Edit tour

Windows Analysis Report
https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYT

Overview

General Information

Sample URL:	https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQz
Analysis ID:	1431761
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2216,i,2404487244690015783,12100135432252379263,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==	HTTP Parser: No favicon
Source: https://secured-login.net/pages/b05b184dfb782/[[URL]]	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291 HTTP/1.1Host: pppoauth.cert-sha256.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/b05b184dfb782/[[URL]] HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pppoauth.cert-sha256.com
Source: global traffic	DNS traffic detected: DNS query: secured-login.net
Source: global traffic	DNS traffic detected: DNS query: images.lex.doe.gov
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_48.2.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_48.2.dr	String found in binary or memory: http://blog.jquery.com/2012/08/09/jquery-1-8-released/
Source: chromecache_48.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_48.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_48.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_48.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_48.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/)
Source: chromecache_48.2.dr	String found in binary or memory: http://datatables.net).
Source: chromecache_48.2.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_48.2.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_48.2.dr	String found in binary or memory: http://datatables.net/manual/styling/bootstrap
Source: chromecache_48.2.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_48.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_48.2.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_48.2.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_48.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_48.2.dr	String found in binary or memory: http://flightschool.acylt.com/devnotes/caret-position-woes/
Source: chromecache_48.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_48.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_48.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_48.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_48.2.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_48.2.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_48.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_48.2.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_48.2.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_48.2.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_48.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_48.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_48.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_48.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_48.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_48.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_48.2.dr	String found in binary or memory: http://pdfmake.org
Source: chromecache_48.2.dr	String found in binary or memory: http://semver.org/
Source: chromecache_48.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_48.2.dr	String found in binary or memory: http://stackoverflow.com/a/21336448/937891
Source: chromecache_48.2.dr	String found in binary or memory: http://stackoverflow.com/a/26707753
Source: chromecache_48.2.dr	String found in binary or memory: http://stackoverflow.com/a/32954565/96342
Source: chromecache_48.2.dr	String found in binary or memory: http://stackoverflow.com/a/384380/937891
Source: chromecache_48.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_48.2.dr	String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: chromecache_48.2.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_48.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_48.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_48.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_48.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_48.2.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_48.2.dr	String found in binary or memory: http://www.datatables.net/extensions/select
Source: chromecache_48.2.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_48.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_48.2.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: chromecache_48.2.dr	String found in binary or memory: https://blog.alexmaccaw.com/css-transitions
Source: chromecache_48.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_48.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_48.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_48.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_48.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_48.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_48.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_48.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_48.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: chromecache_48.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: chromecache_48.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: chromecache_48.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: chromecache_48.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: chromecache_48.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_48.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_48.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_48.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_48.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_48.2.dr	String found in binary or memory: https://datatables.net/tn/11
Source: chromecache_48.2.dr	String found in binary or memory: https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/Worki
Source: chromecache_48.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_48.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: chromecache_48.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_48.2.dr	String found in binary or memory: https://developer.snapappointments.com/bootstrap-select)
Source: chromecache_48.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_48.2.dr	String found in binary or memory: https://fullcalendar.io/
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#affix
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#alerts
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#buttons
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#carousel
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#collapse
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#dropdowns
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#modals
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#popovers
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#scrollspy
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tabs
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tooltip
Source: chromecache_48.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#transitions
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/DoersGuild/jQuery.print/issues/18#issuecomment-96451589
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect)
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jdewit/bootstrap-timepicker/graphs/contributors
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color/
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.0/ui/core.js#L51
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/2.2.4/src/core.js#L448
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_47.2.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/rails/jquery-ujs
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE)
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/14093
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/20280
Source: chromecache_48.2.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_48.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_49.2.dr	String found in binary or memory: https://images.lex.doe.gov/rts/LogoEnergyPPPO.png
Source: chromecache_48.2.dr	String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: chromecache_48.2.dr	String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: chromecache_48.2.dr	String found in binary or memory: https://modernizr.com/)
Source: chromecache_48.2.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_48.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_52.2.dr	String found in binary or memory: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0U
Source: chromecache_48.2.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_48.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_48.2.dr	String found in binary or memory: https://www.chromestatus.com/features/5093566007214080
Source: chromecache_48.2.dr	String found in binary or memory: https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@18/23@10/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2216,i,2404487244690015783,12100135432252379263,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2216,i,2404487244690015783,12100135432252379263,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	0%	URL Reputation	safe
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	0%	URL Reputation	safe
http://flightschool.acylt.com/devnotes/caret-position-woes/	0%	URL Reputation	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
https://secured-login.net/assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css	0%	Avira URL Cloud	safe
https://secured-login.net/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js	0%	Avira URL Cloud	safe
https://secured-login.net/assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css	0%	Avira URL Cloud	safe
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	0%	Avira URL Cloud	safe
https://secured-login.net/favicon.ico	0%	Avira URL Cloud	safe
https://secured-login.net/assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css	3%	Virustotal		Browse
https://secured-login.net/assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css	3%	Virustotal		Browse
https://secured-login.net/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js	3%	Virustotal		Browse
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	0%	Virustotal		Browse
https://secured-login.net/favicon.ico	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
images.lex.doe.gov	74.143.212.194	true	false	high
www.google.com	108.177.122.147	true	false	high
secured-login.net	34.192.236.148	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
landing.training.knowbe4.com	3.223.165.17	true	false	high
pppoauth.cert-sha256.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://secured-login.net/assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==	false		unknown
https://secured-login.net/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://secured-login.net/assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://secured-login.net/favicon.ico	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://secured-login.net/pages/b05b184dfb782/[[URL]]	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_48.2.dr	false		high
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	chromecache_48.2.dr	false		high
http://api.jqueryui.com/slide-effect/	chromecache_48.2.dr	false		high
https://github.com/moment/moment/issues/1423	chromecache_48.2.dr	false		high
http://jqueryui.com/accordion/	chromecache_48.2.dr	false		high
http://api.jqueryui.com/data-selector/	chromecache_48.2.dr	false		high
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	chromecache_48.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://stackoverflow.com/a/32954565/96342	chromecache_48.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_48.2.dr	false		high
http://stackoverflow.com/a/26707753	chromecache_48.2.dr	false		high
https://github.com/jquery/jquery-color	chromecache_48.2.dr	false		high
http://jqueryui.com/position/	chromecache_48.2.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_48.2.dr	false		high
http://blog.jquery.com/2012/08/09/jquery-1-8-released/	chromecache_48.2.dr	false		high
http://api.jqueryui.com/focusable-selector/	chromecache_48.2.dr	false		high
http://pdfmake.org	chromecache_48.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_48.2.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_48.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_48.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_48.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_48.2.dr	false		high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	chromecache_47.2.dr	false		high
http://api.jqueryui.com/button/	chromecache_48.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_48.2.dr	false		high
https://blog.alexmaccaw.com/css-transitions	chromecache_48.2.dr	false		high
http://www.datatables.net	chromecache_48.2.dr	false		high
https://github.com/bassjobsen/Bootstrap-3-Typeahead	chromecache_48.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#transitions	chromecache_48.2.dr	false		high
http://api.jqueryui.com/size-effect/	chromecache_48.2.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	chromecache_48.2.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_48.2.dr	false		high
http://api.jqueryui.com/uniqueId/	chromecache_48.2.dr	false		high
http://creativecommons.org/licenses/by/3.0/)	chromecache_48.2.dr	false		high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_48.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://api.jqueryui.com/checkboxradio/	chromecache_48.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_48.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tooltip	chromecache_48.2.dr	false		high
https://github.com/twbs/bootstrap/issues/20280	chromecache_48.2.dr	false		high
http://jqueryui.com/slider/	chromecache_48.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#modals	chromecache_48.2.dr	false		high
http://api.jqueryui.com/disableSelection/	chromecache_48.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_48.2.dr	false		high
http://jqueryui.com/controlgroup/	chromecache_48.2.dr	false		high
https://stackoverflow.com/q/181348	chromecache_48.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#collapse	chromecache_48.2.dr	false		high
http://www.macromedia.com/go/getflashplayer	chromecache_48.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#scrollspy	chromecache_48.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_48.2.dr	false		high
http://flightschool.acylt.com/devnotes/caret-position-woes/	chromecache_48.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/transfer-effect/	chromecache_48.2.dr	false		high
https://github.com/rails/jquery-ujs	chromecache_48.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_48.2.dr	false		high
http://www.robertpenner.com/easing)	chromecache_48.2.dr	false	URL Reputation: safe	unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_48.2.dr	false		high
http://jqueryui.com/datepicker/	chromecache_48.2.dr	false		high
Http://bugs.jqueryui.com/ticket/9446	chromecache_48.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_48.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_48.2.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_48.2.dr	false		high
http://datatables.net/license	chromecache_48.2.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_48.2.dr	false		high
https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe	chromecache_48.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#buttons	chromecache_48.2.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_48.2.dr	false		high
http://api.jqueryui.com/menu/	chromecache_48.2.dr	false		high
http://jqueryui.com/checkboxradio/	chromecache_48.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#alerts	chromecache_48.2.dr	false		high
http://api.jqueryui.com/controlgroup/	chromecache_48.2.dr	false		high
http://jqueryui.com/widget/	chromecache_48.2.dr	false		high
http://momentjs.com/guides/#/warnings/define-locale/	chromecache_48.2.dr	false		high
http://api.jqueryui.com/category/effects-core/	chromecache_48.2.dr	false		high
http://api.jqueryui.com/dialog/	chromecache_48.2.dr	false		high
http://jqueryui.com/tooltip/	chromecache_48.2.dr	false		high
http://api.jqueryui.com/selectmenu/	chromecache_48.2.dr	false		high
http://api.jqueryui.com/shake-effect/	chromecache_48.2.dr	false		high
https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js	chromecache_48.2.dr	false		high
http://api.jqueryui.com/jQuery.ui.keyCode/	chromecache_48.2.dr	false		high
https://getbootstrap.com/)	chromecache_48.2.dr	false		high
https://modernizr.com/)	chromecache_48.2.dr	false		high
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_48.2.dr	false		high
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_48.2.dr	false		high
http://api.jqueryui.com/bounce-effect/	chromecache_48.2.dr	false		high
http://api.jquery.com/jQuery.ajax/)	chromecache_48.2.dr	false		high
https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22	chromecache_48.2.dr	false		high
http://bugs.jquery.com/ticket/13378	chromecache_48.2.dr	false		high
http://jsperf.com/thor-indexof-vs-for/5	chromecache_48.2.dr	false		high
https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714	chromecache_48.2.dr	false		high
https://github.com/jdewit/bootstrap-timepicker/graphs/contributors	chromecache_48.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tabs	chromecache_48.2.dr	false		high
https://github.com/uxsolutions/bootstrap-datepicker)	chromecache_48.2.dr	false		high
https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js	chromecache_48.2.dr	false		high
http://jqueryui.com/dialog/	chromecache_48.2.dr	false		high
http://api.jqueryui.com/scale-effect/	chromecache_48.2.dr	false		high
http://jqueryui.com/selectable/	chromecache_48.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.223.165.17	landing.training.knowbe4.com	United States	14618	AMAZON-AESUS	false
34.192.236.148	secured-login.net	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
74.143.212.194	images.lex.doe.gov	United States	10796	TWC-10796-MIDWESTUS	false
108.177.122.147	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431761
Start date and time:	2024-04-25 18:30:49 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@18/23@10/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://secured-login.net/pages/b05b184dfb782/[[URL]]

