2e 8b 9d 60 72 31 76 09 28 3e 49 4d fc bf ad 08 11 c2 2a 4a 20 58 3c 00 f6 6d b3 96 bb 79 6e 93 6a a4 31 52 32 f6 da 7e e9 c2 28 c5 a8 06 a8 e1 75 55 75 73 50 67 87 a3 ce de ac b5 cc 55 34 d7 6c Data Ascii: j+QdT&u%Th:7_F"TD6Njj)bjvOM<mD-m/1Uok@rg= zO&Y}Vl!u5kt.sm%FqMqjZfeHuyn1+vUmfH+,E.`r1v(>IM*J X<mynj1R2~(uUusPgU4l
2024-04-19 21:09:32 UTC	16384	IN	Data Raw: 9a 8f 9b 56 0b 15 e6 f2 be a5 c9 6a 88 f0 85 ce 2f c2 55 1f 44 ba 43 77 47 0b d5 5d f6 5e a0 6b 18 12 40 af f0 37 a0 77 f8 67 d0 27 30 01 a0 6f 74 4f d0 af 71 f7 a0 ff 62 85 00 01 7e df 41 da de 0e 86 2c 04 77 28 c2 0a 0b 7d 02 c3 1b c3 60 c4 e2 4a 91 9f 28 ba 2b 3a 70 17 18 13 36 0f c6 36 96 4f c6 e9 ad f8 c0 6f c0 84 30 75 30 31 70 2e 80 a8 b6 3d 83 49 8b 4b 77 32 7d 95 d2 66 33 89 d6 5f a9 6d 0e 93 58 03 85 fb 5a bc f1 da f8 93 04 dc 17 f1 5a 3a a4 49 c7 db 19 02 7f 00 33 bf d6 27 59 b2 ec fe 65 bb ea aa 1c 39 ee ca 95 eb b3 3c 79 7c e5 cb b7 0b 09 d5 15 34 05 ac 14 2a f2 61 d3 45 de 00 8b 43 4e 60 49 a4 0d 58 1a f9 0e 64 b4 9c 27 99 f6 2b fb 94 2f 2e 2a 3e d5 c7 13 0b 4b dc 5d 13 64 b5 9f ba 93 f0 ab 77 c5 17 0d 1a f8 dd 8d 1c a8 a6 90 3f d8 1c 42 81 Data Ascii: Vj/UDCwG]^k@7wg'0otOqb~A,w(}`J(+:p66Oo0u01p.=IKw2}f3_mXZZ:I3'Ye9<y\|4aECN`IXd'+/.>K]dw?B
2024-04-19 21:09:32 UTC	16384	IN	Data Raw: f3 a9 8e 9c 52 92 74 e3 bd 8a 27 5f 7c a5 2d 46 ad 9c 6b ca 2b 19 44 6c 49 d2 10 82 a5 25 dd 3a fc de f0 4c c7 73 c5 96 e5 f7 0f f0 18 06 11 15 6f 69 08 97 6f 91 89 14 7c fc 6e 18 be 18 5d ac 6b 2f cf e6 cf 86 6e a3 15 91 f9 60 59 ae 38 68 26 fa d5 98 cd f0 95 29 ed d2 76 ea 2f 51 28 b6 fd e4 03 6d 9d 79 a9 66 68 e1 49 0f d7 9d 67 3f 13 8c 59 a8 a1 b3 c8 86 17 34 d5 dc b5 77 dd 3d a4 6a a7 7d db fa 92 ee 01 94 12 48 e6 82 55 db ab e9 00 e9 7c 00 87 4c c3 f2 c5 19 fe 41 9b 17 82 86 ef 4d 13 21 05 99 23 e1 5c d6 a0 7f 15 c0 13 a6 e3 5b 57 9f da 9b 25 11 28 ea d2 c2 3f b4 d9 9c 3c 2b 9b d2 af 8f 26 fb 86 0d 14 7f 88 83 1c 1d 19 e9 6b 38 2b cb e5 37 d5 23 5f 1d e4 44 0e 0a 6a 80 82 73 38 85 bb 53 db b8 e7 3d 1f 6f 6e 3e 0d 22 b0 40 28 7d 6a 60 90 51 2e 51 46 Data Ascii: Rt'_\|-Fk+DlI%:Lsoio\|n]k/n`Y8h&)v/Q(myfhIg?Y4w=j}HU\|LAM!#\[W%(?<+&k8+7#_Djs8S=on>"@(}j`Q.QF
2024-04-19 21:09:32 UTC	16384	IN	Data Raw: fe cd 6b 6a 8f 32 67 a2 82 50 05 9c 50 4c 3d ea 77 c9 15 34 5b ca 91 dc 9a dc 9c db b9 cc 2e 90 c1 8e 5c 1e 44 3f 31 6a e5 e2 8e 14 00 ca 9e 29 67 af dc e4 bb ee 23 20 bb 28 84 a2 91 be 7f 05 99 fb 34 54 a6 a0 f4 fc 7d 15 fa f1 5c fe f5 31 5d 90 f3 c0 a1 dc 12 74 1b d3 b9 b7 79 af 46 ee 35 68 b1 ee 3b 30 45 d1 dc 61 29 dc 26 25 c5 7d 3a f7 b9 11 a8 b8 9b 15 4b d4 f3 53 85 37 81 bd 77 d1 55 17 bf c9 bc 22 d9 8b 93 f3 f3 97 15 60 26 84 6b 32 8b 3a 92 cc 83 6f 8b af 43 37 2e 61 2d 62 dc 40 90 f0 cb 4c 55 52 78 d0 86 3f 08 81 d0 00 d2 d5 d8 f3 09 32 f7 84 8b 3a 11 2e 84 85 26 44 f5 8d 85 d3 84 5d aa c5 91 e8 b0 14 f8 2b 00 ef 88 47 ed 7c bc 53 fb be 6f 02 c1 c3 c0 1d 80 05 86 e7 b6 e5 5a ea 90 cd e4 e4 de ce 3d dd 19 a8 6f 21 2e 26 ca fb 65 46 fa 09 00 f7 5b Data Ascii: kj2gPPL=w4[.\D?1j)g# (4T}\1]tyF5h;0Ea)&%}:KS7wU"`&k2:oC7.a-b@LURx?2:.&D]+G\|SoZ=o!.&eF[
2024-04-19 21:09:32 UTC	16384	IN	Data Raw: 1e 1b e7 76 ad d6 f2 21 b6 60 c6 32 44 18 91 63 cd 22 8e 96 8c ff 46 0b a9 a9 d3 27 54 e9 be 8f 28 db f1 07 84 71 fe c8 fc e3 26 4f fd 71 69 96 c6 6f 99 d1 d7 14 bf 9a b7 c0 88 f9 92 b3 9d 4c d5 f1 75 4e 67 0d 63 94 17 71 ef d4 f3 94 e9 a8 29 79 f6 55 e0 2e 13 b1 19 4e 13 e2 a3 6a 96 91 6d dd 14 5a a4 9f ad 20 9f 3f 62 cd 92 ee 06 45 2e 06 09 a7 81 1d 33 ac d9 9c c9 2b e6 ac df 65 f2 32 1a c5 b2 01 46 a4 c6 bf 46 c2 56 22 2a 19 f8 a2 80 b1 55 ec 9f f7 d7 6a e0 c4 ca 40 4e 30 9a c5 a8 32 03 1a 6a 15 4a 1f cb ae b9 79 cc 54 fe 83 8c 60 e0 a0 21 1b ab 7b a2 99 1b 04 c8 77 39 db c9 4c 1d ad 22 12 57 95 17 71 b9 06 96 0c 03 df 61 18 ad ca 78 57 05 30 79 63 60 c3 30 7e 8f 0c 38 ce d9 4c c0 3a 78 be 80 96 52 b9 48 dc 1b cd 7a 46 57 86 39 2e f8 7c e6 c6 09 38 16 Data Ascii: v!`2Dc"F'T(q&OqioLuNgcq)yU.NjmZ ?bE.3+e2FFV"*Uj@N02jJyT`!{w9L"WqaxW0yc`0~8L:xRHzFW9.\|8
2024-04-19 21:09:32 UTC	1381	IN	Data Raw: 03 89 f5 66 c9 f3 80 06 00 08 c1 08 8a e1 04 c9 cb be b1 b0 ab 61 65 d3 a3 b3 d0 19 6a f6 ad 97 84 2f fd 74 ca ed d0 1c 59 f3 37 c7 21 90 0c 2a 38 61 13 9c 20 2d b6 76 57 84 07 c2 52 1e e8 f3 ef 7d ae d3 35 10 57 9b e1 3f 8b 9d 7f d7 16 d5 31 21 ae 15 9a b4 0a 1d 05 a4 a2 22 e0 6a 7f 54 6b 5e 9d 1e 2f 8e 46 96 dd af 5a 2d 1a 0d 51 8f 31 9b c0 dd 2f f6 20 fa 54 37 dd 24 70 a7 1f 16 96 af d3 62 19 6a 39 2a 57 2f fd da b8 a5 d4 36 c4 ae 5f bb 09 36 98 d8 8d ba e2 fa fe 2e 8c 11 c0 d2 11 b0 08 76 ec 75 c5 7a 2e 9b 02 26 8f 3e af ad 15 30 00 4a 9e 37 d1 b3 d8 6f e8 ae ba 4a 62 34 73 eb 61 12 4e 90 3c 8a 66 58 5d 34 80 10 8c a0 18 4e 90 3c 8a 66 58 dd d8 17 06 20 04 23 28 86 df 67 87 39 ea 4c a2 19 56 17 0c 20 04 23 28 26 1f 7a 61 00 96 0f 82 e4 51 6e 7c 3c cf Data Ascii: faej/tY7!8a -vWR}5W?1!"jTk^/FZ-Q1/ T7$pbj9W/6_6.vuz.&>0J7oJb4saN<fX]4N<fX #(g9LV #(&zaQn\|<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49775	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:32 UTC	602	OUT	GET /2024.18.03.04.17/2188/html/enter-email.html HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:33 UTC	860	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 3927 Connection: close Date: Fri, 19 Apr 2024 21:09:33 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: x-ms-version, Date, x-ms-lease-state, ETag, x-ms-blob-type, x-ms-request-id, Last-Modified, x-ms-lease-status, Accept-Ranges, Content-Type, Content-Length, Transfer-Encoding Access-Control-Max-Age: 0 Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "7929fc310c9a89084233c3f53312e86c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 479357dbe377f277c204c893f3e35d1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: TLmVsJRIAxd5eY1ZhuWInbY9p7VrZBEci7U6fmP_h4z79ji8J0vHPw==
2024-04-19 21:09:33 UTC	3927	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 7e 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 2d 32 30 32 33 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 20 7e 0a 20 20 7e 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 0a 20 20 7e 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 72 20 72 65 Data Ascii: <!DOCTYPE html>... ~ Copyright 2019-2023 Sophos Limited. All rights reserved. ~ ~ 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product ~ and company names mentioned are trademarks or re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49773	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	633	OUT	GET /2024.18.03.04.17/2188/images/sophos-logo.svg HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:33 UTC	503	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2483 Connection: close Date: Fri, 19 Apr 2024 21:09:34 GMT Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "55ca11ee6b441dde05cf1219e1cca259" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 56233ac1c78ee7b920e664cc0c7f287e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: oXpGNO066UT2YXiJHGwrhIzNuN9Fe-ifZDv0BB5cDsPKStyJWqBR7Q== Vary: Origin
2024-04-19 21:09:33 UTC	2483	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 33 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 33 20 32 30 22 3e 0a 20 20 20 20 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 35 2e 33 32 34 20 31 36 2e 33 31 68 39 2e 35 38 33 63 31 2e 34 39 20 30 20 32 2e 33 30 35 2d 2e 31 35 20 32 2e 37 38 32 2d 2e 34 37 36 2e 35 39 2d 2e 33 38 35 2e 39 32 35 2d 31 2e 30 33 38 2e 39 32 35 2d 31 2e 38 30 38 20 30 2d 2e 39 31 38 2d 2e 34 34 38 2d 31 2e 37 31 37 2d 31 2e 32 30 36 2d 32 2e 31 30 33 2d 2e 33 39 35 2d 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="113" height="20" viewBox="0 0 113 20"> <g fill="#FFF" fill-rule="evenodd"> <path d="M95.324 16.31h9.583c1.49 0 2.305-.15 2.782-.476.59-.385.925-1.038.925-1.808 0-.918-.448-1.717-1.206-2.103-.395-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49778	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	612	OUT	GET /2024.18.03.04.17/2188/css/email-ui.css HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.sophos.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:33 UTC	860	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 23974 Connection: close Date: Fri, 19 Apr 2024 21:09:34 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: x-ms-version, Date, x-ms-lease-state, ETag, x-ms-blob-type, x-ms-request-id, Last-Modified, x-ms-lease-status, Accept-Ranges, Content-Type, Content-Length, Transfer-Encoding Access-Control-Max-Age: 0 Last-Modified: Thu, 18 Apr 2024 01:42:26 GMT ETag: "e01b3596527e9ec6ef0c7732592412e7" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 68d7ccdfb6189940dcbc92232d1409fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: G9YnARkss1JwDEVDlDetpwuY7j-Ypz33y3lnf1hZRpwMqMscip8qqA==
2024-04-19 21:09:33 UTC	8119	IN	Data Raw: 40 69 6d 70 6f 72 74 20 22 63 6c 61 69 6d 2d 65 6c 65 6d 65 6e 74 73 2e 63 73 73 22 3b 0a 40 69 6d 70 6f 72 74 20 22 77 65 6c 63 6f 6d 65 2d 61 6e 69 6d 61 74 69 6f 6e 2e 63 73 73 22 3b 0a 40 69 6d 70 6f 72 74 20 22 66 6f 6f 74 65 72 2e 63 73 73 22 3b 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 46 6c 61 6d 61 2d 42 61 73 69 63 22 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 64 32 79 31 66 6e 77 75 30 7a 30 6c 6b 30 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 32 30 32 34 2e 31 38 2e 30 33 2e 30 34 2e 31 37 2f 32 31 38 38 2f 66 6f 6e 74 73 2f 66 6c 61 6d 61 2d 62 61 73 69 63 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 22 29 3b 0a 20 20 20 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 Data Ascii: @import "claim-elements.css";@import "welcome-animation.css";@import "footer.css";@font-face { font-family: "Flama-Basic"; src: url("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/flama-basic-webfont.eot"); /* IE9 Compat
2024-04-19 21:09:33 UTC	15855	IN	Data Raw: 72 6c 28 22 68 74 74 70 73 3a 2f 2f 64 32 79 31 66 6e 77 75 30 7a 30 6c 6b 30 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 32 30 32 34 2e 31 38 2e 30 33 2e 30 34 2e 31 37 2f 32 31 38 38 2f 66 6f 6e 74 73 2f 53 6f 70 68 6f 73 53 61 6e 73 2d 53 65 6d 69 62 6f 6c 64 49 74 61 6c 69 63 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 2f 2a 20 49 45 36 2d 49 45 38 20 2a 2f 0a 20 20 20 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 64 32 79 31 66 6e 77 75 30 7a 30 6c 6b 30 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 32 30 32 34 2e 31 38 2e 30 33 2e 30 34 2e 31 37 2f 32 31 38 38 2f 66 6f 6e 74 73 2f 53 6f 70 68 6f 73 53 61 6e 73 2d 53 65 6d 69 62 6f 6c 64 49 74 61 6c 69 63 2e 77 6f Data Ascii: rl("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.eot?#iefix") format("embedded-opentype"), /* IE6-IE8 */ url("https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/fonts/SophosSans-SemiboldItalic.wo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49779	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	629	OUT	GET /2024.18.03.04.17/2188/images/favicon.ico HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:33 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 1406 Connection: close Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 20:51:57 GMT ETag: "e68882b760c3f603dfd1c5a5a85065cf" X-Cache: Hit from cloudfront Via: 1.1 75ba6004fd6f773b72c6e827a7ab514a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: D7vQPiA5X_uzO96Zm6hq4Y4dwm6MMzxxSxcdmzhUfCajsImGOaVkhw== Age: 1057 Vary: Origin
2024-04-19 21:09:33 UTC	1406	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 00 00 00 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 d0 99 40 00 d4 d4 d6 00 ff ff ff 00 dc b3 70 00 c8 88 20 00 e7 cc 9f 00 99 99 99 00 c0 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( @p w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49780	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	568	OUT	GET /2024.18.03.04.17/2188/scripts/jquery.js HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:33 UTC	513	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 87654 Connection: close Date: Fri, 19 Apr 2024 21:09:34 GMT Last-Modified: Thu, 18 Apr 2024 01:42:29 GMT ETag: "6c216960ab2d4f6342d17c748ea91d4d" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 68d7ccdfb6189940dcbc92232d1409fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: ESSeq9qSwJHWQ_0qiXqMMsX5tEVtsz8Z-AlabEq_Vwd42JnMDnBZKg== Vary: Origin
2024-04-19 21:09:33 UTC	15871	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 0a 20 2a 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 72 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 74 68 65 Data Ascii: /** * Copyright 2024 Sophos Limited. All rights reserved. * * 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product * and company names mentioned are trademarks or registered trademarks of the
2024-04-19 21:09:33 UTC	1128	IN	Data Raw: 79 70 65 7c 7c 65 2e 68 72 65 66 7c 7c 7e 65 2e 74 61 62 49 6e 64 65 78 29 7d 2c 65 6e 61 62 6c 65 64 3a 58 28 21 31 29 2c 64 69 73 61 62 6c 65 64 3a 58 28 21 30 29 2c 63 68 65 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 21 21 65 2e 63 68 65 63 6b 65 64 7c 7c 66 65 28 65 2c 22 6f 70 74 69 6f 6e 22 29 26 26 21 21 65 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 Data Ascii: ype\|\|e.href\|\|~e.tabIndex)},enabled:X(!1),disabled:X(!0),checked:function(e){return fe(e,"input")&&!!e.checked\|\|fe(e,"option")&&!!e.selected},selected:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.fi
2024-04-19 21:09:34 UTC	16384	IN	Data Raw: 65 29 3b 66 6f 72 28 65 20 69 6e 7b 73 75 62 6d 69 74 3a 21 30 2c 72 65 73 65 74 3a 21 30 7d 29 62 2e 70 73 65 75 64 6f 73 5b 65 5d 3d 5f 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 63 5b 65 2b 22 20 22 5d 3b 69 66 28 6c 29 72 65 74 75 72 6e 20 74 3f 30 3a 6c 2e 73 6c 69 63 65 28 30 29 3b 61 3d 65 2c 73 3d 5b 5d 2c 75 3d 62 2e 70 72 65 46 69 6c 74 65 72 3b 77 68 69 6c 65 28 61 29 7b 66 6f 72 28 6f 20 69 6e 20 6e 26 26 21 28 72 3d 79 2e 65 78 65 63 28 61 29 29 7c 7c 28 72 26 26 28 61 3d 61 2e 73 6c 69 63 65 28 72 5b 30 5d 2e 6c 65 6e 67 74 68 29 7c 7c 61 29 2c 73 2e 70 75 73 68 28 69 3d 5b 5d 29 29 2c 6e 3d 21 31 2c 28 72 3d 6d 2e 65 78 65 Data Ascii: e);for(e in{submit:!0,reset:!0})b.pseudos[e]=_(e);function G(){}function Y(e,t){var n,r,i,o,a,s,u,l=c[e+" "];if(l)return t?0:l.slice(0);a=e,s=[],u=b.preFilter;while(a){for(o in n&&!(r=y.exec(a))\|\|(r&&(a=a.slice(r[0].length)\|\|a),s.push(i=[])),n=!1,(r=m.exe
2024-04-19 21:09:34 UTC	1514	IN	Data Raw: 7d 29 3b 76 61 72 20 47 3d 2f 5b 2b 2d 5d 3f 28 3f 3a 5c 64 2a 5c 2e 7c 29 5c 64 2b 28 3f 3a 5b 65 45 5d 5b 2b 2d 5d 3f 5c 64 2b 7c 29 2f 2e 73 6f 75 72 63 65 2c 59 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 47 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 51 3d 5b 22 54 6f 70 22 2c 22 52 69 67 68 74 22 2c 22 42 6f 74 74 6f 6d 22 2c 22 4c 65 66 74 22 5d 2c 4a 3d 43 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 65 29 7d 2c 5a 3d 7b 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 3b 4a 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 28 4b 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: });var G=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,Y=new RegExp("^(?:([+-])=\|)("+G+")([a-z%])$","i"),Q=["Top","Right","Bottom","Left"],J=C.documentElement,K=function(e){return ce.contains(e.ownerDocument,e)},Z={composed:!0};J.getRootNode&&(K=function(
