Edit tour

Windows Analysis Report
https://jll.aravo.com/aems/login.do

Overview

General Information

Sample URL:	https://jll.aravo.com/aems/login.do
Analysis ID:	1431051
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2172,i,2557239446117328043,1594672359937540245,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jll.aravo.com/aems/login.do" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: jll.aravo.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_65.2.dr	String found in binary or memory: http://ReactiveRaven.github.com/jqBootstrapValidation/
Source: chromecache_62.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_62.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_68.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_67.2.dr, chromecache_70.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: chromecache_65.2.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.php
Source: chromecache_65.2.dr	String found in binary or memory: http://stackoverflow.com/questions/359788/how-to-execute-a-javascript-function-when-i-have-its-name-
Source: chromecache_65.2.dr	String found in binary or memory: http://tinyurl.com/executeFunctionByName
Source: chromecache_64.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_64.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_59.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_69.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=922896
Source: chromecache_64.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_69.2.dr	String found in binary or memory: https://github.com/ftlabs/fastclick/issues/251
Source: chromecache_68.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_64.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_64.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_64.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_64.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_59.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_59.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_64.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_59.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_59.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_59.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_64.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_59.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_64.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_64.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_59.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_64.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.61.210.98:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.61.210.98:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49778 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@22/28@6/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2172,i,2557239446117328043,1594672359937540245,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jll.aravo.com/aems/login.do"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2172,i,2557239446117328043,1594672359937540245,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://jll.aravo.com/aems/login.do	0%	Virustotal		Browse
https://jll.aravo.com/aems/login.do	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/	0%	URL Reputation	safe
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.google.com	74.125.137.104	true	false	high
prod.aravo.com	67.192.161.8	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
jll.aravo.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://jll.aravo.com/simpletrade/default/css/fontello/css/fontello.css	false	high
https://jll.aravo.com/aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv	false	high
https://jll.aravo.com/simpletrade/default/js/jqBootstrapValidation.js	false	high
https://jll.aravo.com/favicon.ico?v=4	false	high
https://jll.aravo.com/simpletrade/default/js/fastclick.js	false	high
https://jll.aravo.com/aems/login.do	false	high
https://jll.aravo.com/simpletrade/default/css/bootstrap.min.css	false	high
https://jll.aravo.com/simpletrade/default/images/aravo_logo-2x.png	false	high
https://jll.aravo.com/simpletrade/default/css/font-awesome-4.6.3/css/font-awesome.min.css	false	high
https://jll.aravo.com/simpletrade/default/css/unauthenticated.css	false	high
https://jll.aravo.com/simpletrade/default/js/jquery-3.6.0.min.js	false	high
https://jll.aravo.com/aems/findaccount.do	false	high
https://jll.aravo.com/simpletrade/default/css/fontello/css/animation.css	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_62.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_64.2.dr	false		high
http://opensource.org/licenses/mit-license.php	chromecache_65.2.dr	false		high
http://tinyurl.com/executeFunctionByName	chromecache_65.2.dr	false		high
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/	chromecache_67.2.dr, chromecache_70.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://tagassistant.google.com/	chromecache_59.2.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_64.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_59.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_64.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://fontawesome.io/license	chromecache_62.2.dr	false		high
https://www.google.com	chromecache_64.2.dr	false		high
https://www.google.com/ads/ga-audiences	chromecache_59.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_59.2.dr	false	URL Reputation: safe	low
https://td.doubleclick.net	chromecache_64.2.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_64.2.dr	false	URL Reputation: safe	unknown
http://getbootstrap.com)	chromecache_68.2.dr	false	Avira URL Cloud: safe	low
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_68.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_64.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=922896	chromecache_69.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_59.2.dr	false		high
http://stackoverflow.com/questions/359788/how-to-execute-a-javascript-function-when-i-have-its-name-	chromecache_65.2.dr	false		high
https://github.com/ftlabs/fastclick/issues/251	chromecache_69.2.dr	false		high
http://ReactiveRaven.github.com/jqBootstrapValidation/	chromecache_65.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
67.192.161.8	prod.aravo.com	United States	33070	RMH-14US	false
74.125.137.104	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431051
Start date and time:	2024-04-24 14:00:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://jll.aravo.com/aems/login.do
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@22/28@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://jll.aravo.com/aems/findaccount.do Browse: https://jll.aravo.com/aems/findaccount.do Browse: https://jll.aravo.com/aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv Browse: https://jll.aravo.com/aems/findaccount.do Browse: https://jll.aravo.com/aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv Browse: https://jll.aravo.com/aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.2.94, 142.251.2.102, 142.251.2.101, 142.251.2.113, 142.251.2.138, 142.251.2.139, 142.251.2.100, 142.251.2.84, 34.104.35.123, 142.250.141.95, 142.250.101.95, 142.251.2.95, 142.251.2.97, 20.114.59.183, 192.229.211.108, 20.166.126.56, 199.232.214.172, 13.85.23.206, 23.1.234.57, 23.1.234.24, 142.250.101.94
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	8208
Entropy (8bit):	5.026435499125993
Encrypted:	false
SSDEEP:	96:HFcH/OrhXZ6We+OBIO8AeQ/6e/WmTZ0VmhEdA7RPS8v6BlrcFrj+i8/:HFcWVeJ8bQSeLyVmhiANPgp8s/
MD5:	9371CE155EB0C4DC82DEE9CCA2D16E0E
SHA1:	5DF8D78CB83FE1D6C208D0345070A2102B987BE8
SHA-256:	D639C10BDD952EFA34DA5CDA5D4EA5B7DD349E8C86381203BD69FF13027C91E2
SHA-512:	DF2E8D17238089B1F8EEE148135D98D556EA8981505131C29FE46B6D236ACB44538886AFA3FB43B714C4E6DF7F694131CDD0A46CF0B3192005314AEC39AB8C18
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/css/fontello/css/fontello.css
Preview:	@font-face {. font-family: 'fontello';. src: url('../font/fontello.eot?53132750');. src: url('../font/fontello.eot?53132750#iefix') format('embedded-opentype'),. url('../font/fontello.woff2?53132750') format('woff2'),. url('../font/fontello.woff?53132750') format('woff'),. url('../font/fontello.ttf?53132750') format('truetype'),. url('../font/fontello.svg?53132750#fontello') format('svg');. font-weight: normal;. font-style: normal;.}./* Chrome hack: SVG is rendered more smooth in Windozze. 100% magic, uncomment if you need it. /./ Note, that will break hinting! In other OS-es font will be not as sharp as it could be /./.@media screen and (-webkit-min-device-pixel-ratio:0) {. @font-face {. font-family: 'fontello';. src: url('../font/fontello.svg?53132750#fontello') format('svg');. }.}./. . [class^="icon-"]:before, [class=" icon-"]:before {. font-family: "fontello";. font-style: normal;. font-weight: normal;. speak: none;. . display: inline

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/js/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28900)
Category:	downloaded
Size (bytes):	29063
Entropy (8bit):	4.755267089852831
Encrypted:	false
SSDEEP:	384:Uu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:flr+Klk3Yi+fwYUf8l8yQ/eC
MD5:	4083F5D376EB849A458CC790B53BA080
SHA1:	FB5B49426DEE7F1508500E698D1B3C6B04C8FCCE
SHA-256:	008A1D103902F15FDB1C191FCB1CE8954330E7B8DE43D09ABB08555BA609F420
SHA-512:	E2E1991E96C3962371880BFF43364DA3FC9BD85B405FEAA20DBEF2A415A211D2505FC3EE829F0CEA297949190DF2342B0CB5AC877AEB3C349745FDC3C0560CEA
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/css/font-awesome-4.6.3/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.6.3 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.6.3');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.6.3') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.6.3') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.6.3') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.6.3') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.6.3#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.581687083026441
Encrypted:	false
SSDEEP:	3:IC06s10K8kCYYn:I36sNC
MD5:	3489A7B763D8CF6D32A5680104FD67BA
SHA1:	A37577B117056E91D0AB49E55C46D8F91D4B1E72
SHA-256:	B7618FD00565D7878192EFC4EC2D4EDED935B8886CE9169D738AF49F22874ED7
SHA-512:	8B4D6E01363CACA211DDE82CD058BAED5E9BB05F912E9DBA2F9339F601C8B19F30F4C3D3121A445494D510CB5E69E888ABD98A1583D698C864397F2B6855FEA8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkC0BLzVYDqaRIFDX8fnQUSBQ09mRRr?alt=proto
Preview:	ChoKCw1/H50FGgQIVhgCCgsNPZkUaxoECEsYAg==

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	254121
Entropy (8bit):	5.574696084037059
Encrypted:	false
SSDEEP:	3072:Ly2KhzgNSNow8VNz2E1b8C71+TYc20DCSY1KGoIb1QWDe5L+aVsQCKKN/imN8LMB:GphewMNz2OqwhDe5LfV9CK09N8aAQ
MD5:	118780D21ADFA644EAAF3C9142237E74
SHA1:	A5AECBE9BA67448C22C60C65CE1C877FFD56C8F2
SHA-256:	F2368B52F985B38127F8EFE2D7A3A4676EA46376CDBBB1A9E94D0AEA73E2F357
SHA-512:	3E0CDD294DD0EB6B0F892DC8F1D245B03C81D47F87CF8807EAB6B40FA7508A4B4264526967AE275A4EA8C1A1F5DF43844A479BB2ADCE6A5E121914CD25B78938
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-NG3F9CG84V&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","aravo\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},{"function":"__

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	36295
Entropy (8bit):	4.569471963591974
Encrypted:	false
SSDEEP:	768:k9CroJu9SRkAcPWh+2Q4mVuvlzqHm5lLqH2YGK:iCroJuSHmVulzqHm5lLqH2YH
MD5:	857087DDDCCF870A79037A5EC9B7F609
SHA1:	F750F751BA876684281ECD1928C4C0AE03911A66
SHA-256:	A558EF234334D648BCE5EAD94E0F80A2786C01108A7616231FC468E09DAA1A97
SHA-512:	CEE3F071A7EC723E15D573186C2D9D108AFBD5F9EE545BFEE2B1BF9F971C124739D347772AEC60833108F7137D5C8B4C676DB97BA7E3A6E0B5A533F3ABF33271
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/js/jqBootstrapValidation.js
Preview:	/* jqBootstrapValidation. * A plugin for automating validation on Twitter Bootstrap formatted forms.. . v1.3.6. . License: MIT <http://opensource.org/licenses/mit-license.php> - see LICENSE file. . http://ReactiveRaven.github.com/jqBootstrapValidation/. */..(function( $ ){...var createdElements = [];...var defaults = {...options: {....prependExistingHelpBlock: false,....sniffHtml: true, // sniff for 'required', 'maxlength', etc....preventSubmit: true, // stop the form submit event from firing if validation fails....submitError: false, // function called if there is an error when trying to submit....submitSuccess: false, // function called just before a successful submit event is sent to the server. semanticallyStrict: false, // set to true to tidy up generated HTML output....autoAdd: {.....helpBlocks: true....},. filter: function () {. // return $(this).is(":visible"); // only validate elements you can see. return true; // va

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5793
Entropy (8bit):	5.07751305963852
Encrypted:	false
SSDEEP:	96:HmknQCxipPNWDK+jI+ay+D+Q+hF1Ni3pWAFqzwqI+D737y:2rv+s+N+KQ+v1gJFq0r+D737y
MD5:	8C3DD52F349FA82B815D5D6A601C18F4
SHA1:	AB0E3377F0953940D96CCEBC0D9E2FDF93EC21EB
SHA-256:	21D2FA12918C9A4BF122A721EAA0C25FD82272DB92CFAFC6489E2F22866E1945
SHA-512:	C5FB22BDCC84CCD2B0ED12AE301F7BB94813D6129809C733BA23A03F0992EA4F6573F49DD6819710EADEEE3380E8055A48F82272B5B4F74F288DAD996405FDA9
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/css/unauthenticated.css
Preview:	/..This css file Aravo-izes bootstrap!..Without it we would have something like the generic bootstrap look that's so popular amongst the younger set../..body {..background-color: #f2f2f2;..}...a {..text-decoration: underline;..color: #cc0000;..}...a:hover {..text-decoration: none;..color: #cc0000;..}...a:focus {..color: #cc0000;..}...input[type="text"]:focus,.input[type="email"]:focus,.input[type="password"]:focus,.input[type="button"]:focus {..border-color: #444;..box-shadow: 0 0 7px rgba(0, 0, 0, 0.4);..}....btn,..btn:focus,..btn-default {..color: #fff;..background-color: #cc0000;..border-color: #cc0000;..text-decoration: none; ..}....btn-default[disabled],..btn-default[disabled]:hover {..color: #fff;..background-color: #ccc;..border-color: #ccc;..}..a:focus,...btn:focus {..border-color: #fff;..outline: none;..box-shadow: 0 0 9px rgba(0, 0, 0, 1); ..} ....btn:hover,..btn-default:hover {..color: #cc0000;..background-color: #fff;..border-color: #cc0000; ..}....lightgray {...backgroun

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 229 x 76, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9774
Entropy (8bit):	6.8468134307413395
Encrypted:	false
SSDEEP:	192:9kWFOcwwv71T5qkwYAWKwqYXcs02bEAYJj1q:eWBvxoxjYXcs02YJjI
MD5:	0DC482276B560D04BE88197E6B8FFE48
SHA1:	45499F99F31B9FEFBBDC918082EB605ED9069C7E
SHA-256:	AF5E22F76F036BAF7479C9C71E733C3720087D84BE3C28DDD0F334F86D322FE4
SHA-512:	1B3B6BF97F41F3ECAE9C269A65877C73C6ECB9382201C8F8C6A43F490CC1BAE1DC54D40B4A8EEB35919DE04673BF2DEA3DC45D3BD353FC8752A25E9133CADBC6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......L.......p0....tEXtSoftware.Adobe ImageReadyq.e<...8iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:05:41 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". xmpRights:WebStatement="". photoshop:AuthorsPosition="">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:rights>. <dc:creator>. <rdf:Seq>. <rdf:li/>. </rdf:Seq>. </dc:creator>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default">Log plus tag</rdf:li>. </rdf:Alt>. </dc:title>. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li x

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	113498
Entropy (8bit):	5.098665891537496
Encrypted:	false
SSDEEP:	768:5yPGxwqyBwmlp3N490HxXNYeAgkdNp7bZbhztN+cTaKUiu4fuWhkRQmNaO:HwNFA0HxXN7k/lzgv41hM
MD5:	3AB3438F85AD9F9E27E1AF1FACF0A9C4
SHA1:	8BEC1BBA3E23ECBA22CFFB197A2D440AF410B15D
SHA-256:	D699F303990CE9BD7D7C97E9BD3CAD6A46ECF2532F475CF22AE58213237821B9
SHA-512:	33EF4238E401589C3D86C4F0B1B4D325A91015C1807B0F223C5CAFA5562B3CC758151BBAEF80F5FE0A3044AB9DE9B8C7423F3549B7C270A692F0B798239F93CE
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.1 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.2 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webki