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 172.253.124.84, 64.233.177.102, 64.233.177.138, 64.233.177.100, 64.233.177.113, 64.233.177.101, 64.233.177.139, 34.104.35.123, 40.68.123.157, 23.40.205.19, 23.40.205.35, 23.40.205.73, 192.229.211.108, 20.242.39.171, 52.165.164.15, 108.177.122.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (18403), with no line terminators
Category:	downloaded
Size (bytes):	18403
Entropy (8bit):	5.20300535208102
Encrypted:	false
SSDEEP:	384:pJBOhyHGa9lEowk/KoctZWXvguZ24kopI/JZVtVnA:pJ/ma96oJKkXfw4kop/
MD5:	BF36C4FB9C28804F529E03FCB3F0A80F
SHA1:	7346D38A76DD26BC65A08EC76722550630294919
SHA-256:	84A3D35500BED24EB5A54D480CEEC5A1E3F096F2B62EB312B1931880F5D5A4AC
SHA-512:	35765F98D4A3351B63CD31B7B731B48D1B6649BF1DF5C341D2C440C97E875366A2BD46E67941565CFCDEAF5572E97249C4B84B6339B3E09383A30B70F4D65251
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/packs/js/vendor-954761ad0dceb106b971.js
Preview:	!function(t){var n={};function e(r){var o;return(n[r]\|\|(o=n[r]={i:r,l:!1,exports:{}},t[r].call(o.exports,o,o.exports,e),o.l=!0,o)).exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var o in t)e.d(r,o,function(n){return t[n]}.bind(null,o));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="/packs/",e(e.s=585)}({10:function(t,n){t=t.exports="undefined"!=typeof window&&window.Math==Math?window:"undefined"!=t

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	51364
Entropy (8bit):	4.630626843010533
Encrypted:	false
SSDEEP:	1536:TRCJJ/KpVsnpxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277ts:TS/FpzarzCT71Pts
MD5:	BF2F96E6233DE3D8C0346085AC28248A
SHA1:	4DB267704D7E3FB2489CF96E82862A2245CD9311
SHA-256:	EE94DDA0AF1FC5C5045741B39E54136015365EEDCA34095F1D3C666998BB442D
SHA-512:	D4DB54380D135D9F5AAA03727CC88037B014C1057A3061C3D173EB8D4CEC7E4A2F71CFCA1478E8E15C093D510EEE80668C2038691EAEB21958942089F0DD9C6C
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js
Preview:	/!. Modernizr v2.7.1. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.7.1',..

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3205083
Entropy (8bit):	5.067660187114562
Encrypted:	false
SSDEEP:	49152:Jw4mDiTFyA6TVfMAeolyHCcmMy/W/EEPbhhDdR30mpz+acKWheTXOz2usGgNaE0J:q
MD5:	F1232635B40CBFAE664CA09BA03FC9C3
SHA1:	C70240DA2684DB0184AB4C123B7F686035A8FB93
SHA-256:	55644838E3E24BB2ED95B03654F6BC0AB4B5725F73BD9E6656C50AB8441194FF
SHA-512:	FB466E90765EB7D07AD12D8FFF42926F9C86CE41EDFB36254B1EE180221B5429624B711389F0143AA0716DEB113DB1BE9954E9A4FAF49151A6C19867512BB064
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js
Preview:	/!. jQuery JavaScript Library v1.12.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (694)
Category:	downloaded
Size (bytes):	6293
Entropy (8bit):	5.298185099402256
Encrypted:	false
SSDEEP:	96:O4/Sac7CujsCHaPmV/bOd5MXZMC6rWNt5oALLpDV8pngs/UHK49nKxTvXx1nTsev:OpakjaMXZMCsWNHoApCgs/37JPx14Q
MD5:	D1AC32277B5F7963450009BDD6F0C466
SHA1:	1CDFC4AEC49066166436CBFC1A891ADA0BE6C24A
SHA-256:	37F58993FA1D5E9F0953A6235DF87D001A91F69D542AED1368117C9F67F61701
SHA-512:	FE4242897C68B8F81D853DCF15A237DC043068290075FBA222227FC3F0C4B0AF88C33FF5CC3733F1C11412A9354690146DC2D6A578959274B75BAE9A2371FCE6
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js"></script>. <script src="/packs/js/vendor-954761ad0dceb106b971.js"></script>. <script src="/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js"></script>.. <script>.//<![CDATA[.window.gon={};gon.locale="en";.// .</script>.. <link rel="stylesheet" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c20

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3055
Entropy (8bit):	4.778978443398334
Encrypted:	false
SSDEEP:	48:xpol80JeyJOXF7nF+1I2LiAn5jDadn9RWSe10U5F2klF+ToZYUxHIUY7A8XFFG9V:Li80JeaOV7F+qyZnpqn9ejFTFUdMIFEv
MD5:	D9BFBA2D8E707985140CB26F037833B8
SHA1:	679D1BF8930BF70C01A24C8F98EC83658D004FAE
SHA-256:	15C00ABDC9E9462D2538982039515C2EE3A056DFAEF70B944C0B234C1DDA1270
SHA-512:	D947ED1D574EA6BDD19D67786803E602CD3292E425E767A7259BEBF0833742C1E5EB51B534392A051F1F642FFAFA1906B1EB865A703E218FDCCB3ACE25896EDE
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css
Preview:	/* line 1, app/assets/stylesheets/sei-tooltip.scss /..tooltip {. position: absolute;. z-index: 1070;. display: block;. font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;. font-size: 12px;. font-style: normal;. font-weight: normal;. line-height: 1.42857143;. text-align: left;. text-align: start;. text-decoration: none;. text-shadow: none;. text-transform: none;. letter-spacing: normal;. word-break: normal;. word-spacing: normal;. word-wrap: normal;. white-space: normal;. filter: alpha(opacity=0);. opacity: 0;. line-break: auto;.}../ line 25, app/assets/stylesheets/sei-tooltip.scss /..tooltip.in {. filter: alpha(opacity=90);. opacity: .9;.}../ line 29, app/assets/stylesheets/sei-tooltip.scss /..tooltip.top {. padding: 5px 0;. margin-top: -3px;.}../ line 33, app/assets/stylesheets/sei-tooltip.scss /..tooltip.right {. padding: 0 5px;. margin-left: 3px;.}../ line 37, app/assets/stylesheets/sei-tooltip.scss */..tooltip.bottom {. padding: 5px 0;.

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3168
Entropy (8bit):	7.704911325185365
Encrypted:	false
SSDEEP:	48:37TcgUFv95NwPpK+adjaoVaqzGfYdIO+bExaLM2uO+xVwvpoP:ftUFvdy8dXVaGNdIb1Lz8PwvpY
MD5:	A907E6E737788176B026FA71DFE8AFFE
SHA1:	6844236F638CEDCD652EB0A805476A1A13376CF5
SHA-256:	FC5E7621BA0E98C5C6728E3B2BDF802311C0A0953A05E60A7551CB0C7BED00A9
SHA-512:	3A17E66931A15B5C6553DAE241C5A7BB40240699F0608F92ED940CB203CBEA3031CB0FAC23F9C962F50D573F56DB27A3369F1A38ED1AEA0168D7E707803CA27A
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png
Preview:	.PNG........IHDR.............>U....'IDATx..].\...e.!.H..B/J."""R..R....E)"../..".H..3s......&.O....d.QJ.L......P.m.U..u.Q..$.....}.5..M.....{.y.!A...\|.\|...3{.-M....m..~~....0.a...0..`...0........C...!`...0.a...0..<.z......w.tt<X.f..f.O.f./.(QK&s.t.{..z+.T..J..r.....3.....<r..../..Z.}.`..^.gGF6....p%.y^.,.R.....dr.c6/....w_[^........#G.j.7x...?.N.l..k.}...0< a..'.M...XO&g.....to......B..q~.......{....:...^H*QT..m..x.'..K}}.eu.&a........a..{...o..8.".-`Yi.p..zs........l........X-..tt<..=N&...H....&^...eE^M.9...U..gd..D;....gw.xL{.E.1..}}.+Q..U.......x.rO....V.8.,.n.p{...+............m...V.8.\|~``.\.........[.......>s...r......v$.+ctq...B{.A....L...j..T..K...b.V.y.M.Z....7T..8...e-.>...u...&`)..\|...... .....2...d....=:.N.~.....g%..x..5...7..-.l.e.........Y.u..=..l-...s.&.......r.vx.....{..e....).<1S(.\{>j.....+5.....kO...\|"Q-.r.k.I..........]i..!...W..._...=7[.[uo....sk....t[..B.a....\...X......7..\.96...F..]..]...M{.6..!..lv...V..C..p5..q.f

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (408)
Category:	downloaded
Size (bytes):	462
Entropy (8bit):	5.798952548949473
Encrypted:	false
SSDEEP:	12:3R+xnhMpZ35VXM0E59AImWO+y+4NQTWlY4AEdeIQL:3EhMb35Vs94WfyNqyYNEkj
MD5:	595A7AA85948F0FD8582EB0C20F032F0
SHA1:	5B2F6D78C3C17D4F009B72DFC81234D6EB252D7E
SHA-256:	AA5435FA4DD3D36F2C3523CBEE3268EEC096E84627C37B033410F19C9C509070
SHA-512:	E2D8E5CE2C41CB48BD1F6EB0BDAA51BF5776FC82DE8C400C35BA36A870055F56BE308DDF59251B3C14FBA7238ABED8D3701FFE079EC25C7324E9A3D9B798C1D4
Malicious:	false
Reputation:	low
URL:	https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291
Preview:	<html>. <head>. <script>window.location.href = 'https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==';</script>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	485
Entropy (8bit):	5.346925395723081
Encrypted:	false
SSDEEP:	12:BMQtJOo9arYffNJWqFuPhViHHr2WTotMTRLRMA4AHWqFuPeIQL:WCqs9gqF2Vo5DV9PV2qFVj
MD5:	2C42775B2A328C445B7122B571378437
SHA1:	1C0EFD0B31BC40AA0BCF66EA226A708E1DF98B70
SHA-256:	01A432B43B929122A2C355002BAF21A439B54020A72BF041B481053E3AF0138B
SHA-512:	83C8DE2D7061EF37140D671A32082494CDC28808B93E97350C0D0A5BAC9479F21AA95D1BFE26CAAD5A31BA68CAB4CC598F1F7924EBC1F27BD8CBCE4A96860704
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/pages/b05b184dfb782/[[URL]]
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>.<head>..<meta http-equiv="content-type" content="text/html; charset=UTF-8" />..<title>The page you were looking for doesn't exist (404)</title>..<style type="text/css">...body { background-color: #fff; font-family: Helvetica, sans-serif; }...h1 { margin: 10px 0; }...img { border: 0; }..</style>.</head>..<body>. <h1>The page you were looking for doesn't exist.</h1>.</body>.</html>.