2024-04-19 21:09:34 UTC	16384	IN	Data Raw: 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3f 74 68 69 73 2e 73 68 6f 77 28 29 3a 74 68 69 73 2e 68 69 64 65 28 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 65 28 74 68 69 73 29 3f 63 65 28 74 68 69 73 29 2e 73 68 6f 77 28 29 3a 63 65 28 74 68 69 73 29 2e 68 69 64 65 28 29 7d 29 7d 7d 29 3b 76 61 72 20 78 65 2c 62 65 2c 77 65 3d 2f 5e 28 3f 3a 63 68 65 63 6b 62 6f 78 7c 72 61 64 69 6f 29 24 2f 69 2c 54 65 3d 2f 3c 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 29 2f 69 2c 43 65 3d 2f 5e 24 7c 5e 6d 6f 64 75 6c 65 24 7c 5c 2f 28 3f 3a 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 2f 69 3b 78 65 3d 43 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 2e Data Ascii: boolean"==typeof e?e?this.show():this.hide():this.each(function(){ee(this)?ce(this).show():ce(this).hide()})}});var xe,be,we=/^(?:checkbox\|radio)$/i,Te=/<([a-z][^\/\0>\x20\t\r\n\f]*)/i,Ce=/^$\|^module$\|\/(?:java\|ecma)script/i;xe=C.createDocumentFragment().
2024-04-19 21:09:34 UTC	534	IN	Data Raw: 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 61 62 6c 65 22 29 2c 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 72 22 29 2c 6e 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 31 31 31 31 31 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 73 65 70 61 72 61 74 65 22 2c 74 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 22 2c 74 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 70 78 22 2c 6e 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 39 70 78 22 2c 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 2c 4a 2e 61 70 70 Data Ascii: C.createElement("table"),t=C.createElement("tr"),n=C.createElement("div"),e.style.cssText="position:absolute;left:-11111px;border-collapse:separate",t.style.cssText="border:1px solid",t.style.height="1px",n.style.height="9px",n.style.display="block",J.app
2024-04-19 21:09:34 UTC	16384	IN	Data Raw: 7b 76 61 72 20 74 3d 63 65 2e 63 73 73 50 72 6f 70 73 5b 65 5d 7c 7c 4b 65 5b 65 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 65 20 69 6e 20 4a 65 3f 65 3a 4b 65 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 6c 69 63 65 28 31 29 2c 6e 3d 51 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6e 2d 2d 29 69 66 28 28 65 3d 51 65 5b 6e 5d 2b 74 29 69 6e 20 4a 65 29 72 65 74 75 72 6e 20 65 7d 28 65 29 7c 7c 65 29 7d 76 61 72 20 65 74 3d 2f 5e 28 6e 6f 6e 65 7c 74 61 62 6c 65 28 3f 21 2d 63 5b 65 61 5d 29 2e 2b 29 2f 2c 74 74 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 76 69 73 69 62 69 6c 69 74 79 3a 22 68 69 64 64 65 6e 22 2c 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 Data Ascii: {var t=ce.cssProps[e]\|\|Ke[e];return t\|\|(e in Je?e:Ke[e]=function(e){var t=e[0].toUpperCase()+e.slice(1),n=Qe.length;while(n--)if((e=Qe[n]+t)in Je)return e}(e)\|\|e)}var et=/^(none\|table(?!-c[ea]).+)/,tt={position:"absolute",visibility:"hidden",display:"bloc
2024-04-19 21:09:34 UTC	16384	IN	Data Raw: 74 3a 54 74 28 63 65 2e 74 65 78 74 28 65 29 29 7d 7d 2c 73 65 6c 65 63 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6f 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 61 3d 22 73 65 6c 65 63 74 2d 6f 6e 65 22 3d 3d 3d 65 2e 74 79 70 65 2c 73 3d 61 3f 6e 75 6c 6c 3a 5b 5d 2c 75 3d 61 3f 6f 2b 31 3a 69 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 6f 3c 30 3f 75 3a 61 3f 6f 3a 30 3b 72 3c 75 3b 72 2b 2b 29 69 66 28 28 28 6e 3d 69 5b 72 5d 29 2e 73 65 6c 65 63 74 65 64 7c 7c 72 3d 3d 3d 6f 29 26 26 21 6e 2e 64 69 73 61 62 6c 65 64 26 26 28 21 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 7c 7c 21 66 65 28 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 22 6f 70 74 67 72 6f Data Ascii: t:Tt(ce.text(e))}},select:{get:function(e){var t,n,r,i=e.options,o=e.selectedIndex,a="select-one"===e.type,s=a?null:[],u=a?o+1:i.length;for(r=o<0?u:a?o:0;r<u;r++)if(((n=i[r]).selected\|\|r===o)&&!n.disabled&&(!n.parentNode.disabled\|\|!fe(n.parentNode,"optgro
2024-04-19 21:09:34 UTC	3071	IN	Data Raw: 69 63 22 3d 3d 3d 63 65 2e 63 73 73 28 65 2c 22 70 6f 73 69 74 69 6f 6e 22 29 29 65 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 65 26 26 65 21 3d 3d 72 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 28 69 3d 63 65 28 65 29 2e 6f 66 66 73 65 74 28 29 29 2e 74 6f 70 2b 3d 63 65 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 22 2c 21 30 29 2c 69 2e 6c 65 66 74 2b 3d 63 65 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 2c 21 30 29 29 7d 72 65 74 75 72 6e 7b 74 6f 70 3a 74 2e 74 6f 70 2d 69 2e 74 6f 70 2d 63 65 2e 63 73 73 28 72 2c 22 6d 61 72 67 69 6e 54 6f 70 22 2c 21 30 29 2c 6c 65 66 74 3a 74 2e 6c 65 66 74 2d 69 2e 6c 65 66 74 2d 63 65 2e 63 73 73 28 72 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 2c 21 30 29 Data Ascii: ic"===ce.css(e,"position"))e=e.parentNode;e&&e!==r&&1===e.nodeType&&((i=ce(e).offset()).top+=ce.css(e,"borderTopWidth",!0),i.left+=ce.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-ce.css(r,"marginTop",!0),left:t.left-i.left-ce.css(r,"marginLeft",!0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49781	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	576	OUT	GET /2024.18.03.04.17/2188/scripts/include-footer.js HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:33 UTC	517	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 396 Connection: close Last-Modified: Thu, 18 Apr 2024 01:42:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 21:09:34 GMT ETag: "2d6100b08125ed447769974a40a813e8" X-Cache: RefreshHit from cloudfront Via: 1.1 68d7ccdfb6189940dcbc92232d1409fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: kZFHIprYqIDZwEOosw1U7H_vIxLIbAJIlIgp7IyHj3blMKA5D0Ug2A== Vary: Origin
2024-04-19 21:09:33 UTC	396	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 0a 20 2a 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 72 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 74 68 65 Data Ascii: /** * Copyright 2024 Sophos Limited. All rights reserved. * * 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product * and company names mentioned are trademarks or registered trademarks of the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49782	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	577	OUT	GET /2024.18.03.04.17/2188/scripts/localize-footer.js HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:33 UTC	512	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2801 Connection: close Date: Fri, 19 Apr 2024 21:09:34 GMT Last-Modified: Thu, 18 Apr 2024 01:42:29 GMT ETag: "6ec09cbe7fafd476ffd1e96575d71a02" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 75ba6004fd6f773b72c6e827a7ab514a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: UlY007Wi9tW8MiaT3xrYIwFKBNGy34L0CMkFFQ8JYTxDMV_Kxb2YSQ== Vary: Origin
2024-04-19 21:09:33 UTC	2801	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 0a 20 2a 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 72 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 74 68 65 Data Ascii: /** * Copyright 2024 Sophos Limited. All rights reserved. * * 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product * and company names mentioned are trademarks or registered trademarks of the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49783	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	396	OUT	GET /2024.18.03.04.17/2188/html/enter-email.html HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:33 UTC	499	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 3927 Connection: close Date: Fri, 19 Apr 2024 21:09:34 GMT Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "7929fc310c9a89084233c3f53312e86c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a2bd5f1d2eb6a4c2830cfc986857c8b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: T2BARQ8RC55RY0nhgO3dmQ93MEAAJwLmtbu_60a0RbAOuPvKH9TTDQ== Vary: Origin
2024-04-19 21:09:33 UTC	3927	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 7e 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 2d 32 30 32 33 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 20 7e 0a 20 20 7e 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 0a 20 20 7e 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 72 20 72 65 Data Ascii: <!DOCTYPE html>... ~ Copyright 2019-2023 Sophos Limited. All rights reserved. ~ ~ 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product ~ and company names mentioned are trademarks or re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49787	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	572	OUT	GET /2024.18.03.04.17/2188/scripts/user-agent.js HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	511	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 394 Connection: close Date: Fri, 19 Apr 2024 21:09:35 GMT Last-Modified: Thu, 18 Apr 2024 01:42:29 GMT ETag: "32e9dccfffe7f095a8dad17d7995fc2f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 db8c963c466a3c45106d200e1dbe3e84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: Bhs5VUV4_3Pz6E5R6gE_r7tZJch9mBuNIj7-pnYRi1PXckZpb-GDmQ== Vary: Origin
2024-04-19 21:09:34 UTC	394	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 0a 20 2a 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 72 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 74 68 65 Data Ascii: /** * Copyright 2024 Sophos Limited. All rights reserved. * * 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product * and company names mentioned are trademarks or registered trademarks of the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49788	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	397	OUT	GET /2024.18.03.04.17/2188/images/sophos-logo.svg HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	502	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2483 Connection: close Date: Fri, 19 Apr 2024 21:09:34 GMT Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "55ca11ee6b441dde05cf1219e1cca259" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7bdd16afe0ccc55c338e0e29903fdf3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: CyYmXlbcrKbGvxxfT8yGl5i-V36QZQmskDBNPreKAmw9E2GWe_El-g== Vary: Origin
2024-04-19 21:09:34 UTC	2483	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 33 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 33 20 32 30 22 3e 0a 20 20 20 20 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 39 35 2e 33 32 34 20 31 36 2e 33 31 68 39 2e 35 38 33 63 31 2e 34 39 20 30 20 32 2e 33 30 35 2d 2e 31 35 20 32 2e 37 38 32 2d 2e 34 37 36 2e 35 39 2d 2e 33 38 35 2e 39 32 35 2d 31 2e 30 33 38 2e 39 32 35 2d 31 2e 38 30 38 20 30 2d 2e 39 31 38 2d 2e 34 34 38 2d 31 2e 37 31 37 2d 31 2e 32 30 36 2d 32 2e 31 30 33 2d 2e 33 39 35 2d 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="113" height="20" viewBox="0 0 113 20"> <g fill="#FFF" fill-rule="evenodd"> <path d="M95.324 16.31h9.583c1.49 0 2.305-.15 2.782-.476.59-.385.925-1.038.925-1.808 0-.918-.448-1.717-1.206-2.103-.395-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49789	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	568	OUT	GET /2024.18.03.04.17/2188/scripts/reload.js HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	511	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 401 Connection: close Date: Fri, 19 Apr 2024 21:09:35 GMT Last-Modified: Thu, 18 Apr 2024 01:42:29 GMT ETag: "848c2c7aab8fee97355d524339d8e45a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e8f78324e5bfcb2604bfdbcc16db2a58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: n6sI3DLThg_Cc8N4dIBxrVKleuAqQPUMaU2A7ujqGwS5JARCVZJENg== Vary: Origin
2024-04-19 21:09:34 UTC	401	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 0a 20 2a 20 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 20 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 0a 20 2a 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 72 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 74 68 65 Data Ascii: /** * Copyright 2024 Sophos Limited. All rights reserved. * * 'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group. All other product * and company names mentioned are trademarks or registered trademarks of the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49790	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	393	OUT	GET /2024.18.03.04.17/2188/images/favicon.ico HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 1406 Connection: close Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 19 Apr 2024 20:51:57 GMT ETag: "e68882b760c3f603dfd1c5a5a85065cf" X-Cache: Hit from cloudfront Via: 1.1 f1b921d32321e3081e3b5350bdf96888.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: jgdnhjWRnGL3agmS5ps8jLBjyMVpuPdac1IB3PzoW8R33Medcd90Tg== Age: 1058 Vary: Origin
2024-04-19 21:09:34 UTC	1406	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 00 00 00 00 68 05 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 d0 99 40 00 d4 d4 d6 00 ff ff ff 00 dc b3 70 00 c8 88 20 00 e7 cc 9f 00 99 99 99 00 c0 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( @p w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49772	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:33 UTC	586	OUT	GET /scripttemplates/otSDKStub.js?did=2e456f46-6b86-42c8-be0a-01efd4471533 HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: zgTRIDojRJmnmBTwUyI2Vw== Last-Modified: Thu, 18 Apr 2024 12:14:40 GMT x-ms-request-id: 184189c0-301e-0024-189a-91cf23000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 59564 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe057684f7b96-ATL
2024-04-19 21:09:34 UTC	554	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 Data Ascii: HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",th
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 Data Ascii: his.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f Data Ascii: oveGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 Data Ascii: name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.p
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 Data Ascii: ce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.pr
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 Data Ascii: ponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScri
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f Data Ascii: e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.o
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 Data Ascii: on,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.Ru
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 Data Ascii: tCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49792	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:34 UTC	616	OUT	GET /2024.18.03.04.17/2188/html/footer.html HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/html, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	859	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 836 Connection: close Date: Fri, 19 Apr 2024 21:09:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: x-ms-version, Date, x-ms-lease-state, ETag, x-ms-blob-type, x-ms-request-id, Last-Modified, x-ms-lease-status, Accept-Ranges, Content-Type, Content-Length, Transfer-Encoding Access-Control-Max-Age: 0 Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "2bf6e8e677df575fc3f9df6337fe0c95" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 4bf0fe10b98da90ba1dfbd4ac1d026c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: EWtXSQw5erqZkyb9bgayuUKALppIK8o7wFzW1ueDJDZ33VdRPdZNag==