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (382)
Category:	downloaded
Size (bytes):	25965
Entropy (8bit):	5.010926684303138
Encrypted:	false
SSDEEP:	384:ekZSvhAAunDhtXz+53iQ7vj20MdbfiMXeT0Zejj1oW+xVZWN7txRLRTTngp0:eZ6A0DPM3iQTafruQZeSWswZv
MD5:	6E9D3B0DA74F2A4A7042B494CDAA7C2E
SHA1:	06CEF196733A710E77AD7E386CED6963F092DC55
SHA-256:	1AA08CB3C7AA70D268D24D59C374C14AF7BD08E0AF8C85F8E4F60A2651F4BAB5
SHA-512:	09622102B138D4705B26608A35A23EA073EDF2BF7819BFAA1ADCBA294C9F9784FC383B2A868C889B63631B357B8ECD5C6EFA947EB9A29E30A3C543CB8775A7EC
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/js/fastclick.js
Preview:	;(function () {..'use strict';.../*.. @preserve FastClick: polyfill to remove click delays on browsers with touch UIs... .. @codingstandard ftlabs-jsv2.. * @copyright The Financial Times Limited [All Rights Reserved].. * @license MIT License (see LICENSE.txt).. /.../jslint browser:true, node:true/../global define, Event, Node/..../.. Instantiate fast-clicking listeners on the specified layer... .. @constructor.. * @param {Element} layer The layer to listen on.. * @param {Object} [options={}] The options to override the defaults.. /..function FastClick(layer, options) {...var oldOnClick;....options = options \|\| {};..../... Whether a click is currently being tracked.... ... @type boolean... /...this.trackingClick = false;...../... Timestamp for when click tracking started.... ... @type number... /...this.trackingClickStart = 0;...../... The element being tracked for a click.... ... @type EventTarget... /...this.targetElement = null;...../...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 229 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9774
Entropy (8bit):	6.8468134307413395
Encrypted:	false
SSDEEP:	192:9kWFOcwwv71T5qkwYAWKwqYXcs02bEAYJj1q:eWBvxoxjYXcs02YJjI
MD5:	0DC482276B560D04BE88197E6B8FFE48
SHA1:	45499F99F31B9FEFBBDC918082EB605ED9069C7E
SHA-256:	AF5E22F76F036BAF7479C9C71E733C3720087D84BE3C28DDD0F334F86D322FE4
SHA-512:	1B3B6BF97F41F3ECAE9C269A65877C73C6ECB9382201C8F8C6A43F490CC1BAE1DC54D40B4A8EEB35919DE04673BF2DEA3DC45D3BD353FC8752A25E9133CADBC6
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/images/aravo_logo-2x.png
Preview:	.PNG........IHDR.......L.......p0....tEXtSoftware.Adobe ImageReadyq.e<...8iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:05:41 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". xmpRights:WebStatement="". photoshop:AuthorsPosition="">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:rights>. <dc:creator>. <rdf:Seq>. <rdf:li/>. </rdf:Seq>. </dc:creator>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default">Log plus tag</rdf:li>. </rdf:Alt>. </dc:title>. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li x

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1857
Entropy (8bit):	4.552899516499128
Encrypted:	false
SSDEEP:	48:Tlcp+IZYI3yEnj38IZYI3yEnj37IZYI3yEnj3+IZYI3yEnj3XwIZYI3yEnj3c:Tlcp+89M89r89u89w89s
MD5:	5EFB6F925470166045BA28C25131F79A
SHA1:	181BBC89EC978981BF0EF8C7239710AE5B3AD6A1
SHA-256:	C5221CFE37E6F0B011346164E7B3378C106807DC0D42FC0887440AB36C09E205
SHA-512:	A92FDD2B2A00C2F8B27AA6B4E635B24E86AB290DC0DD418581DCFFCF595F67804DE97D5B16A71DB6230D2F0E26675E14C63297A5AACB376AA2AC0D75CAE3E178
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/simpletrade/default/css/fontello/css/animation.css
Preview:	/. Animation example, for spinners./..animate-spin {. -moz-animation: spin 2s infinite linear;. -o-animation: spin 2s infinite linear;. -webkit-animation: spin 2s infinite linear;. animation: spin 2s infinite linear;. display: inline-block;.}.@-moz-keyframes spin {. 0% {. -moz-transform: rotate(0deg);. -o-transform: rotate(0deg);. -webkit-transform: rotate(0deg);. transform: rotate(0deg);. }.. 100% {. -moz-transform: rotate(359deg);. -o-transform: rotate(359deg);. -webkit-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-webkit-keyframes spin {. 0% {. -moz-transform: rotate(0deg);. -o-transform: rotate(0deg);. -webkit-transform: rotate(0deg);. transform: rotate(0deg);. }.. 100% {. -moz-transform: rotate(359deg);. -o-transform: rotate(359deg);. -webkit-transform: rotate(359deg);. transform: rotate(359deg);. }.}.@-o-keyframes spin {. 0% {. -moz-transform: rotate(0deg);. -o-transform: rotate(0deg);. -we

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	111142
Entropy (8bit):	3.631847938871221
Encrypted:	false
SSDEEP:	384:nKF5MoAJGwJoz8G4xPdALNqSeHN7U6G1ZCalnHdl:nrJ1JxG4pdALNqScN7zaCaln9l
MD5:	A0E58F28CB886910D77B08A226F65795
SHA1:	6EE8EF56F85DFF746F03A86E66044B7D562D8220
SHA-256:	CA72733C26C5B13D7F4E24051642D4EB9C74BC2D31A184C6571B8B37614A0043
SHA-512:	2FADB4A15BE09BD2368673F51937FD49F6C9D0B2F546FF7DCF5C837B2D61D14A1D8E2E768D04C48B878E8338F6C074521E38A164A891F7B04FC4246B5A178095
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........``.... .....V......... .(.......(....... ..... .........................2A.-<..-<..,<..,<..,<..,;...=..}...fr..+:..,<..,<..,<..-<..2A.+:..+9..+9..+:..+:..+:..9..-<..........)8..+:..+:..+:..+:..+:..9..+:..+:..+:..+:..+:..9..q{..}.../>..+9..+9..+9..+:..+:..9..9..9..)8..+:..+:..+:..)8..........+:..+9..-<..0>..+9..+:..9../>......am..)8..+:..)8..Ye......5C..9..(7..Zf......+9..+:..9..9..........7E..)8..2@..........-<..+9..9..........@N..8..9..'7..Q]......nx..%4..`l......]h..(7..)8..DR..........z...(7..9..9..,;..........2A..........0>..9..(7..................3A..)9..9..(7..]h..............it..(7..9..5D..........\h......_j..'6..9..+9..0>..............5C..9..(7..ep......Xd..0?..........+:..9..+:..(7..hs......v...(7..+9..-<..........1@..'6..\|.......MZ..9..+:..9..7E......=J..9..9..3A......\h..)8..9..;H......S_..9..+:..+:..+9...<..+:..+:..)8..\|.......+:..+9..+:..9..)8..9..9..+:..+:..+9..+9..+:..+9..,:..u...~...,;..+:..+:..+:..+:

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	111142
Entropy (8bit):	3.631847938871221
Encrypted:	false
SSDEEP:	384:nKF5MoAJGwJoz8G4xPdALNqSeHN7U6G1ZCalnHdl:nrJ1JxG4pdALNqScN7zaCaln9l
MD5:	A0E58F28CB886910D77B08A226F65795
SHA1:	6EE8EF56F85DFF746F03A86E66044B7D562D8220
SHA-256:	CA72733C26C5B13D7F4E24051642D4EB9C74BC2D31A184C6571B8B37614A0043
SHA-512:	2FADB4A15BE09BD2368673F51937FD49F6C9D0B2F546FF7DCF5C837B2D61D14A1D8E2E768D04C48B878E8338F6C074521E38A164A891F7B04FC4246B5A178095
Malicious:	false
Reputation:	low
URL:	https://jll.aravo.com/favicon.ico?v=4
Preview:	............ .h...F... .... .........``.... .....V......... .(.......(....... ..... .........................2A.-<..-<..,<..,<..,<..,;...=..}...fr..+:..,<..,<..,<..-<..2A.+:..+9..+9..+:..+:..+:..9..-<..........)8..+:..+:..+:..+:..+:..9..+:..+:..+:..+:..+:..9..q{..}.../>..+9..+9..+9..+:..+:..9..9..9..)8..+:..+:..+:..)8..........+:..+9..-<..0>..+9..+:..9../>......am..)8..+:..)8..Ye......5C..9..(7..Zf......+9..+:..9..9..........7E..)8..2@..........-<..+9..9..........@N..8..9..'7..Q]......nx..%4..`l......]h..(7..)8..DR..........z...(7..9..9..,;..........2A..........0>..9..(7..................3A..)9..9..(7..]h..............it..(7..9..5D..........\h......_j..'6..9..+9..0>..............5C..9..(7..ep......Xd..0?..........+:..9..+:..(7..hs......v...(7..+9..-<..........1@..'6..\|.......MZ..9..+:..9..7E......=J..9..9..3A......\h..)8..9..;H......S_..9..+:..+:..+9...<..+:..+:..)8..\|.......+:..+9..+:..9..)8..9..9..+:..+:..+9..+9..+:..+9..,:..u...~...,;..+:..+:..+:..+:

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:00:59.476489067 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:00:59.476505041 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:00:59.820230007 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:05.159183025 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 14:01:05.159266949 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:06.782094955 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:06.782126904 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:06.782191038 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:06.782675028 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:06.782717943 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:06.782938957 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:06.782955885 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:06.782969952 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:06.783200026 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:06.783212900 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.349495888 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:07.349591970 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:07.349687099 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:07.349885941 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:07.349920988 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:07.364427090 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.364725113 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.364741087 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.365757942 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.365945101 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.366710901 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.366772890 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.367002010 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.367010117 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.373615026 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.374622107 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.374644995 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.376090050 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.376271009 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.377182007 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.377275944 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.420603991 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.420603037 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.420618057 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.467715979 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.589492083 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.589540958 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.589554071 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.589601994 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.589628935 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.589644909 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.589670897 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.589695930 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.589701891 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.589776039 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.589864969 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.590646029 CEST	49716	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.590662003 CEST	443	49716	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.612478018 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.612521887 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.612588882 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.612658978 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.613033056 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.613060951 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.613118887 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.613415003 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.613492966 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.613574028 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.613718987 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.613751888 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.613806009 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.614037991 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.614064932 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.614120960 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.614437103 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.614449024 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.614594936 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.614609003 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.614758015 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.614793062 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.614892006 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.614909887 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.615168095 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.615181923 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.660120010 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.715862989 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:07.716135025 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:07.716150045 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:07.717566013 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:07.717634916 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:07.718491077 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:07.718570948 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:07.771959066 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:07.771967888 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:07.804574966 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.805241108 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.805253029 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.805294037 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.805310965 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.805321932 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.805342913 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.805372953 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.821315050 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:07.852767944 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.994891882 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.994920015 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.994952917 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.994967937 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.994995117 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995013952 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.995027065 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995043039 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.995137930 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995184898 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.995194912 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995234013 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995287895 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.995296955 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995449066 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995484114 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995506048 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.995516062 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995531082 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995556116 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.995569944 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.995584965 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.996282101 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.996891975 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.996901989 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.997109890 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.997257948 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.997647047 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.997657061 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.997984886 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.998969078 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.999036074 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.999233961 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:07.999305010 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.999911070 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:07.999933004 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.000325918 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.000359058 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.001328945 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.001403093 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.001426935 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.001461029 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.002032042 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.002238035 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.002263069 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.002614021 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.002644062 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.003312111 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.003371000 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.003397942 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.003447056 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.003456116 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.003592014 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.003599882 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.004384995 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.004554987 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.005048037 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.006277084 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.006369114 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.009582043 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.009748936 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.009953022 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.009963036 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.039194107 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.044522047 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.044579983 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.048109055 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.048125982 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.052495956 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.184293985 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.184487104 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.184505939 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.184552908 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.184557915 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.184590101 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.184604883 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.184631109 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.184906960 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.184967995 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.185022116 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.185168028 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.185206890 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.185226917 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.185236931 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.185262918 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.185379028 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.185442924 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.185451031 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.229481936 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.374501944 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.374526024 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.374577045 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.374619961 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.374619961 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.374646902 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.374660015 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.375066042 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.375113964 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.375128031 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.375138044 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.375154972 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.375283003 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.375344038 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.375351906 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.375418901 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.375576973 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.375637054 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.375668049 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.375711918 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.375874043 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.375929117 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.376013994 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.376065969 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.376132965 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.376262903 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.376306057 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.376935005 CEST	49715	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.376957893 CEST	443	49715	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.377573967 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.377599001 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.377669096 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.377679110 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.377691984 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.377726078 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.377732992 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.377748966 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.377775908 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.377782106 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.377799034 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.377847910 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.377865076 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.377904892 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.378055096 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.378154039 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.378190994 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.378245115 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.378253937 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.378300905 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.379146099 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.379177094 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.379247904 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.379278898 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.379303932 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.379376888 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.379389048 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.380470037 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.380525112 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.380563021 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.380609035 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.380636930 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.380655050 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.380872965 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.381669998 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.381694078 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.381731033 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.381745100 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.381789923 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.381824970 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.381824970 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.425867081 CEST	49720	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.425894022 CEST	443	49720	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.427853107 CEST	49721	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.427870989 CEST	443	49721	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.428654909 CEST	49724	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.428668022 CEST	443	49724	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.432045937 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.432054996 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.432090998 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.436981916 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.437012911 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.437092066 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.438430071 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.438443899 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.476344109 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.570815086 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.570859909 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.570877075 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.570895910 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.570930958 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.570950985 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.570967913 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.571132898 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.571161032 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.571187973 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.571218014 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.571252108 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.571274042 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.571554899 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.571615934 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.571707964 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.571732998 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.571793079 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.571831942 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.571885109 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.571943998 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.572005987 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.572060108 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.573271036 CEST	49723	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.573311090 CEST	443	49723	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.762087107 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.762118101 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.762164116 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.762166977 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.762212992 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.762243032 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.762273073 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.762295008 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.762311935 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.762373924 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.762648106 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.762729883 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.762746096 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.762801886 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.763425112 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.763468027 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.763500929 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.763518095 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.763566971 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.764398098 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.764473915 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.766680956 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.767414093 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.767436981 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.768578053 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.769243956 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.769417048 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.769747019 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.812143087 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.823688030 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.824448109 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.824462891 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.824956894 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.825640917 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.825720072 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.826229095 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.872123957 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.953950882 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.954032898 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.954070091 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.955051899 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.955099106 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.955138922 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.955157042 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.955187082 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.955198050 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.955205917 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.955229998 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.955284119 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.955369949 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.955593109 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.955652952 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.955854893 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.955854893 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:08.955890894 CEST	443	49722	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:08.956126928 CEST	49722	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.077384949 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:09.091341972 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:09.146975040 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.147032976 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.147095919 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.147124052 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.147244930 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.147321939 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.147327900 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.147368908 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.204309940 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.204339981 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.204427004 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.204426050 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.204442024 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.204476118 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.250324011 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.336692095 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.336757898 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.336802006 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.337014914 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.337066889 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.337078094 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.337110043 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.337166071 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.337171078 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.337447882 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.337591887 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.339960098 CEST	49725	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.339978933 CEST	443	49725	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.369288921 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:09.369359970 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:09.369445086 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:09.370050907 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:09.370080948 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:09.394788980 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.394813061 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.394905090 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.394918919 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.394972086 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.395297050 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.395370007 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.395374060 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.395421982 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.398315907 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.422616005 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:09.560502052 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.560549021 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.560669899 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.563673973 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.563688040 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.584502935 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.584573030 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.584585905 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.584706068 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.584763050 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.669720888 CEST	49726	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.669740915 CEST	443	49726	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.949739933 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.949989080 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.950002909 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.951106071 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.951800108 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.951965094 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:09.952174902 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:09.956058979 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:09.956087112 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:09.956280947 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:09.959491968 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:09.959502935 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:09.996144056 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.054569960 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:10.054672956 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:10.071825981 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:10.071877003 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:10.072777033 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:10.076760054 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:10.076906919 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:10.076919079 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:10.077246904 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:10.120142937 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:10.295993090 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:10.296221018 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:10.296298027 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:10.297106028 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.297188997 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.298825979 CEST	49727	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:10.298867941 CEST	443	49727	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:10.330981970 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.331033945 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.331089973 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.331104994 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:10.331125975 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.331264973 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.331281900 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:10.331403971 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:10.354054928 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.354064941 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.354994059 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.370042086 CEST	49728	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:10.370054960 CEST	443	49728	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.399070978 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.491736889 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.536137104 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.652282000 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.652437925 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.652544022 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.652616024 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.652616024 CEST	49731	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.652637005 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.652646065 CEST	443	49731	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.652920008 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:10.652965069 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.653131962 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:10.653311968 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:10.653332949 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:10.685431957 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.685489893 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:10.685590982 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.685926914 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:10.685956955 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.011847019 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.011931896 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.012028933 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.012264013 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.012299061 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.017222881 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.017313957 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:11.018959999 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:11.018982887 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.019320965 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.021107912 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:11.038614035 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.038872004 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.038901091 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.042490959 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.042576075 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.042882919 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.043067932 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.043133974 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.068159103 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.084166050 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.087762117 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.087794065 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.133133888 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.334026098 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.334112883 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.334317923 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:11.345088959 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:11.345136881 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.345191002 CEST	49733	443	192.168.2.6	23.61.210.98
Apr 24, 2024 14:01:11.345208883 CEST	443	49733	23.61.210.98	192.168.2.6
Apr 24, 2024 14:01:11.393932104 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.394216061 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.394277096 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.394639969 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.395081043 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.395153046 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.395473003 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.419451952 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.419502974 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.419578075 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.419615984 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.419712067 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.419730902 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.419776917 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.419776917 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.419797897 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.419815063 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.419909954 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.419914007 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.419981003 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.436105967 CEST	49732	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.436136961 CEST	443	49732	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.440140963 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.774535894 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.775146008 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.775182962 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.775208950 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.775218964 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.775259018 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.775338888 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.775379896 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.964797020 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.964854956 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.964873075 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.964874983 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.964888096 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.964917898 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.965318918 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.965358019 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.965380907 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.965387106 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.965416908 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.965436935 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.965483904 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.965488911 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.965528965 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.966202974 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.966234922 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.966268063 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:11.966272116 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:11.966315031 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.154627085 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.154669046 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.154684067 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.154701948 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.154711008 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.154731989 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.154753923 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.154841900 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.154907942 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.154916048 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.154958963 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.155011892 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155364037 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155396938 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155422926 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.155426979 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155457020 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.155488968 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155514956 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155529976 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.155534029 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155769110 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.155772924 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155807018 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155833960 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155853033 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.155858040 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.155879021 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.155903101 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.155996084 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.156054020 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.156058073 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.156104088 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.156107903 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.156127930 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.156171083 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.156536102 CEST	49735	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.156552076 CEST	443	49735	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.520984888 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.521019936 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.521111012 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.521953106 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.521965981 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.907330036 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.959342003 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.987085104 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.987096071 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.988482952 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.989061117 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:12.989232063 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:12.989346981 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.032147884 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.286715031 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.287597895 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.287620068 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.287666082 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.287672043 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.287695885 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.287707090 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.287725925 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.334338903 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.476989031 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477056980 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477076054 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.477087021 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477125883 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.477802038 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477811098 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477839947 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477860928 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.477866888 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477874994 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477900028 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.477921009 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.477924109 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477933884 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.477979898 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.477983952 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.478024006 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.667592049 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.667638063 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.667665958 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.667675972 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.667716026 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.667720079 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.667728901 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.667779922 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.668611050 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.668639898 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.668675900 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.668679953 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.668708086 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.668726921 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.668730974 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.709701061 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.857146025 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.857209921 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.857258081 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.857681990 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.857703924 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.857732058 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.857738972 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.857748032 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.857753992 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.857774973 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.857779026 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.857801914 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.858407021 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.858429909 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.858455896 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.858462095 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.858498096 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.858692884 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.858762980 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.858771086 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.858880997 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:13.858959913 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.859457970 CEST	49738	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:13.859474897 CEST	443	49738	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:17.522319078 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:17.522355080 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:17.522504091 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:17.526282072 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:17.526299953 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:17.715382099 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:17.715455055 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:17.715635061 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:18.202567101 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:18.202677965 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:18.206691980 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:18.206702948 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:18.207482100 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:18.209660053 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:18.209660053 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:18.209678888 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:18.209790945 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:18.256118059 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:18.428894043 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:18.429002047 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:18.429107904 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:18.429311991 CEST	49740	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:18.429327965 CEST	443	49740	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:19.086329937 CEST	49719	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:01:19.086385012 CEST	443	49719	74.125.137.104	192.168.2.6
Apr 24, 2024 14:01:19.120045900 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.120121002 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.120507002 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.120543957 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.120548010 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.120593071 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.122543097 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.122558117 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.122808933 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.122842073 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.508390903 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.508668900 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.508692026 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.509090900 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.509423971 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.509485006 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.509824991 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.510143995 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.510288954 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.510294914 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.510318041 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.510684967 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.511178017 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.511363029 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.554780960 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.554805040 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.898890018 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.899096966 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.899133921 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.899169922 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.899185896 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.899219990 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.899275064 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:19.899319887 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.900274992 CEST	49742	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:19.900286913 CEST	443	49742	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:20.709543943 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:20.869014978 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 14:01:20.902333975 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 14:01:20.902369976 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 14:01:20.902386904 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 14:01:20.902400970 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:20.902403116 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 14:01:20.902420044 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:20.902429104 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:20.902451038 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:25.403765917 CEST	443	49706	173.222.162.64	192.168.2.6
Apr 24, 2024 14:01:25.403835058 CEST	49706	443	192.168.2.6	173.222.162.64
Apr 24, 2024 14:01:29.149522066 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.149610043 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.149684906 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.152407885 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.152441978 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.217844963 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.260122061 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.537992954 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.543210030 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.543236017 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.543735981 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.546529055 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.546612024 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.587937117 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.613374949 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.613399982 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.613460064 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.613461018 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.613507032 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.613513947 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:29.613552094 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.622909069 CEST	49741	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:29.622931957 CEST	443	49741	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:30.297266960 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:30.297308922 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:30.297467947 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:30.297975063 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:30.297990084 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:30.955982924 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:30.956065893 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:30.963407040 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:30.963423967 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:30.964238882 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:30.966258049 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:30.966306925 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:30.966413021 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:30.966414928 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:31.008131981 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:31.182895899 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:31.183092117 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:31.183146954 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:31.207524061 CEST	49753	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:31.207560062 CEST	443	49753	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:39.147317886 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.147363901 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.147514105 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.155157089 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.155170918 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.234148979 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.276127100 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.437769890 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.437884092 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.438339949 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.440409899 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.440433979 CEST	443	49750	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.440454960 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.440479994 CEST	49750	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.541018009 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.549112082 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.549144030 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.550318956 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.551894903 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.552082062 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.552594900 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.596132040 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.939059973 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.939121008 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.939188957 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.939229965 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.939311981 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.939330101 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.939348936 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.939384937 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.939486980 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.939498901 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.939522028 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:39.939574957 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.940239906 CEST	49756	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:39.940269947 CEST	443	49756	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.152642965 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.152713060 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.152795076 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.152906895 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.152950048 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.154130936 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.158185005 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.158202887 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.158550978 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.158570051 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.540574074 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.540978909 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.540996075 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.541379929 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.541912079 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.541970968 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.542134047 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.542458057 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.542639017 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.542654991 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.543154001 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.543560982 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.543638945 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.583830118 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.584120989 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.933016062 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.933037043 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.933101892 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.933115959 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.933130980 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.933208942 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.933209896 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:49.933249950 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.934863091 CEST	49761	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:49.934880972 CEST	443	49761	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:50.568911076 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:50.568984032 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:50.569073915 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:50.569715977 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:50.569750071 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:51.245368004 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:51.245471001 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:51.248239040 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:51.248275042 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:51.249085903 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:51.251107931 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:51.251185894 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:51.251199961 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:51.251303911 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:51.292121887 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:51.470621109 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:51.470854998 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:51.471052885 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:51.548490047 CEST	49763	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:01:51.548521042 CEST	443	49763	20.7.1.246	192.168.2.6
Apr 24, 2024 14:01:59.311697006 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.311767101 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.311881065 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.312664032 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.312691927 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.341744900 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.384131908 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.542454004 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.542573929 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.542659998 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.551924944 CEST	49760	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.551950932 CEST	443	49760	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.697971106 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.698890924 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.698923111 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.700139046 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.700685024 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.700989962 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:01:59.701179981 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:01:59.744138956 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.096527100 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.096587896 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.096654892 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:00.096683025 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.096776962 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.096807957 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:00.096824884 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.096853018 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:00.096873045 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:00.096899986 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.096985102 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.097038031 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:00.099107981 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:00.099136114 CEST	443	49767	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:00.099165916 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:00.099185944 CEST	49767	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:07.247078896 CEST	49772	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:02:07.247116089 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:07.247297049 CEST	49772	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:02:07.247694969 CEST	49772	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:02:07.247710943 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:07.608474970 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:07.609173059 CEST	49772	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:02:07.609191895 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:07.609662056 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:07.610851049 CEST	49772	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:02:07.610929012 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:07.662642956 CEST	49772	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:02:11.340198994 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.340236902 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.340404987 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.341001987 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.341027021 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.341098070 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.344141006 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.344153881 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.344640017 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.344655991 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.728787899 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.730087042 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.782735109 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.782733917 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.824259996 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.824266911 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.824856043 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.824863911 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.825664997 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.825844049 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.826663971 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.826849937 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.830441952 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.830641985 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:11.830663919 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.870301008 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:11.872144938 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.119621038 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.119834900 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.119894981 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:12.123217106 CEST	49774	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:12.123226881 CEST	443	49774	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.124233961 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:12.168128014 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.519809008 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.519844055 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.519853115 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.519927979 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:12.519961119 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.519985914 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.520019054 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:12.520036936 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.520128965 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:12.520143986 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.520165920 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:12.520247936 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:12.527014017 CEST	49773	443	192.168.2.6	67.192.161.8
Apr 24, 2024 14:02:12.527038097 CEST	443	49773	67.192.161.8	192.168.2.6
Apr 24, 2024 14:02:17.636511087 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:17.636603117 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:17.636876106 CEST	49772	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:02:17.870273113 CEST	49772	443	192.168.2.6	74.125.137.104
Apr 24, 2024 14:02:17.870330095 CEST	443	49772	74.125.137.104	192.168.2.6
Apr 24, 2024 14:02:18.728493929 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:18.728544950 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:18.728771925 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:18.730592966 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:18.730611086 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:19.394484997 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:19.394612074 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:19.418649912 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:19.418669939 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:19.419457912 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:19.451272011 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:19.451477051 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:19.451484919 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:19.451741934 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:19.496114969 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:19.666946888 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:19.667164087 CEST	443	49778	20.7.1.246	192.168.2.6
Apr 24, 2024 14:02:19.667244911 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:19.750607014 CEST	49778	443	192.168.2.6	20.7.1.246
Apr 24, 2024 14:02:19.750641108 CEST	443	49778	20.7.1.246	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:01:04.876760960 CEST	53	50352	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:04.877634048 CEST	53	62874	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:05.967128038 CEST	53	50069	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:06.627002954 CEST	54442	53	192.168.2.6	1.1.1.1
Apr 24, 2024 14:01:06.627146959 CEST	59770	53	192.168.2.6	1.1.1.1
Apr 24, 2024 14:01:06.780867100 CEST	53	54442	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:06.781294107 CEST	53	59770	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:07.194569111 CEST	57419	53	192.168.2.6	1.1.1.1
Apr 24, 2024 14:01:07.194809914 CEST	62040	53	192.168.2.6	1.1.1.1
Apr 24, 2024 14:01:07.348257065 CEST	53	57419	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:07.348588943 CEST	53	62040	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:09.716167927 CEST	53	49825	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:09.886444092 CEST	53	50537	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:10.497714996 CEST	61345	53	192.168.2.6	1.1.1.1
Apr 24, 2024 14:01:10.498119116 CEST	58954	53	192.168.2.6	1.1.1.1
Apr 24, 2024 14:01:10.651799917 CEST	53	61345	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:10.652376890 CEST	53	58954	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:11.921423912 CEST	53	62174	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:11.939373970 CEST	53	64872	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:23.322751045 CEST	53	60982	1.1.1.1	192.168.2.6
Apr 24, 2024 14:01:42.551650047 CEST	53	51883	1.1.1.1	192.168.2.6
Apr 24, 2024 14:02:04.579281092 CEST	53	62713	1.1.1.1	192.168.2.6
Apr 24, 2024 14:02:04.911819935 CEST	53	56394	1.1.1.1	192.168.2.6
Apr 24, 2024 14:02:12.932934999 CEST	53	52926	1.1.1.1	192.168.2.6
Apr 24, 2024 14:02:13.811702013 CEST	53	50802	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 14:01:06.627002954 CEST	192.168.2.6	1.1.1.1	0x87e6	Standard query (0)	jll.aravo.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:06.627146959 CEST	192.168.2.6	1.1.1.1	0x1a98	Standard query (0)	jll.aravo.com	65	IN (0x0001)	false
Apr 24, 2024 14:01:07.194569111 CEST	192.168.2.6	1.1.1.1	0x2f05	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:07.194809914 CEST	192.168.2.6	1.1.1.1	0xd68f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:01:10.497714996 CEST	192.168.2.6	1.1.1.1	0xeef0	Standard query (0)	jll.aravo.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:10.498119116 CEST	192.168.2.6	1.1.1.1	0x82c6	Standard query (0)	jll.aravo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 14:01:06.780867100 CEST	1.1.1.1	192.168.2.6	0x87e6	No error (0)	jll.aravo.com	prod.aravo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:01:06.780867100 CEST	1.1.1.1	192.168.2.6	0x87e6	No error (0)	prod.aravo.com		67.192.161.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:06.781294107 CEST	1.1.1.1	192.168.2.6	0x1a98	No error (0)	jll.aravo.com	prod.aravo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:01:07.348257065 CEST	1.1.1.1	192.168.2.6	0x2f05	No error (0)	www.google.com		74.125.137.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:07.348257065 CEST	1.1.1.1	192.168.2.6	0x2f05	No error (0)	www.google.com		74.125.137.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:07.348257065 CEST	1.1.1.1	192.168.2.6	0x2f05	No error (0)	www.google.com		74.125.137.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:07.348257065 CEST	1.1.1.1	192.168.2.6	0x2f05	No error (0)	www.google.com		74.125.137.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:07.348257065 CEST	1.1.1.1	192.168.2.6	0x2f05	No error (0)	www.google.com		74.125.137.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:07.348257065 CEST	1.1.1.1	192.168.2.6	0x2f05	No error (0)	www.google.com		74.125.137.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:07.348588943 CEST	1.1.1.1	192.168.2.6	0xd68f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:01:10.651799917 CEST	1.1.1.1	192.168.2.6	0xeef0	No error (0)	jll.aravo.com	prod.aravo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:01:10.651799917 CEST	1.1.1.1	192.168.2.6	0xeef0	No error (0)	prod.aravo.com		67.192.161.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:10.652376890 CEST	1.1.1.1	192.168.2.6	0x82c6	No error (0)	jll.aravo.com	prod.aravo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:01:20.814805984 CEST	1.1.1.1	192.168.2.6	0x4744	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:01:20.814805984 CEST	1.1.1.1	192.168.2.6	0x4744	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:21.662894011 CEST	1.1.1.1	192.168.2.6	0xf1e6	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:01:21.662894011 CEST	1.1.1.1	192.168.2.6	0xf1e6	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:02:17.592361927 CEST	1.1.1.1	192.168.2.6	0x7e93	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:02:17.592361927 CEST	1.1.1.1	192.168.2.6	0x7e93	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

jll.aravo.com

https:

fs.microsoft.com

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 24, 2024 14:01:20.902386904 CEST	173.222.162.64	443	192.168.2.6	49706	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
Apr 24, 2024 14:01:20.902386904 CEST	173.222.162.64	443	192.168.2.6	49706	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:07 UTC	669	OUT	GET /aems/login.do HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:01:07 UTC	1124	IN	HTTP/1.1 200 Set-Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; Path=/aems; Secure; HttpOnly Set-Cookie: XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; Path=/aems; SameSite=strict; Secure Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: X-Frame-Options: DENY X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:01:07 GMT Expires: Tue, 23 Apr 2024 12:01:07 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; path=/; Httponly; Secure X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:07 UTC	8707	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 Data Ascii: 2000<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2, user-scalable=yes"> ... Goog

