Edit tour

Windows Analysis Report
https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTM3MzAwLCJtZXNzYWdlX2lkIjoiMGd5MGJnNjBqOTJwcmNuZjhhNHNxYWpwIzZjY2RmYjMyLWJiNzgtNGQwNC1hYWYwLTg3MjdkMTg4MjZ

Overview

General Information

Sample URL:	https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTM3MzA
Analysis ID:	1432196
Infos:

Detection

Captcha Phish

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Captcha Phish

HTML page contains hidden URLs or javascript code

Sigma detected: Suspicious Office Token Search Via CLI

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2016,i,6281715248989916148,14129476578495374566,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_CaptchaPhish	Yara detected Captcha Phish	Joe Security
0.3.pages.csv	JoeSecurity_CaptchaPhish	Yara detected Captcha Phish	Joe Security
0.4.pages.csv	JoeSecurity_CaptchaPhish	Yara detected Captcha Phish	Joe Security

Sigma Signatures

Sigma detected: Suspicious Office Token Search Via CLI

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI", CommandLine|base64offset|contains: , Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 364, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI", ProcessId: 2420, ProcessName: chrome.exe

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected Captcha Phish

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.4.pages.csv, type: HTML

Source: https://hbarthlow.bradentoncc.store/index0.php

HTTP Parser: Base64 decoded: https://hbarthlow.bradentoncc.store:443

Source: https://hbarthlow.bradentoncc.store/index0.php	HTTP Parser: No favicon
Source: https://hbarthlow.bradentoncc.store/index0.php	HTTP Parser: No favicon
Source: https://hbarthlow.bradentoncc.store/index0.php	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50ev	HTTP Parser: No favicon
Source: https://example.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 14:57:38 GMTServer: ApacheX-Content-Type-Options: nosniffVary: Accept-EncodingLast-Modified: Wed, 06 Mar 2024 16:51:21 GMTX-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: same-originCross-Origin-Opener-Policy: same-originCache-Control: public, max-age=3600Expires: Fri, 26 Apr 2024 15:57:38 GMTContent-Encoding: gzipContent-Security-Policy: upgrade-insecure-requests; default-src 'self' https://*.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://*.gstatic.com;Age: 358Content-Length: 1508Keep-Alive: timeout=2, max=358Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 cd 6e dc 36 10 3e 57 4f c1 e8 d0 93 b5 b2 b7 a8 53 34 5a 01 0b 27 41 0c 14 0b c3 75 10 a0 97 80 a2 66 57 74 28 51 21 a9 dd 6c 4f 7d 8d be 5e 9f a4 33 a4 b4 ff b1 e3 06 68 62 c0 2b 72 c4 f9 e1 37 c3 99 a1 a2 ec 59 a9 85 5b b7 c0 2a 57 ab 3c ca 86 07 f0 32 8f 7e c8 9c 74 0a f2 57 9f 78 dd 2a 60 2f 75 cd 65 63 b3 34 90 23 5c 50 83 e3 4c 54 dc 58 70 93 b8 73 f3 e4 97 98 a5 f9 f0 a6 72 ae 4d e0 63 27 97 93 f8 4a 37 0e 1a 97 90 ba 98 89 30 9b c4 0e 3e b9 94 d4 be d8 c8 39 12 d3 f0 1a 26 f1 52 c2 aa d5 c6 ed 30 af 64 e9 aa 49 09 4b 29 20 f1 93 33 26 1b e9 24 57 89 15 5c c1 e4 22 c8 41 49 4a 36 1f Data Ascii: Xn6>WOS4Z'AufWt(Q!lO}^3hb+r7Y[*W<2~tWx*`/uec4#\PLTXpsrMc'J70>9&R0dIK) 3&$W\"AIJ6

Source: global traffic	HTTP traffic detected: GET /click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI HTTP/1.1Host: cdp1.tracking.e360.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /docs/index.php?mail=%20hbarthlow@securustechnologies.com&paths=above&link=Fax_Outlook HTTP/1.1Host: vmmessanger.rdocmglobal.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /docs/index0.php HTTP/1.1Host: vmmessanger.rdocmglobal.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jaoob916gnfffg586v0t7rbn5m
Source: global traffic	HTTP traffic detected: GET /index.php?mail=%20hbarthlow@securustechnologies.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook HTTP/1.1Host: hbarthlow.bradentoncc.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index0.php HTTP/1.1Host: hbarthlow.bradentoncc.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=nr2sene7cj9t4pb98cmbg9qrej
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hbarthlow.bradentoncc.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50ev HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hbarthlow.bradentoncc.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50evAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50evAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: hbarthlow.bradentoncc.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hbarthlow.bradentoncc.store/index0.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=nr2sene7cj9t4pb98cmbg9qrej
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9ORDdRWOZF4CzfAT24Edyv7yis2bkyn_VHaq19IjUlV4TIoU-msljnPtqhKfcNyA2IOwoIoUA0QZDylG1Q
Source: global traffic	HTTP traffic detected: GET /?xgshwmpx&qrc=hbarthlow@securustechnologies.com HTTP/1.1Host: americanrealtyij.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hbarthlow.bradentoncc.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?https://example.com HTTP/1.1Host: href.liConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://hbarthlow.bradentoncc.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: example.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: example.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://example.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /domains/example HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_css/2022/iana_website.css HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/jquery.js HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/iana.js HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/iana-logo-header.svg HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/fonts/NotoSans-Regular.woff HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.iana.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.iana.org/_css/2022/iana_website.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/fonts/NotoSans-Bold.woff HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.iana.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.iana.org/_css/2022/iana_website.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/iana-logo-header.svg HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/bookmark_icon.ico HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/bookmark_icon.ico HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help/example-domains HTTP/1.1Host: www.iana.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: cdp1.tracking.e360.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: vmmessanger.rdocmglobal.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: hbarthlow.bradentoncc.store
Source: global traffic	DNS traffic detected: DNS query: americanrealtyij.com
Source: global traffic	DNS traffic detected: DNS query: href.li
Source: global traffic	DNS traffic detected: DNS query: example.com
Source: global traffic	DNS traffic detected: DNS query: www.iana.org

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7035sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50evAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 15:03:03 GMTServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30Content-Length: 314Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 74451Cache-Control: max-age=604800Content-Type: text/html; charset=UTF-8Date: Fri, 26 Apr 2024 15:03:09 GMTExpires: Fri, 03 May 2024 15:03:09 GMTLast-Modified: Thu, 25 Apr 2024 18:22:18 GMTServer: ECAcc (mid/8787)Vary: Accept-EncodingX-Cache: 404-HITContent-Length: 1256Connection: close

Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_63.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_63.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_63.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_59.2.dr, chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_55.2.dr, chromecache_63.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_59.2.dr, chromecache_57.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_58.2.dr, chromecache_73.2.dr	String found in binary or memory: https://www.iana.org/domains/example

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49698 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@22/44@28/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2016,i,6281715248989916148,14129476578495374566,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2016,i,6281715248989916148,14129476578495374566,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI	0%	Avira URL Cloud	safe
https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTM3MzAwLCJtZXNzYWdlX2lkIjoiMGd5MGJnNjBqOTJwcmNuZjhhNHNxYWpwIzZjY2RmYjMyLWJiNzgtNGQwNC1hYWYwLTg3MjdkMTg4MjZlMyIsImNoYW5uZWxfdHlwZSI6ImVtYWlsIiwiZXhwIjoxNzQ1NjczMzAwLCJyZWRpcmVjdF91cmwiOiJodHRwczovL3ZtbWVzc2FuZ2VyLnJkb2NtZ2xvYmFsLmNvbS9kb2NzL2luZGV4LnBocD9tYWlsPSUyMGhiYXJ0aGxvd0BzZWN1cnVzdGVjaG5vbG9naWVzLmNvbSZwYXRocz1hYm92ZSZsaW5rPUZheF9PdXRsb29rIiwiaW5kaXZpZHVhbF9pZCI6IjQ0NDY4NzI5YzA1N2Q5ZDJjYzNiYjZlOTc3NDg3MzUyIn0.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI	0%	Virustotal		Browse

Source	Detection	Scanner	Link
americanrealtyij.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
vmmessanger.rdocmglobal.com	1%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://recaptcha.net	0%	URL Reputation	safe
https://hbarthlow.bradentoncc.store/index.php?mail=%20hbarthlow@securustechnologies.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook	0%	Avira URL Cloud	safe
https://vmmessanger.rdocmglobal.com/docs/index.php?mail=%20hbarthlow@securustechnologies.com&paths=above&link=Fax_Outlook	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://americanrealtyij.com/?xgshwmpx&qrc=hbarthlow@securustechnologies.com	0%	Avira URL Cloud	safe
https://hbarthlow.bradentoncc.store/favicon.ico	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
https://hbarthlow.bradentoncc.store/verify.php	0%	Avira URL Cloud	safe
https://vmmessanger.rdocmglobal.com/docs/index0.php	0%	Avira URL Cloud	safe
https://vmmessanger.rdocmglobal.com/docs/index0.php	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
americanrealtyij.com	82.180.161.153	true	false	0%, Virustotal, Browse	unknown
vmmessanger.rdocmglobal.com	38.180.91.41	true	false	1%, Virustotal, Browse	unknown
www.google.com	142.250.217.164	true	false		high
hbarthlow.bradentoncc.store	188.116.24.148	true	false		unknown
global-cdp1.sfdc-yfeipo.svc.sfdcfc.net	3.94.175.225	true	false		unknown
example.com	93.184.215.14	true	false		high
ianawww.vip.icann.org	192.0.33.8	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
href.li	192.0.78.27	true	false		high
cdp1.tracking.e360.salesforce.com	unknown	unknown	false		high
www.iana.org	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI	false		high
http://www.iana.org/help/example-domains	false		high
https://www.iana.org/_img/2022/iana-logo-header.svg	false		high
https://vmmessanger.rdocmglobal.com/docs/index.php?mail=%20hbarthlow@securustechnologies.com&paths=above&link=Fax_Outlook	false	Avira URL Cloud: safe	unknown
https://hbarthlow.bradentoncc.store/index.php?mail=%20hbarthlow@securustechnologies.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook	false	Avira URL Cloud: safe	unknown
https://www.iana.org/_img/bookmark_icon.ico	false		high
https://www.iana.org/_css/2022/iana_website.css	false		high
about:blank	false	Avira URL Cloud: safe	low
https://www.google.com/recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50ev	false		high
https://www.iana.org/_img/2022/fonts/NotoSans-Bold.woff	false		high
https://americanrealtyij.com/?xgshwmpx&qrc=hbarthlow@securustechnologies.com	false	Avira URL Cloud: safe	unknown
https://href.li/?https://example.com	false		high
https://www.iana.org/_js/iana.js	false		high
https://www.iana.org/_img/2022/fonts/NotoSans-Regular.woff	false		high
https://example.com/favicon.ico	false		high
https://hbarthlow.bradentoncc.store/favicon.ico	false	Avira URL Cloud: safe	unknown
https://hbarthlow.bradentoncc.store/index0.php	false		unknown
https://hbarthlow.bradentoncc.store/verify.php	false	Avira URL Cloud: safe	unknown
https://www.iana.org/domains/example	false		high
https://vmmessanger.rdocmglobal.com/docs/index0.php	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js?render=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf	false		high
https://www.iana.org/_js/jquery.js	false		high
https://example.com/	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m	false		high
https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://recaptcha.net	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://cloud.google.com/contact	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_63.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_55.2.dr, chromecache_63.2.dr	false	Avira URL Cloud: safe	low
https://www.google.com/recaptcha/api2/	chromecache_59.2.dr, chromecache_55.2.dr, chromecache_63.2.dr	false		high
https://support.google.com/recaptcha	chromecache_63.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.36	unknown	United States	15169	GOOGLEUS	false
3.94.175.225	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net	United States	14618	AMAZON-AESUS	false
192.0.33.8	ianawww.vip.icann.org	United States	40528	ICANN-LAXUS	false
188.116.24.148	hbarthlow.bradentoncc.store	Poland	42739	FONE-ASNPL	false
142.250.64.228	unknown	United States	15169	GOOGLEUS	false
192.0.78.27	href.li	United States	2635	AUTOMATTICUS	false
142.250.217.164	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
93.184.215.14	example.com	European Union	15133	EDGECASTUS	false
38.180.91.41	vmmessanger.rdocmglobal.com	United States	174	COGENT-174US	false
82.180.161.153	americanrealtyij.com	Denmark	29100	BROADCOMDK	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432196
Start date and time:	2024-04-26 17:01:45 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTM3MzAwLCJtZXNzYWdlX2lkIjoiMGd5MGJnNjBqOTJwcmNuZjhhNHNxYWpwIzZjY2RmYjMyLWJiNzgtNGQwNC1hYWYwLTg3MjdkMTg4MjZlMyIsImNoYW5uZWxfdHlwZSI6ImVtYWlsIiwiZXhwIjoxNzQ1NjczMzAwLCJyZWRpcmVjdF91cmwiOiJodHRwczovL3ZtbWVzc2FuZ2VyLnJkb2NtZ2xvYmFsLmNvbS9kb2NzL2luZGV4LnBocD9tYWlsPSUyMGhiYXJ0aGxvd0BzZWN1cnVzdGVjaG5vbG9naWVzLmNvbSZwYXRocz1hYm92ZSZsaW5rPUZheF9PdXRsb29rIiwiaW5kaXZpZHVhbF9pZCI6IjQ0NDY4NzI5YzA1N2Q5ZDJjYzNiYjZlOTc3NDg3MzUyIn0.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@22/44@28/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.iana.org/domains/example

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.50.67, 142.250.189.142, 173.194.216.84, 34.104.35.123, 20.114.59.183, 23.45.182.68, 23.45.182.85, 23.45.182.93, 192.229.211.108, 20.242.39.171, 172.217.3.67, 172.217.15.202, 142.250.217.170, 192.178.50.42, 142.251.35.234, 142.250.217.234, 142.250.189.138, 192.178.50.74, 142.250.64.202, 172.217.165.202, 142.250.217.202, 142.250.64.170, 142.250.64.227, 142.250.189.131, 172.217.165.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Source	URL
Screenshot	http://

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	32870
Entropy (8bit):	4.300873890135518
Encrypted:	false
SSDEEP:	768:8Zr++SQvCrFQy7t5t1S9+UMTY1UeuXrGI:L+SQ8FQyztg9+UMc1Ue6N
MD5:	426B3AC01D3584C820F3B7F5985D6623
SHA1:	6FA7ECC4EB21D4FD7BFD1FD3550F0AAAB0AB43D7
SHA-256:	888B41C392A51D5AA6CA6DF224E345F74FFBB97A48422753A3E4F90F305D0004
SHA-512:	CD094F2ECE42AB1E4F789BC3027828CF98CC62044D456B8A5A66E946CB5CC3D3A1984A04C11923918F449A7CDEDBC1F54966679AAA8451D7E536B24637128047
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_img/2022/iana-logo-header.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="IANA_Header_Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px".. y="0px" width="234px" height="72px" viewBox="0 0 468 144" enable-background="new 0 0 468 144" xml:space="preserve">.<g id="Text_Paths">..<path fill="#5A5A58" d="M5.129,136.483v-18.872h2.744v18.872H5.129z"/>..<path fill="#5A5A58" d="M21.929,136.483v-10.332c0-0.709-0.178-1.27-0.532-1.68c-0.355-0.411-0.99-0.616-1.904-0.616...c-0.71,0-1.354,0.098-1.932,0.294c-0.579,0.196-1.148,0.48-1.708,0.854v11.48h-2.492v-14.504c0.336-0.056,0.742-0.098,1.218-0.126...s0.9-0.042,1.274-0.042v1.428h0.14c0.728-0.634,1.437-1.068,2.128-1.302c0.69-0.233,1.418-0.351,2.184-0.351...c0.56,0,1.087,0.075,1.582,0.225c0.494,0.149,0.933,0.396,1.316,0.742c0.382,0.346,0.686,0.803,0.91,1.372...c0.224,0.569,0.336,1.273,0.336,2.113v10.444H21.929z"/>..<path fill="#