2024-04-19 21:09:34 UTC	836	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 64 79 2d 66 6f 6f 74 65 72 20 73 6d 61 6c 6c 22 3e 20 0a 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 20 73 6d 61 6c 6c 20 6d 62 2d 31 22 3e 20 0a 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 22 3e 3c 61 20 63 6c 61 73 73 3d 22 77 68 69 74 65 2d 6c 69 6e 6b 73 22 20 69 64 3d 22 6c 65 67 61 6c 4c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6f 70 68 6f 73 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6c 65 67 61 6c 2e 61 73 70 78 22 3e 4c 65 67 61 6c 3c 2f 61 3e 3c 2f 6c 69 3e 20 0a 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c Data Ascii: <html> <head></head> <body> <div class="body-footer small"> <ul class="list-inline small mb-1"> <li class="list-inline-item"><a class="white-links" id="legalLink" href="https://www.sophos.com/en-us/legal.aspx">Legal</a></li> <li class="l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49793	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:34 UTC	597	OUT	GET /2024.18.03.04.17/2188/localize/en.json HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	866	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 531 Connection: close Date: Fri, 19 Apr 2024 21:09:35 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Expose-Headers: x-ms-version, Date, x-ms-lease-state, ETag, x-ms-blob-type, x-ms-request-id, Last-Modified, x-ms-lease-status, Accept-Ranges, Content-Type, Content-Length, Transfer-Encoding Access-Control-Max-Age: 0 Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "79e25added5098e4c6bccd7c6e695f67" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 c26257d146bdcb9f98bbd399bdb902be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: Zj7RgcpiOBu-gJ_2kbRclJL2hYp90s1GpntM3YhtVQarZj44Ni4ceA==
2024-04-19 21:09:34 UTC	531	IN	Data Raw: 7b 0a 20 20 22 5f 63 6f 6d 6d 65 6e 74 31 22 3a 20 22 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 22 2c 0a 20 20 22 5f 63 6f 6d 6d 65 6e 74 32 22 3a 20 22 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 22 2c 0a 20 20 22 5f 63 6f 6d 6d 65 6e 74 33 22 3a 20 22 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 Data Ascii: { "_comment1": "Copyright 2022 Sophos Limited. All rights reserved.", "_comment2": "'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group.", "_comment3": "All other product and company names mentioned are trad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49794	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:34 UTC	638	OUT	GET /2024.18.03.04.17/2188/css/claim-elements.css HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	496	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 54 Connection: close Date: Fri, 19 Apr 2024 21:09:35 GMT Last-Modified: Thu, 18 Apr 2024 01:42:26 GMT ETag: "9b06b5451e58b45d0b436d72983503fb" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e4521093848f6281702b8cbf821ed89e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: hG9dmAXM4xbALigIys7VLUhUVFA5_lQ5D4qHGWGr-fBxHytVJyrOhw== Vary: Origin
2024-04-19 21:09:34 UTC	54	IN	Data Raw: 23 61 74 74 72 69 62 75 74 65 4c 69 73 74 20 6c 69 2e 75 73 65 72 41 67 65 6e 74 5f 6c 69 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a Data Ascii: #attributeList li.userAgent_li { display: none;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49795	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:34 UTC	641	OUT	GET /2024.18.03.04.17/2188/css/welcome-animation.css HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	498	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1721 Connection: close Date: Fri, 19 Apr 2024 21:09:35 GMT Last-Modified: Thu, 18 Apr 2024 01:42:27 GMT ETag: "8e534923429c32129307da74827500bd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0ee4a87a9f0e7b4ec7616932a0def532.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: 8DPkXMBKs641PMpcHSICXzlDraCscgNI4KQ_JF5wg-kK3IMyWqn2vw== Vary: Origin
2024-04-19 21:09:34 UTC	1721	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 65 61 73 69 6e 67 2d 64 65 66 61 75 6c 74 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 34 35 2c 20 30 2e 30 34 35 2c 20 30 2e 33 35 35 2c 20 31 29 3b 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 63 61 72 64 68 65 61 64 65 72 20 7b 0a 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 32 33 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 32 33 30 70 78 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 34 30 25 2c 0a 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 Data Ascii: :root { --easing-default: cubic-bezier(0.645, 0.045, 0.355, 1);}@keyframes cardheader { 0% { opacity: 0; -webkit-transform: translateY(230px); transform: translateY(230px); } 40%, 50% { opacity: 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49796	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:34 UTC	630	OUT	GET /2024.18.03.04.17/2188/css/footer.css HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	497	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 451 Connection: close Date: Fri, 19 Apr 2024 21:09:35 GMT Last-Modified: Thu, 18 Apr 2024 01:42:26 GMT ETag: "77b2bd6c47e62f4061ac324008ff1ee5" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7bdd16afe0ccc55c338e0e29903fdf3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: WeTbqHXSpMvMkFYpSEZD3e7ObUKVlHkfKFQKSxajVCXZud8QV4ECvA== Vary: Origin
2024-04-19 21:09:34 UTC	451	IN	Data Raw: 2e 77 68 69 74 65 2d 6c 69 6e 6b 73 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 62 6f 64 79 2d 66 6f 6f 74 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 37 70 78 3b 0a 7d 0a 0a 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b Data Ascii: .white-links { color:#FFFFFF; text-decoration: none;}.body-footer { color: #FFFFFF; text-align: center; padding-top: 7px;}.list-inline { padding-left: 0; list-style: none;}.list-inline-item { display: inline-block;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49797	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:34 UTC	633	OUT	GET /consent/2e456f46-6b86-42c8-be0a-01efd4471533/2e456f46-6b86-42c8-be0a-01efd4471533.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:34 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:34 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 876fe05abfad676f-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 22078 Cache-Control: public, max-age=86400 Expires: Sat, 20 Apr 2024 21:09:34 GMT Last-Modified: Tue, 16 Apr 2024 15:01:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: Lh+FJwri2ayh/aJj+HaGNg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: aaef7f00-301e-0046-0d0e-900d04000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-19 21:09:34 UTC	467	IN	Data Raw: 31 32 30 31 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 31 31 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 32 65 34 35 Data Ascii: 1201{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202311.1.0","OptanonDataJSON":"2e45
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 65 37 36 37 2d 37 34 33 31 2d 37 38 30 63 2d 62 66 37 38 2d 34 62 36 37 62 34 38 63 31 39 34 62 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 65 78 63 6c 75 64 69 6e 67 20 47 44 50 52 20 63 6f 75 6e 74 72 69 65 73 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 2c 22 61 7a 22 2c 22 62 62 22 2c 22 62 64 22 2c 22 72 75 22 2c 22 62 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 62 Data Ascii: t":[{"Id":"018ee767-7431-780c-bf78-4b67b48c194b","Name":"Global excluding GDPR countries","Countries":["pr","ps","pw","py","qa","ae","af","ag","ai","am","ao","aq","ar","as","au","aw","az","bb","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","b
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 30 31 38 65 65 37 36 37 2d 37 30 66 39 2d 37 65 63 66 2d 62 36 35 34 2d 61 34 64 32 62 34 37 38 65 64 63 35 22 2c 22 4e 61 6d 65 22 3a 22 45 75 72 6f 70 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 64 65 22 2c 22 70 74 22 2c 22 64 Data Ascii: tEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"018ee767-70f9-7ecf-b654-a4d2b478edc5","Name":"Europe","Countries":["de","pt","d
2024-04-19 21:09:34 UTC	1369	IN	Data Raw: 31 36 54 31 35 3a 30 31 3a 30 35 2e 33 39 32 32 31 32 34 36 33 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 Data Ascii: 16T15:01:05.392212463","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersi
2024-04-19 21:09:34 UTC	43	IN	Data Raw: 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: mpId":"28"},"AuthenticatedConsent":false}
2024-04-19 21:09:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49801	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:35 UTC	683	OUT	GET /2024.18.03.04.17/2188/images/icon-email.svg HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://d2y1fnwu0z0lk0.cloudfront.net/2024.18.03.04.17/2188/css/email-ui.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:35 UTC	502	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 522 Connection: close Date: Fri, 19 Apr 2024 21:09:36 GMT Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "9cd0033d77dfa55a69696736a8a021bc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ebf11a750b6c45a229bb80e8a0135118.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: 4uLpZLpKB_Wq0dP63_rsHXtuZaGnlRqKmtIEYbA6TUHYDKNNzs8Oqw== Vary: Origin
2024-04-19 21:09:35 UTC	522	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 32 22 3e 0a 20 20 20 20 3c 67 20 66 69 6c 6c 3d 22 23 45 30 45 32 45 34 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 37 36 2e 37 33 37 6c 2d 34 2e 38 34 36 20 34 2e 36 33 36 2d 33 2e 30 31 20 32 2e 37 35 31 2d 32 2e 39 38 37 2d 32 2e 37 33 4c 2e 30 35 2e 37 33 37 43 2e 30 32 2e 38 34 20 30 20 2e 39 34 36 20 30 20 31 2e 30 35 38 76 39 2e 38 30 38 63 30 20 2e 30 36 34 2e 30 30 37 2e 31 32 35 2e 30 31 38 2e 31 38 35 2e 30 37 37 2e 34 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="16" height="12" viewBox="0 0 16 12"> <g fill="#E0E2E4" fill-rule="evenodd"> <path d="M15.76.737l-4.846 4.636-3.01 2.751-2.987-2.73L.05.737C.02.84 0 .946 0 1.058v9.808c0 .064.007.125.018.185.077.49

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49802	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:35 UTC	391	OUT	GET /2024.18.03.04.17/2188/localize/en.json HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:35 UTC	505	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 531 Connection: close Date: Fri, 19 Apr 2024 21:09:36 GMT Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "79e25added5098e4c6bccd7c6e695f67" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 dff0c77e0838b85ab4b4113708853780.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: bmkY5z54pmDuUKNMijVAt4fcRi5x0Y2wN3jklgSlFz9ijXITpJ7Y7Q== Vary: Origin
2024-04-19 21:09:35 UTC	531	IN	Data Raw: 7b 0a 20 20 22 5f 63 6f 6d 6d 65 6e 74 31 22 3a 20 22 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 22 2c 0a 20 20 22 5f 63 6f 6d 6d 65 6e 74 32 22 3a 20 22 27 53 6f 70 68 6f 73 27 20 61 6e 64 20 27 53 6f 70 68 6f 73 20 41 6e 74 69 2d 56 69 72 75 73 27 20 61 72 65 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 73 20 6f 66 20 53 6f 70 68 6f 73 20 4c 69 6d 69 74 65 64 20 61 6e 64 20 53 6f 70 68 6f 73 20 47 72 6f 75 70 2e 22 2c 0a 20 20 22 5f 63 6f 6d 6d 65 6e 74 33 22 3a 20 22 41 6c 6c 20 6f 74 68 65 72 20 70 72 6f 64 75 63 74 20 61 6e 64 20 63 6f 6d 70 61 6e 79 20 6e 61 6d 65 73 20 6d 65 6e 74 69 6f 6e 65 64 20 61 72 65 20 74 72 61 64 Data Ascii: { "_comment1": "Copyright 2022 Sophos Limited. All rights reserved.", "_comment2": "'Sophos' and 'Sophos Anti-Virus' are registered trademarks of Sophos Limited and Sophos Group.", "_comment3": "All other product and company names mentioned are trad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49803	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:35 UTC	391	OUT	GET /2024.18.03.04.17/2188/html/footer.html HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:35 UTC	498	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 836 Connection: close Date: Fri, 19 Apr 2024 21:09:36 GMT Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "2bf6e8e677df575fc3f9df6337fe0c95" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 372faa8e4440bc3498fcf7c090617014.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: G43IZpC3W29ybQDy38VAyS96zGD20LMz0a7IiKmQpaC1TPKJ7NcIdQ== Vary: Origin
2024-04-19 21:09:35 UTC	836	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 64 79 2d 66 6f 6f 74 65 72 20 73 6d 61 6c 6c 22 3e 20 0a 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 20 73 6d 61 6c 6c 20 6d 62 2d 31 22 3e 20 0a 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 22 3e 3c 61 20 63 6c 61 73 73 3d 22 77 68 69 74 65 2d 6c 69 6e 6b 73 22 20 69 64 3d 22 6c 65 67 61 6c 4c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 6f 70 68 6f 73 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6c 65 67 61 6c 2e 61 73 70 78 22 3e 4c 65 67 61 6c 3c 2f 61 3e 3c 2f 6c 69 3e 20 0a 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c Data Ascii: <html> <head></head> <body> <div class="body-footer small"> <ul class="list-inline small mb-1"> <li class="list-inline-item"><a class="white-links" id="legalLink" href="https://www.sophos.com/en-us/legal.aspx">Legal</a></li> <li class="l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49804	172.64.155.119	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:35 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:35 UTC	370	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:35 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876fe060e915135f-ATL
2024-04-19 21:09:35 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49805	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:35 UTC	427	OUT	GET /consent/2e456f46-6b86-42c8-be0a-01efd4471533/2e456f46-6b86-42c8-be0a-01efd4471533.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:35 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:35 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 876fe0610ac5b0db-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 17236 Cache-Control: public, max-age=86400 Expires: Sat, 20 Apr 2024 21:09:35 GMT Last-Modified: Tue, 16 Apr 2024 15:01:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: Lh+FJwri2ayh/aJj+HaGNg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 02aeeb10-901e-003d-350f-904f98000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-19 21:09:35 UTC	467	IN	Data Raw: 31 32 30 31 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 33 31 31 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 32 65 34 35 Data Ascii: 1201{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202311.1.0","OptanonDataJSON":"2e45