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3168
Entropy (8bit):	7.704911325185365
Encrypted:	false
SSDEEP:	48:37TcgUFv95NwPpK+adjaoVaqzGfYdIO+bExaLM2uO+xVwvpoP:ftUFvdy8dXVaGNdIb1Lz8PwvpY
MD5:	A907E6E737788176B026FA71DFE8AFFE
SHA1:	6844236F638CEDCD652EB0A805476A1A13376CF5
SHA-256:	FC5E7621BA0E98C5C6728E3B2BDF802311C0A0953A05E60A7551CB0C7BED00A9
SHA-512:	3A17E66931A15B5C6553DAE241C5A7BB40240699F0608F92ED940CB203CBEA3031CB0FAC23F9C962F50D573F56DB27A3369F1A38ED1AEA0168D7E707803CA27A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>U....'IDATx..].\...e.!.H..B/J."""R..R....E)"../..".H..3s......&.O....d.QJ.L......P.m.U..u.Q..$.....}.5..M.....{.y.!A...\|.\|...3{.-M....m..~~....0.a...0..`...0........C...!`...0.a...0..<.z......w.tt<X.f..f.O.f./.(QK&s.t.{..z+.T..J..r.....3.....<r..../..Z.}.`..^.gGF6....p%.y^.,.R.....dr.c6/....w_[^........#G.j.7x...?.N.l..k.}...0< a..'.M...XO&g.....to......B..q~.......{....:...^H*QT..m..x.'..K}}.eu.&a........a..{...o..8.".-`Yi.p..zs........l........X-..tt<..=N&...H....&^...eE^M.9...U..gd..D;....gw.xL{.E.1..}}.+Q..U.......x.rO....V.8.,.n.p{...+............m...V.8.\|~``.\.........[.......>s...r......v$.+ctq...B{.A....L...j..T..K...b.V.y.M.Z....7T..8...e-.>...u...&`)..\|...... .....2...d....=:.N.~.....g%..x..5...7..-.l.e.........Y.u..=..l-...s.&.......r.vx.....{..e....).<1S(.\{>j.....+5.....kO...\|"Q-.r.k.I..........]i..!...W..._...=7[.[uo....sk....t[..B.a....\...X......7..\.96...F..]..]...M{.6..!..lv...V..C..p5..q.f

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1083
Entropy (8bit):	4.968221549674927
Encrypted:	false
SSDEEP:	24:34PtM4L8uij5HgYIzM0JeuLa4Kx4BEAtmH4Jz4d3RYv:oPxs9cM0Jeu1dGs6JRYv
MD5:	D419D0A3553E06FF5A25865A4AF122BD
SHA1:	2121E97CBC3C7738232A392FDE15B5F3C000110E
SHA-256:	24152D098D5744697D79F0A2A169038A204EB8C53A3F6E23B227B178712B53C1
SHA-512:	0FF50023CE7D2CD675079E615F8329043EF434A9650DC9BD31E2377F800254ECE402020253B87F78C73DFCF2581B4846CF1B706D72C1907E7D797CB09CC64FB1
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css
Preview:	/* line 2, app/assets/stylesheets/sei-modal.scss /..modal-dialog {. width: 900px;. margin: 30px auto;. min-height: 300px;.}../ line 8, app/assets/stylesheets/sei-modal.scss /..modal-content {. position: relative;. min-height: 300px;. background-color: #fff;. border: 1px solid #999;. border: 1px solid rgba(0, 0, 0, 0.2);. border-radius: 6px;. box-shadow: 0 3px 9px rgba(0, 0, 0, 0.5);. background-clip: padding-box;. outline: 0;. color: #222;. text-align: left;. font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;. font-size: 14px;.}../ line 25, app/assets/stylesheets/sei-modal.scss /..modal-wide .modal-body {. overflow-y: auto;.}../ line 28, app/assets/stylesheets/sei-modal.scss /..modal-header {. padding: 15px;. border-bottom: 1px solid #e5e5e5;. min-height: 16.42857143px;. line-height: 1.42857143;.}../ line 35, app/assets/stylesheets/sei-modal.scss /..modal-body {. position: relative;. padding: 0 15px 0 15px;. overflow: scroll;.}../ line 40, ap

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1768
Entropy (8bit):	5.021958836588499
Encrypted:	false
SSDEEP:	24:34v4Ws3XF2He4K4CP3MVSsY/GUQ4ssuQu+Vo2HphZ4pul4Lt4Fkcyo4FL43C:ogJXQ1pCfgCpKQus2pueLGzy/C3C
MD5:	22240D6A1F2F339EA0D69B2C411C0031
SHA1:	2E5F1A24915273AB55821BF47ADEE1CC80F04F36
SHA-256:	AA429A1409118C19231CD62FEBF9049A30F5C8B60BF9D18CA5CF4FB0E0C2BE51
SHA-512:	9EEC43304BA26B597F2E1E6DFA32B8383972622D191F8DAAC969BA635A6A49947C9CF8D4872E161B2436FEC1127C949A2E1DF803EF574BDC9AB4A57DB568E494
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.css
Preview:	/* line 2, app/assets/stylesheets/sei-flag.scss /.x-sei.sei-flag {. border-bottom: 2px solid tomato;. padding-left: 3px;.}../ line 6, app/assets/stylesheets/sei-flag.scss /.x-sei.sei-flag::before {. content: ' ';. display: inline-block;. background: url(/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png) no-repeat;. background-size: contain;. height: 12px;. width: 12px;. margin: 0 .1rem;.}../ line 16, app/assets/stylesheets/sei-flag.scss /.x-sei.sei-flag[generic='true'] {. display: block;. border-bottom: 0px;.}../ line 21, app/assets/stylesheets/sei-flag.scss /.x-sei.sei-flag[generic='true']::after {. font-family: "Courier New", Courier, monospace;. line-height: 1.8;. color: #b65555;. font-weight: bold;. content: attr(data-original-title);.}../ line 29, app/assets/stylesheets/sei-flag.scss */.x-sei.sei-flag[generic='true']::before {. content: ' ';. display: inline-block;. background: url(/assets/dark-flag-2846d82c511a5e9eac3

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.754611179426391
Encrypted:	false
SSDEEP:	24:y40r8CQo40agx40mC400XLaR404hZYmx40vGk40vG/I40vGhH40VhZ40UrCmn:xdDgCFEiBZgnTOHTn
MD5:	15E89F9684B18EC43EE51F8D62A787C3
SHA1:	9CBAAACEAE96845ECD3497F41EE3B02588ABEC11
SHA-256:	16F13E16A7EF02FB6F94250AA1931DED83DBEE5D9FAD278E33DD5792D085194F
SHA-512:	79E0110A045F28437D192290AC9789270CB0D4E676A985564746DB439992D867BA89639D7738E2A7F7D83BBF37D9A02CAA2AE1DC4E0EE2519797E5840A47FABE
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css
Preview:	/* line 1, app/assets/stylesheets/landing-watermark.scss /..watermark {. -webkit-writing-mode: vertical-rl;. -ms-writing-mode: tb-rl;. writing-mode: vertical-rl;. text-orientation: sideways;.}../ line 4, app/assets/stylesheets/landing-watermark.scss /..watermark.left {. left: 0;.}../ line 7, app/assets/stylesheets/landing-watermark.scss /..watermark.right {. right: 0;.}../ line 10, app/assets/stylesheets/landing-watermark.scss /..watermark.top {. text-align: center;. -webkit-writing-mode: horizontal-tb;. -ms-writing-mode: lr-tb;. writing-mode: horizontal-tb;. top: -38px;.}../ line 15, app/assets/stylesheets/landing-watermark.scss /..watermark h1 {. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-size: 15px;. color: #fdfdfa;. font-weight: bold;.}../ line 24, app/assets/stylesheets/landing-watermark.scss /.#template_sei .watermark.left {. margin-left: -10px;.}../ li