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	4.757453290014263
Encrypted:	false
SSDEEP:	24:0pbMMpAYuOjM/fHxAYJwPp2AEPmbW1E6FD8EVyiJZni/1/EmDFf2kzj:0hpqkM6YJwh8PmbWO65siJZi/9jplzj
MD5:	84238DFC8092E5D9C0DAC8EF93371A07
SHA1:	4A3CE8EE11E091DD7923F4D8C6E5B5E41EC7C047
SHA-256:	EA8FAC7C65FB589B0D53560F5251F74F9E9B243478DCB6B3EA79B5E36449C8D9
SHA-512:	D06B93C883F8126A04589937A884032DF031B05518EED9D433EFB6447834DF2596AEBD500D69B8283E5702D988ED49655AE654C1683C7A4AE58BFA6B92F2B73A
Malicious:	false
Reputation:	low
URL:	https://example.com/
Preview:	<!doctype html>.<html>.<head>. <title>Example Domain</title>.. <meta charset="utf-8" />. <meta http-equiv="Content-type" content="text/html; charset=utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <style type="text/css">. body {. background-color: #f0f0f2;. margin: 0;. padding: 0;. font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;. . }. div {. width: 600px;. margin: 5em auto;. padding: 2em;. background-color: #fdfdff;. border-radius: 0.5em;. box-shadow: 2px 3px 7px 2px rgba(0,0,0,0.02);. }. a:link, a:visited {. color: #38488f;. text-decoration: none;. }. @media (max-width: 700px) {. div {. margin: 0 auto;. width: auto;. }. }. </style> .</head>..<body>.<div>. <h1>Example Domain</h1>. <p>This domai

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.850141602190281
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccADfVVaw+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEciVVaKonR3evtTA87b1Muh6LrwUnG
MD5:	4BFE143A6E96663220A888FBD05BE9DE
SHA1:	3F6A373C51AD13604A112831321D8CACAECE7362
SHA-256:	3AED6E7FA351DB3BD63A17991D6E8AE2B46936A24A8E44769D463C1D79941F2A
SHA-512:	F9773D6E5DF5F598FD7AFDA67DECE5CA78B49B04695BD39FBEA21D445BE51E91B25715742B645693C9ED12F1D5F8103D15C3750C0411AD2E6D0EEDECDBF163AB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOV

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	314
Entropy (8bit):	5.28005885340655
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIR4fLTRONO2FWHTNGns8oD:J0+oxBeRmR9etdzRxGezHxN9FWHMns8+
MD5:	EAA68CB8A1F87F06DB168B928B834D8A
SHA1:	94E754C7156F37A51E71B9495A581214BA56DCC0
SHA-256:	1BC4AB21ECB334050B5E829D61BB011F50CF38458EE5F897CC6AC90C6BA11D85
SHA-512:	A27682BDDFE7049551C4DA0C46D3AFF5676879F1934A68EF4397964213A136F3501F1AFC95200FD53AADA415D7C5B7CAE21510E3E00F5A89D8083501B52580CF
Malicious:	false
Reputation:	low
URL:	https://hbarthlow.bradentoncc.store/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 Server at hbarthlow.bradentoncc.store Port 443</address>.</body></html>.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_js/jquery.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4747
Category:	downloaded
Size (bytes):	1508
Entropy (8bit):	7.8477027555275205
Encrypted:	false
SSDEEP:	24:Xrzf8XZDffoGGCvdLqfo0PjJSSFQukScnoUZGymbk2s5raS/rhXq6vxndE/6DxfH:Xn0XZTfocvdCPj8SFQ87hvbkTb/d1p6S
MD5:	A4D3A029428859C989B9144EF91C95A7
SHA1:	968CEE1221DE99445307365EA2B5F24DEA7C96B3
SHA-256:	B57EDCA2DE1923384FD84209E44DF9AD844F5786E4A1A63684D8DAF3105DF75F
SHA-512:	74187C0D55B02DA2DB1909EB9C98246D7F79CE04CB4CDA1F35DABEE1F91C0DE353184A861AE0C7B8FBD48192997F7FF69DB11775E1DEF5D5ABDCD3D307760BA9
Malicious:	false
Reputation:	low
URL:	http://www.iana.org/help/example-domains
Preview:	...........X.n.6.>WO.......S4Z..'A....u.....fWt(Q!..lO}..^..3......hb.+r...7....Y..[..W.<...2.~.t..W.x.`/u.ec.4.#\P..LT.Xp..s.....r.M.c'...J7.......0...>.....9....&.R....0.d.I.K) .3&..$W..\..".AIJ6...5..[+.......'q.^X.....T._Aa...Rco..s.&..1.V.v3.e..."e+P....C....vD.S...F.......%..Y#H..M.?v`.{..Y.^.O`...0#.Y...e.....9.<b...r.d9..1..7J/.....Q..\|0.@...c...r.3..ot.-..d)......Bqk'q.r..D....}.'.o.,C...&.9..%..F;-.B.a...MW.`.s..[..Y.<..+b...W.<....sq>..i#.t.....a....h.x....).8)0#......dV....%^....F..@.I/!..wq.b..em>........f'..:5s1.<.....W.F.U..h......F...(...9..NT.[......7.Y0n..j..PFsm.]t5&$....L.-......Fx....Y...Ju...YB.+...A.e+.. k.D-BkS.&(.W(..X{..."L.R...$..,d..8.ac.x..........6...<f.Pe..U0l.....E...0..J........C@..4..x.(.dy...`..9Jtg....[.0.......B@v.. ..o[%.7.AyWI4[6.".qE[... Y...5U..\t...+.I....@y......c..[...n,t..c.<h._" -.?..{sww3..;...;......Ux.......,.. .P...t6MjL....'..$....y._.tm.....g....0.._<O..N.~..y.Y.AH....}.'.y..

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	7406
Entropy (8bit):	5.622090120332121
Encrypted:	false
SSDEEP:	96:JHKywzNjZb7coRVbm0SgR0M8cym9TgbvT4j92l6H4Yw7Extm9gnwbn:Nkr9R7uM8rbvT4j9Pw7cMbn
MD5:	E14A2530B3E9141D357AFAF2314D2E49
SHA1:	79B6F05AC4FE930DFC574C9E24B5A5FC11B936FF
SHA-256:	24BFB441173C83B8184B0C19CC8695615B5A3878A00E63E3DC52B3C430B18AB3
SHA-512:	B4D3A47186005F0871B84528E3DDC010366FDFF189FAA2EEB8189DEA3E1CF893593E0D11A7E94D1EDDF62C62F145AA26D5475E9D7E7F1CC5AD725ADD05DE7C24
Malicious:	false
Reputation:	low
Preview:	..............h...6... ..............00..........F...(....... ...............................{w..P...B...>...E...t...j...K...I....f...z..M...W...H...P...T....b...w..u....\.......l..i....t...e...T..X...Z....W!.].#..^$..u&.y.&.a.).T.,..U/.y./.eb0..;4.j.4..b6.Pb:.n.:.r.;..}@..lB..tG..zL.z.L...M.uKN...N.iaO..FQ.czQ...U...V..pX...X..[Z..xZ..m_...c.r~i...i.w.j..yl...s..ry...y...{..o}...................\|....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	41952
Entropy (8bit):	4.972770006286109
Encrypted:	false
SSDEEP:	768:kGrGTvl1TtFF7jYEI3bF8zpxdr3/TscBFqP4qzBoSK7A/T81wMXR83QdkgBBvuy9:kGrGTvl1TtFRHI3bizndr3wcBEwqzBoH
MD5:	8D9495EF3113D16E472CBA7BCE3DDA1F
SHA1:	13D3567D8450227113DF9794FA5DCFFFAC2051C9
SHA-256:	965C94C507BAC30D4CD69669DA239CF854259F371228EF14470D11B17CCC901B
SHA-512:	9B3CDEF0313967DF9100FBD88829A6793BCA7703126831930AE871A6881AC159A1F4EF201403BB04EA7DB0822180F0ADB4A8FB6407FFBF41B7A9C30A6BE445D9
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_css/2022/iana_website.css
Preview:	@charset "UTF-8";.@font-face {. font-family: "Noto";. src: local("Noto Sans"), local("NotoSans"), url("/_img/2022/fonts/NotoSans-Regular.woff");. font-weight: 400;.}.@font-face {. font-family: "Noto";. src: local("Noto Sans"), local("NotoSans"), url("/_img/2022/fonts/NotoSans-Italic.woff");. font-weight: 400;. font-style: italic;.}.@font-face {. font-family: "Noto";. font-weight: 600;. src: local("Noto Sans Bold"), local("NotoSans-Bold"), url("/_img/2022/fonts/NotoSans-Bold.woff");.}.@font-face {. font-family: "Source Code Pro";. src: local("Source Code Pro"), url("/_img/2022/fonts/SourceCodePro-Regular.woff");.}.@font-face {. font-family: "s-deva";. src: url("/_img/2022/fonts/NotoSansDevanagari-Regular.ttf");.}..script-deva {. font-family: "s-deva";.}..@font-face {. font-family: "s-hebr";. src: url("/_img/2022/fonts/NotoSansHebrew-Regular.ttf");.}..script-hebr {. font-family: "s-hebr";.}..html, body, div, span, object, iframe, h1, h2, h3, h4, h5, h6,.p, blockquote, p

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnQ6U1PsdSrcRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	416
Entropy (8bit):	5.032789000012038
Encrypted:	false
SSDEEP:	12:hYzx7BqhCjKn7ctQtqqJmrLgFDHo+4Nbx8oA2/T:hYzxBqhCj042Rto+4NBA2r
MD5:	0EB5F7CD507DABA712CA57436C093E81
SHA1:	D931290189362D2B4C4F1529B1EDA6D84AC4303D
SHA-256:	7DDFE06AB75FCAC1EE9065216103F4915D979ED468D989A1AA0FA6B8A2E827F6
SHA-512:	AFADFA10EE6006EB6F3CBF335C2B028C6AC7A02713C51255208A6D049E90EB0E9520D03363F70F8138A212451D376B301A309C1CB5B9CC20CBF7F6BF5C3D4C7E
Malicious:	false
Reputation:	low
URL:	https://href.li/?https://example.com
Preview:	<!DOCTYPE html>.<html><head>.<title>href.li</title>.<meta http-equiv="Refresh" content="0; url=https://example.com" />.<meta name="referrer" content="no-referrer" />.<script type="text/javascript">./* <![CDATA[ /.window.location.replace( "https:\/\/example.com" + window.location.hash );./ */.</script>.</head>.<body><p>Redirecting..<br /><a href="https://example.com">https://example.com</a></p></body></html>

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.285940878544194
Encrypted:	false
SSDEEP:	3:C3scYYhJQkKJdBSEoEGBkADMtv:C3L+dIXCmMtv
MD5:	BA2525002CEDBA259221570E88406E52
SHA1:	B1BBBD7E1220F145C43A176A5232C7FA2593D236
SHA-256:	4328256D40CDAA047D99460B43F6D77366982975E891A932EF8E00736FD82E1A
SHA-512:	39DC70B7D114BD4F90E398844FA8E81B4A79EFA8E13971A5D3339C846FDB98F574B656994F1150FB6A4EB70E747378FF94A0A61C194CE969ABED00B358E5069F
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_js/iana.js
Preview:	if (top !== self) {. top.location.replace(self.location.href);.}.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	4.757453290014263
Encrypted:	false
SSDEEP:	24:0pbMMpAYuOjM/fHxAYJwPp2AEPmbW1E6FD8EVyiJZni/1/EmDFf2kzj:0hpqkM6YJwh8PmbWO65siJZi/9jplzj
MD5:	84238DFC8092E5D9C0DAC8EF93371A07
SHA1:	4A3CE8EE11E091DD7923F4D8C6E5B5E41EC7C047
SHA-256:	EA8FAC7C65FB589B0D53560F5251F74F9E9B243478DCB6B3EA79B5E36449C8D9
SHA-512:	D06B93C883F8126A04589937A884032DF031B05518EED9D433EFB6447834DF2596AEBD500D69B8283E5702D988ED49655AE654C1683C7A4AE58BFA6B92F2B73A
Malicious:	false
Reputation:	low
URL:	https://example.com/favicon.ico
Preview:	<!doctype html>.<html>.<head>. <title>Example Domain</title>.. <meta charset="utf-8" />. <meta http-equiv="Content-type" content="text/html; charset=utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <style type="text/css">. body {. background-color: #f0f0f2;. margin: 0;. padding: 0;. font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;. . }. div {. width: 600px;. margin: 5em auto;. padding: 2em;. background-color: #fdfdff;. border-radius: 0.5em;. box-shadow: 2px 3px 7px 2px rgba(0,0,0,0.02);. }. a:link, a:visited {. color: #38488f;. text-decoration: none;. }. @media (max-width: 700px) {. div {. margin: 0 auto;. width: auto;. }. }. </style> .</head>..<body>.<div>. <h1>Example Domain</h1>. <p>This domai