2024-04-19 21:09:35 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 65 37 36 37 2d 37 34 33 31 2d 37 38 30 63 2d 62 66 37 38 2d 34 62 36 37 62 34 38 63 31 39 34 62 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 65 78 63 6c 75 64 69 6e 67 20 47 44 50 52 20 63 6f 75 6e 74 72 69 65 73 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 2c 22 61 7a 22 2c 22 62 62 22 2c 22 62 64 22 2c 22 72 75 22 2c 22 62 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 62 Data Ascii: t":[{"Id":"018ee767-7431-780c-bf78-4b67b48c194b","Name":"Global excluding GDPR countries","Countries":["pr","ps","pw","py","qa","ae","af","ag","ai","am","ao","aq","ar","as","au","aw","az","bb","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","b
2024-04-19 21:09:35 UTC	1369	IN	Data Raw: 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 2c 7b 22 49 64 22 3a 22 30 31 38 65 65 37 36 37 2d 37 30 66 39 2d 37 65 63 66 2d 62 36 35 34 2d 61 34 64 32 62 34 37 38 65 64 63 35 22 2c 22 4e 61 6d 65 22 3a 22 45 75 72 6f 70 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 64 65 22 2c 22 70 74 22 2c 22 64 Data Ascii: tEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"018ee767-70f9-7ecf-b654-a4d2b478edc5","Name":"Europe","Countries":["de","pt","d
2024-04-19 21:09:35 UTC	1369	IN	Data Raw: 31 36 54 31 35 3a 30 31 3a 30 35 2e 33 39 32 32 31 32 34 36 33 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 Data Ascii: 16T15:01:05.392212463","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cookieVersi
2024-04-19 21:09:35 UTC	43	IN	Data Raw: 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: mpId":"28"},"AuthenticatedConsent":false}
2024-04-19 21:09:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49807	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:35 UTC	558	OUT	GET /scripttemplates/202311.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:36 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: VX4GCwjZuARQMrKdtn0EoA== Last-Modified: Wed, 06 Mar 2024 17:32:15 GMT x-ms-request-id: e0e65e29-a01e-00a0-1a5a-70bd22000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 86239 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe0645a006765-ATL
2024-04-19 21:09:36 UTC	554	IN	Data Raw: 37 63 36 66 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 33 31 31 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 44 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c6f/** * onetrust-banner-sdk * v202311.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var D=function(e,t){return(D=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 46 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 Data Ascii: otype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function R(e,s,a,l){return ne
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 Data Ascii: l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function q(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=ar
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 63 65 6f 66 20 4b 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 58 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 24 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 58 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 58 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d Data Ascii: ceof K)return t._state=3,t._value=e,void X(t);if("function"==typeof o)return void $((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,X(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._value=t,X(e)}function X(e){2===e._state&&0==
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 4b 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4b 3f 74 3a 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 4b 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4b 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 4b 2e 72 61 63 65 3d 66 75 6e 63 Data Ascii: eturn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},K.resolve=function(t){return t&&"object"==typeof t&&t.constructor===K?t:new K(function(e){e(t)})},K.reject=function(o){return new K(function(e,t){t(o)})},K.race=func
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 Data Ascii: e:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 Data Ascii: .initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 6f 65 3d 6f 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6e 65 3d 6e 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 Data Ascii: e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=te=te\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=oe=oe\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=ne=ne\|\|{})[e.Purpose=1
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 43 65 3d 43 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 79 65 3d 79 65 7c 7c 7b 7d Data Ascii: l"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=ge=ge\|\|{}).Active="1",e.InActive="0",(e=Ce=Ce\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ye=ye\|\|{}
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 56 65 3d 56 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e Data Ascii: granted="granted",e.denied="denied",(e=Le=Le\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=_e=_e\|\|{}).cookies="cookies",e.vendors="vendors",(e=Ve=Ve\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GEN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49808	172.64.155.119	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:36 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:36 UTC	249	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:36 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 876fe0654dc21375-ATL
2024-04-19 21:09:36 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49809	18.64.156.27	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:36 UTC	396	OUT	GET /2024.18.03.04.17/2188/images/icon-email.svg HTTP/1.1 Host: d2y1fnwu0z0lk0.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:36 UTC	509	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 522 Connection: close Date: Fri, 19 Apr 2024 21:09:36 GMT Last-Modified: Thu, 18 Apr 2024 01:42:28 GMT ETag: "9cd0033d77dfa55a69696736a8a021bc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c65258796184f23c2d9864ea7ca60348.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: BLPLpHJGPTkq9hh-GqOSlLtfqsWs4WmpFShjbGbtUCmsEgF5zZMlQA== Age: 1 Vary: Origin
2024-04-19 21:09:36 UTC	522	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 32 22 3e 0a 20 20 20 20 3c 67 20 66 69 6c 6c 3d 22 23 45 30 45 32 45 34 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 37 36 2e 37 33 37 6c 2d 34 2e 38 34 36 20 34 2e 36 33 36 2d 33 2e 30 31 20 32 2e 37 35 31 2d 32 2e 39 38 37 2d 32 2e 37 33 4c 2e 30 35 2e 37 33 37 43 2e 30 32 2e 38 34 20 30 20 2e 39 34 36 20 30 20 31 2e 30 35 38 76 39 2e 38 30 38 63 30 20 2e 30 36 34 2e 30 30 37 2e 31 32 35 2e 30 31 38 2e 31 38 35 2e 30 37 37 2e 34 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="16" height="12" viewBox="0 0 16 12"> <g fill="#E0E2E4" fill-rule="evenodd"> <path d="M15.76.737l-4.846 4.636-3.01 2.751-2.987-2.73L.05.737C.02.84 0 .946 0 1.058v9.808c0 .064.007.125.018.185.077.49

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49810	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:36 UTC	636	OUT	GET /consent/2e456f46-6b86-42c8-be0a-01efd4471533/018ee767-7431-780c-bf78-4b67b48c194b/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:36 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:36 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 876fe06998eb7bab-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 22079 Cache-Control: public, max-age=86400 Expires: Sat, 20 Apr 2024 21:09:36 GMT Last-Modified: Tue, 16 Apr 2024 15:01:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: cPTK3kj3lA5BsckBLsT3UA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0b4ebc49-001e-0072-280e-903ecc000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-19 21:09:36 UTC	467	IN	Data Raw: 31 65 62 63 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 1ebc{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 Data Ascii: e and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some type
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 6e 64 6f 72 4c 65 76 65 6c 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c 22 48 61 73 53 63 72 69 70 74 41 72 63 68 69 76 65 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 62 Data Ascii: ForceConsent":true,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","VendorLevelOptOut":false,"HasScriptArchive":false,"BannerPosition":"b
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 63 74 69 6f 6e 73 20 6d 61 64 65 20 62 79 20 79 6f 75 20 77 68 69 63 68 20 61 6d 6f 75 6e 74 20 74 6f 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 73 65 72 76 69 63 65 73 2c 20 73 75 63 68 20 61 73 20 73 65 74 74 69 6e 67 20 79 Data Ascii: roupToggle":false,"GroupDescription":"These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting y
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 70 6c 61 74 66 6f 72 6d 20 66 72 6f 6d 20 4d 69 63 72 6f 73 6f 66 74 2e 20 49 74 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 61 20 6c 6f 67 67 65 64 2d 69 6e 20 75 73 65 72 20 74 6f 20 65 6e 61 62 6c 65 20 61 63 63 65 73 73 20 74 6f 20 73 65 63 75 72 65 20 61 72 65 61 73 20 6f 66 20 61 20 73 69 74 65 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 61 35 35 62 61 65 36 35 2d 64 30 34 38 2d 34 39 39 33 2d 38 33 31 37 2d 34 34 36 63 66 33 33 33 35 63 39 39 22 2c 22 4e 61 6d 65 22 3a 22 2e 74 65 2e 61 75 74 68 22 2c 22 48 6f 73 74 22 3a 22 63 6f 6d 6d 75 6e 69 74 79 2e Data Ascii: platform from Microsoft. It is commonly used to identify a logged-in user to enable access to secure areas of a site.","DurationType":1,"category":null,"isThirdParty":false},{"id":"a55bae65-d048-4993-8317-446cf3335c99","Name":".te.auth","Host":"community.
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 6f 63 69 61 74 65 64 20 77 69 74 68 20 73 69 74 65 73 20 75 73 69 6e 67 20 43 6c 6f 75 64 46 6c 61 72 65 2c 20 75 73 65 64 20 74 6f 20 73 70 65 65 64 20 75 70 20 70 61 67 65 20 6c 6f 61 64 20 74 69 6d 65 73 2e 20 41 63 63 6f 72 64 69 6e 67 20 74 6f 20 43 6c 6f 75 64 46 6c 61 72 65 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 6f 76 65 72 72 69 64 65 20 61 6e 79 20 73 65 63 75 72 69 74 79 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 69 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 61 6e 79 20 75 73 65 72 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 20 20 Data Ascii: ociated with sites using CloudFlare, used to speed up page load times. According to CloudFlare it is used to override any security restrictions based on the IP address the visitor is coming from. It does not contain any user identification information.
2024-04-19 21:09:36 UTC	564	IN	Data Raw: 63 30 38 36 38 30 61 64 63 22 2c 22 4e 61 6d 65 22 3a 22 5f 63 66 75 76 69 64 22 2c 22 48 6f 73 74 22 3a 22 73 75 70 70 6f 72 74 2e 68 6f 6d 65 2e 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 65 38 34 63 33 32 39 65 2d 39 34 37 36 2d 34 64 65 62 2d 38 36 62 37 2d 61 39 37 33 64 37 35 35 32 65 30 61 22 2c 22 4e 61 6d 65 22 3a 22 5f 64 64 5f 73 22 2c 22 48 6f 73 74 22 3a 22 62 72 61 6e 64 2e 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 Data Ascii: c08680adc","Name":"_cfuvid","Host":"support.home.sophos.com","IsSession":true,"Length":"0","description":"","DurationType":1,"category":null,"isThirdParty":false},{"id":"e84c329e-9476-4deb-86b7-a973d7552e0a","Name":"_dd_s","Host":"brand.sophos.com","IsSes
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 61 20 73 68 6f 70 70 69 6e 67 20 70 61 72 74 2e 5c 6e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 65 62 30 62 34 35 63 38 2d 39 62 38 61 2d 34 37 62 65 2d 38 30 35 34 2d 63 61 35 62 32 31 34 66 63 30 32 37 22 2c 22 4e 61 6d 65 22 3a 22 61 69 5f 75 73 65 72 22 2c 22 48 6f 73 74 22 3a 22 63 65 6e 74 72 61 6c 73 74 61 74 75 73 2e 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 75 73 65 72 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f Data Ascii: 7ff9a shopping part.\n","DurationType":1,"category":null,"isThirdParty":false},{"id":"eb0b45c8-9b8a-47be-8054-ca5b214fc027","Name":"ai_user","Host":"centralstatus.sophos.com","IsSession":false,"Length":"365","description":"user","DurationType":1,"catego
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 74 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 65 20 61 70 70 72 6f 70 72 69 61 74 65 20 73 65 72 76 65 72 20 66 6f 72 20 79 6f 75 72 20 6c 6f 63 61 74 69 6f 6e 20 2d 20 65 6e 73 75 72 69 6e 67 20 61 76 61 69 6c 61 62 69 6c 69 74 79 20 61 6e 64 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 65 31 61 61 39 37 61 66 2d 64 38 31 33 2d 34 62 32 66 2d 62 66 66 33 2d 63 61 63 63 61 34 39 37 32 65 38 34 22 2c 22 4e 61 6d 65 22 3a 22 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 22 2c 22 48 6f 73 74 22 3a 22 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 Data Ascii: t your browser to use the appropriate server for your location - ensuring availability and performance.","DurationType":1,"category":null,"isThirdParty":false},{"id":"e1aa97af-d813-4b2f-bff3-cacca4972e84","Name":"ASP.NET_SessionId","Host":"sophos.com","Is
2024-04-19 21:09:36 UTC	1369	IN	Data Raw: 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 65 20 42 49 47 2d 49 50 20 70 72 6f 64 75 63 74 20 73 75 69 74 65 20 66 72 6f 6d 20 63 6f 6d 70 61 6e 79 20 46 35 2e 20 55 73 75 61 6c 6c 79 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 6d 61 6e 61 67 69 6e 67 20 73 65 73 73 69 6f 6e 73 20 6f 6e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 73 65 72 76 65 72 73 2c 20 74 6f 20 65 6e 73 75 72 65 20 75 73 65 72 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 6f 75 74 65 64 20 63 6f 6e 73 69 73 74 65 6e 74 6c 79 20 74 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 73 65 72 76 65 72 2e 20 54 68 65 20 63 6f 6d 6d 6f 6e 20 72 6f 6f 74 20 69 73 20 42 49 47 69 70 53 65 72 76 65 72 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 61 20 Data Ascii: ssociated with the BIG-IP product suite from company F5. Usually associated with managing sessions on load balanced servers, to ensure user requests are routed consistently to the correct server. The common root is BIGipServer most commonly followed by a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49812	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:37 UTC	592	OUT	GET /scripttemplates/202311.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:37 UTC	809	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: aE3Cd1odQZ18GHiNuD52gA== Last-Modified: Wed, 06 Mar 2024 17:32:07 GMT x-ms-request-id: bc30f6c2-d01e-004e-2333-81170b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 13759 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe06e7fc3adb2-ATL
2024-04-19 21:09:37 UTC	560	IN	Data Raw: 33 33 38 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 3382 { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 65 6d 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 37 65 6d 29 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 38 39 37 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 33 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 37 35 25 3b 74 72 Data Ascii: {margin-left:2em;margin-right:5em;margin-bottom:1.25em;width:calc(100% - 7em)}}@media only screen and (min-width: 897px)and (max-width: 1023px){#onetrust-banner-sdk.vertical-align-content #onetrust-button-group-parent{position:absolute;top:50%;left:75%;tr