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49715	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:07 UTC	675	OUT	GET /simpletrade/default/css/bootstrap.min.css HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:07 UTC	624	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"113498-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: text/css Content-Length: 113498 Date: Wed, 24 Apr 2024 12:01:07 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:07 UTC	10216	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 31 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 32 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 Data Ascii: /! Bootstrap v3.3.1 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.2 \| MIT License \| git.io/normalize */html{font-family:sans-serif
2024-04-24 12:01:07 UTC	1277	IN	Data Raw: 3a 22 5c 65 31 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 62 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 61 6c 70 68 61 62 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 61 6c 70 68 61 62 65 74 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 2d 62 79 2d 6f 72 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 6f 72 74 Data Ascii: :"\e148"}.glyphicon-gbp:before{content:"\e149"}.glyphicon-sort:before{content:"\e150"}.glyphicon-sort-by-alphabet:before{content:"\e151"}.glyphicon-sort-by-alphabet-alt:before{content:"\e152"}.glyphicon-sort-by-order:before{content:"\e153"}.glyphicon-sort
2024-04-24 12:01:07 UTC	11493	IN	Data Raw: 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 75 74 6c 65 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 70 72 65 73 73 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 61 72 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 38 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e Data Ascii: it-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphicon-cutlery:before{content:"\e179"}.glyphicon-header:before{content:"\e180"}.glyphicon-compressed:before{content:"\e181"}.glyphicon-earphone:before{content:"\e182"}.glyphicon
2024-04-24 12:01:07 UTC	2554	IN	Data Raw: 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d Data Ascii: l-sm-offset-3{margin-left:25%}.col-sm-offset-2{margin-left:16.66666667%}.col-sm-offset-1{margin-left:8.33333333%}.col-sm-offset-0{margin-left:0}}@media (min-width:992px){.col-md-1,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-
2024-04-24 12:01:07 UTC	5108	IN	Data Raw: 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 36 7b 72 69 67 68 74 3a 35 30 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 35 7b 72 69 67 68 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 34 7b 72 69 67 68 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 33 7b 72 69 67 68 74 3a 32 35 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 31 32 7b 6c 65 66 74 3a 31 Data Ascii: -7{right:58.33333333%}.col-lg-pull-6{right:50%}.col-lg-pull-5{right:41.66666667%}.col-lg-pull-4{right:33.33333333%}.col-lg-pull-3{right:25%}.col-lg-pull-2{right:16.66666667%}.col-lg-pull-1{right:8.33333333%}.col-lg-pull-0{right:auto}.col-lg-push-12{left:1
2024-04-24 12:01:07 UTC	1277	IN	Data Raw: 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 64 65 64 65 7d 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 2e 64 61 6e 67 65 72 3a 68 6f 76 65 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 6f 76 65 72 3e 2e 64 61 6e 67 65 72 2c 2e 74 Data Ascii: .table>thead>tr.danger>th,.table>tbody>tr.danger>th,.table>tfoot>tr.danger>th{background-color:#f2dede}.table-hover>tbody>tr>td.danger:hover,.table-hover>tbody>tr>th.danger:hover,.table-hover>tbody>tr.danger:hover>td,.table-hover>tbody>tr:hover>.danger,.t
2024-04-24 12:01:07 UTC	11493	IN	Data Raw: 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 64 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 2d 62 Data Ascii: ,.table-responsive>.table-bordered>tbody>tr>th:last-child,.table-responsive>.table-bordered>tfoot>tr>th:last-child,.table-responsive>.table-bordered>thead>tr>td:last-child,.table-responsive>.table-bordered>tbody>tr>td:last-child,.table-responsive>.table-b
2024-04-24 12:01:08 UTC	1277	IN	Data Raw: 70 72 69 6d 61 72 79 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 64 69 73 61 62 6c 65 64 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 Data Ascii: primary.active,.open>.dropdown-toggle.btn-primary{background-image:none}.btn-primary.disabled,.btn-primary[disabled],fieldset[disabled] .btn-primary,.btn-primary.disabled:hover,.btn-primary[disabled]:hover,fieldset[disabled] .btn-primary:hover,.btn-primar
2024-04-24 12:01:08 UTC	8939	IN	Data Raw: 62 6c 65 64 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 2e 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e Data Ascii: bled:focus,.btn-success[disabled]:focus,fieldset[disabled] .btn-success:focus,.btn-success.disabled.focus,.btn-success[disabled].focus,fieldset[disabled] .btn-success.focus,.btn-success.disabled:active,.btn-success[disabled]:active,fieldset[disabled] .btn
2024-04-24 12:01:08 UTC	2554	IN	Data Raw: 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 7d 2e 62 74 6e 2d 67 72 6f 75 70 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 7d 2e 62 74 6e 2d 67 72 6f 75 70 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 6c 69 6e 6b 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 62 74 6e 20 2e 63 61 72 65 74 Data Ascii: ing-right:12px;padding-left:12px}.btn-group.open .dropdown-toggle{-webkit-box-shadow:inset 0 3px 5px rgba(0,0,0,.125);box-shadow:inset 0 3px 5px rgba(0,0,0,.125)}.btn-group.open .dropdown-toggle.btn-link{-webkit-box-shadow:none;box-shadow:none}.btn .caret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49724	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:07 UTC	677	OUT	GET /simpletrade/default/css/unauthenticated.css HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:08 UTC	620	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"5793-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: text/css Content-Length: 5793 Date: Wed, 24 Apr 2024 12:01:07 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:08 UTC	5793	IN	Data Raw: 2f 2a 0a 09 54 68 69 73 20 63 73 73 20 66 69 6c 65 20 41 72 61 76 6f 2d 69 7a 65 73 20 62 6f 6f 74 73 74 72 61 70 21 0a 09 57 69 74 68 6f 75 74 20 69 74 20 77 65 20 77 6f 75 6c 64 20 68 61 76 65 20 73 6f 6d 65 74 68 69 6e 67 20 6c 69 6b 65 20 74 68 65 20 67 65 6e 65 72 69 63 20 62 6f 6f 74 73 74 72 61 70 20 6c 6f 6f 6b 20 74 68 61 74 27 73 20 73 6f 20 70 6f 70 75 6c 61 72 20 61 6d 6f 6e 67 73 74 20 74 68 65 20 79 6f 75 6e 67 65 72 20 73 65 74 2e 0a 2a 2f 0a 0a 62 6f 64 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 32 66 32 66 32 3b 0a 09 7d 0a 09 0a 61 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 09 63 6f 6c 6f 72 3a 20 23 63 63 30 30 30 30 3b 0a 09 7d 0a 09 0a 61 3a 68 6f 76 Data Ascii: /This css file Aravo-izes bootstrap!Without it we would have something like the generic bootstrap look that's so popular amongst the younger set./body {background-color: #f2f2f2;}a {text-decoration: underline;color: #cc0000;}a:hov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49721	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:07 UTC	683	OUT	GET /simpletrade/default/css/fontello/css/fontello.css HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:08 UTC	620	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"8208-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: text/css Content-Length: 8208 Date: Wed, 24 Apr 2024 12:01:07 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:08 UTC	3327	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 66 6f 6e 74 65 6c 6c 6f 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 65 6f 74 3f 35 33 31 33 32 37 35 30 27 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 65 6f 74 3f 35 33 31 33 32 37 35 30 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f 2e 77 6f 66 66 32 3f 35 33 31 33 32 37 35 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 20 20 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 2f 66 6f 6e 74 65 6c 6c 6f Data Ascii: @font-face { font-family: 'fontello'; src: url('../font/fontello.eot?53132750'); src: url('../font/fontello.eot?53132750#iefix') format('embedded-opentype'), url('../font/fontello.woff2?53132750') format('woff2'), url('../font/fontello
2024-04-24 12:01:08 UTC	4881	IN	Data Raw: 74 3a 20 27 5c 65 38 31 63 27 3b 20 7d 20 2f 2a 20 27 ee a0 9c 27 20 2a 2f 0a 2e 69 63 6f 6e 2d 6f 6b 2d 73 71 75 61 72 65 64 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 64 27 3b 20 7d 20 2f 2a 20 27 ee a0 9d 27 20 2a 2f 0a 2e 69 63 6f 6e 2d 69 6e 64 75 73 74 72 69 61 6c 2d 62 75 69 6c 64 69 6e 67 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 65 27 3b 20 7d 20 2f 2a 20 27 ee a0 9e 27 20 2a 2f 0a 2e 69 63 6f 6e 2d 75 73 65 72 73 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 31 66 27 3b 20 7d 20 2f 2a 20 27 ee a0 9f 27 20 2a 2f 0a 2e 69 63 6f 6e 2d 64 6f 63 2d 69 6e 76 3a 62 65 66 6f 72 65 20 7b 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 65 38 32 30 27 3b 20 7d 20 2f 2a 20 27 ee a0 a0 27 Data Ascii: t: '\e81c'; } /* '' /.icon-ok-squared:before { content: '\e81d'; } / '' /.icon-industrial-building:before { content: '\e81e'; } / '' /.icon-users:before { content: '\e81f'; } / '' /.icon-doc-inv:before { content: '\e820'; } / ''