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	7406
Entropy (8bit):	5.622090120332121
Encrypted:	false
SSDEEP:	96:JHKywzNjZb7coRVbm0SgR0M8cym9TgbvT4j92l6H4Yw7Extm9gnwbn:Nkr9R7uM8rbvT4j9Pw7cMbn
MD5:	E14A2530B3E9141D357AFAF2314D2E49
SHA1:	79B6F05AC4FE930DFC574C9E24B5A5FC11B936FF
SHA-256:	24BFB441173C83B8184B0C19CC8695615B5A3878A00E63E3DC52B3C430B18AB3
SHA-512:	B4D3A47186005F0871B84528E3DDC010366FDFF189FAA2EEB8189DEA3E1CF893593E0D11A7E94D1EDDF62C62F145AA26D5475E9D7E7F1CC5AD725ADD05DE7C24
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_img/bookmark_icon.ico
Preview:	..............h...6... ..............00..........F...(....... ...............................{w..P...B...>...E...t...j...K...I....f...z..M...W...H...P...T....b...w..u....\.......l..i....t...e...T..X...Z....W!.].#..^$..u&.y.&.a.).T.,..U/.y./.eb0..;4.j.4..b6.Pb:.n.:.r.;..}@..lB..tG..zL.z.L...M.uKN...N.iaO..FQ.czQ...U...V..pX...X..[Z..xZ..m_...c.r~i...i.w.j..yl...s..ry...y...{..o}...................\|....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	32870
Entropy (8bit):	4.300873890135518
Encrypted:	false
SSDEEP:	768:8Zr++SQvCrFQy7t5t1S9+UMTY1UeuXrGI:L+SQ8FQyztg9+UMc1Ue6N
MD5:	426B3AC01D3584C820F3B7F5985D6623
SHA1:	6FA7ECC4EB21D4FD7BFD1FD3550F0AAAB0AB43D7
SHA-256:	888B41C392A51D5AA6CA6DF224E345F74FFBB97A48422753A3E4F90F305D0004
SHA-512:	CD094F2ECE42AB1E4F789BC3027828CF98CC62044D456B8A5A66E946CB5CC3D3A1984A04C11923918F449A7CDEDBC1F54966679AAA8451D7E536B24637128047
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="IANA_Header_Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px".. y="0px" width="234px" height="72px" viewBox="0 0 468 144" enable-background="new 0 0 468 144" xml:space="preserve">.<g id="Text_Paths">..<path fill="#5A5A58" d="M5.129,136.483v-18.872h2.744v18.872H5.129z"/>..<path fill="#5A5A58" d="M21.929,136.483v-10.332c0-0.709-0.178-1.27-0.532-1.68c-0.355-0.411-0.99-0.616-1.904-0.616...c-0.71,0-1.354,0.098-1.932,0.294c-0.579,0.196-1.148,0.48-1.708,0.854v11.48h-2.492v-14.504c0.336-0.056,0.742-0.098,1.218-0.126...s0.9-0.042,1.274-0.042v1.428h0.14c0.728-0.634,1.437-1.068,2.128-1.302c0.69-0.233,1.418-0.351,2.184-0.351...c0.56,0,1.087,0.075,1.582,0.225c0.494,0.149,0.933,0.396,1.316,0.742c0.382,0.346,0.686,0.803,0.91,1.372...c0.224,0.569,0.336,1.273,0.336,2.113v10.444H21.929z"/>..<path fill="#