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 18:31:31.727416039 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 25, 2024 18:31:32.789951086 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 25, 2024 18:31:39.272186995 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.272226095 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.272289991 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.272607088 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.272645950 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.272789955 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.273636103 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.273643017 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.274024010 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.274029970 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.657154083 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.657454967 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.657484055 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.657902956 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.657965899 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.658579111 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.658623934 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.659430027 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.659529924 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.659607887 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.659733057 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.659753084 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.659877062 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.659890890 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.660279036 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.660346031 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.661278963 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.661330938 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.661927938 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.662008047 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.713979959 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.713982105 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:39.713988066 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:39.760926008 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:40.012617111 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:40.012717962 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:40.012773991 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:40.014743090 CEST	49735	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:40.014761925 CEST	443	49735	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:40.178419113 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.178448915 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.178505898 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.178775072 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.178783894 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.179269075 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.179321051 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.179382086 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.179634094 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.179652929 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.560844898 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.560847044 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.561186075 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.561227083 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.561414003 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.561424971 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.562127113 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.562203884 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.562378883 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.562432051 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.563344955 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.563406944 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.563855886 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.563874006 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.564145088 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.564193964 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.609250069 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.609261036 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.609416962 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.655040026 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.922184944 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.922207117 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.922287941 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.922420979 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.922483921 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.922552109 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.922569990 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.922595978 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.922645092 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.937608957 CEST	49738	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.937628031 CEST	443	49738	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.972855091 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.973525047 CEST	49741	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.973602057 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.973697901 CEST	49741	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.974312067 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.974364042 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.974427938 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.974689960 CEST	49741	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.974724054 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.974895000 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.974909067 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.975455046 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.975542068 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.975622892 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.976016998 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.976037979 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.976155043 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.976196051 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.976228952 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.976403952 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.976425886 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.977807999 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.977816105 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:40.977880001 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.978149891 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:40.978159904 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.016123056 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.147547960 CEST	49746	443	192.168.2.4	74.143.212.194
Apr 25, 2024 18:31:41.147650957 CEST	443	49746	74.143.212.194	192.168.2.4
Apr 25, 2024 18:31:41.147730112 CEST	49746	443	192.168.2.4	74.143.212.194
Apr 25, 2024 18:31:41.149323940 CEST	49746	443	192.168.2.4	74.143.212.194
Apr 25, 2024 18:31:41.149359941 CEST	443	49746	74.143.212.194	192.168.2.4
Apr 25, 2024 18:31:41.226500988 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.226521969 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.227175951 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.227421999 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.227452993 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.227691889 CEST	49741	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.227722883 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.227834940 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.228130102 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.228162050 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.228457928 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.230005980 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.230047941 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.231072903 CEST	49741	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.231168985 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.231709957 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.231729984 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.232346058 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.232355118 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.232633114 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.232714891 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.232805014 CEST	49741	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.232851982 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.233374119 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.233432055 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.233673096 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.233716011 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.233746052 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.233783007 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.234373093 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.234551907 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.235167027 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.235174894 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.235348940 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.235399961 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.235482931 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.235500097 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.236413002 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.236591101 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.237050056 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.237073898 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.270340919 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.270366907 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.270411968 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.270422935 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.270435095 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.270478010 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.273720980 CEST	49737	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.273735046 CEST	443	49737	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.274396896 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.274481058 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.274555922 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.276155949 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.276194096 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.277636051 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.277674913 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.290714979 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.290719986 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.291032076 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.480876923 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.480966091 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.481026888 CEST	49741	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.482521057 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.482539892 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.482592106 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.482597113 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.482609987 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.482626915 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.482637882 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.482672930 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.482686996 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.482713938 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.488392115 CEST	49741	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.488425016 CEST	443	49741	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.490330935 CEST	49742	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.490345001 CEST	443	49742	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.491372108 CEST	49745	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.491377115 CEST	443	49745	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.524396896 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.526375055 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.526432991 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.526793003 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.527280092 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.527348995 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.527534962 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.572113037 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600168943 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600231886 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600253105 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600290060 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.600317001 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600353003 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.600373030 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600395918 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600425959 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.600425959 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.600430012 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600460052 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600480080 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.600492001 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600518942 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.600539923 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600564003 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.600570917 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.600640059 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.600655079 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604578018 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604640961 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604660034 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604681015 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604698896 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.604715109 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604746103 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.604758024 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604777098 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604829073 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.604829073 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.604842901 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604892015 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.604935884 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.604948044 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.605036020 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.605092049 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.614531994 CEST	49744	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.614559889 CEST	443	49744	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.648049116 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.648076057 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.696576118 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.723112106 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.723134995 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.723176003 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.723186016 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.723196030 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.723229885 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.723231077 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.723253012 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.723309994 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.723309994 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.723643064 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.723686934 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.723712921 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.723735094 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.723762035 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.723795891 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.724299908 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.724374056 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.724395990 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.724459887 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.845679045 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.845729113 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.845810890 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.845829010 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.845863104 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.845884085 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.846076965 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.846122026 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.846151114 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.846163988 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.846190929 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.846544981 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.846609116 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.846621990 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.846637011 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.846673965 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.846697092 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.847073078 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.847116947 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.847162008 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.847174883 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.847202063 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.847228050 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.847560883 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.847604036 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.847645998 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.847660065 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.847687960 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.848077059 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.848211050 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.848265886 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.848280907 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.848294973 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.848326921 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.848346949 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.855767965 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.897329092 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.897356987 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.897371054 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.897418022 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.897435904 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.897491932 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.897943974 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.897959948 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.898005009 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.898010015 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.948664904 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.968591928 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.968657017 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.968682051 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.968702078 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.968759060 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.968759060 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.969322920 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.969367981 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.969400883 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.969413996 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.969444990 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.969475031 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.969938040 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.969983101 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.970021009 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.970040083 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.970081091 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.970236063 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.970593929 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.970634937 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.970681906 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.970700979 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.970727921 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.970746040 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.971100092 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.971143007 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.971179008 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.971198082 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.971225023 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.971271992 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.971725941 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.971782923 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.971791983 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.971812010 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.971851110 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.971851110 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.972367048 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.972409010 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.972446918 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.972460032 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.972487926 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.972507000 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.972853899 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.972893953 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.972923994 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.972935915 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.972963095 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.972984076 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.973359108 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.973403931 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.973428965 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.973440886 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.973467112 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.973625898 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.973764896 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.973804951 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.973833084 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.973845959 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.973872900 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.973898888 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.974271059 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.974312067 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.974335909 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.974349022 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.974386930 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.974406958 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.974683046 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.974724054 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.974756002 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.974767923 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.974797010 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.975106955 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.975250006 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.975294113 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.975327969 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.975347042 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:41.975372076 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:41.976352930 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.020409107 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.020435095 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.020473957 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.020483017 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.020493031 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.020515919 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.020530939 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.020535946 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.020581961 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.020658970 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.020812988 CEST	49747	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.020833015 CEST	443	49747	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.092184067 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.092233896 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.092267990 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.092286110 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.092314959 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.092338085 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.092799902 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.092842102 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.092864990 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.092876911 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.092906952 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.092926025 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.093467951 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.093508959 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.093542099 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.093554974 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.093580008 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.093600035 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.094147921 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.094191074 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.094230890 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.094248056 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.094273090 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.094387054 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.094937086 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.094980001 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.094997883 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.095010042 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.095036983 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.095057964 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.095725060 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.095766068 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.095801115 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.095812082 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.095839977 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.095870018 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.096374989 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.096416950 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.096441984 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.096455097 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.096482038 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.096523046 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.097115040 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.097155094 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.097187042 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.097198963 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.097228050 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.097249031 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.098114967 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.098155975 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.098190069 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.098217010 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.098246098 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.098267078 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.098704100 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.098745108 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.098768950 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.098782063 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.098809958 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.098828077 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.099261045 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.099303007 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.099328995 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.099359989 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.099386930 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.099435091 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.099860907 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.099901915 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.099934101 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.099946976 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.099989891 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.100013971 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.100433111 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.100474119 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.100498915 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.100517035 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.100539923 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.100769997 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.101027966 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.101067066 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.101114035 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.101114035 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.101130009 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.101213932 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.101622105 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.101663113 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.101686954 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.101700068 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.101727009 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.101747036 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.102142096 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.102185011 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.102219105 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.102236032 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.102277040 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.102469921 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.102771044 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.102809906 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.102832079 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.102844000 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.102871895 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.102891922 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.103621006 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.103662014 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.103694916 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.103707075 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.103734016 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.103754997 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.104165077 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.104206085 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.104235888 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.104248047 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.104273081 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.104290962 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.104818106 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.104859114 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.104907036 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.104923964 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.104949951 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.105063915 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.105402946 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.105447054 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.105470896 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.105488062 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.105511904 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.105511904 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.105870962 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.105971098 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.106020927 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.106050014 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.106061935 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.106092930 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.106112957 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.106477976 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.106492996 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.106555939 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.106570959 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.106631041 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.107004881 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.107021093 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.107074976 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.107089043 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.107140064 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.107561111 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.107575893 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.107637882 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.107651949 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.107728958 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.216353893 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.216407061 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.216443062 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.216476917 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.216506958 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.216556072 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.216936111 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.216976881 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.217000008 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.217014074 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.217041969 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.217061996 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.217597961 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.217641115 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.217688084 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.217701912 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.217726946 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.217747927 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.218210936 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.218255043 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.218281031 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.218314886 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.218343973 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.218370914 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.219130039 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.219187975 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.219214916 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.219228983 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.219259977 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.219280958 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.219747066 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.219791889 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.219820976 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.219835043 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.219861031 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.219880104 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.220428944 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.220488071 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.220519066 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.220531940 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.220577955 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.220732927 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.221066952 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.221108913 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.221160889 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.221179008 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.221224070 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.221224070 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.221784115 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.221827030 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.221868992 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.221882105 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.221909046 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.222021103 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.222702026 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.222743988 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.222769022 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.222781897 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.222809076 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.222825050 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.223365068 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.223426104 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.223443031 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.223455906 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.223483086 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.223499060 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.224174023 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.224217892 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.224244118 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.224256039 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.224282026 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.224355936 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.224889994 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.224946976 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.224946976 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.224976063 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.225016117 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.225016117 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.225836992 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.225878954 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.225909948 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.225922108 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.225953102 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.225971937 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.226553917 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.226572990 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.226614952 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.226627111 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.226675034 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.226675034 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.227081060 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.227096081 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.227159023 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.227173090 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.227271080 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.228214025 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.228230953 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.228288889 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.228306055 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.228332996 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.228352070 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.228669882 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.228684902 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.228743076 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.228758097 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.228905916 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.229609013 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.229624987 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.229692936 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.229707956 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.229798079 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.230178118 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.230200052 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.230257034 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.230272055 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.230321884 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.230735064 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.230750084 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.230803967 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.230818033 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.230848074 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.230946064 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.231443882 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.231463909 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.231501102 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.231518030 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.231540918 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.231946945 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.232367039 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.232381105 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.232430935 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.232445002 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.232471943 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.232490063 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.233486891 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.233500957 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.233568907 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.233582020 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.233633995 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.234210968 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.234225035 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.234294891 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.234323978 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.234482050 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.235254049 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.235271931 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.235326052 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.235337973 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.235366106 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.235384941 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.236052036 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.236068010 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.236155033 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.236155987 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.236171007 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.236232996 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.236572027 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.236593962 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.236632109 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.236644983 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.236670971 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.236689091 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.237318993 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.237340927 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.237396955 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.237407923 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.237436056 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.237457991 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.237955093 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.237981081 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.238060951 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.238073111 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.238107920 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.238125086 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.238451958 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.238508940 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.238524914 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.238535881 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.238564014 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.238580942 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.239123106 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.239144087 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.239186049 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.239198923 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.239229918 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.239249945 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.239655018 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.239675045 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.239721060 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.239749908 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.239775896 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.239964962 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.240180969 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.240201950 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.240245104 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.240257025 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.240298986 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.240299940 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.240962029 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.240993023 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.241056919 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.241069078 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.241112947 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.241132975 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.241493940 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.241518021 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.241564989 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.241576910 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.241601944 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.241909027 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.241925001 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.241947889 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.241987944 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.242000103 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.242027998 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.242052078 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.242690086 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.242712975 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.242753029 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.242765903 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.242790937 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.242938995 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.243252039 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.243275881 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.243314981 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.243326902 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.243360996 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.243386984 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.243779898 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.243803024 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.243845940 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.243859053 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.243885040 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.243988037 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.244256973 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.244313002 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.244323015 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.244335890 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.244365931 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.244385958 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.244720936 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.244748116 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.244788885 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.244801998 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.244828939 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.245194912 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.245347977 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.245385885 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.245419979 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.245438099 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.245465040 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.245465040 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.245490074 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.245996952 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.246021032 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.246087074 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.246098995 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.246126890 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.246161938 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.246624947 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.246649027 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.246690035 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.246702909 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.246731043 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.246834993 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.247183084 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.247221947 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.247250080 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.247262001 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.247292042 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.247311115 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.247709036 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.247733116 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.247772932 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.247786045 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.247812986 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.247836113 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.248294115 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.248318911 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.248388052 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.248400927 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.248426914 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.248451948 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.248691082 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.248713970 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.248755932 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.248768091 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.248796940 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.248821974 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.261882067 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.262135029 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.336695910 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.336752892 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.336810112 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.336855888 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.336889029 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.336909056 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.338891983 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.338937044 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.338980913 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.338995934 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.339026928 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.339054108 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.339785099 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.339823008 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.339865923 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.339884996 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.339915037 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.339936018 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.340718031 