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 34 35 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 2e 6f 74 2d 64 70 64 2d 74 69 74 6c 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 7d 23 6f 6e 65 74 Data Ascii: dk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bottom:0;padding-bottom:1em}#onetrust-banner-sdk.ot-iab-2 .ot-dpd-container{width:45%;padding-left:1rem;display:inline-block;float:none}#onetrust-banner-sdk.ot-iab-2 .ot-dpd-title{line-height:1.7}#onet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49811	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:37 UTC	596	OUT	GET /scripttemplates/202311.1.0/assets/v2/otPcTab.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:37 UTC	809	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: Gj/ioQ+cHUcUPmZjGLhTCw== Last-Modified: Wed, 06 Mar 2024 17:32:10 GMT x-ms-request-id: dcc61826-901e-005f-5333-818dbf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 13759 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe06e7a726743-ATL
2024-04-19 21:09:37 UTC	560	IN	Data Raw: 37 63 37 36 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 54 61 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 31 52 68 59 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 68 4c 53 30 67 63 47 Data Ascii: 7c76 { "name": "otPcTab", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1RhYiBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjwhLS0gcG
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 6a 62 47 39 7a 5a 53 31 77 59 79 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 4e 73 62 33 4e 6c 4c 57 6c 6a 62 32 34 69 49 47 46 79 61 57 45 74 62 47 46 69 5a 57 77 39 49 6b 4e 73 62 33 4e 6c 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 47 4e 76 62 6e 52 6c 62 6e 51 67 4c 53 30 2b 50 43 45 74 4c 53 42 48 63 6d 39 31 63 48 4d 67 4c 79 42 54 64 57 49 67 5a 33 4a 76 64 58 42 7a 49 48 64 70 64 47 67 67 59 32 39 76 61 32 6c 6c 63 79 41 74 4c 54 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6a 62 32 35 30 5a 57 35 30 49 69 42 6a 62 47 46 7a 63 7a Data Ascii: yIj48YnV0dG9uIGlkPSJjbG9zZS1wYy1idG4taGFuZGxlciIgY2xhc3M9Im90LWNsb3NlLWljb24iIGFyaWEtbGFiZWw9IkNsb3NlIj48L2J1dHRvbj48L2Rpdj48L2Rpdj48L2Rpdj48IS0tIGNvbnRlbnQgLS0+PCEtLSBHcm91cHMgLyBTdWIgZ3JvdXBzIHdpdGggY29va2llcyAtLT48ZGl2IGlkPSJvdC1wYy1jb250ZW50IiBjbGFzcz
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 63 32 56 73 5a 57 4e 30 5a 57 51 39 49 6d 5a 68 62 48 4e 6c 49 6a 34 38 61 44 4d 2b 55 47 56 79 63 32 39 75 59 57 78 70 65 6d 46 30 61 57 39 75 49 45 4e 76 62 32 74 70 5a 58 4d 38 4c 32 67 7a 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 6c 63 32 4d 74 59 32 35 30 63 69 42 76 64 43 31 6f 61 57 52 6c 49 69 42 79 62 32 78 6c 50 53 4a 30 59 57 4a 77 59 57 35 6c 62 43 49 67 64 47 46 69 61 57 35 6b 5a 58 67 39 49 6a 41 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 73 61 53 31 6f 5a 48 49 69 50 6a 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 30 61 58 52 73 5a 53 49 2b 51 32 39 75 63 32 56 75 64 44 77 76 63 33 42 68 62 6a 34 67 50 48 4e 77 59 57 34 67 59 32 78 Data Ascii: c2VsZWN0ZWQ9ImZhbHNlIj48aDM+UGVyc29uYWxpemF0aW9uIENvb2tpZXM8L2gzPjwvZGl2PjxkaXYgY2xhc3M9Im90LWRlc2MtY250ciBvdC1oaWRlIiByb2xlPSJ0YWJwYW5lbCIgdGFiaW5kZXg9IjAiPjxkaXYgY2xhc3M9Im90LXBsaS1oZHIiPjxzcGFuIGNsYXNzPSJvdC1saS10aXRsZSI+Q29uc2VudDwvc3Bhbj4gPHNwYW4gY2x
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 47 77 74 4d 6a 45 75 4e 44 41 35 4c 54 49 78 4c 6a 51 78 4e 6b 4d 7a 4d 6a 4d 75 4e 44 4d 79 4c 44 4d 75 4e 54 49 78 4c 44 4d 78 4e 43 34 34 4d 54 63 73 4d 43 77 7a 4d 44 51 75 4e 6a 4d 33 4c 44 42 7a 4c 54 45 34 4c 6a 63 35 4d 53 77 7a 4c 6a 55 79 4d 53 30 79 4e 53 34 34 4e 44 45 73 4d 54 41 75 4e 54 59 78 54 44 6b 79 4c 6a 59 30 4f 53 77 78 4f 54 59 75 4e 44 49 31 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 4d 74 4e 79 34 77 4e 44 51 73 4e 79 34 77 4e 44 4d 74 4d 54 41 75 4e 54 59 32 4c 44 45 31 4c 6a 59 31 4e 69 30 78 4d 43 34 31 4e 6a 59 73 4d 6a 55 75 4f 44 51 78 63 7a 4d 75 4e 54 49 78 4c 44 45 34 4c 6a 63 35 4d 53 77 78 4d 43 34 31 4e 6a 59 73 4d 6a 55 75 4f 44 4d 33 62 44 45 34 4e 69 34 78 4e 44 59 73 4d 54 67 31 Data Ascii: GwtMjEuNDA5LTIxLjQxNkMzMjMuNDMyLDMuNTIxLDMxNC44MTcsMCwzMDQuNjM3LDBzLTE4Ljc5MSwzLjUyMS0yNS44NDEsMTAuNTYxTDkyLjY0OSwxOTYuNDI1CiAgICAgICAgICAgICAgICAgIGMtNy4wNDQsNy4wNDMtMTAuNTY2LDE1LjY1Ni0xMC41NjYsMjUuODQxczMuNTIxLDE4Ljc5MSwxMC41NjYsMjUuODM3bDE4Ni4xNDYsMTg1
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 67 74 4d 43 34 79 4f 54 63 73 4d 69 34 77 4e 7a 6b 74 4d 43 34 34 4d 7a 64 44 4e 54 59 75 4d 6a 55 31 4c 44 55 30 4c 6a 6b 34 4d 69 77 31 4e 69 34 79 4f 54 4d 73 4e 54 4d 75 4d 44 67 73 4e 54 55 75 4d 54 51 32 4c 44 55 78 4c 6a 67 34 4e 33 6f 67 54 54 49 7a 4c 6a 6b 34 4e 43 77 32 59 7a 6b 75 4d 7a 63 30 4c 44 41 73 4d 54 63 73 4e 79 34 32 4d 6a 59 73 4d 54 63 73 4d 54 64 7a 4c 54 63 75 4e 6a 49 32 4c 44 45 33 4c 54 45 33 4c 44 45 33 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 63 79 30 78 4e 79 30 33 4c 6a 59 79 4e 69 30 78 4e 79 30 78 4e 31 4d 78 4e 43 34 32 4d 53 77 32 4c 44 49 7a 4c 6a 6b 34 4e 43 77 32 65 69 49 76 50 6a 77 76 63 33 5a 6e 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 57 5a 73 64 48 49 74 59 Data Ascii: gtMC4yOTcsMi4wNzktMC44MzdDNTYuMjU1LDU0Ljk4Miw1Ni4yOTMsNTMuMDgsNTUuMTQ2LDUxLjg4N3ogTTIzLjk4NCw2YzkuMzc0LDAsMTcsNy42MjYsMTcsMTdzLTcuNjI2LDE3LTE3LDE3CiAgICAgICAgICAgICAgcy0xNy03LjYyNi0xNy0xN1MxNC42MSw2LDIzLjk4NCw2eiIvPjwvc3ZnPjwvZGl2PjxkaXYgaWQ9Im90LWZsdHItY
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 67 61 57 51 39 49 6d 39 30 4c 57 78 7a 64 43 31 6a 62 6e 51 69 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 79 62 33 63 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 78 31 62 57 34 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 4e 6c 62 43 31 69 62 47 73 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 Data Ascii: gaWQ9Im90LWxzdC1jbnQiIGNsYXNzPSJvdC1wYy1zY3JvbGxiYXIiPjxkaXYgY2xhc3M9Im90LXNkay1yb3ciPjxkaXYgY2xhc3M9Im90LXNkay1jb2x1bW4iPjxkaXYgaWQ9Im90LXNlbC1ibGsiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZH
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 4c 58 5a 6c 62 69 31 69 62 33 67 69 49 47 46 79 61 57 45 74 5a 58 68 77 59 57 35 6b 5a 57 51 39 49 6d 5a 68 62 48 4e 6c 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 57 4e 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 68 6b 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 6d 46 74 5a 53 49 2b 50 43 39 6f 4d 7a 34 38 59 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 78 70 62 6d 73 69 49 47 68 79 5a 57 59 39 49 69 4d 69 50 6c 5a 70 5a 58 63 67 55 48 4a 70 64 6d 46 6a 65 53 42 4f 62 33 52 70 59 32 55 38 4c 32 45 2b 50 47 4a 79 50 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a Data Ascii: LXZlbi1ib3giIGFyaWEtZXhwYW5kZWQ9ImZhbHNlIj48L2J1dHRvbj48c2VjdGlvbiBjbGFzcz0ib3QtYWNjLWhkciI+PGRpdiBjbGFzcz0ib3QtdmVuLWhkciI+PGgzIGNsYXNzPSJvdC12ZW4tbmFtZSI+PC9oMz48YSBjbGFzcz0ib3QtdmVuLWxpbmsiIGhyZWY9IiMiPlZpZXcgUHJpdmFjeSBOb3RpY2U8L2E+PGJyPjxhIGNsYXNzPSJ
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 32 34 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 6e 52 75 4c 58 4e 31 59 6d 4e 75 64 48 49 69 50 6a 78 69 64 58 52 30 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4a 6c 5a 6e 56 7a 5a 53 31 68 62 47 77 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 55 6d 56 71 5a 57 4e 30 49 45 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 69 41 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 45 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 57 5a 76 62 33 52 6c 63 69 31 73 Data Ascii: 24+PGRpdiBjbGFzcz0ib3QtYnRuLXN1YmNudHIiPjxidXR0b24gY2xhc3M9Im90LXBjLXJlZnVzZS1hbGwtaGFuZGxlciI+UmVqZWN0IEFsbDwvYnV0dG9uPiA8YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IEFsbDwvYnV0dG9uPjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9Im90LXBjLWZvb3Rlci1s
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 51 39 49 6d 5a 68 62 48 4e 6c 49 69 42 79 62 32 78 6c 50 53 4a 7a 64 32 6c 30 59 32 67 69 50 6a 77 76 63 33 42 68 62 6a 34 67 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 68 59 6d 56 73 4c 58 52 34 64 43 49 2b 55 33 64 70 64 47 4e 6f 49 45 78 68 59 6d 56 73 50 43 39 7a 63 47 46 75 50 6a 77 76 62 47 46 69 5a 57 77 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 59 57 4a 6c 62 43 31 7a 64 47 46 30 64 58 4d 69 50 6d 78 68 59 6d 56 73 50 43 39 7a 63 47 46 75 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 51 32 68 6c 59 32 74 69 62 33 67 67 53 46 52 4e 54 43 41 74 4c 54 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6a 61 47 74 69 62 33 67 69 50 6a 78 70 62 6e 42 31 64 43 42 70 5a 44 30 69 59 Data Ascii: Q9ImZhbHNlIiByb2xlPSJzd2l0Y2giPjwvc3Bhbj4gPHNwYW4gY2xhc3M9Im90LWxhYmVsLXR4dCI+U3dpdGNoIExhYmVsPC9zcGFuPjwvbGFiZWw+IDxzcGFuIGNsYXNzPSJvdC1sYWJlbC1zdGF0dXMiPmxhYmVsPC9zcGFuPjwvZGl2PjwhLS0gQ2hlY2tib3ggSFRNTCAtLT48ZGl2IGNsYXNzPSJvdC1jaGtib3giPjxpbnB1dCBpZD0iY
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 49 47 46 79 61 57 45 74 59 58 52 76 62 57 6c 6a 50 53 4a 30 63 6e 56 6c 49 69 42 68 63 6d 6c 68 4c 57 78 70 64 6d 55 39 49 6e 42 76 62 47 6c 30 5a 53 49 2b 50 43 39 7a 63 47 46 75 50 6a 77 68 4c 53 30 67 56 6d 56 75 5a 47 39 79 49 46 4e 6c 63 6e 5a 70 59 32 55 67 59 32 39 75 64 47 46 70 62 6d 56 79 49 47 46 75 5a 43 42 70 64 47 56 74 49 48 52 6c 62 58 42 73 59 58 52 6c 49 43 30 74 50 6a 78 7a 5a 57 4e 30 61 57 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 63 6d 39 33 49 47 39 30 4c 58 5a 75 5a 43 31 7a 5a 58 4a 32 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 Data Ascii: tLT48L2Rpdj48L2Rpdj48c3BhbiBjbGFzcz0ib3Qtc2Nybi1yZHIiIGFyaWEtYXRvbWljPSJ0cnVlIiBhcmlhLWxpdmU9InBvbGl0ZSI+PC9zcGFuPjwhLS0gVmVuZG9yIFNlcnZpY2UgY29udGFpbmVyIGFuZCBpdGVtIHRlbXBsYXRlIC0tPjxzZWN0aW9uIGNsYXNzPSJvdC1zZGstcm93IG90LXZuZC1zZXJ2Ij48ZGl2IGNsYXNzPSJvdC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49813	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:37 UTC	599	OUT	GET /scripttemplates/202311.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:37 UTC	826	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:37 GMT Content-Type: text/css Content-Length: 21778 Connection: close Content-MD5: c7xAZ9MSGAobGaTYg/Qtag== Last-Modified: Wed, 06 Mar 2024 17:32:18 GMT ETag: 0x8DC3E035F8EF0D8 x-ms-request-id: c3899b86-501e-0040-3d33-813ebb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 13759 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe06e7c7b673c-ATL
2024-04-19 21:09:37 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c Data Ascii: #onetrust-banner-sdk .ot-toggle,#onetrust-banner-sdk #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 62 6f 64 79 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 Data Ascii: sdk-cookie-policy td,#ot-sdk-cookie-policy tbody,#ot-sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c Data Ascii: er-sdk label:after,#onetrust-banner-sdk .checkbox:after,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 Data Ascii: k-columns,#onetrust-pc-sdk .ot-sdk-column,#onetrust-pc-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49814	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:37 UTC	430	OUT	GET /consent/2e456f46-6b86-42c8-be0a-01efd4471533/018ee767-7431-780c-bf78-4b67b48c194b/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:37 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:37 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 876fe06e8abf6747-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 17237 Cache-Control: public, max-age=86400 Expires: Sat, 20 Apr 2024 21:09:37 GMT Last-Modified: Tue, 16 Apr 2024 15:01:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: cPTK3kj3lA5BsckBLsT3UA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5ed34260-001e-0010-790f-90fceb000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-19 21:09:37 UTC	467	IN	Data Raw: 37 63 31 38 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c18{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 Data Ascii: e and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some type
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 6e 64 6f 72 4c 65 76 65 6c 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c 22 48 61 73 53 63 72 69 70 74 41 72 63 68 69 76 65 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 62 Data Ascii: ForceConsent":true,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","VendorLevelOptOut":false,"HasScriptArchive":false,"BannerPosition":"b
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 63 74 69 6f 6e 73 20 6d 61 64 65 20 62 79 20 79 6f 75 20 77 68 69 63 68 20 61 6d 6f 75 6e 74 20 74 6f 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 73 65 72 76 69 63 65 73 2c 20 73 75 63 68 20 61 73 20 73 65 74 74 69 6e 67 20 79 Data Ascii: roupToggle":false,"GroupDescription":"These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting y
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 70 6c 61 74 66 6f 72 6d 20 66 72 6f 6d 20 4d 69 63 72 6f 73 6f 66 74 2e 20 49 74 20 69 73 20 63 6f 6d 6d 6f 6e 6c 79 20 75 73 65 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 61 20 6c 6f 67 67 65 64 2d 69 6e 20 75 73 65 72 20 74 6f 20 65 6e 61 62 6c 65 20 61 63 63 65 73 73 20 74 6f 20 73 65 63 75 72 65 20 61 72 65 61 73 20 6f 66 20 61 20 73 69 74 65 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 61 35 35 62 61 65 36 35 2d 64 30 34 38 2d 34 39 39 33 2d 38 33 31 37 2d 34 34 36 63 66 33 33 33 35 63 39 39 22 2c 22 4e 61 6d 65 22 3a 22 2e 74 65 2e 61 75 74 68 22 2c 22 48 6f 73 74 22 3a 22 63 6f 6d 6d 75 6e 69 74 79 2e Data Ascii: platform from Microsoft. It is commonly used to identify a logged-in user to enable access to secure areas of a site.","DurationType":1,"category":null,"isThirdParty":false},{"id":"a55bae65-d048-4993-8317-446cf3335c99","Name":".te.auth","Host":"community.
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 6f 63 69 61 74 65 64 20 77 69 74 68 20 73 69 74 65 73 20 75 73 69 6e 67 20 43 6c 6f 75 64 46 6c 61 72 65 2c 20 75 73 65 64 20 74 6f 20 73 70 65 65 64 20 75 70 20 70 61 67 65 20 6c 6f 61 64 20 74 69 6d 65 73 2e 20 41 63 63 6f 72 64 69 6e 67 20 74 6f 20 43 6c 6f 75 64 46 6c 61 72 65 20 69 74 20 69 73 20 75 73 65 64 20 74 6f 20 6f 76 65 72 72 69 64 65 20 61 6e 79 20 73 65 63 75 72 69 74 79 20 72 65 73 74 72 69 63 74 69 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 49 50 20 61 64 64 72 65 73 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 69 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 2e 20 49 74 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 61 6e 79 20 75 73 65 72 20 69 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 20 20 Data Ascii: ociated with sites using CloudFlare, used to speed up page load times. According to CloudFlare it is used to override any security restrictions based on the IP address the visitor is coming from. It does not contain any user identification information.