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49720	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:07 UTC	684	OUT	GET /simpletrade/default/css/fontello/css/animation.css HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:08 UTC	620	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"1857-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: text/css Content-Length: 1857 Date: Wed, 24 Apr 2024 12:01:07 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:08 UTC	1857	IN	Data Raw: 2f 2a 0a 20 20 20 41 6e 69 6d 61 74 69 6f 6e 20 65 78 61 6d 70 6c 65 2c 20 66 6f 72 20 73 70 69 6e 6e 65 72 73 0a 2a 2f 0a 2e 61 6e 69 6d 61 74 65 2d 73 70 69 6e 20 7b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 32 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 40 2d 6d Data Ascii: /* Animation example, for spinners*/.animate-spin { -moz-animation: spin 2s infinite linear; -o-animation: spin 2s infinite linear; -webkit-animation: spin 2s infinite linear; animation: spin 2s infinite linear; display: inline-block;}@-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49723	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:08 UTC	701	OUT	GET /simpletrade/default/css/font-awesome-4.6.3/css/font-awesome.min.css HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:08 UTC	622	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"29063-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: text/css Content-Length: 29063 Date: Wed, 24 Apr 2024 12:01:07 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:08 UTC	10240	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 36 2e 33 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 36 2e 33 27 29 3b 73 Data Ascii: /! Font Awesome 4.6.3 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.6.3');s
2024-04-24 12:01:08 UTC	1277	IN	Data Raw: 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 64 22 7d 2e 66 61 2d 74 61 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 65 22 7d 2e 66 61 2d 6d 61 67 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 30 22 7d 2e 66 61 2d 74 72 75 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 31 22 7d 2e 66 61 2d 70 69 6e 74 65 72 65 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 32 22 7d 2e 66 61 2d 70 69 6e 74 65 72 65 73 74 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 33 22 7d 2e 66 61 2d 67 6f 6f 67 Data Ascii: hrough:before{content:"\f0cc"}.fa-underline:before{content:"\f0cd"}.fa-table:before{content:"\f0ce"}.fa-magic:before{content:"\f0d0"}.fa-truck:before{content:"\f0d1"}.fa-pinterest:before{content:"\f0d2"}.fa-pinterest-square:before{content:"\f0d3"}.fa-goog
2024-04-24 12:01:08 UTC	10216	IN	Data Raw: 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 31 22 7d 2e 66 61 2d 73 75 69 74 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 32 22 7d 2e 66 61 2d 62 65 6c 6c 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 32 22 7d 2e 66 61 2d 63 6f 66 66 65 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:before{content:"\f0f1"}.fa-suitcase:before{content:"\f0f2"}.fa-bell-o:before{content:"\f0a2"}.fa-coffee:before{content:"\f0
2024-04-24 12:01:08 UTC	5108	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 39 22 7d 2e 66 61 2d 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 61 22 7d 2e 66 61 2d 65 79 65 64 72 6f 70 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 62 22 7d 2e 66 61 2d 70 61 69 6e 74 2d 62 72 75 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 63 22 7d 2e 66 61 2d 62 69 72 74 68 64 61 79 2d 63 61 6b 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 64 22 7d 2e 66 61 2d 61 72 65 61 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 65 22 7d 2e 66 61 2d 70 69 65 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 30 22 7d 2e 66 61 2d 6c 69 6e 65 2d 63 68 61 72 74 Data Ascii: e{content:"\f1f9"}.fa-at:before{content:"\f1fa"}.fa-eyedropper:before{content:"\f1fb"}.fa-paint-brush:before{content:"\f1fc"}.fa-birthday-cake:before{content:"\f1fd"}.fa-area-chart:before{content:"\f1fe"}.fa-pie-chart:before{content:"\f200"}.fa-line-chart
2024-04-24 12:01:08 UTC	1277	IN	Data Raw: 63 72 65 64 69 74 2d 63 61 72 64 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 33 22 7d 2e 66 61 2d 63 6f 64 69 65 70 69 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 34 22 7d 2e 66 61 2d 6d 6f 64 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 35 22 7d 2e 66 61 2d 66 6f 72 74 2d 61 77 65 73 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 36 22 7d 2e 66 61 2d 75 73 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 37 22 7d 2e 66 61 2d 70 72 6f 64 75 63 74 2d 68 75 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 38 22 7d 2e 66 61 2d 6d 69 78 63 6c 6f 75 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 39 22 7d 2e Data Ascii: credit-card-alt:before{content:"\f283"}.fa-codiepie:before{content:"\f284"}.fa-modx:before{content:"\f285"}.fa-fort-awesome:before{content:"\f286"}.fa-usb:before{content:"\f287"}.fa-product-hunt:before{content:"\f288"}.fa-mixcloud:before{content:"\f289"}.
2024-04-24 12:01:08 UTC	945	IN	Data Raw: 2c 2e 66 61 2d 68 61 72 64 2d 6f 66 2d 68 65 61 72 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 64 65 61 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 34 22 7d 2e 66 61 2d 67 6c 69 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 35 22 7d 2e 66 61 2d 67 6c 69 64 65 2d 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 36 22 7d 2e 66 61 2d 73 69 67 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 69 67 6e 2d 6c 61 6e 67 75 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 37 22 7d 2e 66 61 2d 6c 6f 77 2d 76 69 73 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 38 22 7d 2e 66 61 2d 76 69 61 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: ,.fa-hard-of-hearing:before,.fa-deaf:before{content:"\f2a4"}.fa-glide:before{content:"\f2a5"}.fa-glide-g:before{content:"\f2a6"}.fa-signing:before,.fa-sign-language:before{content:"\f2a7"}.fa-low-vision:before{content:"\f2a8"}.fa-viadeo:before{content:"\f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49722	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:08 UTC	662	OUT	GET /simpletrade/default/js/jquery-3.6.0.min.js HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:08 UTC	613	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"89501-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: application/javascript Content-Length: 89501 Date: Wed, 24 Apr 2024 12:01:07 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:01:08 UTC	11493	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-24 12:01:08 UTC	6385	IN	Data Raw: 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 76 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 64 2e 6d 61 74 63 68 65 Data Ascii: name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll(",:x"),v.push(",.:")})),(d.matche
2024-04-24 12:01:08 UTC	2554	IN	Data Raw: 3d 3d 3d 43 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 26 26 28 21 43 2e 68 61 73 46 6f 63 75 73 7c 7c 43 2e 68 61 73 46 6f 63 75 73 28 29 29 26 26 21 21 28 65 2e 74 79 70 65 7c 7c 65 2e 68 72 65 66 7c 7c 7e 65 2e 74 61 62 49 6e 64 65 78 29 7d 2c 65 6e 61 62 6c 65 64 3a 67 65 28 21 31 29 2c 64 69 73 61 62 6c 65 64 3a 67 65 28 21 30 29 2c 63 68 65 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 74 26 26 21 21 65 2e 63 68 65 63 6b 65 64 7c 7c 22 6f 70 74 69 6f 6e 22 3d 3d 3d 74 26 26 21 21 65 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 Data Ascii: ===C.activeElement&&(!C.hasFocus\|\|C.hasFocus())&&!!(e.type\|\|e.href\|\|~e.tabIndex)},enabled:ge(!1),disabled:ge(!0),checked:function(e){var t=e.nodeName.toLowerCase();return"input"===t&&!!e.checked\|\|"option"===t&&!!e.selected},selected:function(e){return e.p
2024-04-24 12:01:08 UTC	1277	IN	Data Raw: 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 28 61 3d 70 5b 6f 5d 29 26 26 69 2e 70 75 73 68 28 66 5b 6f 5d 3d 61 29 3b 79 28 6e 75 6c 6c 2c 70 3d 5b 5d 2c 69 2c 72 29 7d 6f 3d 70 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 28 61 3d 70 5b 6f 5d 29 26 26 2d 31 3c 28 69 3d 79 3f 50 28 65 2c 61 29 3a 73 5b 6f 5d 29 26 26 28 65 5b 69 5d 3d 21 28 74 5b 69 5d 3d 61 29 29 7d 7d 65 6c 73 65 20 70 3d 54 65 28 70 3d 3d 3d 74 3f 70 2e 73 70 6c 69 63 65 28 6c 2c 70 2e 6c 65 6e 67 74 68 29 3a 70 29 2c 79 3f 79 28 6e 75 6c 6c 2c 74 2c 70 2c 72 29 3a 48 2e 61 70 70 6c 79 28 74 2c 70 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 45 65 28 65 29 7b 66 6f 72 28 76 61 72 20 69 2c 74 2c 6e 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 62 2e 72 65 6c 61 74 69 76 65 5b 65 5b 30 Data Ascii: ngth;while(o--)(a=p[o])&&i.push(f[o]=a);y(null,p=[],i,r)}o=p.length;while(o--)(a=p[o])&&-1<(i=y?P(e,a):s[o])&&(e[i]=!(t[i]=a))}}else p=Te(p===t?p.splice(l,p.length):p),y?y(null,t,p,r):H.apply(t,p)})}function Ee(e){for(var i,t,n,r=e.length,o=b.relative[e[0
2024-04-24 12:01:08 UTC	16384	IN	Data Raw: 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 3f 61 2e 6c 65 6e 67 74 68 3a 61 3f 73 65 2e 65 72 72 6f 72 28 65 29 3a 78 28 65 2c 73 29 2e 73 6c 69 63 65 28 30 29 7d 2c 66 3d 73 65 2e 63 6f 6d 70 69 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 76 2c 79 2c 6d 2c 78 2c 72 2c 69 3d 5b 5d 2c 6f 3d 5b 5d 2c 61 3d 41 5b 65 2b 22 20 22 5d 3b 69 66 28 21 61 29 7b 74 7c 7c 28 74 3d 68 28 65 29 29 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6e 2d 2d 29 28 61 3d 45 65 28 74 5b 6e 5d 29 29 5b 53 5d 3f 69 2e 70 75 73 68 28 61 29 3a 6f 2e 70 75 73 68 28 61 29 3b 28 61 3d 41 28 65 2c 28 76 3d 6f 2c 6d 3d 30 3c 28 79 3d 69 29 2e 6c 65 6e 67 74 68 2c 78 3d 30 3c 76 2e 6c 65 6e 67 74 68 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 Data Ascii: break}return t?a.length:a?se.error(e):x(e,s).slice(0)},f=se.compile=function(e,t){var n,v,y,m,x,r,i=[],o=[],a=A[e+" "];if(!a){t\|\|(t=h(e)),n=t.length;while(n--)(a=Ee(t[n]))[S]?i.push(a):o.push(a);(a=A(e,(v=o,m=0<(y=i).length,x=0<v.length,r=function(e,t,n,r
2024-04-24 12:01:08 UTC	4048	IN	Data Raw: 6f 6e 65 3d 63 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 6c 61 73 74 43 68 69 6c 64 2e 63 68 65 63 6b 65 64 2c 63 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 74 65 78 74 61 72 65 61 3e 78 3c 2f 74 65 78 74 61 72 65 61 3e 22 2c 79 2e 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 64 3d 21 21 63 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2e 6c 61 73 74 43 68 69 6c 64 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 63 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 6f 70 74 69 6f 6e 3e 3c 2f 6f 70 74 69 6f 6e 3e 22 2c 79 2e 6f 70 74 69 6f 6e 3d 21 21 63 65 2e 6c 61 73 74 43 68 69 6c 64 3b 76 61 72 20 67 65 3d 7b 74 68 65 61 64 3a 5b 31 2c 22 3c 74 61 62 6c 65 3e 22 2c 22 3c 2f 74 61 62 6c 65 3e 22 5d 2c 63 6f 6c 3a 5b 32 2c 22 3c Data Ascii: one=ce.cloneNode(!0).cloneNode(!0).lastChild.checked,ce.innerHTML="<textarea>x</textarea>",y.noCloneChecked=!!ce.cloneNode(!0).lastChild.defaultValue,ce.innerHTML="<option></option>",y.option=!!ce.lastChild;var ge={thead:[1,"<table>","</table>"],col:[2,"<
2024-04-24 12:01:08 UTC	3831	IN	Data Raw: 2e 6f 72 69 67 54 79 70 65 7c 7c 6e 26 26 6e 2e 67 75 69 64 21 3d 3d 63 2e 67 75 69 64 7c 7c 73 26 26 21 73 2e 74 65 73 74 28 63 2e 6e 61 6d 65 73 70 61 63 65 29 7c 7c 72 26 26 72 21 3d 3d 63 2e 73 65 6c 65 63 74 6f 72 26 26 28 22 2a 2a 22 21 3d 3d 72 7c 7c 21 63 2e 73 65 6c 65 63 74 6f 72 29 7c 7c 28 70 2e 73 70 6c 69 63 65 28 6f 2c 31 29 2c 63 2e 73 65 6c 65 63 74 6f 72 26 26 70 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 2d 2d 2c 66 2e 72 65 6d 6f 76 65 26 26 66 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 65 2c 63 29 29 3b 61 26 26 21 70 2e 6c 65 6e 67 74 68 26 26 28 66 2e 74 65 61 72 64 6f 77 6e 26 26 21 31 21 3d 3d 66 2e 74 65 61 72 64 6f 77 6e 2e 63 61 6c 6c 28 65 2c 68 2c 76 2e 68 61 6e 64 6c 65 29 7c 7c 53 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 65 2c 64 Data Ascii: .origType\|\|n&&n.guid!==c.guid\|\|s&&!s.test(c.namespace)\|\|r&&r!==c.selector&&("**"!==r\|\|!c.selector)\|\|(p.splice(o,1),c.selector&&p.delegateCount--,f.remove&&f.remove.call(e,c));a&&!p.length&&(f.teardown&&!1!==f.teardown.call(e,h,v.handle)\|\|S.removeEvent(e,d
2024-04-24 12:01:08 UTC	2554	IN	Data Raw: 72 49 64 3a 21 30 2c 70 6f 69 6e 74 65 72 54 79 70 65 3a 21 30 2c 73 63 72 65 65 6e 58 3a 21 30 2c 73 63 72 65 65 6e 59 3a 21 30 2c 74 61 72 67 65 74 54 6f 75 63 68 65 73 3a 21 30 2c 74 6f 45 6c 65 6d 65 6e 74 3a 21 30 2c 74 6f 75 63 68 65 73 3a 21 30 2c 77 68 69 63 68 3a 21 30 7d 2c 53 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 29 2c 53 2e 65 61 63 68 28 7b 66 6f 63 75 73 3a 22 66 6f 63 75 73 69 6e 22 2c 62 6c 75 72 3a 22 66 6f 63 75 73 6f 75 74 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 65 5d 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 65 28 74 68 69 73 2c 65 2c 43 65 29 2c 21 31 7d 2c 74 72 69 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: rId:!0,pointerType:!0,screenX:!0,screenY:!0,targetTouches:!0,toElement:!0,touches:!0,which:!0},S.event.addProp),S.each({focus:"focusin",blur:"focusout"},function(e,t){S.event.special[e]={setup:function(){return Se(this,e,Ce),!1},trigger:function(){return
2024-04-24 12:01:08 UTC	10216	IN	Data Raw: 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 65 7d 53 2e 65 78 74 65 6e 64 28 7b 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c Data Ascii: for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e}S.extend({htmlPrefilter:function(e){return e},clone:function(e,t,n){var r,i,o,a,s,
2024-04-24 12:01:08 UTC	7662	IN	Data Raw: 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 65 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 2c 5f 64 65 66 61 75 6c 74 3a 22 73 77 69 6e 67 22 7d 2c 53 2e 66 78 3d 4b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 53 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 5a 65 2c 65 74 2c 74 74 2c 6e 74 2c 72 74 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 7c 73 68 6f 77 7c 68 69 64 65 29 24 2f 2c 69 74 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 6f 74 28 29 7b 65 74 26 26 28 21 31 3d 3d 3d 45 2e 68 69 64 64 65 6e 26 26 43 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3f 43 2e 72 65 71 75 Data Ascii: ear:function(e){return e},swing:function(e){return.5-Math.cos(e*Math.PI)/2},_default:"swing"},S.fx=Ke.prototype.init,S.fx.step={};var Ze,et,tt,nt,rt=/^(?:toggle\|show\|hide)$/,it=/queueHooks$/;function ot(){et&&(!1===E.hidden&&C.requestAnimationFrame?C.requ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49725	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:08 UTC	655	OUT	GET /simpletrade/default/js/fastclick.js HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:09 UTC	613	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"25965-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: application/javascript Content-Length: 25965 Date: Wed, 24 Apr 2024 12:01:08 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:01:09 UTC	4588	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 40 70 72 65 73 65 72 76 65 20 46 61 73 74 43 6c 69 63 6b 3a 20 70 6f 6c 79 66 69 6c 6c 20 74 6f 20 72 65 6d 6f 76 65 20 63 6c 69 63 6b 20 64 65 6c 61 79 73 20 6f 6e 20 62 72 6f 77 73 65 72 73 20 77 69 74 68 20 74 6f 75 63 68 20 55 49 73 2e 0a 09 20 2a 0a 09 20 2a 20 40 63 6f 64 69 6e 67 73 74 61 6e 64 61 72 64 20 66 74 6c 61 62 73 2d 6a 73 76 32 0a 09 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 54 68 65 20 46 69 6e 61 6e 63 69 61 6c 20 54 69 6d 65 73 20 4c 69 6d 69 74 65 64 20 5b 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 5d 0a 09 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 73 65 65 20 4c 49 Data Ascii: ;(function () {'use strict';/** * @preserve FastClick: polyfill to remove click delays on browsers with touch UIs. * * @codingstandard ftlabs-jsv2 * @copyright The Financial Times Limited [All Rights Reserved] * @license MIT License (see LI
2024-04-24 12:01:09 UTC	6915	IN	Data Raw: 20 50 68 6f 6e 65 22 29 20 3e 3d 20 30 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 41 6e 64 72 6f 69 64 20 72 65 71 75 69 72 65 73 20 65 78 63 65 70 74 69 6f 6e 73 2e 0a 09 20 2a 0a 09 20 2a 20 40 74 79 70 65 20 62 6f 6f 6c 65 61 6e 0a 09 20 2a 2f 0a 09 76 61 72 20 64 65 76 69 63 65 49 73 41 6e 64 72 6f 69 64 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 27 41 6e 64 72 6f 69 64 27 29 20 3e 20 30 20 26 26 20 21 64 65 76 69 63 65 49 73 57 69 6e 64 6f 77 73 50 68 6f 6e 65 3b 0a 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 69 4f 53 20 72 65 71 75 69 72 65 73 20 65 78 63 65 70 74 69 6f 6e 73 2e 0a 09 20 2a 0a 09 20 2a 20 40 74 79 70 65 20 62 6f 6f 6c 65 61 6e 0a 09 20 2a 2f 0a 09 76 61 72 20 64 65 76 69 63 65 49 73 49 4f 53 20 3d 20 Data Ascii: Phone") >= 0;/** * Android requires exceptions. * * @type boolean /var deviceIsAndroid = navigator.userAgent.indexOf('Android') > 0 && !deviceIsWindowsPhone;/* * iOS requires exceptions. * * @type boolean */var deviceIsIOS =
2024-04-24 12:01:09 UTC	2554	IN	Data Raw: 74 68 65 20 63 6c 69 63 6b 20 74 68 61 74 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 61 6c 65 72 74 2e 0a 09 09 09 09 2f 2f 20 53 61 64 6c 79 2c 20 74 68 65 72 65 20 69 73 20 61 6e 20 69 73 73 75 65 20 6f 6e 20 69 4f 53 20 34 20 74 68 61 74 20 63 61 75 73 65 73 20 73 6f 6d 65 20 6e 6f 72 6d 61 6c 20 74 6f 75 63 68 20 65 76 65 6e 74 73 20 74 6f 20 68 61 76 65 20 74 68 65 20 73 61 6d 65 20 69 64 65 6e 74 69 66 69 65 72 20 61 73 20 61 6e 0a 09 09 09 09 2f 2f 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 70 72 65 63 65 65 64 69 6e 67 20 74 6f 75 63 68 20 65 76 65 6e 74 20 28 69 73 73 75 65 20 23 35 32 29 2c 20 73 6f 20 74 68 69 73 20 66 69 78 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 20 6f 6e 20 74 68 61 74 20 70 6c 61 74 66 6f 72 6d 2e 0a 09 09 09 09 2f 2f 20 Data Ascii: the click that triggered the alert.// Sadly, there is an issue on iOS 4 that causes some normal touch events to have the same identifier as an// immediately preceeding touch event (issue #52), so this fix is unavailable on that platform.//
2024-04-24 12:01:09 UTC	1277	IN	Data Raw: 72 61 63 6b 69 6e 67 43 6c 69 63 6b 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 74 68 69 73 2e 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 20 3d 20 6e 75 6c 6c 3b 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 7d 3b 0a 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 41 74 74 65 6d 70 74 20 74 6f 20 66 69 6e 64 20 74 68 65 20 6c 61 62 65 6c 6c 65 64 20 63 6f 6e 74 72 6f 6c 20 66 6f 72 20 74 68 65 20 67 69 76 65 6e 20 6c 61 62 65 6c 20 65 6c 65 6d 65 6e 74 2e 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 45 76 65 6e 74 54 61 72 67 65 74 7c 48 54 4d 4c 4c 61 62 65 6c 45 6c 65 6d 65 6e 74 7d 20 6c 61 62 65 6c 45 6c 65 6d 65 6e 74 0a 09 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 45 6c 65 6d 65 6e 74 7c 6e 75 6c 6c 7d 0a 09 20 2a 2f 0a 09 46 61 73 74 43 6c 69 63 6b Data Ascii: rackingClick = false;this.targetElement = null;}return true;};/** * Attempt to find the labelled control for the given label element. * * @param {EventTarget\|HTMLLabelElement} labelElement * @returns {Element\|null} */FastClick
2024-04-24 12:01:09 UTC	1277	IN	Data Raw: 6c 69 63 6b 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 50 72 65 76 65 6e 74 20 70 68 61 6e 74 6f 6d 20 63 6c 69 63 6b 73 20 6f 6e 20 66 61 73 74 20 64 6f 75 62 6c 65 2d 74 61 70 20 28 69 73 73 75 65 20 23 33 36 29 0a 09 09 69 66 20 28 28 65 76 65 6e 74 2e 74 69 6d 65 53 74 61 6d 70 20 2d 20 74 68 69 73 2e 6c 61 73 74 43 6c 69 63 6b 54 69 6d 65 29 20 3c 20 74 68 69 73 2e 74 61 70 44 65 6c 61 79 29 20 7b 0a 09 09 09 74 68 69 73 2e 63 61 6e 63 65 6c 4e 65 78 74 43 6c 69 63 6b 20 3d 20 74 72 75 65 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 09 7d 0a 0a 09 09 69 66 20 28 28 65 76 65 6e 74 2e 74 69 6d 65 53 74 61 6d 70 20 2d 20 74 68 69 73 2e 74 72 61 63 6b 69 6e 67 43 6c 69 63 6b 53 74 61 72 74 29 20 Data Ascii: lick) {return true;}// Prevent phantom clicks on fast double-tap (issue #36)if ((event.timeStamp - this.lastClickTime) < this.tapDelay) {this.cancelNextClick = true;return true;}if ((event.timeStamp - this.trackingClickStart)
2024-04-24 12:01:09 UTC	1277	IN	Data Raw: 65 74 54 61 67 4e 61 6d 65 20 3d 20 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 09 09 69 66 20 28 74 61 72 67 65 74 54 61 67 4e 61 6d 65 20 3d 3d 3d 20 27 6c 61 62 65 6c 27 29 20 7b 0a 09 09 09 66 6f 72 45 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 66 69 6e 64 43 6f 6e 74 72 6f 6c 28 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 29 3b 0a 09 09 09 69 66 20 28 66 6f 72 45 6c 65 6d 65 6e 74 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 66 6f 63 75 73 28 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 29 3b 0a 09 09 09 09 69 66 20 28 64 65 76 69 63 65 49 73 41 6e 64 72 6f 69 64 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 09 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: etTagName = targetElement.tagName.toLowerCase();if (targetTagName === 'label') {forElement = this.findControl(targetElement);if (forElement) {this.focus(targetElement);if (deviceIsAndroid) {return false;}targetElement
2024-04-24 12:01:09 UTC	7662	IN	Data Raw: 21 3d 3d 20 27 73 65 6c 65 63 74 27 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 20 3d 20 6e 75 6c 6c 3b 0a 09 09 09 09 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 0a 09 09 69 66 20 28 64 65 76 69 63 65 49 73 49 4f 53 20 26 26 20 21 64 65 76 69 63 65 49 73 49 4f 53 34 29 20 7b 0a 0a 09 09 09 2f 2f 20 44 6f 6e 27 74 20 73 65 6e 64 20 61 20 73 79 6e 74 68 65 74 69 63 20 63 6c 69 63 6b 20 65 76 65 6e 74 20 69 66 20 74 68 65 20 74 61 72 67 65 74 20 65 6c 65 6d 65 6e 74 20 69 73 20 63 6f 6e 74 61 69 6e 65 64 20 77 69 74 68 69 6e 20 61 20 70 61 72 65 6e 74 20 6c 61 79 65 72 20 74 68 61 74 20 77 61 73 20 73 63 72 6f 6c 6c Data Ascii: !== 'select') {this.targetElement = null;event.preventDefault();}return false;}if (deviceIsIOS && !deviceIsIOS4) {// Don't send a synthetic click event if the target element is contained within a parent layer that was scroll
2024-04-24 12:01:09 UTC	415	IN	Data Raw: 09 09 72 65 74 75 72 6e 20 6e 65 77 20 46 61 73 74 43 6c 69 63 6b 28 6c 61 79 65 72 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 09 7d 3b 0a 0a 0a 09 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 2e 61 6d 64 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 0a 09 09 2f 2f 20 41 4d 44 2e 20 52 65 67 69 73 74 65 72 20 61 73 20 61 6e 20 61 6e 6f 6e 79 6d 6f 75 73 20 6d 6f 64 75 6c 65 2e 0a 09 09 64 65 66 69 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 46 61 73 74 43 6c 69 63 6b 3b 0a 09 09 7d 29 3b 0a 09 7d 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 21 3d 3d 20 27 Data Ascii: return new FastClick(layer, options);};if (typeof define === 'function' && typeof define.amd === 'object' && define.amd) {// AMD. Register as an anonymous module.define(function() {return FastClick;});} else if (typeof module !== '