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.340756893 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.340810061 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.340822935 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.340854883 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.340873957 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.341512918 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.341555119 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.341594934 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.341626883 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.341653109 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.341670036 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.342149019 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.342189074 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.342233896 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.342247009 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.342273951 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.342291117 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.343334913 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.343374968 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.343401909 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.343415022 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.343441010 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.343461037 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.344091892 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.344147921 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.344182968 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.344196081 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.344223022 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.344363928 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.344829082 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.344868898 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.344897032 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.344929934 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.344954967 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.345119953 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.345429897 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.345474005 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.345508099 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.345526934 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.345550060 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.345571041 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.346503019 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.346544981 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.346586943 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.346600056 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.346626043 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.346786976 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.347548008 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.347593069 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.347618103 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.347630024 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.347659111 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.347688913 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.348685980 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.348730087 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.348767996 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.348779917 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.348829985 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.348829985 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.349760056 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.349802017 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.349852085 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.349864960 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.349893093 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.349911928 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.350958109 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.351003885 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.351047039 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.351058006 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.351083040 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.351234913 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.351805925 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.351860046 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.351883888 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.351896048 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.351923943 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.351943016 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.353580952 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.353627920 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.353682995 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.353696108 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.353725910 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.353745937 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.354877949 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.354918003 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.354949951 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.354963064 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.355007887 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.355026960 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.355920076 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.355959892 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.356010914 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.356024027 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.356050968 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.356159925 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.357247114 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.357290983 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.357355118 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.357367992 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.357410908 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.357410908 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.358102083 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.358143091 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.358181000 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.358192921 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.358227968 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.358249903 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.358679056 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.358719110 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.358757973 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.358769894 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.358798027 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.359139919 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.359234095 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.359277010 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.359301090 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.359313965 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.359344959 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.359364986 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.359958887 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.359997988 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.360033989 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.360045910 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.360071898 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.360090971 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.360292912 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.360340118 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.360363007 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.360374928 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.360404968 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.360475063 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.360919952 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.360991955 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.360996962 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.361021996 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.361054897 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.361078978 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.361795902 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.361835957 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.361867905 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.361880064 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.361908913 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.361929893 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.362453938 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.362498999 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.362523079 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.362535000 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.362564087 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.362597942 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.363323927 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.363394022 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.363409042 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.363423109 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.363456964 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.363457918 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.363478899 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.364639044 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.364680052 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.364722013 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.364733934 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.364763021 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.364779949 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.365406990 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.365458012 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.365494013 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.365505934 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.365531921 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.365551949 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.365956068 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.366004944 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.366033077 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.366045952 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.366072893 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.366091013 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.366887093 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.366906881 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.366949081 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.366962910 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.367010117 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.367011070 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.367558002 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.367573023 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.367636919 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.367651939 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.367876053 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.368362904 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.368376970 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.368438959 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.368453026 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.368724108 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.368974924 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.368988991 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.369055986 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.369055986 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.369071007 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.369182110 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.369694948 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.369710922 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.369802952 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.369817019 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.369842052 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.370023012 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.370126009 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.370140076 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.370187998 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.370204926 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.370229006 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.370259047 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.370556116 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.370568991 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.370621920 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.370635986 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.370661020 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.370680094 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.371069908 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.371083021 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.371124029 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.371135950 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.371165037 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.371293068 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.371309042 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.371480942 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.371496916 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.371545076 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.371563911 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.371587992 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.371607065 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.371803045 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.372014046 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.372028112 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.372077942 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.372090101 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.372140884 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.372140884 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.372615099 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.372628927 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.372673988 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.372687101 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.372720003 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.372720003 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.373181105 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.373193979 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.373251915 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.373266935 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.373461008 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.373707056 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.373723030 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.373771906 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.373788118 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.373811960 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.373831987 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.374264956 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.374285936 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.374351978 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.374366045 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.374461889 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.375000000 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.375014067 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.375081062 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.375092983 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.375121117 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.375140905 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.375397921 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.375413895 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.375471115 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.375484943 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.375531912 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.375912905 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.375927925 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.375988007 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.376004934 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.376029968 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.376079082 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.376452923 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.376466990 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.376529932 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.376543045 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.376730919 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.377011061 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.377026081 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.377074957 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.377089024 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.377556086 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.377568960 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.377583981 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.377629042 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.377640009 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.377665997 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.377794027 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.378074884 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.378088951 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.378137112 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.378150940 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.378196955 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.378516912 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.378531933 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.378597021 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.378608942 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.378835917 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.379090071 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.379105091 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.379153013 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.379220009 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.379230976 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.379259109 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.379280090 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.379565001 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.379579067 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.379622936 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.379645109 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.379656076 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.379836082 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.380140066 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.380152941 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.380206108 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.380217075 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.380247116 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.380328894 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.380616903 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.380631924 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.380696058 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.380708933 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.380753994 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.381092072 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.381105900 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.381160021 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.381172895 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.381217003 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.381217003 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.381649971 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.381663084 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.381707907 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.381720066 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.381746054 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.381783962 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.381875038 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:42.381906033 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:42.381962061 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:42.382044077 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.382061958 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.382112980 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.382131100 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.382154942 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.382179976 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.382334948 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:42.382354021 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:42.382776976 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.382792950 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.382847071 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.382858992 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.382884979 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.382955074 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.383235931 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.383251905 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.383318901 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.383332968 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.383670092 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.383687019 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.383729935 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.383749008 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.383774996 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.384035110 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.384136915 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.384150982 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.384197950 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.384232998 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.384258032 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.384275913 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.391140938 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.397030115 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.398961067 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 25, 2024 18:31:42.508125067 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.508141994 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.508193016 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.508214951 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.508238077 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.508270979 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.508294106 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.508316040 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.508718014 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.508739948 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.508774042 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.508788109 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.508824110 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.509390116 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.509423018 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.509470940 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.509485006 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.509517908 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.509906054 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.509918928 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.509968042 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.510001898 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510029078 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.510205030 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510221958 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510262012 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.510282993 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510305882 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.510324001 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510351896 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510381937 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.510404110 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510426998 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.510822058 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510839939 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510874987 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.510889053 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.510915041 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.511318922 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.511332989 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.511389971 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.511722088 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.511745930 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.511982918 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512012959 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512038946 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.512053013 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512074947 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512079000 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.512106895 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512135029 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.512151003 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512178898 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.512506962 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512525082 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512564898 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.512579918 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.512604952 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.513168097 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513180971 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513225079 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.513242960 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513266087 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.513813972 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513832092 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513874054 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.513875008 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513887882 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513905048 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.513922930 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513955116 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.513967991 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.513993979 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.514014959 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.514400005 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.514414072 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.514472961 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.514487028 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.514512062 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.514606953 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.515113115 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.515126944 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.515187025 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.515202045 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.515644073 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.515672922 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.515707016 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.515711069 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.515733004 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.515758038 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.515777111 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.533998013 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.610575914 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:42.611984015 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:42.612001896 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:42.612857103 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:42.612905025 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:42.614295959 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:42.614352942 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:42.631395102 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.631422043 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.631488085 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.631525040 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.631577015 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.631686926 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.632138968 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.632153988 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.632220984 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.632237911 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.632318020 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.633888006 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.633903980 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.633934975 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.633953094 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.633968115 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.634023905 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.634062052 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.634634972 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.634649038 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.634681940 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.634700060 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.634713888 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.634752989 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.634772062 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.635307074 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.635322094 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.635349989 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.635390997 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.635409117 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.635449886 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.635481119 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.635481119 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.635767937 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.635782003 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.635828018 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.635843992 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.635874987 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.636641979 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.636660099 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.636688948 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.636702061 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.636702061 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.636718035 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.636749983 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.636771917 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.637382030 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637397051 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637434006 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637450933 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.637465000 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637504101 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.637552977 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.637559891 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637572050 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637605906 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637615919 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.637634039 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637656927 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.637692928 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.637693882 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.638374090 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.644066095 CEST	49743	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.644090891 CEST	443	49743	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.666045904 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:42.666057110 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:42.710467100 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:42.948379993 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.948425055 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:42.948488951 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.949071884 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:42.949090004 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.122534990 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.122575998 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.122778893 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.128350019 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.128364086 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.198923111 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.199225903 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:43.199255943 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.199565887 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.200489998 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:43.200551987 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.201035976 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:43.244132996 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.354576111 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.354649067 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.356985092 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.356995106 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.357218981 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.389218092 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.436117887 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.447969913 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.447987080 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.448048115 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.448046923 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:43.448201895 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:43.448939085 CEST	49749	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:31:43.448961973 CEST	443	49749	34.192.236.148	192.168.2.4
Apr 25, 2024 18:31:43.568486929 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.568561077 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.568622112 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.568675041 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.568701029 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.568715096 CEST	49750	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.568722963 CEST	443	49750	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.606525898 CEST	49751	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.606569052 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.606654882 CEST	49751	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.606900930 CEST	49751	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.606920004 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.829102039 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.829166889 CEST	49751	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.850308895 CEST	49751	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.850327015 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.850521088 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.853414059 CEST	49751	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:43.900116920 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:43.947911024 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:43.947959900 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:43.948028088 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:43.951705933 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:43.951724052 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.051793098 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:44.052133083 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:44.052225113 CEST	49751	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:44.054119110 CEST	49751	443	192.168.2.4	184.31.62.93
Apr 25, 2024 18:31:44.054140091 CEST	443	49751	184.31.62.93	192.168.2.4
Apr 25, 2024 18:31:44.322825909 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.323442936 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:44.323462009 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.324572086 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.324635029 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:44.325301886 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:44.325371981 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.325998068 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:44.326005936 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.368208885 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:44.475985050 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.476006031 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.476066113 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:44.476068974 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:44.476246119 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:44.477852106 CEST	49752	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:31:44.477865934 CEST	443	49752	3.223.165.17	192.168.2.4
Apr 25, 2024 18:31:52.604386091 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:52.604459047 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:31:52.604516983 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:54.215013027 CEST	49748	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:31:54.215044022 CEST	443	49748	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:11.150964975 CEST	49746	443	192.168.2.4	74.143.212.194
Apr 25, 2024 18:32:11.170715094 CEST	49759	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:11.170751095 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.170850992 CEST	49759	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:11.171845913 CEST	49759	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:11.171860933 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.192147017 CEST	443	49746	74.143.212.194	192.168.2.4
Apr 25, 2024 18:32:11.422926903 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.423279047 CEST	49759	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:11.423296928 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.423778057 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.424305916 CEST	49759	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:11.424381018 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.424897909 CEST	49759	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:11.472114086 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.675496101 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.675586939 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.675710917 CEST	49759	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:11.677542925 CEST	49759	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:11.677560091 CEST	443	49759	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:11.685874939 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:11.685893059 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:11.686045885 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:11.686918020 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:11.686932087 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:11.938385963 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:11.938694954 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:11.938709974 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:11.939198971 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:11.939542055 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:11.939635038 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:11.939692974 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:11.984123945 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:12.187272072 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:12.187426090 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:12.187489986 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:12.187901974 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:12.187922955 CEST	443	49760	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:12.187932014 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:12.188209057 CEST	49760	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:16.267000914 CEST	49761	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.267050982 CEST	443	49761	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.267110109 CEST	49761	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.267657995 CEST	49762	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.267694950 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.267849922 CEST	49762	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.268470049 CEST	49762	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.268481016 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.268699884 CEST	49761	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.268712044 CEST	443	49761	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.519041061 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.519275904 CEST	443	49761	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.519593000 CEST	49762	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.519603968 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.519681931 CEST	49761	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.519700050 CEST	443	49761	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.520081997 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.520761013 CEST	49762	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.520842075 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.520863056 CEST	443	49761	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.521024942 CEST	49762	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.521398067 CEST	49761	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.521569967 CEST	443	49761	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.564119101 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.567930937 CEST	49761	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.794253111 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.794361115 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:16.794491053 CEST	49762	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.796084881 CEST	49762	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:32:16.796111107 CEST	443	49762	34.192.236.148	192.168.2.4
Apr 25, 2024 18:32:24.729530096 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:24.729556084 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:34.526837111 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:34.527021885 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:34.527081013 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:36.215574980 CEST	49736	443	192.168.2.4	3.223.165.17
Apr 25, 2024 18:32:36.215606928 CEST	443	49736	3.223.165.17	192.168.2.4
Apr 25, 2024 18:32:42.361826897 CEST	49765	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:32:42.361869097 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:42.362059116 CEST	49765	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:32:42.362579107 CEST	49765	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:32:42.362595081 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:42.587373972 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:42.587954998 CEST	49765	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:32:42.587975025 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:42.588474989 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:42.588932991 CEST	49765	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:32:42.589016914 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:42.635019064 CEST	49765	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:32:50.676884890 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 25, 2024 18:32:50.676961899 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 25, 2024 18:32:50.786272049 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 25, 2024 18:32:50.786295891 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 25, 2024 18:32:50.786310911 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 25, 2024 18:32:50.786325932 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 25, 2024 18:32:50.786349058 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 25, 2024 18:32:50.786389112 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 25, 2024 18:32:52.584857941 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:52.584934950 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:52.585334063 CEST	49765	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:32:54.217756987 CEST	49765	443	192.168.2.4	108.177.122.147
Apr 25, 2024 18:32:54.217787027 CEST	443	49765	108.177.122.147	192.168.2.4
Apr 25, 2024 18:32:56.197297096 CEST	49746	443	192.168.2.4	74.143.212.194
Apr 25, 2024 18:32:56.197356939 CEST	443	49746	74.143.212.194	192.168.2.4
Apr 25, 2024 18:33:01.525585890 CEST	49761	443	192.168.2.4	34.192.236.148
Apr 25, 2024 18:33:01.525650024 CEST	443	49761	34.192.236.148	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 18:31:37.966177940 CEST	53	54406	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:38.013120890 CEST	53	51016	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:38.637389898 CEST	53	50460	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:39.139343023 CEST	55067	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:39.142152071 CEST	60524	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:39.256047010 CEST	53	55067	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:39.271652937 CEST	53	60524	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:40.035934925 CEST	55033	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:40.036892891 CEST	56319	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:40.164918900 CEST	53	56319	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:40.177712917 CEST	53	55033	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:40.980127096 CEST	64521	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:40.980492115 CEST	62177	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:41.135499001 CEST	53	62177	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:41.140743017 CEST	53	64521	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:42.248588085 CEST	49255	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:42.248961926 CEST	62030	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:42.379091024 CEST	53	49255	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:42.380201101 CEST	53	62030	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:43.752325058 CEST	63587	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:43.753293037 CEST	50889	53	192.168.2.4	1.1.1.1
Apr 25, 2024 18:31:43.863114119 CEST	53	63587	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:43.882030010 CEST	53	50889	1.1.1.1	192.168.2.4
Apr 25, 2024 18:31:55.996239901 CEST	53	55990	1.1.1.1	192.168.2.4
Apr 25, 2024 18:32:02.256108999 CEST	138	138	192.168.2.4	192.168.2.255
Apr 25, 2024 18:32:14.973696947 CEST	53	50662	1.1.1.1	192.168.2.4
Apr 25, 2024 18:32:37.795536041 CEST	53	64249	1.1.1.1	192.168.2.4
Apr 25, 2024 18:32:37.974771023 CEST	53	51138	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 18:31:39.139343023 CEST	192.168.2.4	1.1.1.1	0x4ec6	Standard query (0)	pppoauth.cert-sha256.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:39.142152071 CEST	192.168.2.4	1.1.1.1	0xe666	Standard query (0)	pppoauth.cert-sha256.com	65	IN (0x0001)	false
Apr 25, 2024 18:31:40.035934925 CEST	192.168.2.4	1.1.1.1	0x5d41	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:40.036892891 CEST	192.168.2.4	1.1.1.1	0x7f16	Standard query (0)	secured-login.net	65	IN (0x0001)	false
Apr 25, 2024 18:31:40.980127096 CEST	192.168.2.4	1.1.1.1	0xdaaa	Standard query (0)	images.lex.doe.gov	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:40.980492115 CEST	192.168.2.4	1.1.1.1	0x4719	Standard query (0)	images.lex.doe.gov	65	IN (0x0001)	false
Apr 25, 2024 18:31:42.248588085 CEST	192.168.2.4	1.1.1.1	0xd115	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:42.248961926 CEST	192.168.2.4	1.1.1.1	0xecfa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 18:31:43.752325058 CEST	192.168.2.4	1.1.1.1	0x8a83	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:43.753293037 CEST	192.168.2.4	1.1.1.1	0x3377	Standard query (0)	secured-login.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 18:31:39.256047010 CEST	1.1.1.1	192.168.2.4	0x4ec6	No error (0)	pppoauth.cert-sha256.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:31:39.256047010 CEST	1.1.1.1	192.168.2.4	0x4ec6	No error (0)	landing.training.knowbe4.com		3.223.165.17	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:39.256047010 CEST	1.1.1.1	192.168.2.4	0x4ec6	No error (0)	landing.training.knowbe4.com		34.192.236.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:39.256047010 CEST	1.1.1.1	192.168.2.4	0x4ec6	No error (0)	landing.training.knowbe4.com		34.232.168.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:39.256047010 CEST	1.1.1.1	192.168.2.4	0x4ec6	No error (0)	landing.training.knowbe4.com		54.80.151.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:39.256047010 CEST	1.1.1.1	192.168.2.4	0x4ec6	No error (0)	landing.training.knowbe4.com		100.25.60.110	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:39.271652937 CEST	1.1.1.1	192.168.2.4	0xe666	No error (0)	pppoauth.cert-sha256.com	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:31:40.177712917 CEST	1.1.1.1	192.168.2.4	0x5d41	No error (0)	secured-login.net		34.192.236.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:40.177712917 CEST	1.1.1.1	192.168.2.4	0x5d41	No error (0)	secured-login.net		100.25.60.110	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:40.177712917 CEST	1.1.1.1	192.168.2.4	0x5d41	No error (0)	secured-login.net		34.232.168.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:40.177712917 CEST	1.1.1.1	192.168.2.4	0x5d41	No error (0)	secured-login.net		3.223.165.17	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:40.177712917 CEST	1.1.1.1	192.168.2.4	0x5d41	No error (0)	secured-login.net		54.80.151.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:41.140743017 CEST	1.1.1.1	192.168.2.4	0xdaaa	No error (0)	images.lex.doe.gov		74.143.212.194	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:42.379091024 CEST	1.1.1.1	192.168.2.4	0xd115	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:42.379091024 CEST	1.1.1.1	192.168.2.4	0xd115	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:42.379091024 CEST	1.1.1.1	192.168.2.4	0xd115	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:42.379091024 CEST	1.1.1.1	192.168.2.4	0xd115	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:42.379091024 CEST	1.1.1.1	192.168.2.4	0xd115	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:42.379091024 CEST	1.1.1.1	192.168.2.4	0xd115	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:42.380201101 CEST	1.1.1.1	192.168.2.4	0xecfa	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 18:31:43.863114119 CEST	1.1.1.1	192.168.2.4	0x8a83	No error (0)	secured-login.net		3.223.165.17	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:43.863114119 CEST	1.1.1.1	192.168.2.4	0x8a83	No error (0)	secured-login.net		100.25.60.110	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:43.863114119 CEST	1.1.1.1	192.168.2.4	0x8a83	No error (0)	secured-login.net		34.232.168.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:43.863114119 CEST	1.1.1.1	192.168.2.4	0x8a83	No error (0)	secured-login.net		54.80.151.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:43.863114119 CEST	1.1.1.1	192.168.2.4	0x8a83	No error (0)	secured-login.net		34.192.236.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:31:55.559417009 CEST	1.1.1.1	192.168.2.4	0xca23	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:31:55.559417009 CEST	1.1.1.1	192.168.2.4	0xca23	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:32:08.538765907 CEST	1.1.1.1	192.168.2.4	0x9a0b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:32:08.538765907 CEST	1.1.1.1	192.168.2.4	0x9a0b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:32:30.168690920 CEST	1.1.1.1	192.168.2.4	0xfb89	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:32:30.168690920 CEST	1.1.1.1	192.168.2.4	0xfb89	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:32:50.934452057 CEST	1.1.1.1	192.168.2.4	0xc3f3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:32:50.934452057 CEST	1.1.1.1	192.168.2.4	0xc3f3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pppoauth.cert-sha256.com