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 63 30 38 36 38 30 61 64 63 22 2c 22 4e 61 6d 65 22 3a 22 5f 63 66 75 76 69 64 22 2c 22 48 6f 73 74 22 3a 22 73 75 70 70 6f 72 74 2e 68 6f 6d 65 2e 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 65 38 34 63 33 32 39 65 2d 39 34 37 36 2d 34 64 65 62 2d 38 36 62 37 2d 61 39 37 33 64 37 35 35 32 65 30 61 22 2c 22 4e 61 6d 65 22 3a 22 5f 64 64 5f 73 22 2c 22 48 6f 73 74 22 3a 22 62 72 61 6e 64 2e 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 Data Ascii: c08680adc","Name":"_cfuvid","Host":"support.home.sophos.com","IsSession":true,"Length":"0","description":"","DurationType":1,"category":null,"isThirdParty":false},{"id":"e84c329e-9476-4deb-86b7-a973d7552e0a","Name":"_dd_s","Host":"brand.sophos.com","IsSes
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 61 6d 65 22 3a 22 41 52 52 41 66 66 69 6e 69 74 79 22 2c 22 48 6f 73 74 22 3a 22 63 65 6e 74 72 61 6c 73 74 61 74 75 73 2e 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 77 65 62 73 69 74 65 73 20 72 75 6e 20 6f 6e 20 74 68 65 20 57 69 6e 64 6f 77 73 20 41 7a 75 72 65 20 63 6c 6f 75 64 20 70 6c 61 74 66 6f 72 6d 2e 20 49 74 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 76 69 73 69 74 6f 72 20 70 61 67 65 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 6f 75 74 65 64 20 74 6f 20 74 68 Data Ascii: ame":"ARRAffinity","Host":"centralstatus.sophos.com","IsSession":true,"Length":"0","description":"This cookie is set by websites run on the Windows Azure cloud platform. It is used for load balancing to make sure the visitor page requests are routed to th
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 36 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 57 53 20 45 4c 42 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 72 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 36 64 63 35 37 61 36 35 2d 63 36 65 30 2d 34 30 33 37 2d 38 39 32 37 2d 63 62 65 38 65 30 33 65 66 32 33 64 22 2c 22 4e 61 6d 65 22 3a 22 41 57 53 41 4c 42 43 4f 52 53 22 2c 22 48 6f 73 74 22 3a 22 6d 79 75 74 6d 2e 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 36 22 2c 22 64 65 73 63 72 69 Data Ascii: ":false,"Length":"6","description":"AWS ELB application load balancer","DurationType":1,"category":null,"isThirdParty":false},{"id":"6dc57a65-c6e0-4037-8927-cbe8e03ef23d","Name":"AWSALBCORS","Host":"myutm.sophos.com","IsSession":false,"Length":"6","descri
2024-04-19 21:09:37 UTC	1369	IN	Data Raw: 6f 6d 61 69 6e 20 6e 61 6d 65 2c 20 75 73 75 61 6c 6c 79 20 74 68 65 20 6f 6e 65 20 74 68 61 74 20 69 74 20 69 73 20 68 6f 73 74 65 64 20 6f 6e 2c 20 62 75 74 20 6e 6f 74 20 61 6c 77 61 79 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 33 37 31 61 33 65 62 34 2d 39 65 31 66 2d 34 61 38 34 2d 61 62 61 61 2d 36 62 39 34 33 31 32 65 38 33 32 30 22 2c 22 4e 61 6d 65 22 3a 22 62 6d 5f 73 76 22 2c 22 48 6f 73 74 22 3a 22 73 6f 70 68 6f 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f Data Ascii: omain name, usually the one that it is hosted on, but not always.","DurationType":1,"category":null,"isThirdParty":false},{"id":"371a3eb4-9e1f-4a84-abaa-6b94312e8320","Name":"bm_sv","Host":"sophos.com","IsSession":false,"Length":"0","description":"This co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49815	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	386	OUT	GET /scripttemplates/202311.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:38 UTC	808	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:38 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: aE3Cd1odQZ18GHiNuD52gA== Last-Modified: Wed, 06 Mar 2024 17:32:07 GMT x-ms-request-id: 5f3fd1cc-401e-0011-3163-70a337000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 7495 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe071cbdd53af-ATL
2024-04-19 21:09:38 UTC	561	IN	Data Raw: 33 33 38 32 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 3382 { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 70 Data Ascii: CI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHRp
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: 9uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-c
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e Data Ascii: #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-bann
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d Data Ascii: ner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust-
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 3a Data Ascii: k .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float:
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 3b Data Ascii: -sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px;
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 Data Ascii: dk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 65 6d 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 37 65 6d 29 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 38 39 37 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 33 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 37 35 25 3b 74 72 61 Data Ascii: margin-left:2em;margin-right:5em;margin-bottom:1.25em;width:calc(100% - 7em)}}@media only screen and (min-width: 897px)and (max-width: 1023px){#onetrust-banner-sdk.vertical-align-content #onetrust-button-group-parent{position:absolute;top:50%;left:75%;tra
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 34 35 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 2e 6f 74 2d 64 70 64 2d 74 69 74 6c 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 7d 23 6f 6e 65 74 72 Data Ascii: k.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bottom:0;padding-bottom:1em}#onetrust-banner-sdk.ot-iab-2 .ot-dpd-container{width:45%;padding-left:1rem;display:inline-block;float:none}#onetrust-banner-sdk.ot-iab-2 .ot-dpd-title{line-height:1.7}#onetr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49816	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	393	OUT	GET /scripttemplates/202311.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:38 UTC	826	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:38 GMT Content-Type: text/css Content-Length: 21778 Connection: close Content-MD5: c7xAZ9MSGAobGaTYg/Qtag== Last-Modified: Wed, 06 Mar 2024 17:32:18 GMT ETag: 0x8DC3E035F8EF0D8 x-ms-request-id: 6f5b858f-001e-00a9-3f61-70f8f1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 86011 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe071db6fb094-ATL
2024-04-19 21:09:38 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 64 69 76 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 73 70 61 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 31 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 2c Data Ascii: #onetrust-banner-sdk .ot-toggle,#onetrust-banner-sdk #ot-content,#onetrust-banner-sdk #ot-pc-content,#onetrust-banner-sdk .checkbox,#onetrust-pc-sdk div,#onetrust-pc-sdk span,#onetrust-pc-sdk h1,#onetrust-pc-sdk h2,#onetrust-pc-sdk h3,#onetrust-pc-sdk h4,
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 62 6f 64 79 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 74 6f 67 67 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 23 6f 74 2d 70 63 2d 63 6f 6e 74 65 6e 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 63 68 65 63 6b 62 6f 78 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 64 69 76 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 Data Ascii: sdk-cookie-policy td,#ot-sdk-cookie-policy tbody,#ot-sdk-cookie-policy .ot-main-content,#ot-sdk-cookie-policy .ot-toggle,#ot-sdk-cookie-policy #ot-content,#ot-sdk-cookie-policy #ot-pc-content,#ot-sdk-cookie-policy .checkbox,#ot-sync-ntfy div,#ot-sync-ntfy
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 65 72 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 61 62 65 6c 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 61 66 74 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 63 68 65 63 6b 62 6f 78 3a 62 65 66 6f 72 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 3a 62 65 66 6f 72 65 2c Data Ascii: er-sdk label:after,#onetrust-banner-sdk .checkbox:after,#onetrust-banner-sdk .checkbox:before,#onetrust-pc-sdk label:before,#onetrust-pc-sdk label:after,#onetrust-pc-sdk .checkbox:after,#onetrust-pc-sdk .checkbox:before,#ot-sdk-cookie-policy label:before,
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 73 64 6b 2d 63 6f 6c 75 6d 6e 73 3a 66 69 72 73 74 Data Ascii: k-columns,#onetrust-pc-sdk .ot-sdk-column,#onetrust-pc-sdk .ot-sdk-columns,#ot-sdk-cookie-policy .ot-sdk-column,#ot-sdk-cookie-policy .ot-sdk-columns{margin-left:4%}#onetrust-banner-sdk .ot-sdk-column:first-child,#onetrust-banner-sdk .ot-sdk-columns:first

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49817	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	577	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.sophos.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:38 UTC	829	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:38 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Thu, 18 Apr 2024 19:47:54 GMT ETag: 0x8DC5FE070441665 x-ms-request-id: 5385b254-601e-0016-417d-92cf54000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 13760 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe0734fd54594-ATL
2024-04-19 21:09:38 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49819	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	722	OUT	GET /logos/8814ea97-7d41-4933-8a06-f5b8e65f6da8/f3c8d17e-040e-46f5-9c16-27efb793a7a7/8e4641b4-93aa-4176-880e-cb2950b9093e/sophos-logo-blue-rgb_(1).png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:38 UTC	825	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:38 GMT Content-Type: image/png Content-Length: 7963 Connection: close Content-MD5: d2UywqgE8Ul52QHCEM5u5w== Last-Modified: Fri, 05 Mar 2021 15:08:15 GMT ETag: 0x8D8DFE8804B6B6D x-ms-request-id: e6d300eb-701e-0025-5e54-2390ff000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 2534 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe073af2f6750-ATL
2024-04-19 21:09:38 UTC	544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 35 00 00 00 89 08 06 00 00 00 15 0c 16 7f 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 1e cd 49 44 41 54 78 9c ed 9d 41 52 23 c7 f2 87 5b 13 b3 d7 fc 4f 00 3e 01 bc 95 96 c8 27 00 ef 15 81 e6 04 a3 39 c1 e0 13 3c cd 09 06 22 b4 37 9c c0 b0 d4 ca 70 02 c3 09 1e 3a 81 fe 51 cc af 99 46 20 40 ad ee ce ac aa ef 8b 50 d8 e3 e7 67 9a 52 75 65 fe 32 b3 32 7b cb e5 b2 00 c8 99 de 68 fe a9 28 8a 7d 2d c1 ae 3e 55 86 6f 2c cf ad 3e 55 2e cb ff 6d 39 1b ac fe 6f 00 00 90 11 bd d1 bc 6a 5b 82 bd f9 54 f9 ed ab 36 68 1d d7 45 51 dc 57 fe b7 7b fd 33 ec 0c 80 70 21 6a de 70 2a df f3 b2 c3 fb b9 5e ce 06 93 dc d6 ab b2 c7 f6 b5 bf 4a a3 b2 d7 d1 23 2c 64 80 4a 01 74 ad ef 22 5b 43 d4 1b cd Data Ascii: PNGIHDR5pHYs.#.#x?vIDATxAR#[O>'9<"7p:QF @PgRue22{h(}->Uo,>U.m9oj[T6hEQW{3p!jp*^J#,dJt"[C
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 84 0c b4 85 84 cc 58 7b 2d a5 03 66 4f 9f 2f ca e4 9c cb 19 3d 77 f0 6c 10 27 a5 70 fe a6 a8 6d d8 4b 53 ea f0 01 5e a7 e2 c8 1e 39 c8 c4 34 c9 63 30 ad 72 26 9c 22 70 9e a2 c0 fc 44 be 46 4a df 7f 92 34 2a 6a 24 66 26 fa f0 e5 43 e3 e8 80 29 6b ed 73 88 94 84 f7 e8 38 7c 24 70 4e 31 3c b0 25 e1 bd f9 22 d1 1c a2 b5 27 64 04 01 7e a1 80 d9 24 41 21 b3 8e ea 99 70 a7 bb 58 e7 99 df f9 1c 6a 0f 1c 3a 78 1c 78 27 8d 89 9a de 68 7e 82 98 81 b6 50 b4 6c 9c f9 01 d3 af 18 9e 1b 45 da b3 bd 94 0b 8d 10 22 b5 7f f7 46 f3 8b 70 7e 93 b9 81 5c a1 c2 e4 91 20 70 fe 1b 3e 3a 17 a6 39 05 3d 14 38 3d 51 30 11 22 63 6b 51 23 35 7b 4a 7d 21 b4 81 3a 20 9d b0 bf 9e 11 8c ee 0f 05 13 a6 ca de d0 e1 06 ea 12 82 05 c3 b0 9f 96 b3 41 d7 1d b3 00 cc a0 c2 e4 55 c2 b9 70 a8 8c Data Ascii: X{-fO/=wl'pmKS^94c0r&"pDFJ4*j$f&C)ks8\|$pN1<%"'d~$A!pXj:xx'h~PlE"Fp~\ p>:9=8=Q0"ckQ#5{J}!: AUp
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: d8 4d f4 f1 22 6e c6 88 1a e8 00 4f 7b 7e 95 33 d9 19 73 27 75 39 1b 3c 64 70 24 6e 3c ce 6a e9 b7 11 08 51 55 84 07 9b 7a a5 75 bf 44 b4 74 c7 43 f7 33 07 9b 20 5c 98 fb ba 9c 0d 76 43 3a 12 41 13 2d 1e 1d 9a 20 94 7f 5f ce 06 43 6f d9 bd 20 6e 96 b3 41 28 17 f8 aa 77 c0 13 07 cc ae f1 4b 30 92 ca 3a ed 2b 0a e8 81 1d 35 9b 01 68 85 8a 98 f7 46 70 60 7f 5b ce 06 63 6f 0e ac c4 cd ae 04 97 37 26 2d b4 84 b7 3e 83 6e 2a 3e 47 2b 65 87 b0 9e b2 a5 b3 a5 f3 12 36 c0 3e 1d 97 e2 c6 69 96 e6 4c 7b cb 75 19 95 f6 fe d0 91 73 5a 42 d4 dd 39 21 00 24 61 ec c5 61 41 d4 40 9b 78 cc d2 7c 95 03 eb 36 18 ab 20 48 c8 d8 7c 76 16 40 eb b7 20 52 2d fd d9 b3 70 1e a7 58 ba 1d 0b d6 a2 26 38 71 ae 0f 03 78 37 de 1c e0 cf 1e a3 66 eb 50 16 c9 9b b0 21 5b 13 09 72 58 2e 1c Data Ascii: M"nO{~3s'u9<dp$n<jQUzuDtC3 \vC:A- _Co nA(wK0:+5hFp`[co7&->n*>G+e6>iL{usZB9!$aaA@x\|6 H\|v@ R-pX&8qx7fP![rX.