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49726	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:08 UTC	667	OUT	GET /simpletrade/default/js/jqBootstrapValidation.js HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:09 UTC	613	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"36295-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: application/javascript Content-Length: 36295 Date: Wed, 24 Apr 2024 12:01:08 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:01:09 UTC	7672	IN	Data Raw: 2f 2a 20 6a 71 42 6f 6f 74 73 74 72 61 70 56 61 6c 69 64 61 74 69 6f 6e 0a 20 2a 20 41 20 70 6c 75 67 69 6e 20 66 6f 72 20 61 75 74 6f 6d 61 74 69 6e 67 20 76 61 6c 69 64 61 74 69 6f 6e 20 6f 6e 20 54 77 69 74 74 65 72 20 42 6f 6f 74 73 74 72 61 70 20 66 6f 72 6d 61 74 74 65 64 20 66 6f 72 6d 73 2e 0a 20 2a 0a 20 2a 20 76 31 2e 33 2e 36 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 20 3c 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 3e 20 2d 20 73 65 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 52 65 61 63 74 69 76 65 52 61 76 65 6e 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 71 42 6f 6f 74 73 74 72 61 70 56 61 6c 69 64 Data Ascii: /* jqBootstrapValidation * A plugin for automating validation on Twitter Bootstrap formatted forms. * * v1.3.6 * * License: MIT <http://opensource.org/licenses/mit-license.php> - see LICENSE file * * http://ReactiveRaven.github.com/jqBootstrapValid
2024-04-24 12:01:09 UTC	3831	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 74 68 69 73 2e 61 74 74 72 28 22 72 65 71 75 69 72 65 64 22 29 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 24 74 68 69 73 2e 61 74 74 72 28 22 61 72 69 61 2d 72 65 71 75 69 72 65 64 22 29 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 20 3d 20 73 65 74 74 69 6e 67 73 2e 62 75 69 6c 74 49 6e 56 61 6c 69 64 61 74 6f 72 73 2e 72 65 71 75 69 72 65 64 2e 6d 65 73 73 61 67 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 74 68 69 73 2e 64 61 74 61 28 22 Data Ascii: ------------------------------------------------------ if ($this.attr("required") !== undefined \|\| $this.attr("aria-required") !== undefined) { message = settings.builtInValidators.required.message; if ($this.data("
2024-04-24 12:01:09 UTC	8939	IN	Data Raw: 2e 65 61 63 68 28 24 74 68 69 73 2e 64 61 74 61 28 29 2c 20 66 75 6e 63 74 69 6f 6e 20 28 69 2c 20 65 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 72 74 73 20 3d 20 69 2e 72 65 70 6c 61 63 65 28 2f 28 5b 41 2d 5a 5d 29 2f 67 2c 20 22 2c 24 31 22 29 2e 73 70 6c 69 74 28 22 2c 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 61 72 74 73 5b 30 5d 20 3d 3d 3d 20 22 76 61 6c 69 64 61 74 69 6f 6e 22 20 26 26 20 70 61 72 74 73 5b 31 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 69 64 61 74 6f 72 4e 61 6d 65 73 2e 70 75 73 68 28 70 61 72 74 73 5b 31 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 20 3d 3d 3d 3d 3d 3d 3d Data Ascii: .each($this.data(), function (i, el) { var parts = i.replace(/([A-Z])/g, ",$1").split(","); if (parts[0] === "validation" && parts[1]) { validatorNames.push(parts[1]); } }); // =======
2024-04-24 12:01:09 UTC	1277	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 6c 29 2e 61 74 74 72 28 22 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 2c 20 22 74 72 75 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 72 69 67 69 6e 61 6c 20 3d 20 24 74 68 69 73 2e 64 61 74 61 28 22 6f 72 69 67 69 6e 61 6c 2d 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 65 6c 29 2e 61 74 74 72 28 22 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 2c 20 28 6f 72 69 67 69 6e 61 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 6f 72 69 67 69 6e 61 6c 20 3a 20 66 61 6c 73 65 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a Data Ascii: $(el).attr("aria-invalid", "true"); } else { var original = $this.data("original-aria-invalid"); $(el).attr("aria-invalid", (original !== undefined ? original : false)); }
2024-04-24 12:01:09 UTC	10216	IN	Data Raw: 6c 65 5c 22 3e 26 6e 62 73 70 3b 3c 2f 69 3e 22 20 2b 20 65 72 72 6f 72 73 46 6f 75 6e 64 2e 6a 6f 69 6e 28 22 3c 2f 64 69 76 3e 3c 64 69 76 3e 22 29 20 2b 20 22 3c 2f 64 69 76 3e 22 20 2b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 20 73 65 74 74 69 6e 67 73 2e 6f 70 74 69 6f 6e 73 2e 70 72 65 70 65 6e 64 45 78 69 73 74 69 6e 67 48 65 6c 70 42 6c 6f 63 6b 20 3f 20 24 68 65 6c 70 42 6c 6f 63 6b 2e 64 61 74 61 28 22 6f 72 69 67 69 6e 61 6c 2d 63 6f 6e 74 65 6e 74 73 22 29 20 3a 20 22 22 20 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 63 6f 6e 74 72 6f 6c 47 72 6f 75 70 2e 72 65 6d 6f 76 65 43 6c Data Ascii: le\"> </i>" + errorsFound.join("</div><div>") + "</div>" + ( settings.options.prependExistingHelpBlock ? $helpBlock.data("original-contents") : "" )); } } else { $controlGroup.removeCl
2024-04-24 12:01:09 UTC	2554	IN	Data Raw: 09 09 6d 69 6e 63 68 65 63 6b 65 64 3a 20 7b 0a 09 09 09 09 6e 61 6d 65 3a 20 22 6d 69 6e 63 68 65 63 6b 65 64 22 2c 0a 09 09 09 09 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 24 74 68 69 73 2c 20 6e 61 6d 65 29 20 7b 0a 09 09 09 09 09 76 61 72 20 65 6c 65 6d 65 6e 74 73 20 3d 20 24 74 68 69 73 2e 70 61 72 65 6e 74 73 28 22 66 6f 72 6d 22 29 2e 66 69 72 73 74 28 29 2e 66 69 6e 64 28 22 5b 6e 61 6d 65 3d 5c 22 22 20 2b 20 24 74 68 69 73 2e 61 74 74 72 28 22 6e 61 6d 65 22 29 20 2b 20 22 5c 22 5d 22 29 3b 0a 09 09 09 09 09 65 6c 65 6d 65 6e 74 73 2e 62 69 6e 64 28 22 63 6c 69 63 6b 2e 76 61 6c 69 64 61 74 69 6f 6e 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 09 09 09 24 74 68 69 73 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 2e 76 61 Data Ascii: minchecked: {name: "minchecked",init: function ($this, name) {var elements = $this.parents("form").first().find("[name=\"" + $this.attr("name") + "\"]");elements.bind("click.validation", function () {$this.trigger("change.va
2024-04-24 12:01:09 UTC	1277	IN	Data Raw: 6f 6e 20 28 6e 61 6d 65 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6e 61 6d 65 0a 09 09 09 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 0a 09 09 09 2e 72 65 70 6c 61 63 65 28 0a 09 09 09 09 2f 28 5e 7c 5c 73 29 28 5b 61 2d 7a 5d 29 2f 67 20 2c 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 28 6d 2c 70 31 2c 70 32 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 70 31 2b 70 32 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 09 09 09 09 7d 0a 09 09 09 29 0a 09 09 3b 0a 09 7d 3b 0a 0a 09 76 61 72 20 67 65 74 56 61 6c 75 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 24 74 68 69 73 29 20 7b 0a 09 09 2f 2f 20 45 78 74 72 61 63 74 20 74 68 65 20 76 61 6c 75 65 20 77 65 27 72 65 20 74 61 6c 6b 69 6e 67 20 61 62 6f 75 74 0a 09 09 76 61 72 20 76 61 6c 75 65 20 3d 20 24 74 68 69 73 2e Data Ascii: on (name) {return name.toLowerCase().replace(/(^\|\s)([a-z])/g ,function(m,p1,p2) {return p1+p2.toUpperCase();});};var getValue = function ($this) {// Extract the value we're talking aboutvar value = $this.
2024-04-24 12:01:09 UTC	529	IN	Data Raw: 09 69 66 20 28 20 64 65 66 61 75 6c 74 73 2e 6d 65 74 68 6f 64 73 5b 6d 65 74 68 6f 64 5d 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 64 65 66 61 75 6c 74 73 2e 6d 65 74 68 6f 64 73 5b 6d 65 74 68 6f 64 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 20 61 72 67 75 6d 65 6e 74 73 2c 20 31 20 29 29 3b 0a 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 74 79 70 65 6f 66 20 6d 65 74 68 6f 64 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 7c 7c 20 21 20 6d 65 74 68 6f 64 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 64 65 66 61 75 6c 74 73 2e 6d 65 74 68 6f 64 73 2e 69 6e 69 74 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 Data Ascii: if ( defaults.methods[method] ) {return defaults.methods[method].apply( this, Array.prototype.slice.call( arguments, 1 ));} else if ( typeof method === 'object' \|\| ! method ) {return defaults.methods.init.apply( this, arguments );} else {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49728	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:09 UTC	724	OUT	GET /simpletrade/default/images/aravo_logo-2x.png HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:10 UTC	598	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"9774-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: image/png Content-Length: 9774 Date: Wed, 24 Apr 2024 12:01:10 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:01:10 UTC	9774	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e5 00 00 00 4c 08 06 00 00 00 92 da 70 30 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0d 38 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 34 2e 32 2e 32 2d 63 30 36 33 20 35 33 2e 33 35 32 36 32 34 2c 20 32 30 30 38 2f 30 37 2f 33 30 2d 31 38 3a 30 35 3a 34 31 Data Ascii: PNGIHDRLp0tEXtSoftwareAdobe ImageReadyqe<8iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:05:41