https:

secured-login.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	3.223.165.17	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:39 UTC	995	OUT	GET /XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291 HTTP/1.1 Host: pppoauth.cert-sha256.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:40 UTC	574	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 462 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade ETag: W/"aa5435fa4dd3d36f2c3523cbee3268ee" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 9f604463-12ff-4f5a-98ce-5a1734172a5d X-Runtime: 0.057411 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:40 UTC	462	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 64 2d 6c 6f 67 69 6e 2e 6e 65 74 2f 70 61 67 65 73 2f 62 30 35 62 31 38 34 64 66 62 37 38 32 2f 58 54 6d 74 72 62 32 4e 4f 59 79 39 56 52 57 64 6b 57 6c 6f 7a 55 6d 56 34 61 6a 68 4d 5a 44 64 53 5a 32 6c 50 52 33 59 79 51 32 56 4f 56 30 70 30 52 54 64 30 55 56 68 32 52 54 67 35 54 55 4a 45 57 55 68 6c 53 54 4a 46 65 46 6b 76 5a 58 6c 56 53 46 52 46 52 44 56 6f 57 6c 4a 70 5a 44 4e 79 62 55 46 6b 53 33 52 78 51 58 68 4c 55 33 42 6d 61 56 64 6a 53 57 51 32 59 31 56 6d 62 6b 45 72 64 6e 68 4f 54 6d 6c 50 56 58 52 73 63 55 70 69 54 44 4a 6b 4e 6c 70 73 51 6b Data Ascii: <html> <head> <script>window.location.href = 'https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:40 UTC	1351	OUT	GET /pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:40 UTC	1388	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6293 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Link: </assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css>; rel=preload; as=style; nopush,</assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css>; rel=preload; as=style; nopush,</assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css>; rel=preload; as=style; nopush,</assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.css>; rel=preload; as=style; nopush,</assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js>; rel=preload; as=script; nopush,</packs/js/vendor-954761ad0dceb106b971.js>; rel=preload; as=script; nopush,</assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js>; rel=preload; as=script; nopush ETag: W/"37f58993fa1d5e9f0953a6235df87d00" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 84a99f2a-b160-46e9-b5ad-1098faba9b5e X-Runtime: 0.062080 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:40 UTC	6293	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 49 4d 50 4f 52 54 41 4e 54 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 73 69 6d 75 6c 61 74 65 64 20 70 68 69 73 68 69 6e 67 20 61 74 74 61 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"> <meta name="IMPORTANT" content="This page is part of a simulated phishing attac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:40 UTC	959	OUT	GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:41 UTC	263	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:41 GMT Content-Type: text/css Content-Length: 1471 Connection: close Last-Modified: Thu, 25 Apr 2024 14:34:32 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:41 UTC	1471	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 31 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 74 65 72 6d 61 72 6b 2e 73 63 73 73 20 2a 2f 0a 2e 77 61 74 65 72 6d 61 72 6b 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 74 62 2d 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 74 65 78 74 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 73 69 64 65 77 61 79 73 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 Data Ascii: /* line 1, app/assets/stylesheets/landing-watermark.scss /.watermark { -webkit-writing-mode: vertical-rl; -ms-writing-mode: tb-rl; writing-mode: vertical-rl; text-orientation: sideways;}/ line 4, app/assets/stylesheets/landing-wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:41 UTC	951	OUT	GET /assets/sei-modal-298c1edd0166bef9cbaf6b85083b95d5819753f027d6a841658c738f21e84e49.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:41 UTC	263	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:41 GMT Content-Type: text/css Content-Length: 1083 Connection: close Last-Modified: Thu, 25 Apr 2024 14:34:32 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:41 UTC	1083	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 32 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 6d 6f 64 61 6c 2e 73 63 73 73 20 2a 2f 0a 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 39 30 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 61 75 74 6f 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 38 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 6d 6f 64 61 6c 2e 73 63 73 73 20 2a 2f 0a 2e 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: /* line 2, app/assets/stylesheets/sei-modal.scss /.modal-dialog { width: 900px; margin: 30px auto; min-height: 300px;}/ line 8, app/assets/stylesheets/sei-modal.scss */.modal-content { position: relative; min-height: 300px; background-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:41 UTC	953	OUT	GET /assets/sei-tooltip-1ae0d1e9729436272a0cdfaf2325f9aacea7d6f89787d08056eda54a1910752d.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:41 UTC	263	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:41 GMT Content-Type: text/css Content-Length: 3055 Connection: close Last-Modified: Thu, 25 Apr 2024 14:34:32 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:41 UTC	3055	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 31 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 74 6f 6f 6c 74 69 70 2e 73 63 73 73 20 2a 2f 0a 2e 74 6f 6f 6c 74 69 70 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 37 30 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 Data Ascii: /* line 1, app/assets/stylesheets/sei-tooltip.scss */.tooltip { position: absolute; z-index: 1070; display: block; font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 12px; font-style: normal; font-weight: normal; line