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 9c 94 9e fd c2 d2 37 ec d7 14 07 d6 dd 41 0f c3 1e 0a 59 1b c4 4d f7 3c 88 9a e5 6c e0 65 98 e1 71 51 14 ff 4a e9 4e 88 06 bb c4 b2 f3 19 11 b4 5f 58 af 05 ef a6 6f 8e 8c 9f 8e 77 15 62 85 bd fb 0b 6b 81 17 5b 09 5a 49 f0 93 be 49 dc 84 60 fd 11 02 a7 1b 3e 56 7e ca 85 14 a6 07 0e cb 67 e9 8d e6 85 ca 8e 6e 57 3e 0f 18 36 3a c8 0e 22 68 7e 08 cd 02 f4 6e 58 c1 01 ed 14 05 83 2c cb 77 0a 1c 43 d8 02 ec 8c 1f ac d7 a2 6e a6 e6 47 0b cf 52 87 be 82 f5 e1 13 ce e6 3b ad 69 e9 b7 5e 57 b2 da b7 34 a8 d8 9e aa a8 39 75 24 6a 56 39 d0 e7 19 c6 8e dd 2a 37 6b ca 2e aa 1b b7 fc 7b 36 f0 e6 b0 5e 4f b9 5a f7 5e 74 00 99 1a bf 78 18 06 87 a8 81 28 c1 2e 3f c1 43 45 c0 46 95 44 0a f8 79 0a d2 57 d9 d1 c7 bb 3f bb 58 f3 dd df af fc f3 47 71 e6 a5 85 ff a3 a8 09 25 68 Data Ascii: 7AYM<leqQJN_Xowbk[ZII`>V~gnW>6:"h~nX,wCnGR;i^W49u$jV9*7k.{6^OZ^tx(.?CEFDyW?XGq%h
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: f2 c4 d4 ce a8 e3 ae 29 cb d9 e0 3c b4 80 5e ce 06 9f 24 70 be 73 97 dc 05 47 ab 57 2a 3e 76 f1 54 da 94 d7 e5 90 36 0d 83 dc 57 7a 6f a8 bf ee 78 5d b5 04 39 aa 39 bb 06 87 06 20 3f 4a 41 83 88 05 80 ac 09 02 a7 3a 04 52 17 d6 ab 3e ed be 4a fd a1 7d fa ab fe 6c 27 a2 66 95 8a c8 79 82 ea e3 ca 1a b9 d5 e8 80 e7 b4 70 6c a5 51 87 41 dd d6 88 ba 86 ef ec b0 a5 67 7a 93 70 78 84 c6 14 56 3f df 21 34 7d 80 b6 09 e5 c3 47 08 1a e8 90 2b 43 9b 4a 99 f3 73 b0 33 af 20 9f e4 99 5f a2 e0 fd 27 7d aa 6d b1 57 ff ec 89 f0 6c 7b 4e 9f 6d 1d f6 a2 66 1d 6a 11 5a b6 09 8d ce 79 55 1a ac aa d6 87 8e 37 48 dd 6c 0d f8 c1 f4 60 44 60 26 cf 4d 86 25 67 67 09 9d 8b e1 7c f8 af 83 e7 80 b8 b1 f4 61 a2 6d 4e b4 12 08 3a 7f e5 5f 75 49 45 94 0d 2b 55 55 1e 2b aa 9e 04 e9 5d Data Ascii: )<^$psGW*>vT6Wzox]99 ?JA:R>J}l'fyplQAgzpxV?!4}G+CJs3 _'}mWl{NmfjZyU7Hl`D`&M%gg\|amN:_uIE+UU+]
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 0c e8 39 5d cf 00 c0 8a e5 6c 70 ea a0 d4 39 70 d8 1b cd 93 29 77 56 a3 1d 0f 81 b3 82 06 01 69 a0 f7 c3 a2 ba e4 aa 40 d4 d8 a3 ec 82 d9 cb dc 50 64 c4 4b b6 26 d4 3d 47 7f 30 56 f6 84 f5 a5 cd 12 4a 02 00 c0 1a 2f e7 d0 b7 14 ba 6e 2a 70 f6 c3 c1 a3 04 16 12 ae 10 31 ba 06 60 1a a0 47 d4 18 22 e7 f5 d2 30 f5 7b d5 c4 7f 24 d4 31 36 f5 df 6a 80 e3 98 85 8d 83 3d b1 ca 15 dd 68 00 c0 01 53 27 d9 9a c0 8f 98 85 8d 04 8d a7 79 30 04 ce 22 47 7b ca b2 5a e6 c1 4f 41 d4 18 a1 be f7 d6 ce 6b 93 ce aa a7 94 7c 94 c2 a6 62 68 bc 08 9a 22 b3 c1 73 00 e0 14 95 c0 7a 72 7e a3 14 36 ba ab 79 e9 a8 12 60 81 a8 89 1b bd 07 d6 7b ea 41 a4 23 6a 0c e8 8d e6 13 09 0a 6b e7 b5 b1 48 8d b3 6c 4d 21 61 73 1d 4b f3 00 a5 6d bd 09 9a 2b 7d af 00 00 1e f0 94 ad 29 24 6c a2 09 Data Ascii: 9]lp9p)wVi@PdK&=G0VJ/n*p1`G"0{$16j=hS'y0"G{ZOAk\|bh"szr~6y`{A#jkHlM!asKm+})$l
2024-04-19 21:09:38 UTC	574	IN	Data Raw: 26 0d ce 52 4b fd ca e8 8c 31 3a 1b 71 a5 a8 d9 11 d9 19 00 80 d7 09 0e b9 4a d2 fe a0 f4 f9 dd 04 7f e3 b7 10 7c 24 3b 03 0d b3 50 e7 bc da 0d 8d 3e f2 8d 44 cd 42 7d bb 93 9d d6 ab 28 d0 b0 37 9a ef 16 45 11 32 38 c7 0e 1e cb 1b 41 cc 9c 10 31 03 00 d8 1c d9 d0 f3 de 68 3e 94 9d 39 60 19 9f 71 26 3b 43 c0 0c da e0 4a fe ec 56 fb 0b 51 13 2f e1 80 c9 a6 8e 55 1b 7d dc 1b cd 4f 34 51 36 7c 76 1c 3c 9a 25 61 0f 9c 22 66 00 00 b6 a7 12 44 db 57 c7 a5 50 a2 d6 cf 78 69 43 e0 34 b4 67 9e 22 66 a0 25 16 f2 65 1b 69 03 8e a8 89 8f ac a3 25 fa bd 83 b0 39 e9 8d e6 47 32 3a 39 19 9e 50 22 11 ee ca 9c 63 64 00 00 9a 47 77 53 43 10 ed 53 c5 c6 1c 66 b4 d4 57 12 33 e7 94 98 41 4b 2c e4 cb 4c 9b dc 63 88 9a 38 b8 d3 01 73 8a 23 fb 8b b2 64 20 fc 83 c4 05 ce 9d 7e cf Data Ascii: &RK1:qJ\|$;P>DB}(7E28A1h>9`q&;CJVQ/U}O4Q6\|v<%a"fDWPxiC4g"f%ei%9G2:9P"cdGwSCSfW3AK,Lc8s#d ~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49818	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	609	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.sophos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:38 UTC	830	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:38 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Thu, 18 Apr 2024 12:14:43 GMT ETag: 0x8DC5FA121387EFD x-ms-request-id: 840d5794-701e-0035-3cc3-915597000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 86241 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe073ae284542-ATL
2024-04-19 21:09:38 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-19 21:09:38 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49821	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	390	OUT	GET /scripttemplates/202311.1.0/assets/v2/otPcTab.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:38 UTC	809	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:38 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: Gj/ioQ+cHUcUPmZjGLhTCw== Last-Modified: Wed, 06 Mar 2024 17:32:10 GMT x-ms-request-id: db9b4d2b-901e-003d-558b-704f98000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 84463 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe0748c0844e1-ATL
2024-04-19 21:09:38 UTC	560	IN	Data Raw: 37 63 37 36 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 54 61 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 31 52 68 59 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 68 4c 53 30 67 63 47 Data Ascii: 7c76 { "name": "otPcTab", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1RhYiBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjwhLS0gcG
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 6a 62 47 39 7a 5a 53 31 77 59 79 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 4e 73 62 33 4e 6c 4c 57 6c 6a 62 32 34 69 49 47 46 79 61 57 45 74 62 47 46 69 5a 57 77 39 49 6b 4e 73 62 33 4e 6c 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 47 4e 76 62 6e 52 6c 62 6e 51 67 4c 53 30 2b 50 43 45 74 4c 53 42 48 63 6d 39 31 63 48 4d 67 4c 79 42 54 64 57 49 67 5a 33 4a 76 64 58 42 7a 49 48 64 70 64 47 67 67 59 32 39 76 61 32 6c 6c 63 79 41 74 4c 54 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6a 62 32 35 30 5a 57 35 30 49 69 42 6a 62 47 46 7a 63 7a Data Ascii: yIj48YnV0dG9uIGlkPSJjbG9zZS1wYy1idG4taGFuZGxlciIgY2xhc3M9Im90LWNsb3NlLWljb24iIGFyaWEtbGFiZWw9IkNsb3NlIj48L2J1dHRvbj48L2Rpdj48L2Rpdj48L2Rpdj48IS0tIGNvbnRlbnQgLS0+PCEtLSBHcm91cHMgLyBTdWIgZ3JvdXBzIHdpdGggY29va2llcyAtLT48ZGl2IGlkPSJvdC1wYy1jb250ZW50IiBjbGFzcz
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 63 32 56 73 5a 57 4e 30 5a 57 51 39 49 6d 5a 68 62 48 4e 6c 49 6a 34 38 61 44 4d 2b 55 47 56 79 63 32 39 75 59 57 78 70 65 6d 46 30 61 57 39 75 49 45 4e 76 62 32 74 70 5a 58 4d 38 4c 32 67 7a 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 6c 63 32 4d 74 59 32 35 30 63 69 42 76 64 43 31 6f 61 57 52 6c 49 69 42 79 62 32 78 6c 50 53 4a 30 59 57 4a 77 59 57 35 6c 62 43 49 67 64 47 46 69 61 57 35 6b 5a 58 67 39 49 6a 41 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 73 61 53 31 6f 5a 48 49 69 50 6a 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 30 61 58 52 73 5a 53 49 2b 51 32 39 75 63 32 56 75 64 44 77 76 63 33 42 68 62 6a 34 67 50 48 4e 77 59 57 34 67 59 32 78 Data Ascii: c2VsZWN0ZWQ9ImZhbHNlIj48aDM+UGVyc29uYWxpemF0aW9uIENvb2tpZXM8L2gzPjwvZGl2PjxkaXYgY2xhc3M9Im90LWRlc2MtY250ciBvdC1oaWRlIiByb2xlPSJ0YWJwYW5lbCIgdGFiaW5kZXg9IjAiPjxkaXYgY2xhc3M9Im90LXBsaS1oZHIiPjxzcGFuIGNsYXNzPSJvdC1saS10aXRsZSI+Q29uc2VudDwvc3Bhbj4gPHNwYW4gY2x
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 47 77 74 4d 6a 45 75 4e 44 41 35 4c 54 49 78 4c 6a 51 78 4e 6b 4d 7a 4d 6a 4d 75 4e 44 4d 79 4c 44 4d 75 4e 54 49 78 4c 44 4d 78 4e 43 34 34 4d 54 63 73 4d 43 77 7a 4d 44 51 75 4e 6a 4d 33 4c 44 42 7a 4c 54 45 34 4c 6a 63 35 4d 53 77 7a 4c 6a 55 79 4d 53 30 79 4e 53 34 34 4e 44 45 73 4d 54 41 75 4e 54 59 78 54 44 6b 79 4c 6a 59 30 4f 53 77 78 4f 54 59 75 4e 44 49 31 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 4d 74 4e 79 34 77 4e 44 51 73 4e 79 34 77 4e 44 4d 74 4d 54 41 75 4e 54 59 32 4c 44 45 31 4c 6a 59 31 4e 69 30 78 4d 43 34 31 4e 6a 59 73 4d 6a 55 75 4f 44 51 78 63 7a 4d 75 4e 54 49 78 4c 44 45 34 4c 6a 63 35 4d 53 77 78 4d 43 34 31 4e 6a 59 73 4d 6a 55 75 4f 44 4d 33 62 44 45 34 4e 69 34 78 4e 44 59 73 4d 54 67 31 Data Ascii: GwtMjEuNDA5LTIxLjQxNkMzMjMuNDMyLDMuNTIxLDMxNC44MTcsMCwzMDQuNjM3LDBzLTE4Ljc5MSwzLjUyMS0yNS44NDEsMTAuNTYxTDkyLjY0OSwxOTYuNDI1CiAgICAgICAgICAgICAgICAgIGMtNy4wNDQsNy4wNDMtMTAuNTY2LDE1LjY1Ni0xMC41NjYsMjUuODQxczMuNTIxLDE4Ljc5MSwxMC41NjYsMjUuODM3bDE4Ni4xNDYsMTg1
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 67 74 4d 43 34 79 4f 54 63 73 4d 69 34 77 4e 7a 6b 74 4d 43 34 34 4d 7a 64 44 4e 54 59 75 4d 6a 55 31 4c 44 55 30 4c 6a 6b 34 4d 69 77 31 4e 69 34 79 4f 54 4d 73 4e 54 4d 75 4d 44 67 73 4e 54 55 75 4d 54 51 32 4c 44 55 78 4c 6a 67 34 4e 33 6f 67 54 54 49 7a 4c 6a 6b 34 4e 43 77 32 59 7a 6b 75 4d 7a 63 30 4c 44 41 73 4d 54 63 73 4e 79 34 32 4d 6a 59 73 4d 54 63 73 4d 54 64 7a 4c 54 63 75 4e 6a 49 32 4c 44 45 33 4c 54 45 33 4c 44 45 33 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 63 79 30 78 4e 79 30 33 4c 6a 59 79 4e 69 30 78 4e 79 30 78 4e 31 4d 78 4e 43 34 32 4d 53 77 32 4c 44 49 7a 4c 6a 6b 34 4e 43 77 32 65 69 49 76 50 6a 77 76 63 33 5a 6e 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 57 5a 73 64 48 49 74 59 Data Ascii: gtMC4yOTcsMi4wNzktMC44MzdDNTYuMjU1LDU0Ljk4Miw1Ni4yOTMsNTMuMDgsNTUuMTQ2LDUxLjg4N3ogTTIzLjk4NCw2YzkuMzc0LDAsMTcsNy42MjYsMTcsMTdzLTcuNjI2LDE3LTE3LDE3CiAgICAgICAgICAgICAgcy0xNy03LjYyNi0xNy0xN1MxNC42MSw2LDIzLjk4NCw2eiIvPjwvc3ZnPjwvZGl2PjxkaXYgaWQ9Im90LWZsdHItY
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 67 61 57 51 39 49 6d 39 30 4c 57 78 7a 64 43 31 6a 62 6e 51 69 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 79 62 33 63 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 78 31 62 57 34 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 4e 6c 62 43 31 69 62 47 73 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 Data Ascii: gaWQ9Im90LWxzdC1jbnQiIGNsYXNzPSJvdC1wYy1zY3JvbGxiYXIiPjxkaXYgY2xhc3M9Im90LXNkay1yb3ciPjxkaXYgY2xhc3M9Im90LXNkay1jb2x1bW4iPjxkaXYgaWQ9Im90LXNlbC1ibGsiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwiPjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZH
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 4c 58 5a 6c 62 69 31 69 62 33 67 69 49 47 46 79 61 57 45 74 5a 58 68 77 59 57 35 6b 5a 57 51 39 49 6d 5a 68 62 48 4e 6c 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 57 4e 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 68 6b 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 6d 46 74 5a 53 49 2b 50 43 39 6f 4d 7a 34 38 59 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 78 70 62 6d 73 69 49 47 68 79 5a 57 59 39 49 69 4d 69 50 6c 5a 70 5a 58 63 67 55 48 4a 70 64 6d 46 6a 65 53 42 4f 62 33 52 70 59 32 55 38 4c 32 45 2b 50 47 4a 79 50 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a Data Ascii: LXZlbi1ib3giIGFyaWEtZXhwYW5kZWQ9ImZhbHNlIj48L2J1dHRvbj48c2VjdGlvbiBjbGFzcz0ib3QtYWNjLWhkciI+PGRpdiBjbGFzcz0ib3QtdmVuLWhkciI+PGgzIGNsYXNzPSJvdC12ZW4tbmFtZSI+PC9oMz48YSBjbGFzcz0ib3QtdmVuLWxpbmsiIGhyZWY9IiMiPlZpZXcgUHJpdmFjeSBOb3RpY2U8L2E+PGJyPjxhIGNsYXNzPSJ
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 32 34 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 6e 52 75 4c 58 4e 31 59 6d 4e 75 64 48 49 69 50 6a 78 69 64 58 52 30 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4a 6c 5a 6e 56 7a 5a 53 31 68 62 47 77 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 55 6d 56 71 5a 57 4e 30 49 45 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 69 41 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 45 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 57 5a 76 62 33 52 6c 63 69 31 73 Data Ascii: 24+PGRpdiBjbGFzcz0ib3QtYnRuLXN1YmNudHIiPjxidXR0b24gY2xhc3M9Im90LXBjLXJlZnVzZS1hbGwtaGFuZGxlciI+UmVqZWN0IEFsbDwvYnV0dG9uPiA8YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IEFsbDwvYnV0dG9uPjwvZGl2PjwvZGl2PjxkaXYgY2xhc3M9Im90LXBjLWZvb3Rlci1s