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49727	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6e 4c 48 32 36 55 72 76 61 45 75 55 52 63 53 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 30 62 64 62 35 38 34 38 37 66 31 64 66 33 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: nLH26UrvaEuURcS6.1Context: 30bdb58487f1df32
2024-04-24 12:01:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 12:01:10 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6e 4c 48 32 36 55 72 76 61 45 75 55 52 63 53 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 30 62 64 62 35 38 34 38 37 66 31 64 66 33 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 79 4b 34 4a 5a 4f 51 7a 4d 61 75 50 58 76 69 77 50 58 46 7a 6e 62 74 7a 36 4e 54 39 65 38 4e 31 50 74 72 58 4b 30 48 47 54 75 6a 77 4c 57 43 56 68 56 46 51 4e 44 62 66 6e 31 73 68 62 2b 6c 35 72 58 6c 73 67 68 54 4f 52 6a 67 4f 74 4b 32 6c 55 52 72 57 38 6f 71 6c 58 5a 58 66 71 37 6c 6e 46 63 37 70 6d 70 76 63 73 4e 59 58 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: nLH26UrvaEuURcS6.2Context: 30bdb58487f1df32<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcyK4JZOQzMauPXviwPXFznbtz6NT9e8N1PtrXK0HGTujwLWCVhVFQNDbfn1shb+l5rXlsghTORjgOtK2lURrW8oqlXZXfq7lnFc7pmpvcsNYX
2024-04-24 12:01:10 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6e 4c 48 32 36 55 72 76 61 45 75 55 52 63 53 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 30 62 64 62 35 38 34 38 37 66 31 64 66 33 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: nLH26UrvaEuURcS6.3Context: 30bdb58487f1df32<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 12:01:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 12:01:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 52 49 64 63 4a 52 2f 7a 79 6b 4b 42 43 72 49 61 57 65 66 59 70 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: RIdcJR/zykKBCrIaWefYpg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49731	23.61.210.98	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 12:01:10 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=241333 Date: Wed, 24 Apr 2024 12:01:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49733	23.61.210.98	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 12:01:11 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2578) X-CID: 11 Cache-Control: public, max-age=241380 Date: Wed, 24 Apr 2024 12:01:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 12:01:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49732	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:11 UTC	477	OUT	GET /simpletrade/default/images/aravo_logo-2x.png HTTP/1.1 Host: jll.aravo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
2024-04-24 12:01:11 UTC	598	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"9774-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: image/png Content-Length: 9774 Date: Wed, 24 Apr 2024 12:01:11 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:01:11 UTC	2049	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e5 00 00 00 4c 08 06 00 00 00 92 da 70 30 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0d 38 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 34 2e 32 2e 32 2d 63 30 36 33 20 35 33 2e 33 35 32 36 32 34 2c 20 32 30 30 38 2f 30 37 2f 33 30 2d 31 38 3a 30 35 3a 34 31 Data Ascii: PNGIHDRLp0tEXtSoftwareAdobe ImageReadyqe<8iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:05:41
2024-04-24 12:01:11 UTC	7725	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49735	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:11 UTC	770	OUT	GET /favicon.ico?v=4 HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jll.aravo.com/aems/login.do Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1
2024-04-24 12:01:11 UTC	605	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"111142-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: image/x-icon Content-Length: 111142 Date: Wed, 24 Apr 2024 12:01:11 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:01:11 UTC	11493	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 ae 04 00 00 60 60 00 00 01 00 20 00 a8 94 00 00 56 15 00 00 80 80 00 00 01 00 20 00 28 08 01 00 fe a9 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 41 cc a7 2d 3c cc fa 2d 3c cc ff 2c 3c cc fe 2c 3c cc fe 2c 3c cc fe 2c 3b cc fe 2e 3d cd fe 7d 87 df fe 66 72 da fe 2b 3a cc fe 2c 3c cc fe 2c 3c cc fe 2c 3c cc fe 2d 3c cc fa 32 41 cc a7 2b 3a cc fa 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 2d 3c cc ff 9e a6 e8 ff 80 8a e0 ff 29 38 cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc fa 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b Data Ascii: hF `` V (( 2A-<-<,<,<,<,;.=}fr+:,<,<,<-<2A+:+9+9+:+:+:9-<)8+:+:+:+:+:9+:+:+:+
2024-04-24 12:01:11 UTC	2554	IN	Data Raw: ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 26 37 ca ff 25 37 ca ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a Data Ascii: +:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+9+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:9&7%79+:+:+::+:+:+:9+9+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:
2024-04-24 12:01:11 UTC	10216	IN	Data Raw: 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2a 39 cb ff 48 57 d2 ff 88 94 e2 ff b3 bb ed ff b8 be ee ff 9e a7 e7 ff 5e 6c d8 ff 2e 3d cd ff 2a 38 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 29 38 cc ff 29 38 cc ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff Data Ascii: :+:+:+:+9+:+9+9+:+9+:+:+:+:+:+:+9+:+:+99HW^l.=8+:+:+:+:+:+:+:+:+:+:+:+:+9+:+:+:+:+:+9)8)8*9+:+:+:+:+:+:+:+:+:+:+:+:+:
2024-04-24 12:01:11 UTC	1277	IN	Data Raw: ff ff ff dc e1 f6 ff 5b 6a d7 ff 27 36 cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 26 37 ca ff 25 37 ca ff 2a 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 28 37 cb ff 36 45 ce ff a7 af ea ff fd fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f3 f4 fc ff 7a 85 df ff 2a 39 cb ff 2a 39 cc ff 2b 39 cc ff 28 37 cb ff 40 50 d1 ff bf c7 f0 ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 e9 f9 ff 61 6f d9 ff 28 37 cb ff 2a 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff Data Ascii: [j'6+:+:+:+:+:+9+:+:9&7%79+:+9+:+:+:+:+:+:+:+:+:+:(76Ez99+9(7@Pao(7*9+:+9+9+:+:+:+:+:+:
2024-04-24 12:01:11 UTC	10848	IN	Data Raw: dd ff eb ee fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff aa b2 eb ff 35 44 ce ff 22 32 c9 ff 67 75 da ff e2 e6 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff be c5 ef ff 3b 4a d0 ff 28 37 cb ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2a 39 cb ff 2c 3c cc ff 8a 96 e3 ff fa fb fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fe ff ad b4 eb ff 34 43 ce ff 29 38 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 2b 3b cc ff 88 93 e2 ff f4 f5 fc ff ff ff ff ff ff ff ff ff ff Data Ascii: 5D"2gu;J(7+9+:+:+9+9+9+:+9+9+9+:+:+:+9+9+:+:+:+99,<4C)8+9+9+:+:9+;
2024-04-24 12:01:11 UTC	3199	IN	Data Raw: cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 29 38 cb ff 3a 4a cf ff a0 aa e8 ff ed f0 fa ff fd fe fe ff ff ff ff ff fd fd fe ff e9 ec f9 ff 97 a1 e6 ff 35 44 ce ff 2a 38 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2a 39 cc ff 26 37 ca ff 25 37 ca ff 2a 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b Data Ascii: +9+9+9+9+9+9+9)8:J5D8+:+9+9+9+:+:+9+9+9+9+9+9+9+9+9+9+9+9+:+9+9+:+9+9+:+9+9+9+:+:+9+9+9+99&7%7*9+:+9+:+:+:+:+:+
2024-04-24 12:01:11 UTC	10216	IN	Data Raw: 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 29 38 cb ff 35 45 cd fd 49 5b d3 c3 2a 39 cb fa 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff Data Ascii: :+:+:+9+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:)85EI[*9+:+:+:+:+9+:+:+:+:+:+:+:+:+9+9+:+9+9+:+9+9+:+:+:+:+:+9+9+:+:+9+:+:+:+:+9+9+9+:
2024-04-24 12:01:12 UTC	10216	IN	Data Raw: 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 29 38 cb ff 3d 4d d0 ff b6 be ed ff f2 f4 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fc fe ff be c6 ef ff 51 61 d5 ff 29 38 cb ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff Data Ascii: :+:+:+:+:+:+:+:+:+:+:+:+:+:+:+9+:+:+:+:+:+:+:+:+:+:+:+:+9+9+9+:+:+:+::+:+:9)8=MQa)8*9+:+:+:+:+:+:+:+:+:+:
2024-04-24 12:01:12 UTC	2554	IN	Data Raw: 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2a 39 cc ff 2a 39 cc ff 2a 39 cb ff 2a 39 cc ff 2a 39 cc ff 2a 39 cc ff 29 38 cc ff 29 37 cb ff 29 38 cb ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff Data Ascii: :+9+:+:+:+:+:+9+:+:+:+9+:+:+:+:+:+:+9+9+:+9+9+:+:+:+:+9+:+:+9+:+:+:+:+9+9+:999999)8)7)8*9+:+:+9+9+:+:+:+:+:+9+:+:+:+:+:+:
2024-04-24 12:01:12 UTC	7662	IN	Data Raw: ff d1 d7 f4 ff 66 73 da ff 30 3f cd ff 29 38 cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 29 38 cb ff 3b 4b d0 ff 97 a1 e6 ff e0 e4 f8 ff fc fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e9 eb fa ff 87 92 e2 ff 28 38 cb ff 28 37 cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a Data Ascii: fs0?)8+:+:+:+:+9+:+:+:+9+:+:+:+:+:+9+9+9+:+9+9+:+:+:+:+:+:+:+:+9)8;K(8(7+:+:+:+9+9+:+:+:+:+:+:+:+:+:+:+:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49738	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:12 UTC	523	OUT	GET /favicon.ico?v=4 HTTP/1.1 Host: jll.aravo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1
2024-04-24 12:01:13 UTC	605	IN	HTTP/1.1 200 Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: Accept-Ranges: bytes ETag: W/"111142-1713458198000" Last-Modified: Thu, 18 Apr 2024 16:36:38 GMT Content-Type: image/x-icon Content-Length: 111142 Date: Wed, 24 Apr 2024 12:01:13 GMT Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-24 12:01:13 UTC	11493	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 ae 04 00 00 60 60 00 00 01 00 20 00 a8 94 00 00 56 15 00 00 80 80 00 00 01 00 20 00 28 08 01 00 fe a9 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 41 cc a7 2d 3c cc fa 2d 3c cc ff 2c 3c cc fe 2c 3c cc fe 2c 3c cc fe 2c 3b cc fe 2e 3d cd fe 7d 87 df fe 66 72 da fe 2b 3a cc fe 2c 3c cc fe 2c 3c cc fe 2c 3c cc fe 2d 3c cc fa 32 41 cc a7 2b 3a cc fa 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 2d 3c cc ff 9e a6 e8 ff 80 8a e0 ff 29 38 cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc fa 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b Data Ascii: hF `` V (( 2A-<-<,<,<,<,;.=}fr+:,<,<,<-<2A+:+9+9+:+:+:9-<)8+:+:+:+:+:9+:+:+:+
2024-04-24 12:01:13 UTC	2554	IN	Data Raw: ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 26 37 ca ff 25 37 ca ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a Data Ascii: +:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+9+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:9&7%79+:+:+::+:+:+:9+9+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:
2024-04-24 12:01:13 UTC	2554	IN	Data Raw: 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2a 39 cb ff 48 57 d2 ff 88 94 e2 ff b3 bb ed ff b8 be ee ff 9e a7 e7 ff 5e 6c d8 ff 2e 3d cd ff 2a 38 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 29 38 cc ff 29 38 cc ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff Data Ascii: :+:+:+:+9+:+9+9+:+9+:+:+:+:+:+:+9+:+:+99HW^l.=8+:+:+:+:+:+:+:+:+:+:+:+:+9+:+:+:+:+:+9)8)8*9+:+:+:+:+:+:+:+:+:+:+:+:+:
2024-04-24 12:01:13 UTC	16384	IN	Data Raw: ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 26 37 ca ff 25 37 ca ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 28 38 cb ff 3e 4e d0 ff be c5 ef ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ed f0 fa ff 7e 8c e0 ff 29 39 cb ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 28 37 cb ff 44 54 d1 ff c2 ca f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ef f1 fb ff 7b 88 df ff 29 38 cb ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a Data Ascii: +:+:+9+:+9+:+:9&7%79+:+:+:(8>N~)9+9+:+9+9+:+:+9+:+9+:+:+9+:+:+:+:+:+:+:+:(7DT{)8*9+:+:+:+:+:
2024-04-24 12:01:13 UTC	217	IN	Data Raw: ff 29 38 cb ff 28 37 cb ff 28 37 cb ff 28 37 cb ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cc ff 29 38 cb ff 28 37 cb ff 28 37 cb ff 2a 38 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2a 39 cc ff 26 37 ca ff 25 37 ca ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff Data Ascii: )8(7(7(79+:+:+:+:+:+:+:+9+:+:+:+:+:+:+:+:+9+:+:+:+:+:+:+:+:+:9)8(7(78+9+:+99&7%7*9+:+:+:+:+9+:+:+:+:+:+:
2024-04-24 12:01:13 UTC	3186	IN	Data Raw: 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 28 37 cb ff 27 37 cb ff 29 38 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 29 38 cb ff 26 36 cb ff 2c 3c cc ff 32 42 ce ff 2d 3d cc ff 27 36 cb ff 29 38 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc Data Ascii: +:+:+9+9+:+9+9+:+:+9+9+:+9(7'7)8+:+:+:+9+:+:+:+:+:+:+9+:+:+9+9+:+9+9+9+:+:+:)8&6,<2B-='6)8+:+:+:+:+:+:+:+:+9+9+:+:+:+:+:+:+:+:+9
2024-04-24 12:01:13 UTC	645	IN	Data Raw: cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 29 38 cb ff 3a 4a cf ff a0 aa e8 ff ed f0 fa ff fd fe fe ff ff ff ff ff fd fd fe ff e9 ec f9 ff 97 a1 e6 ff 35 44 ce ff 2a 38 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2b 39 cc ff 2a 39 cc ff 26 37 ca ff 25 37 ca ff 2a 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b Data Ascii: +9+9+9+9+9+9+9)8:J5D8+:+9+9+9+:+:+9+9+9+9+9+9+9+9+9+9+9+9+:+9+9+:+9+9+:+9+9+9+:+:+9+9+9+99&7%7*9+:+9+:+:+:+:+:+
2024-04-24 12:01:13 UTC	10216	IN	Data Raw: ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 29 37 cb ff 28 38 cb ff 33 43 ce ff 3b 4a d0 ff 31 41 cd ff 28 37 cb ff 29 38 cb ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 Data Ascii: +:+:+:+:+9+:+9+9+:+:+:+9+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+:+9+:+:+:+:+:+:+9+9)7(83C;J1A(7)8+9+:+9+9+:+:+:+:+:+:+:+9+:+:+:+:+9
2024-04-24 12:01:13 UTC	1277	IN	Data Raw: ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2a 38 cc ff 2c 3b cc ff 62 70 d9 ff e7 ea f9 ff fe fe ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e8 eb f9 ff 8b 96 e3 ff 2e 3d cc ff 28 37 cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a Data Ascii: +9+:+:+9+:+:+:+9+:+:+:+:+:+9+:+:+:+:+:+9+:+:+9+:+:+:+:+:+9+:+9+:+:+:+9+:*8,;bp.=(7+:+:+:+:+:+:+:+:+:+:+:+:
2024-04-24 12:01:13 UTC	1277	IN	Data Raw: 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 29 38 cb ff 2b 3b cc fc 48 59 d3 f1 30 40 cd fd 29 39 cb ff 2a 39 cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 3a cc ff 2b 3a cc ff 2b 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2a 39 cb ff 2b 3a cc ff 2b 3a cb ff 2b 3a cc ff 2b 3a cc ff 2b 3a cb ff 2a 39 cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc ff 2b 3a cc Data Ascii: +:+:+:+9+:+:+:+:+:+:+:+:+:+:+:+:+9+:+:+:+:+:+:+:+:+:+:+9+:+:+:+9+:+:+:)8+;HY0@)99+:+:+::+:+9+:+:+:+:+:+:9+:+:+:+:+:9+:+:+:+:

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49740	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:18 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 71 30 56 5a 31 6e 74 75 44 45 32 5a 62 42 41 32 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 38 64 32 62 63 36 33 63 30 35 36 36 32 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: q0VZ1ntuDE2ZbBA2.1Context: a68d2bc63c05662d
2024-04-24 12:01:18 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 12:01:18 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 71 30 56 5a 31 6e 74 75 44 45 32 5a 62 42 41 32 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 38 64 32 62 63 36 33 63 30 35 36 36 32 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 79 4b 34 4a 5a 4f 51 7a 4d 61 75 50 58 76 69 77 50 58 46 7a 6e 62 74 7a 36 4e 54 39 65 38 4e 31 50 74 72 58 4b 30 48 47 54 75 6a 77 4c 57 43 56 68 56 46 51 4e 44 62 66 6e 31 73 68 62 2b 6c 35 72 58 6c 73 67 68 54 4f 52 6a 67 4f 74 4b 32 6c 55 52 72 57 38 6f 71 6c 58 5a 58 66 71 37 6c 6e 46 63 37 70 6d 70 76 63 73 4e 59 58 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: q0VZ1ntuDE2ZbBA2.2Context: a68d2bc63c05662d<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcyK4JZOQzMauPXviwPXFznbtz6NT9e8N1PtrXK0HGTujwLWCVhVFQNDbfn1shb+l5rXlsghTORjgOtK2lURrW8oqlXZXfq7lnFc7pmpvcsNYX
2024-04-24 12:01:18 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 71 30 56 5a 31 6e 74 75 44 45 32 5a 62 42 41 32 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 38 64 32 62 63 36 33 63 30 35 36 36 32 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: q0VZ1ntuDE2ZbBA2.3Context: a68d2bc63c05662d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 12:01:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 12:01:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 53 54 68 71 69 59 76 65 77 55 53 5a 74 36 70 52 57 69 5a 55 63 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: SThqiYvewUSZt6pRWiZUcQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49742	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:19 UTC	1002	OUT	GET /aems/findaccount.do HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.0.1713960072.0.0.0
2024-04-24 12:01:19 UTC	469	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:01:19 GMT Expires: Tue, 23 Apr 2024 12:01:19 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Content-Type: text/html;charset=UTF-8 Content-Length: 6005 Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:19 UTC	924	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2, user-scalable=yes"> ... Google Ana
2024-04-24 12:01:19 UTC	5081	IN	Data Raw: 73 74 72 61 70 20 2d 2d 3e 20 20 20 20 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 69 6d 70 6c 65 74 72 61 64 65 2f 64 65 66 61 75 6c 74 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 41 72 61 76 6f 20 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 20 2d 2d 3e 09 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 69 6d 70 6c 65 74 72 61 64 65 2f 64 65 66 61 75 6c 74 2f 63 73 73 2f 75 6e 61 75 74 68 65 6e 74 69 63 61 74 65 64 2e 63 73 73 22 3e 09 0a 20 20 20 20 3c 21 2d 2d 20 46 6f 6e 74 73 20 69 63 6f 6e 73 2d 2d 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 Data Ascii: strap --> <link rel="stylesheet" href="/simpletrade/default/css/bootstrap.min.css"> ... Aravo Customization --><link rel="stylesheet" href="/simpletrade/default/css/unauthenticated.css"> ... Fonts icons--> <link rel="stylesheet" hre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49741	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:29 UTC	1002	OUT	GET /aems/findaccount.do HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960080.0.0.0
2024-04-24 12:01:29 UTC	469	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:01:29 GMT Expires: Tue, 23 Apr 2024 12:01:29 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Content-Type: text/html;charset=UTF-8 Content-Length: 6005 Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:29 UTC	6005	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2, user-scalable=yes"> ... Google Ana