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:41 UTC	950	OUT	GET /assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:41 UTC	263	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:41 GMT Content-Type: text/css Content-Length: 1768 Connection: close Last-Modified: Thu, 25 Apr 2024 14:34:32 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:41 UTC	1768	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 32 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 66 6c 61 67 2e 73 63 73 73 20 2a 2f 0a 78 2d 73 65 69 2e 73 65 69 2d 66 6c 61 67 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 6f 6d 61 74 6f 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 36 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 66 6c 61 67 2e 73 63 73 73 20 2a 2f 0a 78 2d 73 65 69 2e 73 65 69 2d 66 6c 61 67 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 20 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e Data Ascii: /* line 2, app/assets/stylesheets/sei-flag.scss /x-sei.sei-flag { border-bottom: 2px solid tomato; padding-left: 3px;}/ line 6, app/assets/stylesheets/sei-flag.scss */x-sei.sei-flag::before { content: ' '; display: inline-block; backgroun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:41 UTC	938	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:41 UTC	280	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:41 GMT Content-Type: application/javascript Content-Length: 3205083 Connection: close Last-Modified: Thu, 25 Apr 2024 14:34:31 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:41 UTC	16104	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 22 3a 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 28 3f 3a 5c 5c 28 28 22 20 2b 0a 09 09 2f 2f 20 54 6f 20 72 65 64 75 63 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 6c 65 63 74 6f 72 73 20 6e 65 65 64 69 6e 67 20 74 6f 6b 65 6e 69 7a 65 20 69 6e 20 74 68 65 20 70 72 65 46 69 6c 74 65 72 2c 20 70 72 65 66 65 72 20 61 72 67 75 6d 65 6e 74 73 3a 0a 09 09 2f 2f 20 31 2e 20 71 75 6f 74 65 64 20 28 63 61 70 74 75 72 65 20 33 3b 20 63 61 70 74 75 72 65 20 34 20 6f 72 20 63 61 70 74 75 72 65 20 35 29 0a 09 09 22 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 22 20 2b 0a 09 09 2f 2f 20 32 2e 20 73 69 6d 70 6c 65 20 28 63 61 70 Data Ascii: ":(" + identifier + ")(?:\\((" +// To reduce the number of selectors needing tokenize in the preFilter, prefer arguments:// 1. quoted (capture 3; capture 4 or capture 5)"('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|" +// 2. simple (cap
2024-04-25 16:31:41 UTC	56	IN	Data Raw: 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 38 2c 20 4f 70 65 72 61 20 31 31 2d 31 32 2e 31 36 0a 09 09 09 2f 2f 20 4e 6f 74 68 69 6e 67 20 73 68 6f 75 6c 64 20 62 65 20 73 Data Ascii: / Support: IE8, Opera 11-12.16// Nothing should be s
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 65 6c 65 63 74 65 64 20 77 68 65 6e 20 65 6d 70 74 79 20 73 74 72 69 6e 67 73 20 66 6f 6c 6c 6f 77 20 5e 3d 20 6f 72 20 24 3d 20 6f 72 20 2a 3d 0a 09 09 09 2f 2f 20 54 68 65 20 74 65 73 74 20 61 74 74 72 69 62 75 74 65 20 6d 75 73 74 20 62 65 20 75 6e 6b 6e 6f 77 6e 20 69 6e 20 4f 70 65 72 61 20 62 75 74 20 22 73 61 66 65 22 20 66 6f 72 20 57 69 6e 52 54 0a 09 09 09 2f 2f 20 68 74 74 70 3a 2f 2f 6d 73 64 6e 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6c 69 62 72 61 72 79 2f 69 65 2f 68 68 34 36 35 33 38 38 2e 61 73 70 78 23 61 74 74 72 69 62 75 74 65 5f 73 65 63 74 69 6f 6e 0a 09 09 09 69 66 20 28 20 64 69 76 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c Data Ascii: elected when empty strings follow ^= or $= or *=// The test attribute must be unknown in Opera but "safe" for WinRT// http://msdn.microsoft.com/en-us/library/ie/hh465388.aspx#attribute_sectionif ( div.querySelectorAll("[msallowcapture^='']").l
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 64 28 2e 2e 2e 29 20 6f 72 20 3a 6e 74 68 28 2d 6c 61 73 74 29 3f 2d 6f 66 2d 74 79 70 65 28 2e 2e 2e 29 0a 09 09 09 09 09 09 09 69 66 20 28 20 64 69 66 66 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 2f 2f 20 55 73 65 20 74 68 65 20 73 61 6d 65 20 6c 6f 6f 70 20 61 73 20 61 62 6f 76 65 20 74 6f 20 73 65 65 6b 20 60 65 6c 65 6d 60 20 66 72 6f 6d 20 74 68 65 20 73 74 61 72 74 0a 09 09 09 09 09 09 09 09 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 2b 2b 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 6e 6f 64 65 20 26 26 20 6e 6f 64 65 5b 20 64 69 72 20 5d 20 7c 7c 0a 09 09 09 09 09 09 09 09 09 28 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 3d 20 30 29 20 7c 7c 20 73 74 61 72 74 2e 70 6f 70 28 29 29 20 29 20 7b 0a 0a 09 09 09 09 09 Data Ascii: d(...) or :nth(-last)?-of-type(...)if ( diff === false ) {// Use the same loop as above to seek `elem` from the startwhile ( (node = ++nodeIndex && node && node[ dir ] \|\|(diff = nodeIndex = 0) \|\| start.pop()) ) {
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 69 66 20 28 20 28 6d 61 74 63 68 65 72 20 3d 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 74 6f 6b 65 6e 73 5b 69 5d 2e 74 79 70 65 20 5d 29 20 29 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 73 20 3d 20 5b 20 61 64 64 43 6f 6d 62 69 6e 61 74 6f 72 28 65 6c 65 6d 65 6e 74 4d 61 74 63 68 65 72 28 20 6d 61 74 63 68 65 72 73 20 29 2c 20 6d 61 74 63 68 65 72 29 20 5d 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 20 3d 20 45 78 70 72 2e 66 69 6c 74 65 72 5b 20 74 6f 6b 65 6e 73 5b 69 5d 2e 74 79 70 65 20 5d 2e 61 70 70 6c 79 28 20 6e 75 6c 6c 2c 20 74 6f 6b 65 6e 73 5b 69 5d 2e 6d 61 74 63 68 65 73 20 29 3b 0a 0a 09 09 09 2f 2f 20 52 65 74 75 72 6e 20 73 70 65 63 69 61 6c 20 75 70 6f 6e 20 73 65 65 69 6e Data Ascii: ; i++ ) {if ( (matcher = Expr.relative[ tokens[i].type ]) ) {matchers = [ addCombinator(elementMatcher( matchers ), matcher) ];} else {matcher = Expr.filter[ tokens[i].type ].apply( null, tokens[i].matches );// Return special upon seein
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 3b 0a 09 7d 3b 0a 0a 2f 2f 20 47 69 76 65 20 74 68 65 20 69 6e 69 74 20 66 75 6e 63 74 69 6f 6e 20 74 68 65 20 6a 51 75 65 72 79 20 70 72 6f 74 6f 74 79 70 65 20 66 6f 72 20 6c 61 74 65 72 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 0a 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 3b 0a 0a 2f 2f 20 49 6e 69 74 69 61 6c 69 7a 65 20 63 65 6e 74 72 61 6c 20 72 65 66 65 72 65 6e 63 65 0a 72 6f 6f 74 6a 51 75 65 72 79 20 3d 20 6a 51 75 65 72 79 28 20 64 6f 63 75 6d 65 6e 74 20 29 3b 0a 0a 0a 76 61 72 20 72 70 61 72 65 6e 74 73 70 72 65 76 20 3d 20 2f 5e 28 3f 3a 70 61 72 65 6e 74 73 7c 70 72 65 76 28 3f 3a 55 6e 74 69 6c 7c 41 6c 6c 29 29 2f 2c 0a 0a 09 2f 2f 20 6d 65 74 68 6f 64 73 20 67 75 61 72 61 6e 74 65 65 64 20 74 6f 20 70 Data Ascii: ;};// Give the init function the jQuery prototype for later instantiationinit.prototype = jQuery.fn;// Initialize central referencerootjQuery = jQuery( document );var rparentsprev = /^(?:parents\|prev(?:Until\|All))/,// methods guaranteed to p
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 61 64 65 64 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 09 09 2f 2f 20 41 20 66 61 6c 6c 62 61 63 6b 20 74 6f 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 2c 20 74 68 61 74 20 77 69 6c 6c 20 61 6c 77 61 79 73 20 77 6f 72 6b 0a 09 09 09 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 20 22 6c 6f 61 64 22 2c 20 63 6f 6d 70 6c 65 74 65 64 20 29 3b 0a 0a 09 09 2f 2f 20 49 66 20 49 45 20 65 76 65 6e 74 20 6d 6f 64 65 6c 20 69 73 20 75 73 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 0a 09 09 09 2f 2f 20 45 6e 73 75 72 65 20 66 69 72 69 6e 67 20 62 65 66 6f 72 65 20 6f 6e 6c 6f 61 64 2c 20 6d 61 79 62 65 20 6c 61 74 65 20 62 75 74 20 73 61 66 65 20 61 6c 73 6f 20 66 6f 72 20 69 66 72 61 6d 65 73 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e Data Ascii: aded", completed );// A fallback to window.onload, that will always workwindow.addEventListener( "load", completed );// If IE event model is used} else {// Ensure firing before onload, maybe late but safe also for iframesdocument.
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 09 09 2f 2f 20 69 6e 20 74 68 61 74 20 63 61 73 65 2c 20 65 6c 65 6d 65 6e 74 20 77 69 6c 6c 20 62 65 20 73 65 63 6f 6e 64 20 61 72 67 75 6d 65 6e 74 0a 09 09 65 6c 65 6d 20 3d 20 65 6c 20 7c 7c 20 65 6c 65 6d 3b 0a 09 09 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 63 73 73 28 20 65 6c 65 6d 2c 20 22 64 69 73 70 6c 61 79 22 20 29 20 3d 3d 3d 20 22 6e 6f 6e 65 22 20 7c 7c 0a 09 09 09 21 6a 51 75 65 72 79 2e 63 6f 6e 74 61 69 6e 73 28 20 65 6c 65 6d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 20 65 6c 65 6d 20 29 3b 0a 09 7d 3b 0a 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 64 6a 75 73 74 43 53 53 28 20 65 6c 65 6d 2c 20 70 72 6f 70 2c 20 76 61 6c 75 65 50 61 72 74 73 2c 20 74 77 65 65 6e 20 29 20 7b 0a 09 76 61 72 20 61 64 6a 75 73 74 65 64 2c 0a 09 09 73 63 61 Data Ascii: // in that case, element will be second argumentelem = el \|\| elem;return jQuery.css( elem, "display" ) === "none" \|\|!jQuery.contains( elem.ownerDocument, elem );};function adjustCSS( elem, prop, valueParts, tween ) {var adjusted,sca
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 20 74 79 70 65 20 5d 20 3d 20 5b 5d 3b 0a 09 09 09 09 68 61 6e 64 6c 65 72 73 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 20 3d 20 30 3b 0a 0a 09 09 09 09 2f 2f 20 4f 6e 6c 79 20 75 73 65 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2f 61 74 74 61 63 68 45 76 65 6e 74 20 69 66 20 74 68 65 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 73 20 68 61 6e 64 6c 65 72 20 72 65 74 75 72 6e 73 20 66 61 6c 73 65 0a 09 09 09 09 69 66 20 28 20 21 73 70 65 63 69 61 6c 2e 73 65 74 75 70 20 7c 7c 0a 09 09 09 09 09 73 70 65 63 69 61 6c 2e 73 65 74 75 70 2e 63 61 6c 6c 28 20 65 6c 65 6d 2c 20 64 61 74 61 2c 20 6e 61 6d 65 73 70 61 63 65 73 2c 20 65 76 65 6e 74 48 61 6e 64 6c 65 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 0a 09 09 09 09 09 2f 2f 20 42 69 6e 64 20 74 Data Ascii: type ] = [];handlers.delegateCount = 0;// Only use addEventListener/attachEvent if the special events handler returns falseif ( !special.setup \|\|special.setup.call( elem, data, namespaces, eventHandle ) === false ) {// Bind t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:41 UTC	891	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:41 UTC	278	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:41 GMT Content-Type: application/javascript Content-Length: 18403 Connection: close Last-Modified: Thu, 25 Apr 2024 14:35:27 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:41 UTC	16106	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 76 61 72 20 6f 3b 72 65 74 75 72 6e 28 6e 5b 72 5d 7c 7c 28 6f 3d 6e 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 65 29 2c 6f 2e 6c 3d 21 30 2c 6f 29 29 2e 65 78 70 6f 72 74 73 7d 65 2e 6d 3d 74 2c 65 2e 63 3d 6e 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 65 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 65 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var n={};function e(r){var o;return(n[r]\|\|(o=n[r]={i:r,l:!1,exports:{}},t[r].call(o.exports,o,o.exports,e),o.l=!0,o)).exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefin
2024-04-25 16:31:41 UTC	2297	IN	Data Raw: 65 6e 74 2c 69 3d 72 28 6f 29 26 26 72 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3a 7b 7d 7d 7d 2c 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 74 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 74 29 2c 76 61 6c 75 65 3a 6e 7d 7d 7d 2c 37 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 Data Ascii: ent,i=r(o)&&r(o.createElement);t.exports=function(t){return i?o.createElement(t):{}}},76:function(t,n){t.exports=function(t,n){return{enumerable:!(1&t),configurable:!(2&t),writable:!(4&t),value:n}}},77:function(t,n){t.exports=function(t){if("function"!=ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:41 UTC	936	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:41 UTC	278	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:41 GMT Content-Type: application/javascript Content-Length: 51364 Connection: close Last-Modified: Thu, 25 Apr 2024 14:34:32 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:41 UTC	16106	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2024-04-25 16:31:41 UTC	16384	IN	Data Raw: 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 77 69 6e 64 6f 77 2e 6f 70 65 6e 44 61 74 61 62 61 73 65 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 2f 2f 20 56 65 6e 64 6f 72 73 20 68 61 64 20 69 6e 63 6f 6e 73 69 73 74 65 6e 74 20 70 72 65 66 69 78 69 6e 67 20 77 69 74 68 20 74 68 65 20 65 78 70 65 72 69 6d 65 6e 74 61 6c 20 49 6e 64 65 78 65 64 20 44 42 3a 0a 20 20 20 20 2f 2f 20 2d 20 57 65 62 6b 69 74 27 73 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 69 73 20 61 63 63 65 73 73 69 62 6c 65 20 74 68 72 6f 75 67 68 20 77 65 62 6b 69 74 49 6e 64 65 78 65 64 44 42 0a 20 20 20 20 2f 2f 20 2d 20 46 69 72 65 66 6f 78 20 73 68 69 70 70 65 64 20 6d 6f 7a 5f 69 6e 64 65 78 65 64 44 42 20 62 65 66 6f 72 65 20 46 46 34 62 39 2c 20 62 75 74 20 73 69 6e 63 65 Data Ascii: { return !!window.openDatabase; }; // Vendors had inconsistent prefixing with the experimental Indexed DB: // - Webkit's implementation is accessible through webkitIndexedDB // - Firefox shipped moz_indexedDB before FF4b9, but since
2024-04-25 16:31:41 UTC	56	IN	Data Raw: 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 20 2f 5e 28 73 65 61 72 63 68 7c 74 65 6c 29 24 2f 2e 74 65 73 74 28 69 6e 70 75 74 45 6c 65 6d 54 79 70 65 29 20 29 7b 0a 20 Data Ascii: } else if ( /^(search\|tel)$/.test(inputElemType) ){
2024-04-25 16:31:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 70 65 63 20 64 6f 65 73 6e 27 74 20 64 65 66 69 6e 65 20 61 6e 79 20 73 70 65 63 69 61 6c 20 70 61 72 73 69 6e 67 20 6f 72 20 64 65 74 65 63 74 61 62 6c 65 20 55 49 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 62 65 68 61 76 69 6f 72 73 20 73 6f 20 77 65 20 70 61 73 73 20 74 68 65 73 65 20 74 68 72 6f 75 67 68 20 61 73 20 74 72 75 65 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 6e 74 65 72 65 73 74 69 6e 67 6c 79 2c 20 6f 70 65 72 61 20 66 61 69 6c 73 20 74 68 65 20 65 61 72 6c 69 65 72 20 74 65 73 74 2c 20 73 6f 20 69 74 20 64 6f 65 73 6e 27 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: // Spec doesn't define any special parsing or detectable UI // behaviors so we pass these through as true // Interestingly, opera fails the earlier test, so it doesn't
2024-04-25 16:31:42 UTC	2434	IN	Data Raw: 0a 20 20 20 20 7d 3b 0a 20 20 20 20 2f 2a 3e 3e 74 65 73 74 70 72 6f 70 2a 2f 0a 0a 20 20 20 20 2f 2a 3e 3e 74 65 73 74 61 6c 6c 70 72 6f 70 73 2a 2f 0a 20 20 20 20 2f 2f 20 4d 6f 64 65 72 6e 69 7a 72 2e 74 65 73 74 41 6c 6c 50 72 6f 70 73 28 29 20 69 6e 76 65 73 74 69 67 61 74 65 73 20 77 68 65 74 68 65 72 20 61 20 67 69 76 65 6e 20 73 74 79 6c 65 20 70 72 6f 70 65 72 74 79 2c 0a 20 20 20 20 2f 2f 20 20 20 6f 72 20 61 6e 79 20 6f 66 20 69 74 73 20 76 65 6e 64 6f 72 2d 70 72 65 66 69 78 65 64 20 76 61 72 69 61 6e 74 73 2c 20 69 73 20 72 65 63 6f 67 6e 69 7a 65 64 0a 20 20 20 20 2f 2f 20 4e 6f 74 65 20 74 68 61 74 20 74 68 65 20 70 72 6f 70 65 72 74 79 20 6e 61 6d 65 73 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 69 6e 20 74 68 65 20 63 61 6d 65 Data Ascii: }; />>testprop/ />>testallprops/ // Modernizr.testAllProps() investigates whether a given style property, // or any of its vendor-prefixed variants, is recognized // Note that the property names must be provided in the came