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:02:28.330950975 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:28.330964088 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:28.627701998 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:34.444266081 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 26, 2024 17:02:34.444354057 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:37.934240103 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:37.934256077 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:37.958153963 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:37.958182096 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:37.958270073 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:37.960071087 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:37.960086107 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:37.969268084 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:37.969348907 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:37.969429970 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:37.969916105 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:37.969953060 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.237955093 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:38.276532888 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.284594059 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.287058115 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.287074089 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.288716078 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.288882017 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.291105032 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.291160107 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.291305065 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.291485071 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.291491985 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.291510105 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.294766903 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.294855118 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.324193954 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.324462891 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.344449043 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.344456911 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.375566006 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.375593901 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.393621922 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.429054976 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.598984003 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.599138975 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.599220991 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.600044966 CEST	49705	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:02:38.600064039 CEST	443	49705	3.94.175.225	192.168.2.6
Apr 26, 2024 17:02:38.772454023 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:38.772492886 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:38.772550106 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:38.773644924 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:38.773659945 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:39.104922056 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:39.121145964 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:39.121159077 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:39.122359991 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:39.122437954 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:39.126256943 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:39.126347065 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:39.126768112 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:39.126775980 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:39.336123943 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:39.336235046 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:39.833826065 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:39.833863974 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:39.834031105 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:39.836478949 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:39.836496115 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:40.239162922 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:40.242224932 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:40.242235899 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:40.243875980 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:40.244225025 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:40.376818895 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:40.377074957 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:40.377703905 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:40.377789974 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:40.382891893 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:40.495137930 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:40.495146990 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:40.680594921 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:41.575834036 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:41.575907946 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:41.839875937 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:41.840050936 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.045790911 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.045818090 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.047653913 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.115554094 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.302340031 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.348123074 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.444536924 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.444700003 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.444726944 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.444770098 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.444787979 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.444796085 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.444840908 CEST	49710	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.444844961 CEST	443	49710	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.478514910 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.478558064 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.478627920 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.478873968 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.478888988 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.743000984 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.743089914 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.748476028 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.748492002 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.748800993 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.750960112 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:42.792162895 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.989793062 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.990000010 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:42.990099907 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:43.013082981 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:43.013082981 CEST	49711	443	192.168.2.6	23.204.76.112
Apr 26, 2024 17:02:43.013114929 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:43.013127089 CEST	443	49711	23.204.76.112	192.168.2.6
Apr 26, 2024 17:02:44.072217941 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:44.072422981 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:44.072509050 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:45.413358927 CEST	49708	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:45.413408995 CEST	443	49708	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:45.431184053 CEST	49712	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:45.431262970 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:45.431348085 CEST	49712	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:45.431850910 CEST	49712	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:45.431898117 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:45.755481958 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:45.755769968 CEST	49712	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:45.755831957 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:45.756989002 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:45.757514954 CEST	49712	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:45.757699013 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:45.757900000 CEST	49712	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:45.800143957 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:48.974303007 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:49.275552988 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 26, 2024 17:02:49.277009010 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 26, 2024 17:02:49.277074099 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:49.277096033 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 26, 2024 17:02:49.277138948 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:49.277165890 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 26, 2024 17:02:49.277184010 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 26, 2024 17:02:49.277209997 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:49.277226925 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:50.216304064 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:50.216463089 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:50.216641903 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:50.578905106 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:50.579022884 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:50.579097033 CEST	49712	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:50.582492113 CEST	49712	443	192.168.2.6	38.180.91.41
Apr 26, 2024 17:02:50.582528114 CEST	443	49712	38.180.91.41	192.168.2.6
Apr 26, 2024 17:02:50.583389044 CEST	49709	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:50.583409071 CEST	443	49709	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:50.713294029 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:50.713398933 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:50.713493109 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:50.713946104 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:50.713996887 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.214251995 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.214525938 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.214586973 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.216017962 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.216094017 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.420569897 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.420835018 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.421575069 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.421611071 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.476325035 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.793956041 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.794060946 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.794280052 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.796720028 CEST	49720	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.796744108 CEST	443	49720	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.800064087 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.800121069 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:51.800232887 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.800617933 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:51.800630093 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:52.277026892 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:52.277724981 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:52.277755022 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:52.278239012 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:52.279088020 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:52.279170036 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:52.279236078 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:52.324112892 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:52.330322981 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:52.831293106 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:52.831401110 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:52.831460953 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:52.832129002 CEST	49721	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:02:52.832154036 CEST	443	49721	188.116.24.148	192.168.2.6
Apr 26, 2024 17:02:53.011395931 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.011446953 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.011527061 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.011898994 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.011912107 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.338165045 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.338504076 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.338536978 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.339512110 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.339581013 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.340761900 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.340821981 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.341439009 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.341447115 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.394088030 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.672346115 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.672523975 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:53.672646046 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.784116030 CEST	49722	443	192.168.2.6	142.250.64.228
Apr 26, 2024 17:02:53.784152985 CEST	443	49722	142.250.64.228	192.168.2.6
Apr 26, 2024 17:02:54.796916008 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 26, 2024 17:02:54.798877001 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 26, 2024 17:02:56.552736998 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:56.552808046 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:56.552882910 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:56.553231955 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:56.553257942 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:56.946778059 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:56.947079897 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:56.947127104 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:56.948623896 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:56.948697090 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:56.949115992 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:56.949203968 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:56.949251890 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:56.996119976 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.140414000 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:57.140428066 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.333085060 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:57.916517973 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.916637897 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.916717052 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:57.916733980 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.916764021 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.916893005 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:57.916922092 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.917001963 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.917308092 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:57.917321920 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.929790974 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.929894924 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:57.929929018 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.942308903 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.942378044 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:57.942397118 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.952128887 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:57.952191114 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:57.952205896 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.004203081 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.004225969 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.050358057 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.101094007 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.107410908 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.107486010 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.107498884 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.107527971 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.107877970 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.120589972 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.133896112 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.133959055 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.133976936 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.147042990 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.147103071 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.147114992 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.160094023 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.160213947 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.160227060 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.160239935 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.160717010 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.173369884 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.185034037 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.185070992 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.185117960 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.185128927 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.185412884 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.196917057 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.208794117 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.208872080 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.208885908 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.220769882 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.220818996 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.220838070 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.220854998 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.220980883 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.232692003 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.232788086 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.232904911 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.232923031 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.244653940 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:58.244715929 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.245187044 CEST	49724	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:58.245199919 CEST	443	49724	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:59.830684900 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:59.830790997 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:59.830883980 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:59.831842899 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:59.831876040 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:59.862313032 CEST	49730	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:59.862400055 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:02:59.862461090 CEST	49730	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:59.864346981 CEST	49730	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:02:59.864386082 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.191637039 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.192306995 CEST	49730	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.192363977 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.192698002 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.194211960 CEST	49730	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.194284916 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.195121050 CEST	49730	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.219738007 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.220289946 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.220347881 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.220649004 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.223562002 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.223639011 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.224407911 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.240115881 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.268119097 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.525547028 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.525672913 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.525737047 CEST	49730	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.601028919 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.601059914 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.601078033 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.601120949 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.601145029 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.601198912 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.601227045 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.613946915 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.613970041 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.614046097 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.614064932 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.614126921 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.627156973 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.639961958 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.640038967 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.640058041 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.640080929 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.640180111 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.653198957 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.703710079 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.787163973 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.793492079 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.793569088 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.793576956 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.793625116 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.864608049 CEST	49730	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.864664078 CEST	443	49730	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:00.872567892 CEST	49728	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:00.872627974 CEST	443	49728	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:01.724765062 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:01.724869967 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:01.724942923 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:01.741713047 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:01.741749048 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:01.812407017 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:01.812494040 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:01.812572002 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:01.813199997 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:01.813216925 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:02.129512072 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:02.176765919 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:02.287298918 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:02.330668926 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.057456017 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.057482958 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.058023930 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.058311939 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.058345079 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.058763981 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.058888912 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.058953047 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.059545040 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.059611082 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.060488939 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.060621023 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.060760021 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.060777903 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.108110905 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.299478054 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.299539089 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.302655935 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.640726089 CEST	49734	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.640780926 CEST	443	49734	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.680200100 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.680335999 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.680411100 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.680471897 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.680584908 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.680644989 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.680660963 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.686516047 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.686573029 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.686585903 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.699529886 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.699594975 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.699609041 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.712539911 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.712599993 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.712615013 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.725732088 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.725800991 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.726268053 CEST	49733	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:03.726301908 CEST	443	49733	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:03.765361071 CEST	49736	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.765397072 CEST	443	49736	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.765454054 CEST	49736	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.766098976 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.766150951 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.766208887 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.769902945 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.769932985 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:03.770195007 CEST	49736	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:03.770207882 CEST	443	49736	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.081856012 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.081945896 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.082025051 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.082474947 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.082509995 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.255748034 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.256211996 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.256237984 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.256534100 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.256933928 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.256987095 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.257277012 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.257312059 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.257332087 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.263165951 CEST	443	49736	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.263489008 CEST	49736	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.263495922 CEST	443	49736	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.264038086 CEST	443	49736	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.264389992 CEST	49736	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.264456034 CEST	443	49736	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.343717098 CEST	49736	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.475460052 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.475701094 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.475735903 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.477216959 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.477281094 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.477580070 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.477665901 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.477718115 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.520160913 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.628760099 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.628792048 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.740696907 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.812285900 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.812375069 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.812622070 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.816241026 CEST	49737	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:04.816287041 CEST	443	49737	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:04.872936010 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.873092890 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.873157024 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.874073029 CEST	49738	443	192.168.2.6	192.178.50.36
Apr 26, 2024 17:03:04.874110937 CEST	443	49738	192.178.50.36	192.168.2.6
Apr 26, 2024 17:03:04.947357893 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:04.947433949 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:04.947510958 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:04.947959900 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:04.947994947 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.308053017 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.308304071 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:05.308336973 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.309201956 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.309258938 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:05.311070919 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:05.311124086 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.311353922 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:05.311362982 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.516124964 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.516187906 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:05.656429052 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.656508923 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:05.656639099 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:07.020687103 CEST	49739	443	192.168.2.6	82.180.161.153
Apr 26, 2024 17:03:07.020750046 CEST	443	49739	82.180.161.153	192.168.2.6
Apr 26, 2024 17:03:07.602117062 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.602163076 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:07.602238894 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.602489948 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.602505922 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:07.860308886 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:07.918859959 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.923168898 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.923197031 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:07.923692942 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:07.923707962 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:07.923757076 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.924315929 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:07.924365044 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.925707102 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.925808907 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:07.925964117 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:07.925993919 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:08.023716927 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:08.130544901 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:08.130696058 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:08.130759954 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:08.215833902 CEST	49740	443	192.168.2.6	192.0.78.27
Apr 26, 2024 17:03:08.215858936 CEST	443	49740	192.0.78.27	192.168.2.6
Apr 26, 2024 17:03:08.364214897 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.364303112 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.364639997 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.364682913 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.364706993 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.364727974 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.365109921 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.365124941 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.365304947 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.365334988 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.747684956 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.747706890 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.747947931 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.747986078 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.748027086 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.748054981 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.748864889 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.748908997 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.748936892 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.748963118 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.749931097 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.749985933 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.750169992 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.750231981 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.750277042 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.750284910 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.817696095 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.817723989 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.849534988 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.929245949 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.994770050 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.994883060 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:08.995068073 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.996294022 CEST	49742	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:08.996310949 CEST	443	49742	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:09.068500042 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:09.112154007 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:09.195087910 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:09.195338011 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:09.195703983 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:09.196301937 CEST	49741	443	192.168.2.6	93.184.215.14
Apr 26, 2024 17:03:09.196352959 CEST	443	49741	93.184.215.14	192.168.2.6