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 51 39 49 6d 5a 68 62 48 4e 6c 49 69 42 79 62 32 78 6c 50 53 4a 7a 64 32 6c 30 59 32 67 69 50 6a 77 76 63 33 42 68 62 6a 34 67 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 68 59 6d 56 73 4c 58 52 34 64 43 49 2b 55 33 64 70 64 47 4e 6f 49 45 78 68 59 6d 56 73 50 43 39 7a 63 47 46 75 50 6a 77 76 62 47 46 69 5a 57 77 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 59 57 4a 6c 62 43 31 7a 64 47 46 30 64 58 4d 69 50 6d 78 68 59 6d 56 73 50 43 39 7a 63 47 46 75 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 51 32 68 6c 59 32 74 69 62 33 67 67 53 46 52 4e 54 43 41 74 4c 54 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6a 61 47 74 69 62 33 67 69 50 6a 78 70 62 6e 42 31 64 43 42 70 5a 44 30 69 59 Data Ascii: Q9ImZhbHNlIiByb2xlPSJzd2l0Y2giPjwvc3Bhbj4gPHNwYW4gY2xhc3M9Im90LWxhYmVsLXR4dCI+U3dpdGNoIExhYmVsPC9zcGFuPjwvbGFiZWw+IDxzcGFuIGNsYXNzPSJvdC1sYWJlbC1zdGF0dXMiPmxhYmVsPC9zcGFuPjwvZGl2PjwhLS0gQ2hlY2tib3ggSFRNTCAtLT48ZGl2IGNsYXNzPSJvdC1jaGtib3giPjxpbnB1dCBpZD0iY
2024-04-19 21:09:38 UTC	1369	IN	Data Raw: 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 49 47 46 79 61 57 45 74 59 58 52 76 62 57 6c 6a 50 53 4a 30 63 6e 56 6c 49 69 42 68 63 6d 6c 68 4c 57 78 70 64 6d 55 39 49 6e 42 76 62 47 6c 30 5a 53 49 2b 50 43 39 7a 63 47 46 75 50 6a 77 68 4c 53 30 67 56 6d 56 75 5a 47 39 79 49 46 4e 6c 63 6e 5a 70 59 32 55 67 59 32 39 75 64 47 46 70 62 6d 56 79 49 47 46 75 5a 43 42 70 64 47 56 74 49 48 52 6c 62 58 42 73 59 58 52 6c 49 43 30 74 50 6a 78 7a 5a 57 4e 30 61 57 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 63 6d 39 33 49 47 39 30 4c 58 5a 75 5a 43 31 7a 5a 58 4a 32 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 Data Ascii: tLT48L2Rpdj48L2Rpdj48c3BhbiBjbGFzcz0ib3Qtc2Nybi1yZHIiIGFyaWEtYXRvbWljPSJ0cnVlIiBhcmlhLWxpdmU9InBvbGl0ZSI+PC9zcGFuPjwhLS0gVmVuZG9yIFNlcnZpY2UgY29udGFpbmVyIGFuZCBpdGVtIHRlbXBsYXRlIC0tPjxzZWN0aW9uIGNsYXNzPSJvdC1zZGstcm93IG90LXZuZC1zZXJ2Ij48ZGl2IGNsYXNzPSJvdC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49822	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	371	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:39 UTC	829	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:38 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Wed, 17 Apr 2024 06:40:30 GMT ETag: 0x8DC5EA9463EC821 x-ms-request-id: 1ac763c2-901e-0012-5342-914253000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 81451 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe0768b610d06-ATL
2024-04-19 21:09:39 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49823	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	373	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:39 UTC	830	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:39 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Thu, 18 Apr 2024 12:14:43 GMT ETag: 0x8DC5FA121387EFD x-ms-request-id: 840d5794-701e-0035-3cc3-915597000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 86242 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe0775aa86730-ATL
2024-04-19 21:09:39 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-19 21:09:39 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-19 21:09:39 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-19 21:09:39 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-19 21:09:39 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49824	104.19.178.52	443	3152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 21:09:38 UTC	486	OUT	GET /logos/8814ea97-7d41-4933-8a06-f5b8e65f6da8/f3c8d17e-040e-46f5-9c16-27efb793a7a7/8e4641b4-93aa-4176-880e-cb2950b9093e/sophos-logo-blue-rgb_(1).png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 21:09:39 UTC	825	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 21:09:39 GMT Content-Type: image/png Content-Length: 7963 Connection: close Content-MD5: d2UywqgE8Ul52QHCEM5u5w== Last-Modified: Fri, 05 Mar 2021 15:08:15 GMT ETag: 0x8D8DFE8804B6B6D x-ms-request-id: e6d300eb-701e-0025-5e54-2390ff000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 2535 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 876fe0775fd0451a-ATL
2024-04-19 21:09:39 UTC	544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 35 00 00 00 89 08 06 00 00 00 15 0c 16 7f 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 1e cd 49 44 41 54 78 9c ed 9d 41 52 23 c7 f2 87 5b 13 b3 d7 fc 4f 00 3e 01 bc 95 96 c8 27 00 ef 15 81 e6 04 a3 39 c1 e0 13 3c cd 09 06 22 b4 37 9c c0 b0 d4 ca 70 02 c3 09 1e 3a 81 fe 51 cc af 99 46 20 40 ad ee ce ac aa ef 8b 50 d8 e3 e7 67 9a 52 75 65 fe 32 b3 32 7b cb e5 b2 00 c8 99 de 68 fe a9 28 8a 7d 2d c1 ae 3e 55 86 6f 2c cf ad 3e 55 2e cb ff 6d 39 1b ac fe 6f 00 00 90 11 bd d1 bc 6a 5b 82 bd f9 54 f9 ed ab 36 68 1d d7 45 51 dc 57 fe b7 7b fd 33 ec 0c 80 70 21 6a de 70 2a df f3 b2 c3 fb b9 5e ce 06 93 dc d6 ab b2 c7 f6 b5 bf 4a a3 b2 d7 d1 23 2c 64 80 4a 01 74 ad ef 22 5b 43 d4 1b cd Data Ascii: PNGIHDR5pHYs.#.#x?vIDATxAR#[O>'9<"7p:QF @PgRue22{h(}->Uo,>U.m9oj[T6hEQW{3p!jp*^J#,dJt"[C
2024-04-19 21:09:39 UTC	1369	IN	Data Raw: 84 0c b4 85 84 cc 58 7b 2d a5 03 66 4f 9f 2f ca e4 9c cb 19 3d 77 f0 6c 10 27 a5 70 fe a6 a8 6d d8 4b 53 ea f0 01 5e a7 e2 c8 1e 39 c8 c4 34 c9 63 30 ad 72 26 9c 22 70 9e a2 c0 fc 44 be 46 4a df 7f 92 34 2a 6a 24 66 26 fa f0 e5 43 e3 e8 80 29 6b ed 73 88 94 84 f7 e8 38 7c 24 70 4e 31 3c b0 25 e1 bd f9 22 d1 1c a2 b5 27 64 04 01 7e a1 80 d9 24 41 21 b3 8e ea 99 70 a7 bb 58 e7 99 df f9 1c 6a 0f 1c 3a 78 1c 78 27 8d 89 9a de 68 7e 82 98 81 b6 50 b4 6c 9c f9 01 d3 af 18 9e 1b 45 da b3 bd 94 0b 8d 10 22 b5 7f f7 46 f3 8b 70 7e 93 b9 81 5c a1 c2 e4 91 20 70 fe 1b 3e 3a 17 a6 39 05 3d 14 38 3d 51 30 11 22 63 6b 51 23 35 7b 4a 7d 21 b4 81 3a 20 9d b0 bf 9e 11 8c ee 0f 05 13 a6 ca de d0 e1 06 ea 12 82 05 c3 b0 9f 96 b3 41 d7 1d b3 00 cc a0 c2 e4 55 c2 b9 70 a8 8c Data Ascii: X{-fO/=wl'pmKS^94c0r&"pDFJ4*j$f&C)ks8\|$pN1<%"'d~$A!pXj:xx'h~PlE"Fp~\ p>:9=8=Q0"ckQ#5{J}!: AUp
2024-04-19 21:09:39 UTC	1369	IN	Data Raw: d8 4d f4 f1 22 6e c6 88 1a e8 00 4f 7b 7e 95 33 d9 19 73 27 75 39 1b 3c 64 70 24 6e 3c ce 6a e9 b7 11 08 51 55 84 07 9b 7a a5 75 bf 44 b4 74 c7 43 f7 33 07 9b 20 5c 98 fb ba 9c 0d 76 43 3a 12 41 13 2d 1e 1d 9a 20 94 7f 5f ce 06 43 6f d9 bd 20 6e 96 b3 41 28 17 f8 aa 77 c0 13 07 cc ae f1 4b 30 92 ca 3a ed 2b 0a e8 81 1d 35 9b 01 68 85 8a 98 f7 46 70 60 7f 5b ce 06 63 6f 0e ac c4 cd ae 04 97 37 26 2d b4 84 b7 3e 83 6e 2a 3e 47 2b 65 87 b0 9e b2 a5 b3 a5 f3 12 36 c0 3e 1d 97 e2 c6 69 96 e6 4c 7b cb 75 19 95 f6 fe d0 91 73 5a 42 d4 dd 39 21 00 24 61 ec c5 61 41 d4 40 9b 78 cc d2 7c 95 03 eb 36 18 ab 20 48 c8 d8 7c 76 16 40 eb b7 20 52 2d fd d9 b3 70 1e a7 58 ba 1d 0b d6 a2 26 38 71 ae 0f 03 78 37 de 1c e0 cf 1e a3 66 eb 50 16 c9 9b b0 21 5b 13 09 72 58 2e 1c Data Ascii: M"nO{~3s'u9<dp$n<jQUzuDtC3 \vC:A- _Co nA(wK0:+5hFp`[co7&->n*>G+e6>iL{usZB9!$aaA@x\|6 H\|v@ R-pX&8qx7fP![rX.
2024-04-19 21:09:39 UTC	1369	IN	Data Raw: 9c 94 9e fd c2 d2 37 ec d7 14 07 d6 dd 41 0f c3 1e 0a 59 1b c4 4d f7 3c 88 9a e5 6c e0 65 98 e1 71 51 14 ff 4a e9 4e 88 06 bb c4 b2 f3 19 11 b4 5f 58 af 05 ef a6 6f 8e 8c 9f 8e 77 15 62 85 bd fb 0b 6b 81 17 5b 09 5a 49 f0 93 be 49 dc 84 60 fd 11 02 a7 1b 3e 56 7e ca 85 14 a6 07 0e cb 67 e9 8d e6 85 ca 8e 6e 57 3e 0f 18 36 3a c8 0e 22 68 7e 08 cd 02 f4 6e 58 c1 01 ed 14 05 83 2c cb 77 0a 1c 43 d8 02 ec 8c 1f ac d7 a2 6e a6 e6 47 0b cf 52 87 be 82 f5 e1 13 ce e6 3b ad 69 e9 b7 5e 57 b2 da b7 34 a8 d8 9e aa a8 39 75 24 6a 56 39 d0 e7 19 c6 8e dd 2a 37 6b ca 2e aa 1b b7 fc 7b 36 f0 e6 b0 5e 4f b9 5a f7 5e 74 00 99 1a bf 78 18 06 87 a8 81 28 c1 2e 3f c1 43 45 c0 46 95 44 0a f8 79 0a d2 57 d9 d1 c7 bb 3f bb 58 f3 dd df af fc f3 47 71 e6 a5 85 ff a3 a8 09 25 68 Data Ascii: 7AYM<leqQJN_Xowbk[ZII`>V~gnW>6:"h~nX,wCnGR;i^W49u$jV9*7k.{6^OZ^tx(.?CEFDyW?XGq%h
2024-04-19 21:09:39 UTC	1369	IN	Data Raw: f2 c4 d4 ce a8 e3 ae 29 cb d9 e0 3c b4 80 5e ce 06 9f 24 70 be 73 97 dc 05 47 ab 57 2a 3e 76 f1 54 da 94 d7 e5 90 36 0d 83 dc 57 7a 6f a8 bf ee 78 5d b5 04 39 aa 39 bb 06 87 06 20 3f 4a 41 83 88 05 80 ac 09 02 a7 3a 04 52 17 d6 ab 3e ed be 4a fd a1 7d fa ab fe 6c 27 a2 66 95 8a c8 79 82 ea e3 ca 1a b9 d5 e8 80 e7 b4 70 6c a5 51 87 41 dd d6 88 ba 86 ef ec b0 a5 67 7a 93 70 78 84 c6 14 56 3f df 21 34 7d 80 b6 09 e5 c3 47 08 1a e8 90 2b 43 9b 4a 99 f3 73 b0 33 af 20 9f e4 99 5f a2 e0 fd 27 7d aa 6d b1 57 ff ec 89 f0 6c 7b 4e 9f 6d 1d f6 a2 66 1d 6a 11 5a b6 09 8d ce 79 55 1a ac aa d6 87 8e 37 48 dd 6c 0d f8 c1 f4 60 44 60 26 cf 4d 86 25 67 67 09 9d 8b e1 7c f8 af 83 e7 80 b8 b1 f4 61 a2 6d 4e b4 12 08 3a 7f e5 5f 75 49 45 94 0d 2b 55 55 1e 2b aa 9e 04 e9 5d Data Ascii: )<^$psGW*>vT6Wzox]99 ?JA:R>J}l'fyplQAgzpxV?!4}G+CJs3 _'}mWl{NmfjZyU7Hl`D`&M%gg\|amN:_uIE+UU+]
2024-04-19 21:09:39 UTC	1369	IN	Data Raw: 0c e8 39 5d cf 00 c0 8a e5 6c 70 ea a0 d4 39 70 d8 1b cd 93 29 77 56 a3 1d 0f 81 b3 82 06 01 69 a0 f7 c3 a2 ba e4 aa 40 d4 d8 a3 ec 82 d9 cb dc 50 64 c4 4b b6 26 d4 3d 47 7f 30 56 f6 84 f5 a5 cd 12 4a 02 00 c0 1a 2f e7 d0 b7 14 ba 6e 2a 70 f6 c3 c1 a3 04 16 12 ae 10 31 ba 06 60 1a a0 47 d4 18 22 e7 f5 d2 30 f5 7b d5 c4 7f 24 d4 31 36 f5 df 6a 80 e3 98 85 8d 83 3d b1 ca 15 dd 68 00 c0 01 53 27 d9 9a c0 8f 98 85 8d 04 8d a7 79 30 04 ce 22 47 7b ca b2 5a e6 c1 4f 41 d4 18 a1 be f7 d6 ce 6b 93 ce aa a7 94 7c 94 c2 a6 62 68 bc 08 9a 22 b3 c1 73 00 e0 14 95 c0 7a 72 7e a3 14 36 ba ab 79 e9 a8 12 60 81 a8 89 1b bd 07 d6 7b ea 41 a4 23 6a 0c e8 8d e6 13 09 0a 6b e7 b5 b1 48 8d b3 6c 4d 21 61 73 1d 4b f3 00 a5 6d bd 09 9a 2b 7d af 00 00 1e f0 94 ad 29 24 6c a2 09 Data Ascii: 9]lp9p)wVi@PdK&=G0VJ/n*p1`G"0{$16j=hS'y0"G{ZOAk\|bh"szr~6y`{A#jkHlM!asKm+})$l
2024-04-19 21:09:39 UTC	574	IN	Data Raw: 26 0d ce 52 4b fd ca e8 8c 31 3a 1b 71 a5 a8 d9 11 d9 19 00 80 d7 09 0e b9 4a d2 fe a0 f4 f9 dd 04 7f e3 b7 10 7c 24 3b 03 0d b3 50 e7 bc da 0d 8d 3e f2 8d 44 cd 42 7d bb 93 9d d6 ab 28 d0 b0 37 9a ef 16 45 11 32 38 c7 0e 1e cb 1b 41 cc 9c 10 31 03 00 d8 1c d9 d0 f3 de 68 3e 94 9d 39 60 19 9f 71 26 3b 43 c0 0c da e0 4a fe ec 56 fb 0b 51 13 2f e1 80 c9 a6 8e 55 1b 7d dc 1b cd 4f 34 51 36 7c 76 1c 3c 9a 25 61 0f 9c 22 66 00 00 b6 a7 12 44 db 57 c7 a5 50 a2 d6 cf 78 69 43 e0 34 b4 67 9e 22 66 a0 25 16 f2 65 1b 69 03 8e a8 89 8f ac a3 25 fa bd 83 b0 39 e9 8d e6 47 32 3a 39 19 9e 50 22 11 ee ca 9c 63 64 00 00 9a 47 77 53 43 10 ed 53 c5 c6 1c 66 b4 d4 57 12 33 e7 94 98 41 4b 2c e4 cb 4c 9b dc 63 88 9a 38 b8 d3 01 73 8a 23 fb 8b b2 64 20 fc 83 c4 05 ce 9d 7e cf Data Ascii: &RK1:qJ\|$;P>DB}(7E28A1h>9`q&;CJVQ/U}O4Q6\|v<%a"fDWPxiC4g"f%ei%9G2:9P"cdGwSCSfW3AK,Lc8s#d ~

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2056, Parent PID: 1052

General

Target ID:	0
Start time:	23:08:55
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3152, Parent PID: 2056

General

Target ID:	2
Start time:	23:08:59
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1880,i,9304512019144231151,15516723976325891686,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6540, Parent PID: 1052

General

Target ID:	3
Start time:	23:09:02
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Windows Analysis Report
https://mail-cloudstation-us-west-2.prod.hydra.sophos.com/mail/api/xgemail/smart-banner/55e3e38d9bcbfbe895ad54204d157a6a