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:43 UTC	747	OUT	GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/assets/sei-flag-68d13d784ca9a21935d3004d873a9d547a5992deb153f1069c517f83cb514c7a.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:43 UTC	241	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:43 GMT Content-Type: image/png Content-Length: 3168 Connection: close Last-Modified: Thu, 25 Apr 2024 14:34:31 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:43 UTC	3168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 0c 27 49 44 41 54 78 da ed 9d 5d 88 5c e5 19 80 65 09 21 88 48 90 10 42 2f 4a 08 22 22 22 52 8a 84 52 a4 88 14 e9 45 29 22 d2 0b 2f 8a 17 22 e2 85 48 10 11 33 73 e6 cc 99 99 9d cc fe 26 ec 4f c2 0e 9b dd 64 0d 51 4a 13 4c 8c 89 11 11 1b ac 50 ed 85 6d a5 55 bb 8d 75 b3 51 b3 99 24 9b ec ee fc ad 7d bf 35 17 a9 4d 9c dd ec ec bc df 7b f6 79 e0 21 41 e2 ce 9c ef 7c cf 7c df d9 d9 33 7b cb 2d 4d e6 db ed db bf 6d a6 cd 7e 7e 00 f0 03 10 30 80 61 08 18 c0 30 04 0c 60 18 02 06 30 0c 01 03 18 86 80 01 0c 43 c0 00 86 21 60 00 c3 10 30 80 61 08 18 c0 30 04 bc 3c fe 7a fc f8 ba 0b 03 03 77 cd 74 74 3c 58 ce 66 1f ab 66 b3 4f cd 66 b3 2f d6 a2 28 51 4b 26 73 e5 Data Ascii: PNGIHDR>U'IDATx]\e!HB/J"""RRE)"/"H3s&OdQJLPmUuQ$}5M{y!A\|\|3{-Mm~~0a0`0C!`0a0<zwtt<XffOf/(QK&s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 16:31:43 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=138712 Date: Thu, 25 Apr 2024 16:31:43 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 16:31:44 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=138711 Date: Thu, 25 Apr 2024 16:31:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 16:31:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	3.223.165.17	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:31:44 UTC	425	OUT	GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:31:44 UTC	241	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:31:44 GMT Content-Type: image/png Content-Length: 3168 Connection: close Last-Modified: Thu, 25 Apr 2024 14:34:31 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:31:44 UTC	3168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 0c 27 49 44 41 54 78 da ed 9d 5d 88 5c e5 19 80 65 09 21 88 48 90 10 42 2f 4a 08 22 22 22 52 8a 84 52 a4 88 14 e9 45 29 22 d2 0b 2f 8a 17 22 e2 85 48 10 11 33 73 e6 cc 99 99 9d cc fe 26 ec 4f c2 0e 9b dd 64 0d 51 4a 13 4c 8c 89 11 11 1b ac 50 ed 85 6d a5 55 bb 8d 75 b3 51 b3 99 24 9b ec ee fc ad 7d bf 35 17 a9 4d 9c dd ec ec bc df 7b f6 79 e0 21 41 e2 ce 9c ef 7c cf 7c df d9 d9 33 7b cb 2d 4d e6 db ed db bf 6d a6 cd 7e 7e 00 f0 03 10 30 80 61 08 18 c0 30 04 0c 60 18 02 06 30 0c 01 03 18 86 80 01 0c 43 c0 00 86 21 60 00 c3 10 30 80 61 08 18 c0 30 04 bc 3c fe 7a fc f8 ba 0b 03 03 77 cd 74 74 3c 58 ce 66 1f ab 66 b3 4f cd 66 b3 2f d6 a2 28 51 4b 26 73 e5 Data Ascii: PNGIHDR>U'IDATx]\e!HB/J"""RRE)"/"H3s&OdQJLPmUuQ$}5M{y!A\|\|3{-Mm~~0a0`0C!`0a0<zwtt<XffOf/(QK&s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:32:11 UTC	923	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/b05b184dfb782/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:32:11 UTC	253	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:32:11 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Thu, 25 Apr 2024 14:38:05 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49760	3.223.165.17	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:32:11 UTC	352	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:32:12 UTC	253	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:32:12 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Thu, 25 Apr 2024 14:38:05 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49762	34.192.236.148	443	1720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:32:16 UTC	667	OUT	GET /pages/b05b184dfb782/[[URL]] HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:32:16 UTC	579	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:32:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 485 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin ETag: W/"01a432b43b929122a2c355002baf21a4" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 328fc92b-7c70-4d9c-97da-00a2f592c3b1 X-Runtime: 0.022728 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-04-25 16:32:16 UTC	485	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 54 68 65 20 70 61 67 65 20 79 6f 75 20 77 65 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 20 28 34 30 34 29 3c 2f 74 69 74 6c 65 3e 0a 09 3c 73 74 79 6c 65 20 74 79 70 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8" /><title>The page you were looking for doesn't exist (404)</title><style type

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2944, Parent PID: 2596

General

Target ID:	0
Start time:	18:31:35
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1720, Parent PID: 2944

General

Target ID:	2
Start time:	18:31:36
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2216,i,2404487244690015783,12100135432252379263,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6456, Parent PID: 2596

General

Target ID:	3
Start time:	18:31:38
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pppoauth.cert-sha256.com/XTmtrb2NOYy9VRWdkWlozUmV4ajhMZDdSZ2lPR3YyQ2VOV0p0RTd0UVh2RTg5TUJEWUhlSTJFeFkvZXlVSFRFRDVoWlJpZDNybUFkS3RxQXhLU3BmaVdjSWQ2Y1VmbkErdnhOTmlPVXRscUpiTDJkNlpsQkpCbjN5N0VQQzFTRysvRVNRZlNuYllPWlpSTEN5dXFqRnk3OUJBNG1mMHlSTFZDNFpUQ2Q2bEV5TEhvZHp3R2tnZHc2V3JBPT0tLXo5d29tRXljYTVLNjlsR2stLTI3UHJkanptSkxrRTNPQndENUI2c0E9PQ==?cid=2007156291"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2944, Parent PID: 2596

General

Chronological Activities

Analysis Process: chrome.exePID: 1720, Parent PID: 2944