Apr 26, 2024 17:03:23.376631975 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:03:23.376665115 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:03:33.568490028 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:33.568536043 CEST	443	49744	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:33.568595886 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:33.569938898 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:33.569988966 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:33.570277929 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:33.570522070 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:33.570538044 CEST	443	49744	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:33.570854902 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:33.570878029 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:33.985843897 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:33.986567974 CEST	443	49744	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:34.037889957 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:34.037889004 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:35.989334106 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:35.989370108 CEST	443	49744	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:35.989691973 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:35.989722967 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:35.990796089 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:35.990809917 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:35.990874052 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:35.991055012 CEST	443	49744	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:35.991111994 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.000464916 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.000627995 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.000843048 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.000952959 CEST	443	49744	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.001470089 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.001482964 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.047718048 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.047718048 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.047734022 CEST	443	49744	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.094692945 CEST	49744	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.204185009 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.204467058 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.204520941 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.210684061 CEST	49745	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.210710049 CEST	443	49745	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.392725945 CEST	49747	80	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.472687960 CEST	49748	80	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.634211063 CEST	80	49747	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.634289026 CEST	49747	80	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.634474039 CEST	49747	80	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.694700956 CEST	80	49748	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.694803953 CEST	49748	80	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:36.873512983 CEST	80	49747	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.876046896 CEST	80	49747	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.876069069 CEST	80	49747	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.876085997 CEST	80	49747	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:36.876137972 CEST	49747	80	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.229274035 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.229326963 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.229398966 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.229657888 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.229734898 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.229808092 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.229931116 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.230001926 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.230065107 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.230230093 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.230242968 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.233063936 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.233104944 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.233253002 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.233283997 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.640063047 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.640470982 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.640530109 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.641993999 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.642092943 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.644769907 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.644898891 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.645239115 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.645253897 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.717444897 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.717830896 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.717854023 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.719309092 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.719368935 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.725472927 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.732800961 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.733383894 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.733413935 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.733858109 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.733952999 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.734169960 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.734184980 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.734882116 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.734946012 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.739101887 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.739202976 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.739372015 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.739387035 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:37.786072016 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:37.835160017 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.042395115 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.042426109 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.042435884 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.042462111 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.042500973 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.042500973 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.042546988 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.042582035 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.042582035 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.213146925 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.213283062 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.213361025 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.213490963 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.214018106 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.214029074 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.214063883 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.214080095 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.214097023 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.214128017 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.214253902 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.214296103 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.214302063 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.214850903 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.214855909 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.237564087 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.239999056 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240012884 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240036011 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240047932 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240060091 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240060091 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.240073919 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240120888 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.240140915 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240161896 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240217924 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.240231991 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240284920 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.240426064 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240434885 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240456104 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240488052 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.240750074 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240782022 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240801096 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.240812063 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.240844965 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.240900040 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.242880106 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.331279993 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.454864025 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.454879045 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.454909086 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.454920053 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.454931974 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.454947948 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.454953909 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.455023050 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.455140114 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.455151081 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.455185890 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.455338955 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.455387115 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.695362091 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695378065 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695450068 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695468903 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.695483923 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695522070 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695532084 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.695533991 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695548058 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695568085 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695576906 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695583105 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.695597887 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.695601940 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.695636988 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.695662975 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.875713110 CEST	80	49747	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.875785112 CEST	49747	80	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.934251070 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.934267998 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.934314966 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.934356928 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.934367895 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:38.934402943 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:38.934422970 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:39.618268013 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:39.685530901 CEST	49751	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:39.685550928 CEST	443	49751	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:39.740194082 CEST	49747	80	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:39.740233898 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:03:39.740443945 CEST	443	49706	3.94.175.225	192.168.2.6
Apr 26, 2024 17:03:39.740514994 CEST	49706	443	192.168.2.6	3.94.175.225
Apr 26, 2024 17:03:39.740871906 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:39.740914106 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:39.740966082 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:39.742611885 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:39.742626905 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:39.752183914 CEST	49753	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:39.752214909 CEST	443	49753	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:39.752266884 CEST	49753	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:39.752902031 CEST	49753	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:39.752917051 CEST	443	49753	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:39.756738901 CEST	49750	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:39.756798983 CEST	443	49750	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:39.981698990 CEST	80	49747	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.089730024 CEST	443	49753	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:40.132334948 CEST	49753	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:40.132359028 CEST	443	49753	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:40.133820057 CEST	443	49753	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:40.134475946 CEST	49753	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:40.134653091 CEST	443	49753	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:40.175579071 CEST	49753	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:40.218025923 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.218305111 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.218317986 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.219441891 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.220048904 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.220243931 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.220247984 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.264143944 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.269313097 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.410595894 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.410614014 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.410696983 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.647598028 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.647780895 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.647826910 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.654156923 CEST	49749	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.654186964 CEST	443	49749	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.686101913 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.686160088 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.686197996 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.686212063 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.686218977 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.686247110 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.686264992 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.686382055 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.686428070 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.686436892 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.686481953 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.727893114 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.727948904 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.728070021 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.728408098 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.728507042 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.728619099 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.728669882 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.728689909 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.728849888 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.728868008 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.918165922 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.918200016 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.918248892 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.918253899 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.918315887 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.918327093 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.918339014 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.918385983 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.918442011 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.918448925 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.918690920 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:40.918745041 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.920454979 CEST	49752	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:40.920475006 CEST	443	49752	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.103086948 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.103127956 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.103303909 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.104789019 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.104804993 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.133541107 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.134181976 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.134203911 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.135637999 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.135699987 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.136518955 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.136593103 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.137197971 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.137204885 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.190607071 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.220844984 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.223027945 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.223087072 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.224572897 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.224656105 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.225645065 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.225754023 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.226248980 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.226265907 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.267652988 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.531482935 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.531522989 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.531533003 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.531579018 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.531614065 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.532059908 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.532119989 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.532124043 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.532136917 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.532181978 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.532835960 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.532845974 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.532876015 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.532907009 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.532912970 CEST	443	49754	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.533050060 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.533771992 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.533791065 CEST	49754	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.576308966 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.576595068 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.576616049 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.578047037 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.578120947 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.578520060 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.578596115 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.580905914 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.580914021 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.625929117 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.708683014 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.708740950 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.708791971 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.708822012 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.729170084 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.729254007 CEST	443	49755	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.729306936 CEST	49755	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.806106091 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.806174994 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:41.806263924 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.807089090 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:41.807136059 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.048907042 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.048979044 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.049053907 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.049073935 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.049141884 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.049190998 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.049205065 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.049235106 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.049283028 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.049288988 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.049333096 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.049674034 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.049729109 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.050538063 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.050559044 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.050621033 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.050925016 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.050985098 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.280224085 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.280339956 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.280395985 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.280424118 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.280455112 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.280482054 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.281857014 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.293379068 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.293406963 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.293570995 CEST	49756	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.293591976 CEST	443	49756	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.294202089 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.294754028 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.294872999 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.295101881 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.336141109 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.739295959 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.739350080 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.739464998 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.739490032 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.739510059 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.739562988 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:42.739574909 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.739694118 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:42.739749908 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:43.624197960 CEST	49757	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:43.624245882 CEST	443	49757	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:44.556778908 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:44.556813955 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:44.556885004 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:44.557701111 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:44.557713032 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:44.965931892 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.031862020 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.217453003 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.217478991 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.218796015 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.219278097 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.219451904 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.219472885 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.260139942 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.422483921 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.424180984 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.424391985 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.424452066 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.424460888 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.424490929 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.424503088 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.424515963 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.424640894 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.424653053 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.424835920 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:45.424894094 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.425988913 CEST	49758	443	192.168.2.6	192.0.33.8
Apr 26, 2024 17:03:45.425997972 CEST	443	49758	192.0.33.8	192.168.2.6
Apr 26, 2024 17:03:49.422609091 CEST	49736	443	192.168.2.6	188.116.24.148
Apr 26, 2024 17:03:49.422627926 CEST	443	49736	188.116.24.148	192.168.2.6
Apr 26, 2024 17:03:50.071547031 CEST	443	49753	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:50.071614027 CEST	443	49753	142.250.217.164	192.168.2.6
Apr 26, 2024 17:03:50.071656942 CEST	49753	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:51.347198963 CEST	49753	443	192.168.2.6	142.250.217.164
Apr 26, 2024 17:03:51.347269058 CEST	443	49753	142.250.217.164	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:02:35.248228073 CEST	53	64937	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:35.286613941 CEST	53	52666	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:36.156439066 CEST	53	60496	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:37.785712004 CEST	63868	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:37.785839081 CEST	63977	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:37.915755033 CEST	53	63868	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:37.916068077 CEST	53	63977	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:38.605345011 CEST	57179	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:38.605945110 CEST	63817	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:38.731065035 CEST	53	57179	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:38.771450043 CEST	53	63817	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:39.703783989 CEST	54189	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:39.703783989 CEST	65147	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:39.828918934 CEST	53	54189	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:39.829324961 CEST	53	65147	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:50.583900928 CEST	63854	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:50.584567070 CEST	57840	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:50.710788965 CEST	53	63854	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:50.712268114 CEST	53	57840	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:52.884653091 CEST	59902	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:52.884835958 CEST	65227	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:53.010081053 CEST	53	59902	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:53.010396957 CEST	53	65227	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:53.937108040 CEST	53	51183	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:56.242203951 CEST	53	63198	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:56.414264917 CEST	64168	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:56.414366961 CEST	60448	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:02:56.539400101 CEST	53	64168	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:56.540090084 CEST	53	60448	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:56.677339077 CEST	53	52539	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:58.059612989 CEST	53	64762	1.1.1.1	192.168.2.6
Apr 26, 2024 17:02:59.990745068 CEST	53	58896	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:01.867640972 CEST	53	59352	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:03.951329947 CEST	51645	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:03.951710939 CEST	52573	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:04.077398062 CEST	53	51645	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:04.077567101 CEST	53	52573	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:04.818741083 CEST	53078	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:04.819521904 CEST	58540	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:04.946151972 CEST	53	53078	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:04.946551085 CEST	53	58540	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:07.475076914 CEST	54369	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:07.475759983 CEST	53860	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:07.601495028 CEST	53	53860	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:07.601532936 CEST	53	54369	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:08.219860077 CEST	61240	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:08.220041990 CEST	55964	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:08.346256971 CEST	53	61240	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:08.347274065 CEST	53	55964	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:15.329752922 CEST	53	52063	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:33.415016890 CEST	59120	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:33.415328026 CEST	62838	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:33.566479921 CEST	53	62838	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:33.566596985 CEST	53	59120	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:36.123471975 CEST	53	62973	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:36.216311932 CEST	52394	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:36.216707945 CEST	60999	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:36.345546961 CEST	53	52394	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:36.388895988 CEST	53	60999	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:37.049809933 CEST	64990	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:37.050508022 CEST	52559	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:37.175738096 CEST	53	64990	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:37.223603010 CEST	53	52559	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:38.173755884 CEST	53	63627	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:39.741874933 CEST	53	59016	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:40.931371927 CEST	62433	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:40.931843042 CEST	50687	53	192.168.2.6	1.1.1.1
Apr 26, 2024 17:03:41.057627916 CEST	53	62433	1.1.1.1	192.168.2.6
Apr 26, 2024 17:03:41.107012987 CEST	53	50687	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 17:03:39.741990089 CEST	192.168.2.6	1.1.1.1	c223	(Port unreachable)	Destination Unreachable
Apr 26, 2024 17:03:41.107103109 CEST	192.168.2.6	1.1.1.1	c23c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 17:02:37.785712004 CEST	192.168.2.6	1.1.1.1	0xd5c0	Standard query (0)	cdp1.tracking.e360.salesforce.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:37.785839081 CEST	192.168.2.6	1.1.1.1	0x7903	Standard query (0)	cdp1.tracking.e360.salesforce.com	65	IN (0x0001)	false
Apr 26, 2024 17:02:38.605345011 CEST	192.168.2.6	1.1.1.1	0x741d	Standard query (0)	vmmessanger.rdocmglobal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:38.605945110 CEST	192.168.2.6	1.1.1.1	0x926f	Standard query (0)	vmmessanger.rdocmglobal.com	65	IN (0x0001)	false
Apr 26, 2024 17:02:39.703783989 CEST	192.168.2.6	1.1.1.1	0xe8cf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:39.703783989 CEST	192.168.2.6	1.1.1.1	0x28c5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:02:50.583900928 CEST	192.168.2.6	1.1.1.1	0x9f2e	Standard query (0)	hbarthlow.bradentoncc.store	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:50.584567070 CEST	192.168.2.6	1.1.1.1	0x47b	Standard query (0)	hbarthlow.bradentoncc.store	65	IN (0x0001)	false
Apr 26, 2024 17:02:52.884653091 CEST	192.168.2.6	1.1.1.1	0xf3de	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:52.884835958 CEST	192.168.2.6	1.1.1.1	0x23c2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:02:56.414264917 CEST	192.168.2.6	1.1.1.1	0xd522	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:56.414366961 CEST	192.168.2.6	1.1.1.1	0x9a4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:03:03.951329947 CEST	192.168.2.6	1.1.1.1	0x6ea3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:03.951710939 CEST	192.168.2.6	1.1.1.1	0xdd05	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:03:04.818741083 CEST	192.168.2.6	1.1.1.1	0xafcb	Standard query (0)	americanrealtyij.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:04.819521904 CEST	192.168.2.6	1.1.1.1	0xb6bd	Standard query (0)	americanrealtyij.com	65	IN (0x0001)	false
Apr 26, 2024 17:03:07.475076914 CEST	192.168.2.6	1.1.1.1	0xd75c	Standard query (0)	href.li	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:07.475759983 CEST	192.168.2.6	1.1.1.1	0x118	Standard query (0)	href.li	65	IN (0x0001)	false
Apr 26, 2024 17:03:08.219860077 CEST	192.168.2.6	1.1.1.1	0xbfe7	Standard query (0)	example.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:08.220041990 CEST	192.168.2.6	1.1.1.1	0x8831	Standard query (0)	example.com	65	IN (0x0001)	false
Apr 26, 2024 17:03:33.415016890 CEST	192.168.2.6	1.1.1.1	0xa6fb	Standard query (0)	www.iana.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:33.415328026 CEST	192.168.2.6	1.1.1.1	0xce48	Standard query (0)	www.iana.org	65	IN (0x0001)	false
Apr 26, 2024 17:03:36.216311932 CEST	192.168.2.6	1.1.1.1	0x32a	Standard query (0)	www.iana.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:36.216707945 CEST	192.168.2.6	1.1.1.1	0x225a	Standard query (0)	www.iana.org	65	IN (0x0001)	false
Apr 26, 2024 17:03:37.049809933 CEST	192.168.2.6	1.1.1.1	0x56ce	Standard query (0)	www.iana.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:37.050508022 CEST	192.168.2.6	1.1.1.1	0x5dc2	Standard query (0)	www.iana.org	65	IN (0x0001)	false
Apr 26, 2024 17:03:40.931371927 CEST	192.168.2.6	1.1.1.1	0x65b4	Standard query (0)	www.iana.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:40.931843042 CEST	192.168.2.6	1.1.1.1	0x7e4b	Standard query (0)	www.iana.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 17:02:37.915755033 CEST	1.1.1.1	192.168.2.6	0xd5c0	No error (0)	cdp1.tracking.e360.salesforce.com	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:02:37.915755033 CEST	1.1.1.1	192.168.2.6	0xd5c0	No error (0)	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		3.94.175.225	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:37.915755033 CEST	1.1.1.1	192.168.2.6	0xd5c0	No error (0)	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		52.72.218.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:37.915755033 CEST	1.1.1.1	192.168.2.6	0xd5c0	No error (0)	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		52.205.88.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:37.916068077 CEST	1.1.1.1	192.168.2.6	0x7903	No error (0)	cdp1.tracking.e360.salesforce.com	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:02:38.731065035 CEST	1.1.1.1	192.168.2.6	0x741d	No error (0)	vmmessanger.rdocmglobal.com		38.180.91.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:39.828918934 CEST	1.1.1.1	192.168.2.6	0xe8cf	No error (0)	www.google.com		142.250.217.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:39.829324961 CEST	1.1.1.1	192.168.2.6	0x28c5	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:02:49.690264940 CEST	1.1.1.1	192.168.2.6	0x16	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:02:49.690264940 CEST	1.1.1.1	192.168.2.6	0x16	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:50.710788965 CEST	1.1.1.1	192.168.2.6	0x9f2e	No error (0)	hbarthlow.bradentoncc.store		188.116.24.148	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:53.010081053 CEST	1.1.1.1	192.168.2.6	0xf3de	No error (0)	www.google.com		142.250.64.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:53.010396957 CEST	1.1.1.1	192.168.2.6	0x23c2	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:02:56.539400101 CEST	1.1.1.1	192.168.2.6	0xd522	No error (0)	www.google.com		142.250.217.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:02:56.540090084 CEST	1.1.1.1	192.168.2.6	0x9a4	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:03:04.077398062 CEST	1.1.1.1	192.168.2.6	0x6ea3	No error (0)	www.google.com		192.178.50.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:04.077567101 CEST	1.1.1.1	192.168.2.6	0xdd05	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:03:04.371191978 CEST	1.1.1.1	192.168.2.6	0x25a1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:04.371191978 CEST	1.1.1.1	192.168.2.6	0x25a1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:04.946151972 CEST	1.1.1.1	192.168.2.6	0xafcb	No error (0)	americanrealtyij.com		82.180.161.153	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:07.601532936 CEST	1.1.1.1	192.168.2.6	0xd75c	No error (0)	href.li		192.0.78.27	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:07.601532936 CEST	1.1.1.1	192.168.2.6	0xd75c	No error (0)	href.li		192.0.78.26	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:08.346256971 CEST	1.1.1.1	192.168.2.6	0xbfe7	No error (0)	example.com		93.184.215.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:30.440479040 CEST	1.1.1.1	192.168.2.6	0x749b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:30.440479040 CEST	1.1.1.1	192.168.2.6	0x749b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:33.566479921 CEST	1.1.1.1	192.168.2.6	0xce48	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:33.566596985 CEST	1.1.1.1	192.168.2.6	0xa6fb	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:33.566596985 CEST	1.1.1.1	192.168.2.6	0xa6fb	No error (0)	ianawww.vip.icann.org		192.0.33.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:36.345546961 CEST	1.1.1.1	192.168.2.6	0x32a	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:36.345546961 CEST	1.1.1.1	192.168.2.6	0x32a	No error (0)	ianawww.vip.icann.org		192.0.33.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:36.388895988 CEST	1.1.1.1	192.168.2.6	0x225a	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:37.175738096 CEST	1.1.1.1	192.168.2.6	0x56ce	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:37.175738096 CEST	1.1.1.1	192.168.2.6	0x56ce	No error (0)	ianawww.vip.icann.org		192.0.33.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:37.223603010 CEST	1.1.1.1	192.168.2.6	0x5dc2	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:41.057627916 CEST	1.1.1.1	192.168.2.6	0x65b4	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:41.057627916 CEST	1.1.1.1	192.168.2.6	0x65b4	No error (0)	ianawww.vip.icann.org		192.0.33.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:03:41.107012987 CEST	1.1.1.1	192.168.2.6	0x7e4b	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:51.268403053 CEST	1.1.1.1	192.168.2.6	0x7c3f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:03:51.268403053 CEST	1.1.1.1	192.168.2.6	0x7c3f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cdp1.tracking.e360.salesforce.com