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49753	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 70 78 6e 77 68 65 37 66 47 55 36 59 51 63 55 79 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 34 66 31 61 63 34 34 63 34 34 61 33 30 63 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: pxnwhe7fGU6YQcUy.1Context: 64f1ac44c44a30c2
2024-04-24 12:01:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 12:01:30 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 70 78 6e 77 68 65 37 66 47 55 36 59 51 63 55 79 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 34 66 31 61 63 34 34 63 34 34 61 33 30 63 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 79 4b 34 4a 5a 4f 51 7a 4d 61 75 50 58 76 69 77 50 58 46 7a 6e 62 74 7a 36 4e 54 39 65 38 4e 31 50 74 72 58 4b 30 48 47 54 75 6a 77 4c 57 43 56 68 56 46 51 4e 44 62 66 6e 31 73 68 62 2b 6c 35 72 58 6c 73 67 68 54 4f 52 6a 67 4f 74 4b 32 6c 55 52 72 57 38 6f 71 6c 58 5a 58 66 71 37 6c 6e 46 63 37 70 6d 70 76 63 73 4e 59 58 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: pxnwhe7fGU6YQcUy.2Context: 64f1ac44c44a30c2<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcyK4JZOQzMauPXviwPXFznbtz6NT9e8N1PtrXK0HGTujwLWCVhVFQNDbfn1shb+l5rXlsghTORjgOtK2lURrW8oqlXZXfq7lnFc7pmpvcsNYX
2024-04-24 12:01:30 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 70 78 6e 77 68 65 37 66 47 55 36 59 51 63 55 79 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 34 66 31 61 63 34 34 63 34 34 61 33 30 63 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: pxnwhe7fGU6YQcUy.3Context: 64f1ac44c44a30c2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 12:01:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 12:01:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 39 71 76 79 49 44 74 66 55 61 54 6a 70 43 46 43 70 44 68 49 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: q9qvyIDtfUaTjpCFCpDhIQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49750	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:39 UTC	1069	OUT	GET /aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960089.0.0.0
2024-04-24 12:01:39 UTC	469	IN	HTTP/1.1 302 Date: Wed, 24 Apr 2024 12:01:39 GMT Expires: Tue, 23 Apr 2024 12:01:39 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Location: /aems/login.do Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49756	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:39 UTC	996	OUT	GET /aems/login.do HTTP/1.1 Host: jll.aravo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960089.0.0.0
2024-04-24 12:01:39 UTC	911	IN	HTTP/1.1 200 Set-Cookie: XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; Path=/aems; SameSite=strict; Secure Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: X-Frame-Options: DENY X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:01:39 GMT Expires: Tue, 23 Apr 2024 12:01:39 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:39 UTC	4313	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 Data Ascii: 2000<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2, user-scalable=yes"> ... Goog
2024-04-24 12:01:39 UTC	4394	IN	Data Raw: 73 69 73 74 61 6e 63 65 20 6f 72 20 69 6e 71 75 69 72 65 73 2c 20 70 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 6c 61 6e 64 69 6e 67 20 70 61 67 65 20 6f 6e 20 41 72 61 76 6f 20 66 6f 72 20 73 75 70 70 6f 72 74 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 09 09 09 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 43 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 3e 0d 0a 09 09 09 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 20 63 6f 6c 2d 73 6d 2d 33 22 20 66 6f 72 3d 22 6a 5f 75 73 65 72 6e 61 6d 65 22 Data Ascii: sistance or inquires, please refer to the landing page on Aravo for support contact information.</span></span></p></div></div><div class="formContainer"><div class="form-group"><label class="control-label col-sm-3" for="j_username"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49761	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:49 UTC	1002	OUT	GET /aems/findaccount.do HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960100.0.0.0
2024-04-24 12:01:49 UTC	469	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:01:49 GMT Expires: Tue, 23 Apr 2024 12:01:49 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Content-Type: text/html;charset=UTF-8 Content-Length: 6005 Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:01:49 UTC	4755	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 41 6e 61 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2, user-scalable=yes"> ... Google Ana
2024-04-24 12:01:49 UTC	1250	IN	Data Raw: 0a 3c 21 2d 2d 20 74 68 65 72 65 20 69 73 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 20 2d 2d 3e 0a 09 3c 2f 64 69 76 3e 0a 09 09 3c 21 2d 2d 20 2a 20 2a 20 2a 20 2f 2e 63 75 73 74 6f 6d 69 7a 65 64 20 2a 20 2a 20 2a 20 2d 2d 3e 0a 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 73 69 6d 70 6c 65 74 72 61 64 65 2f 64 65 66 61 75 6c 74 2f 6a 73 2f 6a 71 42 6f 6f 74 73 74 72 61 70 56 61 6c 69 64 61 74 69 6f 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 0a 09 09 76 61 72 20 74 68 69 73 54 65 78 74 20 3d 20 22 22 3b 0a 09 0a 09 09 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 2f 2f 20 61 20 6c 69 6e 6b 20 6f 72 20 61 20 62 75 74 Data Ascii: ... there is customization --></div>... * * * /.customized * * * --><script src="/simpletrade/default/js/jqBootstrapValidation.js"></script><script>$(document).ready(function() {var thisText = "";$(function(){// a link or a but

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49763	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:51 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4f 50 34 41 45 7a 53 72 4c 30 61 4d 79 32 62 53 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 36 64 63 36 65 66 37 36 62 30 66 32 62 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: OP4AEzSrL0aMy2bS.1Context: c36dc6ef76b0f2b5
2024-04-24 12:01:51 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 12:01:51 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 4f 50 34 41 45 7a 53 72 4c 30 61 4d 79 32 62 53 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 36 64 63 36 65 66 37 36 62 30 66 32 62 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 79 4b 34 4a 5a 4f 51 7a 4d 61 75 50 58 76 69 77 50 58 46 7a 6e 62 74 7a 36 4e 54 39 65 38 4e 31 50 74 72 58 4b 30 48 47 54 75 6a 77 4c 57 43 56 68 56 46 51 4e 44 62 66 6e 31 73 68 62 2b 6c 35 72 58 6c 73 67 68 54 4f 52 6a 67 4f 74 4b 32 6c 55 52 72 57 38 6f 71 6c 58 5a 58 66 71 37 6c 6e 46 63 37 70 6d 70 76 63 73 4e 59 58 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: OP4AEzSrL0aMy2bS.2Context: c36dc6ef76b0f2b5<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcyK4JZOQzMauPXviwPXFznbtz6NT9e8N1PtrXK0HGTujwLWCVhVFQNDbfn1shb+l5rXlsghTORjgOtK2lURrW8oqlXZXfq7lnFc7pmpvcsNYX
2024-04-24 12:01:51 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4f 50 34 41 45 7a 53 72 4c 30 61 4d 79 32 62 53 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 36 64 63 36 65 66 37 36 62 30 66 32 62 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: OP4AEzSrL0aMy2bS.3Context: c36dc6ef76b0f2b5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 12:01:51 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 12:01:51 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 78 41 41 65 79 6b 6e 46 79 30 61 6f 2b 6d 7a 71 43 75 59 47 42 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: xAAeyknFy0ao+mzqCuYGBg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49760	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:59 UTC	1069	OUT	GET /aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960109.0.0.0
2024-04-24 12:01:59 UTC	469	IN	HTTP/1.1 302 Date: Wed, 24 Apr 2024 12:01:59 GMT Expires: Tue, 23 Apr 2024 12:01:59 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Location: /aems/login.do Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49767	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:01:59 UTC	996	OUT	GET /aems/login.do HTTP/1.1 Host: jll.aravo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960109.0.0.0
2024-04-24 12:02:00 UTC	911	IN	HTTP/1.1 200 Set-Cookie: XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; Path=/aems; SameSite=strict; Secure Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: X-Frame-Options: DENY X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:01:59 GMT Expires: Tue, 23 Apr 2024 12:01:59 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:02:00 UTC	4313	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 Data Ascii: 2000<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2, user-scalable=yes"> ... Goog
2024-04-24 12:02:00 UTC	4394	IN	Data Raw: 73 69 73 74 61 6e 63 65 20 6f 72 20 69 6e 71 75 69 72 65 73 2c 20 70 6c 65 61 73 65 20 72 65 66 65 72 20 74 6f 20 74 68 65 20 6c 61 6e 64 69 6e 67 20 70 61 67 65 20 6f 6e 20 41 72 61 76 6f 20 66 6f 72 20 73 75 70 70 6f 72 74 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 09 09 09 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 43 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 3e 0d 0a 09 09 09 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 20 63 6f 6c 2d 73 6d 2d 33 22 20 66 6f 72 3d 22 6a 5f 75 73 65 72 6e 61 6d 65 22 Data Ascii: sistance or inquires, please refer to the landing page on Aravo for support contact information.</span></span></p></div></div><div class="formContainer"><div class="form-group"><label class="control-label col-sm-3" for="j_username"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49774	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:02:11 UTC	1061	OUT	GET /aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv HTTP/1.1 Host: jll.aravo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960120.0.0.0
2024-04-24 12:02:12 UTC	469	IN	HTTP/1.1 302 Date: Wed, 24 Apr 2024 12:02:12 GMT Expires: Tue, 23 Apr 2024 12:02:12 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: origin-when-cross-origin Location: /aems/login.do Content-Type: text/html;charset=UTF-8 Content-Length: 0 Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49773	67.192.161.8	443	5356	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:02:12 UTC	988	OUT	GET /aems/login.do HTTP/1.1 Host: jll.aravo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960120.0.0.0
2024-04-24 12:02:12 UTC	911	IN	HTTP/1.1 200 Set-Cookie: XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; Path=/aems; SameSite=strict; Secure Content-Security-Policy: default-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; script-src https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; frame-src https: X-Frame-Options: DENY X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:02:12 GMT Expires: Tue, 23 Apr 2024 12:02:12 GMT Pragma: no-cache Cache-control: no-cache, no-store, must-revalidate X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close X-FRAME-OPTIONS: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding
2024-04-24 12:02:12 UTC	6867	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 21 2d 2d 20 47 6f 6f 67 Data Ascii: 2000<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2, user-scalable=yes"> ... Goog
2024-04-24 12:02:12 UTC	1840	IN	Data Raw: 3e 0a 09 3c 2f 64 69 76 3e 0a 09 09 3c 21 2d 2d 20 2a 20 2a 20 2a 20 2f 2e 70 61 6e 65 6c 2d 66 6f 6f 74 65 72 20 2a 20 2a 20 2a 20 2d 2d 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 66 6f 6f 74 65 72 3e 0a 3c 21 2d 2d 20 74 68 65 72 65 20 69 73 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 20 2d 2d 3e 0a 09 3c 21 2d 2d 20 63 75 73 74 6f 6d 20 66 6f 6f 74 65 72 20 63 6f 64 65 20 68 65 72 65 20 2d 2d 3e 0a 09 09 3c 21 2d 2d 20 2f 63 75 73 74 6f 6d 20 66 6f 6f 74 65 72 20 63 6f 64 65 20 2d 2d 3e 0a 09 3c 2f 66 6f 6f 74 65 72 3e 0a 0a 3c 21 2d 2d 20 74 68 65 72 65 20 69 73 20 63 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 20 2d 2d 3e 0a 09 3c 2f 64 69 76 3e 0a 09 09 3c 21 2d 2d 20 2a 20 2a 20 2a 20 2f 2e 63 75 73 74 6f 6d 69 7a 65 64 20 2a 20 2a 20 2a 20 2d 2d Data Ascii: ></div>... * * * /.panel-footer * * * --></div></div><footer>... there is customization -->... custom footer code here -->... /custom footer code --></footer>... there is customization --></div>... * * * /.customized * * * --

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49778	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:02:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 51 30 34 58 48 74 31 63 30 69 6c 37 37 52 77 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 33 62 32 65 36 65 30 31 65 37 34 66 37 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tQ04XHt1c0il77Rw.1Context: ad3b2e6e01e74f77
2024-04-24 12:02:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 12:02:19 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 74 51 30 34 58 48 74 31 63 30 69 6c 37 37 52 77 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 33 62 32 65 36 65 30 31 65 37 34 66 37 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 79 4b 34 4a 5a 4f 51 7a 4d 61 75 50 58 76 69 77 50 58 46 7a 6e 62 74 7a 36 4e 54 39 65 38 4e 31 50 74 72 58 4b 30 48 47 54 75 6a 77 4c 57 43 56 68 56 46 51 4e 44 62 66 6e 31 73 68 62 2b 6c 35 72 58 6c 73 67 68 54 4f 52 6a 67 4f 74 4b 32 6c 55 52 72 57 38 6f 71 6c 58 5a 58 66 71 37 6c 6e 46 63 37 70 6d 70 76 63 73 4e 59 58 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: tQ04XHt1c0il77Rw.2Context: ad3b2e6e01e74f77<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcyK4JZOQzMauPXviwPXFznbtz6NT9e8N1PtrXK0HGTujwLWCVhVFQNDbfn1shb+l5rXlsghTORjgOtK2lURrW8oqlXZXfq7lnFc7pmpvcsNYX
2024-04-24 12:02:19 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 51 30 34 58 48 74 31 63 30 69 6c 37 37 52 77 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 64 33 62 32 65 36 65 30 31 65 37 34 66 37 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: tQ04XHt1c0il77Rw.3Context: ad3b2e6e01e74f77<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 12:02:19 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 12:02:19 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 35 31 34 2b 57 6f 4a 61 6b 2b 79 43 50 46 39 61 41 73 61 5a 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: V514+WoJak+yCPF9aAsaZg.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4236, Parent PID: 5848

General

Target ID:	0
Start time:	14:00:58
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5356, Parent PID: 4236

General

Target ID:	2
Start time:	14:01:01
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2172,i,2557239446117328043,1594672359937540245,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4136, Parent PID: 5848

General

Target ID:	3
Start time:	14:01:05
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jll.aravo.com/aems/login.do"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="author".. found

Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found
Source: https://jll.aravo.com/aems/login.do	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246

Source: global traffic	HTTP traffic detected: GET /aems/login.do HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/css/bootstrap.min.css HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/css/unauthenticated.css HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/css/fontello/css/fontello.css HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/css/fontello/css/animation.css HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/css/font-awesome-4.6.3/css/font-awesome.min.css HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/js/jquery-3.6.0.min.js HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/js/fastclick.js HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/js/jqBootstrapValidation.js HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/images/aravo_logo-2x.png HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /simpletrade/default/images/aravo_logo-2x.png HTTP/1.1Host: jll.aravo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=4 HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jll.aravo.com/aems/login.doAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=4 HTTP/1.1Host: jll.aravo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1
Source: global traffic	HTTP traffic detected: GET /aems/findaccount.do HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.0.1713960072.0.0.0
Source: global traffic	HTTP traffic detected: GET /aems/findaccount.do HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960080.0.0.0
Source: global traffic	HTTP traffic detected: GET /aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960089.0.0.0
Source: global traffic	HTTP traffic detected: GET /aems/login.do HTTP/1.1Host: jll.aravo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960089.0.0.0
Source: global traffic	HTTP traffic detected: GET /aems/findaccount.do HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960100.0.0.0
Source: global traffic	HTTP traffic detected: GET /aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960109.0.0.0
Source: global traffic	HTTP traffic detected: GET /aems/login.do HTTP/1.1Host: jll.aravo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _gat=1; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960109.0.0.0
Source: global traffic	HTTP traffic detected: GET /aems/findpassword.do?btnCancel=true&cs=yks4Zxuaa-IhSYYKBL7klWVFg6lTUCzDQX3ET0rBrlc.arv HTTP/1.1Host: jll.aravo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960120.0.0.0
Source: global traffic	HTTP traffic detected: GET /aems/login.do HTTP/1.1Host: jll.aravo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6B59B293AE567F53E1A15B8AEBF0CBB5; XSRF-TOKEN=85c0a062f830ff9957076d69c7d97d5303072278abbd7245a64a581bfd624d53; b1pi=!GgImqbfHFWvnxL91OXIWsuaD7FD62Rb6Py95TdRcdY2xssBT58KCQK2UTUnTxbcEjVCds3ZslW+aFg==; _ga=GA1.2.1281521345.1713960070; _gid=GA1.2.1687171908.1713960070; _ga_NG3F9CG84V=GS1.2.1713960072.1.1.1713960120.0.0.0

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://jll.aravo.com/aems/login.do

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Connections

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

Windows Analysis Report
https://jll.aravo.com/aems/login.do