vmmessanger.rdocmglobal.com

fs.microsoft.com

hbarthlow.bradentoncc.store

https:

www.google.com

americanrealtyij.com

href.li

example.com

www.iana.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49747	192.0.33.8	80	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 17:03:36.634474039 CEST	447	OUT	GET /help/example-domains HTTP/1.1 Host: www.iana.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 17:03:36.876046896 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:57:38 GMT Server: Apache X-Content-Type-Options: nosniff Vary: Accept-Encoding Last-Modified: Wed, 06 Mar 2024 16:51:21 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, max-age=3600 Expires: Fri, 26 Apr 2024 15:57:38 GMT Content-Encoding: gzip Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 358 Content-Length: 1508 Keep-Alive: timeout=2, max=358 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 cd 6e dc 36 10 3e 57 4f c1 e8 d0 93 b5 b2 b7 a8 53 34 5a 01 0b 27 41 0c 14 0b c3 75 10 a0 97 80 a2 66 57 74 28 51 21 a9 dd 6c 4f 7d 8d be 5e 9f a4 33 a4 b4 ff b1 e3 06 68 62 c0 2b 72 c4 f9 e1 37 c3 99 a1 a2 ec 59 a9 85 5b b7 c0 2a 57 ab 3c ca 86 07 f0 32 8f 7e c8 9c 74 0a f2 57 9f 78 dd 2a 60 2f 75 cd 65 63 b3 34 90 23 5c 50 83 e3 4c 54 dc 58 70 93 b8 73 f3 e4 97 98 a5 f9 f0 a6 72 ae 4d e0 63 27 97 93 f8 4a 37 0e 1a 97 90 ba 98 89 30 9b c4 0e 3e b9 94 d4 be d8 c8 39 12 d3 f0 1a 26 f1 52 c2 aa d5 c6 ed 30 af 64 e9 aa 49 09 4b 29 20 f1 93 33 26 1b e9 24 57 89 15 5c c1 e4 22 c8 41 49 4a 36 1f Data Ascii: Xn6>WOS4Z'AufWt(Q!lO}^3hb+r7Y[W<2~tWx`/uec4#\PLTXpsrMc'J70>9&R0dIK) 3&$W\"AIJ6
Apr 26, 2024 17:03:36.876069069 CEST	1289	IN	Data Raw: 98 01 35 89 ad 5b 2b b0 15 00 8a aa 0c cc 27 71 fa 5e 58 9b 8e cf c7 e3 54 f2 86 bf 5f 41 61 a5 83 11 52 63 6f c6 0e 73 85 26 88 ce 31 89 56 c4 8c 76 33 89 65 cd 17 90 22 65 2b 50 d6 8b b4 d0 fa 43 cd cd 87 f7 b4 76 44 af 53 8f 9a 15 46 b6 ae e7 Data Ascii: 5[+'q^XT_AaRcos&1Vv3e"e+PCvDSF%Y#HM?v`{Y^O`0#Ye.9<brd917J/Q\|0@cr3ot-d)Bqk'qrD}'*o,C&9%F;-BaMW
Apr 26, 2024 17:03:36.876085997 CEST	8	IN	Data Raw: 06 8d 14 2b 8b 12 00 00 Data Ascii: +

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 26, 2024 17:02:49.277165890 CEST	173.222.162.64	443	192.168.2.6	49698	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
Apr 26, 2024 17:02:49.277165890 CEST	173.222.162.64	443	192.168.2.6	49698	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49705	3.94.175.225	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:38 UTC	1290	OUT	GET /click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI HTTP/1.1 Host: cdp1.tracking.e360.salesforce.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:02:38 UTC	255	IN	HTTP/1.1 302 Found location: https://vmmessanger.rdocmglobal.com/docs/index.php?mail=%20hbarthlow@securustechnologies.com&paths=above&link=Fax_Outlook content-language: en-US content-length: 0 date: Fri, 26 Apr 2024 15:02:38 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49708	38.180.91.41	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:39 UTC	755	OUT	GET /docs/index.php?mail=%20hbarthlow@securustechnologies.com&paths=above&link=Fax_Outlook HTTP/1.1 Host: vmmessanger.rdocmglobal.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:02:44 UTC	409	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 15:02:39 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Set-Cookie: PHPSESSID=jaoob916gnfffg586v0t7rbn5m; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: index0.php Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49710	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:02:42 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=57663 Date: Fri, 26 Apr 2024 15:02:42 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49711	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:42 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:02:42 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=57657 Date: Fri, 26 Apr 2024 15:02:42 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 15:02:42 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49712	38.180.91.41	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:45 UTC	731	OUT	GET /docs/index0.php HTTP/1.1 Host: vmmessanger.rdocmglobal.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=jaoob916gnfffg586v0t7rbn5m
2024-04-26 15:02:50 UTC	604	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 15:02:45 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: https://hbarthlow.bradentoncc.store/index.php?mail= hbarthlow@securustechnologies.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49720	188.116.24.148	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:51 UTC	899	OUT	GET /index.php?mail=%20hbarthlow@securustechnologies.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook HTTP/1.1 Host: hbarthlow.bradentoncc.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:02:51 UTC	409	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 15:02:51 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Set-Cookie: PHPSESSID=nr2sene7cj9t4pb98cmbg9qrej; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: index0.php Content-Length: 2 Connection: close Content-Type: text/html; charset=UTF-8
2024-04-26 15:02:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49721	188.116.24.148	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:52 UTC	726	OUT	GET /index0.php HTTP/1.1 Host: hbarthlow.bradentoncc.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=nr2sene7cj9t4pb98cmbg9qrej
2024-04-26 15:02:52 UTC	329	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:02:52 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 1255 Connection: close Content-Type: text/html; charset=UTF-8
2024-04-26 15:02:52 UTC	1255	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 20 49 6e 74 65 67 72 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 49 6e 63 6c 75 64 65 20 74 68 65 20 72 65 43 41 50 54 43 48 41 20 76 33 20 41 50 49 20 73 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>reCAPTCHA Integration</title> ... Include the reCAPTCHA v3 API script --> <script sr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49722	142.250.64.228	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:53 UTC	666	OUT	GET /recaptcha/api.js?render=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hbarthlow.bradentoncc.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:02:53 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 15:02:53 GMT Date: Fri, 26 Apr 2024 15:02:53 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:02:53 UTC	727	IN	Data Raw: 34 65 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4e8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 15:02:53 UTC	536	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.i
2024-04-26 15:02:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49724	142.250.217.164	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:02:56 UTC	953	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50ev HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hbarthlow.bradentoncc.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:02:57 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 15:02:57 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-1l9iJalIDq01ps1znbPipQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:02:57 UTC	364	IN	Data Raw: 32 62 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b06<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 15:02:57 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 15:02:57 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 15:02:57 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 15:02:57 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 15:02:57 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 15:02:57 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 31 6c 39 69 4a 61 6c 49 44 71 30 31 70 73 31 7a 6e 62 50 69 70 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="1l9iJalIDq01ps1znbPipQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 15:02:57 UTC	1255	IN	Data Raw: 51 4b 53 5a 6b 42 44 75 52 75 39 4d 62 69 77 57 58 68 56 2d 30 6b 71 69 35 61 63 5a 7a 42 55 79 55 72 55 49 30 4b 79 2d 66 64 50 56 69 78 36 33 30 58 41 73 42 6c 72 70 46 71 76 6a 72 67 75 58 71 63 66 31 38 2d 46 4d 4c 35 57 6a 58 49 5f 71 58 66 37 44 45 4d 64 73 55 66 36 65 50 36 65 43 7a 45 78 30 57 64 42 2d 65 73 33 79 69 46 68 48 56 56 52 64 77 64 65 73 6d 61 62 55 49 39 78 47 37 68 75 4a 6f 67 56 32 75 67 4f 58 71 59 52 7a 63 55 66 4d 49 73 32 68 6b 6d 54 76 78 62 36 69 66 74 55 79 7a 4a 6c 76 75 57 71 61 36 74 66 2d 71 39 78 73 33 72 4e 6c 6f 47 44 55 2d 48 37 48 45 54 64 59 31 5f 61 6b 6f 4c 56 4c 44 6a 6c 51 72 70 6f 73 78 63 34 72 34 6e 76 51 56 54 49 54 5f 45 5a 56 65 56 30 56 33 32 2d 49 66 46 43 68 31 74 45 43 31 6b 37 38 65 65 4b 79 79 62 64 Data Ascii: QKSZkBDuRu9MbiwWXhV-0kqi5acZzBUyUrUI0Ky-fdPVix630XAsBlrpFqvjrguXqcf18-FML5WjXI_qXf7DEMdsUf6eP6eCzEx0WdB-es3yiFhHVVRdwdesmabUI9xG7huJogV2ugOXqYRzcUfMIs2hkmTvxb6iftUyzJlvuWqa6tf-q9xs3rNloGDU-H7HETdY1_akoLVLDjlQrposxc4r4nvQVTIT_EZVeV0V32-IfFCh1tEC1k78eeKyybd
2024-04-26 15:02:57 UTC	1255	IN	Data Raw: 59 6c 6b 79 32 59 50 33 4c 54 73 74 78 76 4e 6d 51 68 67 71 4f 34 67 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 31 6c 39 69 4a 61 6c 49 44 71 30 31 70 73 31 7a 6e 62 50 69 70 51 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 6c 56 31 46 77 63 32 5a 57 58 31 52 72 4c 6d 70 7a 5c 78 32 32 Data Ascii: Ylky2YP3LTstxvNmQhgqO4g"><script type="text/javascript" nonce="1l9iJalIDq01ps1znbPipQ"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3RlV1Fwc2ZWX1RrLmpz\x22
2024-04-26 15:02:57 UTC	618	IN	Data Raw: 4e 36 52 57 30 34 54 30 4e 6b 65 46 5a 51 54 55 64 4e 4e 57 70 4f 59 55 46 53 63 6b 38 76 53 48 6f 79 57 48 4a 6d 54 47 56 53 62 53 74 4b 55 32 70 70 61 58 4e 33 62 6a 6c 58 4b 32 77 30 63 53 39 6a 57 6b 74 50 4d 30 63 35 55 6c 42 48 4e 32 5a 61 63 57 74 5a 52 56 42 30 65 56 6c 57 5a 6d 78 56 54 55 56 42 65 57 6c 46 59 33 70 79 55 46 56 71 4d 55 34 7a 4d 7a 52 51 55 45 51 31 51 57 78 73 57 55 5a 54 59 56 4e 78 64 47 68 4c 63 6d 4a 4b 4e 47 63 72 56 55 6b 33 61 33 42 52 53 33 6f 77 63 44 42 76 63 31 6c 30 59 33 68 4f 63 54 64 6f 55 6b 6c 33 59 7a 5a 75 64 33 70 6c 4d 32 49 34 5a 6c 4a 77 54 58 70 47 61 47 74 6c 4f 58 46 73 56 58 55 77 55 55 64 77 56 33 70 4e 52 32 4e 6a 55 47 74 46 57 47 63 79 54 79 39 45 53 31 4a 58 63 6a 41 31 5a 30 4a 56 65 6a 46 35 56 Data Ascii: N6RW04T0NkeFZQTUdNNWpOYUFSck8vSHoyWHJmTGVSbStKU2ppaXN3bjlXK2w0cS9jWktPM0c5UlBHN2ZacWtZRVB0eVlWZmxVTUVBeWlFY3pyUFVqMU4zMzRQUEQ1QWxsWUZTYVNxdGhLcmJKNGcrVUk3a3BRS3owcDBvc1l0Y3hOcTdoUkl3YzZud3plM2I4ZlJwTXpGaGtlOXFsVXUwUUdwV3pNR2NjUGtFWGcyTy9ES1JXcjA1Z0JVejF5V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49730	142.250.217.164	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:00 UTC	842	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50ev Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:00 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 26 Apr 2024 15:03:00 GMT Date: Fri, 26 Apr 2024 15:03:00 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:03:00 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-26 15:03:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49728	142.250.217.164	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:00 UTC	830	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50ev Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:00 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 17:40:07 GMT Expires: Fri, 25 Apr 2025 17:40:07 GMT Cache-Control: public, max-age=31536000 Age: 76973 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:03:00 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 3d Data Ascii: eateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438=
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 67 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d 28 Data Ascii: g[w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=(
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 2e 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 Data Ascii: .gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)re
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 37 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e 42 Data Ascii: 7,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.B
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c 59 Data Ascii: function(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,Y
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 29 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 37 Data Ascii: ),P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,247
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: n[function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){r
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 4e 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 73 Data Ascii: N]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.mes
2024-04-26 15:03:00 UTC	1255	IN	Data Raw: 2e 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 Data Ascii: .A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallbac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49734	188.116.24.148	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:03 UTC	666	OUT	GET /favicon.ico HTTP/1.1 Host: hbarthlow.bradentoncc.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hbarthlow.bradentoncc.store/index0.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=nr2sene7cj9t4pb98cmbg9qrej
2024-04-26 15:03:03 UTC	204	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 15:03:03 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 Content-Length: 314 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-04-26 15:03:03 UTC	314	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 38 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 33 2e 31 2e 33 20 50 48 50 2f 38 2e 30 2e 33 30 20 53 65 72 76 65 72 20 61 74 20 68 62 61 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 Server at hba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49733	142.250.217.164	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:03 UTC	934	OUT	POST /recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7035 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9oYmFydGhsb3cuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=sls9zxq50ev Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:03 UTC	7035	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 a4 0f 30 33 41 46 63 57 65 41 37 4b 31 35 34 58 2d 35 6b 72 5a 53 6e 5f 61 39 76 4d 32 71 39 77 51 6d 6e 64 4a 4b 79 4b 67 61 66 59 48 34 41 45 62 4f 51 6b 34 46 38 55 6e 42 6c 6e 62 35 65 49 68 41 59 35 49 7a 76 4b 38 66 63 6d 65 49 48 38 38 43 69 79 70 36 35 73 43 54 72 53 31 51 72 49 64 67 37 74 6e 44 68 7a 67 6b 5a 46 65 62 7a 4a 4a 6d 44 68 56 72 72 74 65 47 6e 53 43 38 72 73 59 4b 43 45 68 78 31 59 53 4c 52 43 63 45 35 35 54 42 44 6e 61 46 52 68 49 48 2d 55 54 76 4a 6f 76 56 6b 57 63 59 5a 4f 55 69 74 6d 6b 31 50 53 56 31 38 59 41 34 38 53 5a 6b 53 6b 5f 50 34 52 6e 74 41 45 6a 6e 72 55 79 4c 2d 42 59 72 52 4e 44 38 42 36 33 67 4b 37 64 53 6f 38 52 35 50 6e 64 4a 31 59 Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA7K154X-5krZSn_a9vM2q9wQmndJKyKgafYH4AEbOQk4F8UnBlnb5eIhAY5IzvK8fcmeIH88Ciyp65sCTrS1QrIdg7tnDhzgkZFebzJJmDhVrrteGnSC8rsYKCEhx1YSLRCcE55TBDnaFRhIH-UTvJovVkWcYZOUitmk1PSV18YA48SZkSk_P4RntAEjnrUyL-BYrRND8B63gK7dSo8R5PndJ1Y
2024-04-26 15:03:03 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 26 Apr 2024 15:03:03 GMT Expires: Fri, 26 Apr 2024 15:03:03 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AEdsM9ORDdRWOZF4CzfAT24Edyv7yis2bkyn_VHaq19IjUlV4TIoU-msljnPtqhKfcNyA2IOwoIoUA0QZDylG1Q;Path=/recaptcha;Expires=Wed, 23-Oct-2024 15:03:03 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:03:03 UTC	559	IN	Data Raw: 39 65 31 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 61 50 2d 34 55 6e 4f 5f 6a 72 4f 46 6f 67 76 30 41 4e 58 30 39 33 6d 66 4e 76 4f 6e 50 73 63 79 45 6e 6a 65 33 6a 49 30 53 53 36 44 45 47 58 4d 43 66 78 2d 36 42 61 70 42 37 36 65 47 64 58 48 64 68 53 58 71 67 74 71 53 37 63 79 52 63 50 67 64 79 79 33 32 30 37 55 6b 56 6e 35 43 46 49 6a 66 77 49 77 2d 47 78 59 42 6d 30 70 2d 55 7a 31 37 32 2d 56 6f 30 6f 6f 30 57 57 6b 51 6c 65 72 4a 4e 67 5a 4e 64 7a 31 67 56 54 69 5f 45 69 39 65 4d 52 31 57 6d 35 56 66 65 63 78 4e 64 6b 52 5a 41 51 71 68 56 7a 59 71 4c 5a 66 2d 32 6f 4f 2d 49 43 50 2d 66 51 45 57 53 44 41 55 70 70 53 58 6c 75 30 49 41 7a 36 72 70 51 68 56 47 42 31 76 31 74 35 4e 56 4d 70 55 50 66 51 73 4c 45 77 63 74 Data Ascii: 9e1)]}'["rresp","03AFcWeA7aP-4UnO_jrOFogv0ANX093mfNvOnPscyEnje3jI0SS6DEGXMCfx-6BapB76eGdXHdhSXqgtqS7cyRcPgdyy3207UkVn5CFIjfwIw-GxYBm0p-Uz172-Vo0oo0WWkQlerJNgZNdz1gVTi_Ei9eMR1Wm5VfecxNdkRZAQqhVzYqLZf-2oO-ICP-fQEWSDAUppSXlu0IAz6rpQhVGB1v1t5NVMpUPfQsLEwct
2024-04-26 15:03:03 UTC	1255	IN	Data Raw: 56 54 45 4c 6e 72 6e 74 35 53 65 49 6f 69 64 63 76 69 32 38 76 39 78 59 6c 64 33 49 39 59 76 37 6e 35 39 48 69 56 63 53 79 79 36 4f 53 7a 67 6a 6d 74 65 53 66 6b 62 57 42 76 37 32 7a 79 56 4c 67 43 62 48 45 77 61 51 71 32 6f 2d 58 30 6b 6e 5f 5a 78 34 34 72 78 51 55 7a 6b 61 6e 49 74 4b 30 69 44 46 66 64 70 42 6a 37 30 6f 72 56 78 39 78 50 68 32 79 4e 55 49 71 33 31 4b 35 6c 75 79 59 64 6d 65 46 5f 30 46 61 41 4a 72 4c 68 41 5f 59 48 37 69 6d 71 7a 47 64 68 44 5a 71 56 59 67 31 61 76 30 62 62 6c 6e 36 6d 71 42 6f 52 7a 64 4a 63 46 36 77 68 36 53 50 38 53 7a 5a 2d 45 38 32 6a 6d 37 51 6e 6c 4f 48 5a 47 38 4c 4c 4f 35 53 6c 49 6f 36 6b 5f 71 6d 6d 51 78 38 67 7a 36 79 46 2d 6a 79 66 49 77 77 6b 36 33 77 6a 2d 55 71 34 75 65 6b 2d 44 4b 45 50 6f 78 4e 68 51 Data Ascii: VTELnrnt5SeIoidcvi28v9xYld3I9Yv7n59HiVcSyy6OSzgjmteSfkbWBv72zyVLgCbHEwaQq2o-X0kn_Zx44rxQUzkanItK0iDFfdpBj70orVx9xPh2yNUIq31K5luyYdmeF_0FaAJrLhA_YH7imqzGdhDZqVYg1av0bbln6mqBoRzdJcF6wh6SP8SzZ-E82jm7QnlOHZG8LLO5SlIo6k_qmmQx8gz6yF-jyfIwwk63wj-Uq4uek-DKEPoxNhQ
2024-04-26 15:03:03 UTC	722	IN	Data Raw: 46 43 4f 58 6f 61 6d 51 61 70 72 6b 39 38 53 71 78 36 32 48 44 77 45 30 36 6f 64 4e 71 6d 72 6a 61 4b 75 49 57 76 30 77 75 5a 48 53 63 70 71 57 61 4e 48 4a 56 57 59 6c 6c 30 6c 61 34 73 65 58 6e 4b 65 45 73 66 77 6b 5a 66 4b 70 63 33 38 72 5f 68 49 38 61 6d 6d 4f 6f 6c 77 38 6a 6d 79 77 6f 38 5f 65 53 36 39 58 78 78 71 33 53 78 63 41 68 41 6a 4f 51 78 74 77 6b 51 68 45 4f 66 46 7a 63 34 6c 31 4d 38 33 55 66 47 43 45 5a 55 6c 4c 4e 54 4a 73 45 32 41 63 79 53 54 4c 2d 61 57 71 6b 50 32 69 4d 46 58 41 38 56 42 33 70 59 69 6e 34 2d 39 71 59 68 35 59 53 49 38 74 41 34 7a 51 74 6c 38 69 38 66 48 48 59 33 53 68 58 77 44 4c 48 50 78 38 53 4c 43 68 79 67 44 4f 74 49 6e 6a 65 67 57 63 71 6a 67 59 45 48 77 35 6a 75 73 55 72 36 55 79 59 55 41 4c 4c 75 72 68 6a 5f 73 Data Ascii: FCOXoamQaprk98Sqx62HDwE06odNqmrjaKuIWv0wuZHScpqWaNHJVWYll0la4seXnKeEsfwkZfKpc38r_hI8ammOolw8jmywo8_eS69Xxxq3SxcAhAjOQxtwkQhEOfFzc4l1M83UfGCEZUlLNTJsE2AcySTL-aWqkP2iMFXA8VB3pYin4-9qYh5YSI8tA4zQtl8i8fHHY3ShXwDLHPx8SLChygDOtInjegWcqjgYEHw5jusUr6UyYUALLurhj_s
2024-04-26 15:03:03 UTC	1255	IN	Data Raw: 32 61 38 63 0d 0a 45 4a 6e 55 6a 55 7a 55 48 70 4a 55 45 45 76 5a 43 39 33 57 48 4a 57 4f 58 45 78 56 32 70 61 62 46 4a 59 5a 57 68 44 51 6c 5a 46 64 7a 64 71 4e 43 74 31 53 6d 68 6e 4f 48 52 6e 52 30 74 75 54 54 6c 49 55 30 6c 7a 56 6d 63 77 61 6d 52 78 57 53 74 45 4d 31 4e 47 52 32 68 47 51 56 45 30 62 44 51 7a 52 45 56 45 54 57 52 42 57 6d 74 56 56 32 5a 4e 55 6b 31 30 51 33 70 4d 5a 31 5a 4d 56 6e 52 5a 54 57 52 78 4e 6d 78 7a 51 55 74 6b 59 32 56 73 51 30 52 58 57 58 6b 34 54 45 52 6b 62 45 64 6d 62 45 74 6a 5a 55 49 32 64 6d 31 6f 63 6d 4e 55 51 55 56 32 52 47 70 54 56 54 42 5a 63 46 68 6f 64 58 6c 75 61 30 5a 7a 54 58 6c 36 55 32 70 49 4f 44 46 74 51 54 6c 58 56 6b 67 35 59 31 6c 54 62 6b 4a 4d 61 6d 64 6f 53 47 5a 6b 64 46 46 55 61 46 46 71 4c 7a Data Ascii: 2a8cEJnUjUzUHpJUEEvZC93WHJWOXExV2pabFJYZWhDQlZFdzdqNCt1SmhnOHRnR0tuTTlIU0lzVmcwamRxWStEM1NGR2hGQVE0bDQzREVETWRBWmtVV2ZNUk10Q3pMZ1ZMVnRZTWRxNmxzQUtkY2VsQ0RXWXk4TERkbEdmbEtjZUI2dm1ocmNUQUV2RGpTVTBZcFhodXlua0ZzTXl6U2pIODFtQTlXVkg5Y1lTbkJMamdoSGZkdFFUaFFqLz
2024-04-26 15:03:03 UTC	1255	IN	Data Raw: 68 6c 4e 53 74 52 59 30 6c 48 4e 6b 39 59 61 6e 42 73 4e 33 68 6c 51 7a 46 6d 4c 31 4e 50 4f 56 70 76 52 57 56 73 61 57 74 47 57 6d 35 55 54 46 64 4b 4d 31 4a 50 4f 56 6c 78 59 6d 6c 61 4c 32 6c 53 4f 48 64 4f 53 7a 6c 49 59 54 52 73 5a 31 6c 70 5a 6d 63 76 56 30 35 6f 63 6d 70 47 5a 30 39 69 52 44 68 73 65 6b 4d 34 4f 47 4a 53 65 53 74 54 51 6a 52 58 63 48 4e 73 59 33 46 43 55 48 6c 48 65 6c 4e 34 63 46 46 43 56 7a 5a 44 64 48 42 32 63 7a 56 69 64 46 42 51 52 58 59 32 65 6b 39 53 56 48 49 32 52 48 6c 49 63 33 52 71 54 32 31 4f 57 54 46 45 59 54 6c 51 62 54 52 4a 62 57 78 59 4d 33 42 54 5a 30 6b 7a 54 31 46 73 65 6d 56 6f 51 53 74 51 59 57 4e 53 55 6c 68 58 56 45 4e 4e 64 31 52 47 4f 47 45 33 52 6b 46 33 4f 47 45 35 61 30 70 6d 4b 30 49 30 4b 30 78 75 62 Data Ascii: hlNStRY0lHNk9YanBsN3hlQzFmL1NPOVpvRWVsaWtGWm5UTFdKM1JPOVlxYmlaL2lSOHdOSzlIYTRsZ1lpZmcvV05ocmpGZ09iRDhsekM4OGJSeStTQjRXcHNsY3FCUHlHelN4cFFCVzZDdHB2czVidFBQRXY2ek9SVHI2RHlIc3RqT21OWTFEYTlQbTRJbWxYM3BTZ0kzT1FsemVoQStQYWNSUlhXVENNd1RGOGE3RkF3OGE5a0pmK0I0K0xub
2024-04-26 15:03:03 UTC	1255	IN	Data Raw: 32 52 78 4f 58 64 74 53 45 63 34 4e 32 35 49 63 48 46 53 62 48 46 4f 62 32 6c 6b 4c 33 5a 71 51 30 31 43 4c 7a 63 7a 53 45 6b 30 52 55 73 79 4b 30 73 35 61 43 39 31 57 47 52 79 52 44 42 68 62 6a 46 50 65 48 42 6d 4d 44 64 48 56 69 39 5a 52 54 64 54 4f 56 41 7a 54 6c 49 33 52 57 35 4c 51 6b 78 72 61 54 64 4c 65 6b 4e 44 62 6c 4a 31 61 6b 35 42 5a 55 67 34 52 31 52 54 5a 7a 49 35 64 45 73 35 62 55 64 36 59 32 51 76 63 44 56 57 4d 58 6c 54 4d 58 45 72 59 57 67 34 52 6e 4e 4f 51 7a 49 34 63 69 74 48 4f 58 4a 75 56 6e 41 34 5a 46 52 6b 59 33 68 36 59 33 4a 31 4d 55 74 48 52 6e 49 30 61 48 4a 33 57 48 4a 4c 56 45 39 7a 5a 6c 68 6e 4f 57 68 61 57 57 46 4d 55 6a 56 54 5a 47 78 4c 56 30 4a 4b 4e 30 6b 34 4b 7a 64 59 59 33 68 4e 62 31 64 78 56 79 74 4a 54 6b 38 77 Data Ascii: 2RxOXdtSEc4N25IcHFSbHFOb2lkL3ZqQ01CLzczSEk0RUsyK0s5aC91WGRyRDBhbjFPeHBmMDdHVi9ZRTdTOVAzTlI3RW5LQkxraTdLekNDblJ1ak5BZUg4R1RTZzI5dEs5bUd6Y2QvcDVWMXlTMXErYWg4RnNOQzI4citHOXJuVnA4ZFRkY3h6Y3J1MUtHRnI0aHJ3WHJLVE9zZlhnOWhaWWFMUjVTZGxLV0JKN0k4KzdYY3hNb1dxVytJTk8w
2024-04-26 15:03:03 UTC	1255	IN	Data Raw: 61 6c 70 75 64 56 59 33 61 58 42 78 4e 32 52 6c 61 6e 70 6a 61 46 56 74 65 46 4a 6b 51 6a 5a 61 65 47 4a 36 64 6a 46 51 64 31 4a 71 53 31 64 51 55 31 5a 77 4d 6d 39 6a 52 55 4a 75 62 58 55 35 4f 55 56 77 65 46 6f 30 57 6c 63 30 61 6e 6c 72 56 44 4e 69 65 6d 64 4c 4d 48 68 59 53 6e 68 72 54 6b 45 77 51 54 6c 6d 51 32 55 31 57 6d 4e 30 53 46 67 33 57 6d 30 7a 55 47 56 44 54 57 4d 31 56 32 52 30 64 57 74 6d 53 33 52 71 62 47 31 6a 56 45 70 33 62 44 5a 76 52 6b 4e 4b 52 45 6c 74 4e 7a 46 50 4b 30 52 31 56 55 6f 78 4e 46 46 4b 52 45 31 73 4d 7a 68 44 4c 32 67 33 4c 32 64 6c 4b 30 73 77 54 31 42 46 55 58 6c 69 53 6d 78 4f 54 6d 39 6c 53 47 6b 72 54 44 51 35 4e 58 4a 73 57 53 39 55 52 58 51 33 63 47 39 5a 57 45 45 77 59 6e 59 76 52 30 56 47 61 33 70 36 4e 31 56 Data Ascii: alpudVY3aXBxN2RlanpjaFVteFJkQjZaeGJ6djFQd1JqS1dQU1ZwMm9jRUJubXU5OUVweFo0Wlc0anlrVDNiemdLMHhYSnhrTkEwQTlmQ2U1WmN0SFg3Wm0zUGVDTWM1V2R0dWtmS3RqbG1jVEp3bDZvRkNKREltNzFPK0R1VUoxNFFKRE1sMzhDL2g3L2dlK0swT1BFUXliSmxOTm9lSGkrTDQ5NXJsWS9URXQ3cG9ZWEEwYnYvR0VGa3p6N1V
2024-04-26 15:03:03 UTC	1255	IN	Data Raw: 57 51 58 46 76 61 6c 56 4e 4d 55 56 6a 54 56 68 48 4e 47 5a 59 62 6d 45 72 5a 33 68 53 61 30 70 75 62 30 52 57 56 54 64 58 59 57 70 71 4f 54 64 47 54 69 39 56 4e 57 64 4b 63 32 4e 73 55 30 78 71 5a 6a 46 53 61 56 70 6e 65 46 4a 53 4f 55 4e 31 65 54 46 54 63 58 55 34 52 58 42 33 51 6b 51 33 61 6d 38 76 63 31 4e 35 4d 57 56 71 55 33 4d 7a 4d 47 6c 4b 65 44 5a 5a 4e 31 70 6c 65 57 35 32 65 6d 74 32 54 31 4d 7a 55 6a 52 72 62 57 30 34 4d 54 42 4f 59 6e 46 4f 56 53 74 42 61 54 5a 54 56 31 46 69 51 33 6c 70 53 6d 46 55 65 58 70 6a 61 32 4d 76 62 47 4a 4f 54 54 68 51 4c 31 42 68 61 57 35 31 63 7a 42 74 61 57 4a 6f 55 32 68 79 55 55 46 68 4d 57 77 72 56 57 5a 56 55 55 4e 71 54 6b 68 79 51 58 56 73 4d 31 64 35 62 6e 45 7a 64 58 46 68 63 33 6c 51 59 6d 35 43 4f 47 Data Ascii: WQXFvalVNMUVjTVhHNGZYbmErZ3hSa0pub0RWVTdXYWpqOTdGTi9VNWdKc2NsU0xqZjFSaVpneFJSOUN1eTFTcXU4RXB3QkQ3am8vc1N5MWVqU3MzMGlKeDZZN1pleW52emt2T1MzUjRrbW04MTBOYnFOVStBaTZTV1FiQ3lpSmFUeXpja2MvbGJOTThQL1BhaW51czBtaWJoU2hyUUFhMWwrVWZVUUNqTkhyQXVsM1d5bnEzdXFhc3lQYm5COG
2024-04-26 15:03:03 UTC	1255	IN	Data Raw: 64 61 64 7a 4a 53 52 44 46 57 54 45 78 76 55 6c 6c 36 57 6c 56 58 4e 58 5a 72 61 54 52 79 52 7a 45 7a 4f 57 78 52 64 6d 4e 58 4d 6b 46 5a 4e 31 42 49 52 46 6c 76 5a 45 4a 42 62 79 39 51 54 54 56 6c 4e 79 39 78 64 7a 5a 57 54 7a 59 33 4b 31 70 75 64 45 6c 58 64 6c 4a 36 4d 47 49 72 4f 54 68 32 63 44 52 68 5a 6e 52 44 55 32 73 30 55 32 64 48 63 6a 59 77 53 43 74 43 5a 33 4e 51 52 47 64 30 61 57 70 4d 61 6c 59 31 4e 6b 68 43 52 57 4a 35 4d 7a 4e 76 4e 54 46 6c 57 55 39 31 53 47 6f 76 56 6a 52 71 63 55 74 42 54 33 4a 4b 65 6d 6f 77 4f 55 74 42 65 44 68 56 53 30 68 43 5a 6e 49 72 61 79 39 53 4d 6e 70 68 64 31 42 78 62 54 59 34 63 6d 39 61 54 32 31 4a 54 47 4a 73 54 56 5a 57 55 56 70 55 51 6a 68 7a 55 58 6c 4d 64 6c 46 47 59 58 4d 32 57 55 56 4a 4d 6d 46 45 54 Data Ascii: dadzJSRDFWTExvUll6WlVXNXZraTRyRzEzOWxRdmNXMkFZN1BIRFlvZEJBby9QTTVlNy9xdzZWTzY3K1pudElXdlJ6MGIrOTh2cDRhZnRDU2s0U2dHcjYwSCtCZ3NQRGd0aWpMalY1NkhCRWJ5MzNvNTFlWU91SGovVjRqcUtBT3JKemowOUtBeDhVS0hCZnIray9SMnphd1BxbTY4cm9aT21JTGJsTVZWUVpUQjhzUXlMdlFGYXM2WUVJMmFET

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49737	188.116.24.148	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:04 UTC	913	OUT	POST /verify.php HTTP/1.1 Host: hbarthlow.bradentoncc.store Connection: keep-alive Content-Length: 2275 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://hbarthlow.bradentoncc.store Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://hbarthlow.bradentoncc.store/index0.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=nr2sene7cj9t4pb98cmbg9qrej
2024-04-26 15:03:04 UTC	2275	OUT	Data Raw: 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 3d 30 33 41 46 63 57 65 41 37 61 50 2d 34 55 6e 4f 5f 6a 72 4f 46 6f 67 76 30 41 4e 58 30 39 33 6d 66 4e 76 4f 6e 50 73 63 79 45 6e 6a 65 33 6a 49 30 53 53 36 44 45 47 58 4d 43 66 78 2d 36 42 61 70 42 37 36 65 47 64 58 48 64 68 53 58 71 67 74 71 53 37 63 79 52 63 50 67 64 79 79 33 32 30 37 55 6b 56 6e 35 43 46 49 6a 66 77 49 77 2d 47 78 59 42 6d 30 70 2d 55 7a 31 37 32 2d 56 6f 30 6f 6f 30 57 57 6b 51 6c 65 72 4a 4e 67 5a 4e 64 7a 31 67 56 54 69 5f 45 69 39 65 4d 52 31 57 6d 35 56 66 65 63 78 4e 64 6b 52 5a 41 51 71 68 56 7a 59 71 4c 5a 66 2d 32 6f 4f 2d 49 43 50 2d 66 51 45 57 53 44 41 55 70 70 53 58 6c 75 30 49 41 7a 36 72 70 51 68 56 47 42 31 76 31 74 35 4e 56 4d 70 55 50 66 51 73 4c 45 77 63 Data Ascii: g-recaptcha-response=03AFcWeA7aP-4UnO_jrOFogv0ANX093mfNvOnPscyEnje3jI0SS6DEGXMCfx-6BapB76eGdXHdhSXqgtqS7cyRcPgdyy3207UkVn5CFIjfwIw-GxYBm0p-Uz172-Vo0oo0WWkQlerJNgZNdz1gVTi_Ei9eMR1Wm5VfecxNdkRZAQqhVzYqLZf-2oO-ICP-fQEWSDAUppSXlu0IAz6rpQhVGB1v1t5NVMpUPfQsLEwc
2024-04-26 15:03:04 UTC	419	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 15:03:04 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: https://americanrealtyij.com/?xgshwmpx&qrc=hbarthlow@securustechnologies.com Content-Length: 107 Connection: close Content-Type: text/html; charset=UTF-8
2024-04-26 15:03:04 UTC	107	IN	Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 61 72 72 61 79 20 6b 65 79 20 31 20 69 6e 20 3c 62 3e 43 3a 5c 78 61 6d 70 70 5c 68 74 64 6f 63 73 5c 76 65 72 69 66 79 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 39 36 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Warning</b>: Undefined array key 1 in <b>C:\xampp\htdocs\verify.php</b> on line <b>96</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49738	192.178.50.36	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:04 UTC	590	OUT	GET /recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9ORDdRWOZF4CzfAT24Edyv7yis2bkyn_VHaq19IjUlV4TIoU-msljnPtqhKfcNyA2IOwoIoUA0QZDylG1Q
2024-04-26 15:03:04 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 15:03:04 GMT Expires: Fri, 26 Apr 2024 15:03:04 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:03:04 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-26 15:03:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49739	82.180.161.153	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:05 UTC	769	OUT	GET /?xgshwmpx&qrc=hbarthlow@securustechnologies.com HTTP/1.1 Host: americanrealtyij.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hbarthlow.bradentoncc.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:05 UTC	153	IN	HTTP/1.1 302 Found location: https://href.li?https://example.com Date: Fri, 26 Apr 2024 15:03:05 GMT Connection: close Transfer-Encoding: chunked
2024-04-26 15:03:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49740	192.0.78.27	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:07 UTC	729	OUT	GET /?https://example.com HTTP/1.1 Host: href.li Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://hbarthlow.bradentoncc.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:08 UTC	279	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 15:03:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-ac: 3.mia _dca MISS Alt-Svc: h3=":443"; ma=86400
2024-04-26 15:03:08 UTC	428	IN	Data Raw: 31 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 68 72 65 66 2e 6c 69 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 52 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 20 22 68 74 74 70 73 3a 5c 2f 5c 2f Data Ascii: 1a0<!DOCTYPE html><html><head><title>href.li</title><meta http-equiv="Refresh" content="0; url=https://example.com" /><meta name="referrer" content="no-referrer" /><script type="text/javascript">/* <![CDATA[ */window.location.replace( "https:\/\/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49742	93.184.215.14	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:08 UTC	640	OUT	GET / HTTP/1.1 Host: example.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:08 UTC	356	IN	HTTP/1.1 200 OK Age: 201566 Cache-Control: max-age=604800 Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 15:03:08 GMT Etag: "3147526947+ident" Expires: Fri, 03 May 2024 15:03:08 GMT Last-Modified: Thu, 17 Oct 2019 07:18:26 GMT Server: ECAcc (mid/875B) Vary: Accept-Encoding X-Cache: HIT Content-Length: 1256 Connection: close
2024-04-26 15:03:08 UTC	1256	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 78 61 6d 70 6c 65 20 44 6f 6d 61 69 6e 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 Data Ascii: <!doctype html><html><head> <title>Example Domain</title> <meta charset="utf-8" /> <meta http-equiv="Content-type" content="text/html; charset=utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <style t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49741	93.184.215.14	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:09 UTC	578	OUT	GET /favicon.ico HTTP/1.1 Host: example.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://example.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:09 UTC	340	IN	HTTP/1.1 404 Not Found Age: 74451 Cache-Control: max-age=604800 Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 15:03:09 GMT Expires: Fri, 03 May 2024 15:03:09 GMT Last-Modified: Thu, 25 Apr 2024 18:22:18 GMT Server: ECAcc (mid/8787) Vary: Accept-Encoding X-Cache: 404-HIT Content-Length: 1256 Connection: close
2024-04-26 15:03:09 UTC	1256	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 78 61 6d 70 6c 65 20 44 6f 6d 61 69 6e 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 Data Ascii: <!doctype html><html><head> <title>Example Domain</title> <meta charset="utf-8" /> <meta http-equiv="Content-type" content="text/html; charset=utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <style t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49745	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:35 UTC	650	OUT	GET /domains/example HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:36 UTC	1011	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 11:02:44 GMT Server: Apache Vary: Accept-Encoding Location: http://www.iana.org/help/example-domains Cache-Control: public, max-age=21603 Expires: Fri, 26 Apr 2024 13:02:44 GMT Content-Length: 248 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 14452 Connection: close Content-Type: text/html; charset=iso-8859-1 Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:36 UTC	248	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 69 61 6e 61 2e 6f 72 67 2f 68 65 6c 70 2f 65 78 61 6d 70 6c 65 2d 64 6f 6d 61 69 6e 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.iana.org/help/example-domains">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49751	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:37 UTC	516	OUT	GET /_css/2022/iana_website.css HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:38 UTC	1074	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:03:37 GMT Server: Apache Vary: Accept-Encoding Last-Modified: Fri, 09 Feb 2024 01:10:55 GMT Content-Length: 41952 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Expires: Fri, 26 Apr 2024 15:21:12 GMT X-Content-Type-Options: nosniff Age: 745 Content-Type: text/css Cache-Control: public, s-maxage=86402, max-age=604814 Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:38 UTC	7494	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4e 6f 74 6f 22 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 22 4e 6f 74 6f 20 53 61 6e 73 22 29 2c 20 6c 6f 63 61 6c 28 22 4e 6f 74 6f 53 61 6e 73 22 29 2c 20 75 72 6c 28 22 2f 5f 69 6d 67 2f 32 30 32 32 2f 66 6f 6e 74 73 2f 4e 6f 74 6f 53 61 6e 73 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4e 6f 74 6f 22 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 22 4e 6f 74 6f 20 53 61 6e 73 22 29 2c 20 6c 6f 63 61 6c 28 22 4e 6f 74 6f 53 61 6e 73 22 29 2c 20 75 72 6c 28 Data Ascii: @charset "UTF-8";@font-face { font-family: "Noto"; src: local("Noto Sans"), local("NotoSans"), url("/_img/2022/fonts/NotoSans-Regular.woff"); font-weight: 400;}@font-face { font-family: "Noto"; src: local("Noto Sans"), local("NotoSans"), url(
2024-04-26 15:03:38 UTC	3831	IN	Data Raw: 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 32 70 78 20 30 70 78 20 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 62 33 30 33 37 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 20 34 70 78 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 72 66 63 72 65 66 20 61 3a 6c 69 6e 6b 2c 20 2e 72 66 63 72 65 66 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 62 33 30 33 37 3b 0a 7d 0a 0a 2e 72 69 72 2d 63 68 61 72 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 77 69 64 74 68 3a 20 36 35 76 77 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 32 30 70 78 3b 0a 20 Data Ascii: r-radius: 4px; margin: 0px 2px 0px 0px; color: #2b3037; padding: 1px 4px; white-space: nowrap;}.rfcref a:link, .rfcref a:visited { text-decoration: none; color: #2b3037;}.rir-chart { position: relative; width: 65vw; height: 320px;
2024-04-26 15:03:38 UTC	16384	IN	Data Raw: 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 61 75 74 6f 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 39 61 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 7d 0a 23 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 35 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 30 70 78 29 20 7b 0a 20 20 23 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 32 35 70 78 3b 0a 20 20 7d 0a 7d 0a 23 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 6c 69 6e 6b 2c 20 23 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 76 69 73 69 Data Ascii: x; margin: 0px auto; color: #9999a0; font-size: 12px;}#footer .navigation { margin: 10px 50px;}@media only screen and (max-width: 1000px) { #footer .navigation { margin: 10px 25px; }}#footer .navigation:link, #footer .navigation:visi
2024-04-26 15:03:38 UTC	2771	IN	Data Raw: 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 30 70 78 29 20 7b 0a 20 20 2e 68 65 6d 6d 65 64 2d 70 61 6e 65 6c 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 20 32 35 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 23 70 65 72 66 6f 72 6d 61 6e 63 65 2d 61 61 67 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 64 65 66 66 30 3b 0a 7d 0a 23 70 65 72 66 6f 72 6d 61 6e 63 65 2d 61 61 67 20 68 32 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 34 35 61 36 34 3b 0a 7d 0a 0a 23 70 65 72 66 6f 72 6d 61 6e 63 65 2d 61 61 67 2d 6b 65 79 61 72 65 61 73 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 6d 61 Data Ascii: ia only screen and (max-width: 1000px) { .hemmed-panel { padding: 25px 25px; }}#performance-aag { background-color: #edeff0;}#performance-aag h2 { color: #545a64;}#performance-aag-keyareas { display: flex; flex-direction: row; ma
2024-04-26 15:03:38 UTC	6385	IN	Data Raw: 67 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0a 7d 0a 0a 2e 63 65 72 65 6d 6f 6e 79 2d 61 74 74 65 6e 64 61 6e 63 65 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 7d 0a 2e 63 65 72 65 6d 6f 6e 79 2d 61 74 74 65 6e 64 61 6e 63 65 20 74 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 38 70 78 20 38 70 78 20 34 70 78 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0a 7d 0a 2e 63 65 72 65 6d 6f 6e 79 2d 61 74 74 65 6e 64 61 6e 63 65 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 38 38 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e Data Ascii: g-bottom: 8px;}.ceremony-attendance { width: 100%; margin-bottom: 15px;}.ceremony-attendance td { padding: 8px 8px 8px 4px; vertical-align: top;}.ceremony-attendance td:first-child { padding-left: 0; color: #888;}@media only screen an
2024-04-26 15:03:38 UTC	3831	IN	Data Raw: 73 2d 62 6f 64 79 20 23 74 79 70 65 2d 66 69 6c 74 65 72 2d 6e 61 76 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 23 6e 65 77 73 2d 62 6f 64 79 20 23 74 79 70 65 2d 66 69 6c 74 65 72 2d 6e 61 76 20 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 67 72 61 79 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 23 6e 65 77 73 2d 62 6f 64 79 20 23 74 79 70 65 2d 66 69 6c 74 65 72 2d 6e 61 76 20 2e 72 73 73 2d 61 74 6f 6d 2d 6e 61 76 2d 62 74 6e 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 23 6e 65 77 73 2d 62 6f 64 79 20 23 74 79 70 65 2d 66 69 6c 74 65 72 2d 6e 61 76 20 2e 72 73 73 2d 61 74 6f 6d 2d 6e 61 76 2d 62 74 6e 20 64 69 76 20 7b 0a 20 20 64 69 73 70 Data Ascii: s-body #type-filter-nav { display: inline;}#news-body #type-filter-nav button.active { background: gray; color: #ffffff;}#news-body #type-filter-nav .rss-atom-nav-btn { float: right;}#news-body #type-filter-nav .rss-atom-nav-btn div { disp
2024-04-26 15:03:38 UTC	1256	IN	Data Raw: 69 64 20 23 65 65 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 30 20 31 30 70 78 20 30 3b 0a 7d 0a 23 73 65 61 72 63 68 2d 62 6f 64 79 20 23 72 65 73 75 6c 74 20 75 6c 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 23 73 65 61 72 63 68 2d 62 6f 64 79 20 23 72 65 73 75 6c 74 20 75 6c 20 6c 69 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 23 73 65 61 Data Ascii: id #eee; border-radius: 10px; visibility: hidden; padding: 5px 0 10px 0;}#search-body #result ul { list-style-type: none; padding: 0; margin: 0;}#search-body #result ul li { padding: 5px 10px; margin: 0; list-style-type: none;}#sea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49749	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:37 UTC	489	OUT	GET /_js/jquery.js HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:38 UTC	1078	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:03:38 GMT Server: Apache X-Content-Type-Options: nosniff Vary: Accept-Encoding Last-Modified: Fri, 24 Sep 2021 20:20:55 GMT Content-Length: 89501 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Fri, 26 Apr 2024 15:33:38 GMT Content-Type: application/javascript Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:38 UTC	253	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-04-26 15:03:38 UTC	7185	IN	Data Raw: 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 43 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 5b 5d 2c 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c Data Ascii: Query requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},
2024-04-26 15:03:38 UTC	3831	IN	Data Raw: 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 Data Ascii: e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(
2024-04-26 15:03:38 UTC	1277	IN	Data Raw: 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 Data Ascii: disabled='disabled'></a><select disabled='disabled'><option/></select>";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.qu
2024-04-26 15:03:38 UTC	16384	IN	Data Raw: 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 74 29 3f 31 3a 75 3f 50 28 75 2c 65 29 2d 50 28 75 2c 74 29 3a 30 3a 34 26 6e 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 6e 2c 72 3d 30 2c 69 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6f 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 61 3d 5b 65 5d 2c 73 3d 5b 74 5d 3b 69 66 28 21 69 7c 7c 21 6f 29 72 65 74 75 72 Data Ascii: \|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p&&y(p,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i\|\|!o)retur
2024-04-26 15:03:38 UTC	4048	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3d 75 3d 5b 5d 2c 73 3d 74 3d 22 22 2c 74 68 69 73 7d 2c 64 69 73 61 62 6c 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 73 7d 2c 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3d 75 3d 5b 5d 2c 74 7c 7c 69 7c 7c 28 73 3d 74 3d 22 22 29 2c 74 68 69 73 7d 2c 6c 6f 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 61 7d 2c 66 69 72 65 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 7c 7c 28 74 3d 5b 65 2c 28 74 3d 74 7c 7c 5b 5d 29 2e 73 6c 69 63 65 3f 74 2e 73 6c 69 63 65 28 29 3a 74 5d 2c 75 2e 70 75 73 68 28 74 29 2c 69 7c 7c 63 28 29 29 2c 74 68 69 73 7d 2c 66 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: :function(){return a=u=[],s=t="",this},disabled:function(){return!s},lock:function(){return a=u=[],t\|\|i\|\|(s=t=""),this},locked:function(){return!!a},fireWith:function(e,t){return a\|\|(t=[e,(t=t\|\|[]).slice?t.slice():t],u.push(t),i\|\|c()),this},fire:function(
2024-04-26 15:03:38 UTC	3831	IN	Data Raw: 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 74 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 74 68 69 73 2e 63 61 63 68 65 28 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 5b 58 28 74 29 5d 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 58 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 Data Ascii: },V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value:t,configurable:!0}))),t},set:function(e,t,n){var r,i=this.cache(e);if("string"==typeof t)i[X(t)]=n;else for(r in t)i[X(r)]=t[r];return i},get:function(e,t){return void 0===t
2024-04-26 15:03:38 UTC	8939	IN	Data Raw: 63 5b 33 5d 21 3d 3d 6c 29 7b 75 2f 3d 32 2c 6c 3d 6c 7c 7c 63 5b 33 5d 2c 63 3d 2b 75 7c 7c 31 3b 77 68 69 6c 65 28 61 2d 2d 29 53 2e 73 74 79 6c 65 28 65 2c 74 2c 63 2b 6c 29 2c 28 31 2d 6f 29 2a 28 31 2d 28 6f 3d 73 28 29 2f 75 7c 7c 2e 35 29 29 3c 3d 30 26 26 28 61 3d 30 29 2c 63 2f 3d 6f 3b 63 2a 3d 32 2c 53 2e 73 74 79 6c 65 28 65 2c 74 2c 63 2b 6c 29 2c 6e 3d 6e 7c 7c 5b 5d 7d 72 65 74 75 72 6e 20 6e 26 26 28 63 3d 2b 63 7c 7c 2b 75 7c 7c 30 2c 69 3d 6e 5b 31 5d 3f 63 2b 28 6e 5b 31 5d 2b 31 29 2a 6e 5b 32 5d 3a 2b 6e 5b 32 5d 2c 72 26 26 28 72 2e 75 6e 69 74 3d 6c 2c 72 2e 73 74 61 72 74 3d 63 2c 72 2e 65 6e 64 3d 69 29 29 2c 69 7d 76 61 72 20 75 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 2c Data Ascii: c[3]!==l){u/=2,l=l\|\|c[3],c=+u\|\|1;while(a--)S.style(e,t,c+l),(1-o)(1-(o=s()/u\|\|.5))<=0&&(a=0),c/=o;c=2,S.style(e,t,c+l),n=n\|\|[]}return n&&(c=+c\|\|+u\|\|0,i=n[1]?c+(n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=i)),i}var ue={};function le(e,t){for(var n,r,
2024-04-26 15:03:38 UTC	1277	IN	Data Raw: 21 30 2c 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 3a 21 30 2c 63 74 72 6c 4b 65 79 3a 21 30 2c 64 65 74 61 69 6c 3a 21 30 2c 65 76 65 6e 74 50 68 61 73 65 3a 21 30 2c 6d 65 74 61 4b 65 79 3a 21 30 2c 70 61 67 65 58 3a 21 30 2c 70 61 67 65 59 3a 21 30 2c 73 68 69 66 74 4b 65 79 3a 21 30 2c 76 69 65 77 3a 21 30 2c 22 63 68 61 72 22 3a 21 30 2c 63 6f 64 65 3a 21 30 2c 63 68 61 72 43 6f 64 65 3a 21 30 2c 6b 65 79 3a 21 30 2c 6b 65 79 43 6f 64 65 3a 21 30 2c 62 75 74 74 6f 6e 3a 21 30 2c 62 75 74 74 6f 6e 73 3a 21 30 2c 63 6c 69 65 6e 74 58 3a 21 30 2c 63 6c 69 65 6e 74 59 3a 21 30 2c 6f 66 66 73 65 74 58 3a 21 30 2c 6f 66 66 73 65 74 59 3a 21 30 2c 70 6f 69 6e 74 65 72 49 64 3a 21 30 2c 70 6f 69 6e 74 65 72 54 79 70 65 3a 21 30 2c 73 63 72 65 65 6e 58 3a 21 Data Ascii: !0,changedTouches:!0,ctrlKey:!0,detail:!0,eventPhase:!0,metaKey:!0,pageX:!0,pageY:!0,shiftKey:!0,view:!0,"char":!0,code:!0,charCode:!0,key:!0,keyCode:!0,button:!0,buttons:!0,clientX:!0,clientY:!0,offsetX:!0,offsetY:!0,pointerId:!0,pointerType:!0,screenX:!
2024-04-26 15:03:38 UTC	16384	IN	Data Raw: 74 3d 76 6f 69 64 20 30 29 2c 21 31 3d 3d 3d 6e 26 26 28 6e 3d 54 65 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 2c 6e 2c 74 29 7d 29 7d 7d 29 3b 76 61 72 20 6b 65 3d 2f 3c 73 63 72 69 70 74 7c 3c 73 74 79 6c 65 7c 3c 6c 69 6e 6b 2f 69 2c 41 65 3d 2f 63 68 65 63 6b 65 64 5c 73 2a 28 3f 3a 5b 5e 3d 5d 7c 3d 5c 73 2a 2e 63 68 65 63 6b 65 64 2e 29 2f 69 2c 4e 65 3d 2f 5e 5c 73 2a 3c 21 28 3f 3a 5c 5b 43 44 41 54 41 5c 5b 7c 2d 2d 29 7c 28 3f 3a 5c 5d 5c 5d 7c 2d 2d 29 3e 5c 73 2a 24 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6a 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 74 61 62 6c 65 22 29 26 26 41 28 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 74 2e 66 Data Ascii: t=void 0),!1===n&&(n=Te),this.each(function(){S.event.remove(this,e,n,t)})}});var ke=/<script\|<style\|<link/i,Ae=/checked\s(?:[^=]\|=\s.checked.)/i,Ne=/^\s<!(?:\[CDATA\[\|--)\|(?:\]\]\|--)>\s$/g;function je(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49750	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:37 UTC	487	OUT	GET /_js/iana.js HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:38 UTC	1085	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:02:41 GMT Server: Apache Vary: Accept-Encoding Last-Modified: Fri, 24 Sep 2021 20:20:55 GMT Content-Length: 68 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Expires: Fri, 26 Apr 2024 15:21:01 GMT X-Content-Type-Options: nosniff Age: 755 Cache-Control: public, s-maxage=86402, max-age=604814 Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Content-Type: application/javascript Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:38 UTC	68	IN	Data Raw: 69 66 20 28 74 6f 70 20 21 3d 3d 20 73 65 6c 66 29 20 7b 0a 20 20 20 20 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0a 7d 0a Data Ascii: if (top !== self) { top.location.replace(self.location.href);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49752	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:40 UTC	566	OUT	GET /_img/2022/iana-logo-header.svg HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:40 UTC	1079	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:03:40 GMT Server: Apache Vary: Accept-Encoding Last-Modified: Tue, 05 Oct 2021 16:31:06 GMT Content-Length: 32870 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Expires: Fri, 26 Apr 2024 15:29:56 GMT X-Content-Type-Options: nosniff Age: 223 Content-Type: image/svg+xml Cache-Control: public, s-maxage=86402, max-age=604814 Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:40 UTC	7489	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 41 4e 41 5f 48 65 61 64 65 72 5f 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id="IANA_Header_Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink
2024-04-26 15:03:40 UTC	3831	IN	Data Raw: 39 2d 30 2e 32 31 34 2d 31 2e 31 32 2d 30 2e 34 37 39 2d 31 2e 36 32 34 2d 30 2e 37 39 38 63 2d 30 2e 35 30 34 2d 30 2e 33 31 37 2d 30 2e 39 32 34 2d 30 2e 37 31 38 2d 31 2e 32 36 2d 31 2e 32 30 34 0a 09 09 63 2d 30 2e 33 33 36 2d 30 2e 34 38 34 2d 30 2e 35 30 34 2d 31 2e 31 30 31 2d 30 2e 35 30 34 2d 31 2e 38 34 38 63 30 2d 30 2e 37 34 36 2c 30 2e 31 34 35 2d 31 2e 34 2c 30 2e 34 33 34 2d 31 2e 39 36 63 30 2e 32 38 39 2d 30 2e 35 36 2c 30 2e 36 38 36 2d 31 2e 30 32 36 2c 31 2e 31 39 2d 31 2e 34 0a 09 09 63 30 2e 35 30 34 2d 30 2e 33 37 33 2c 31 2e 30 38 37 2d 30 2e 36 35 32 2c 31 2e 37 35 2d 30 2e 38 34 63 30 2e 36 36 33 2d 30 2e 31 38 37 2c 31 2e 33 36 37 2d 30 2e 32 38 2c 32 2e 31 31 34 2d 30 2e 32 38 63 30 2e 34 36 36 2c 30 2c 31 2e 30 31 37 2c 30 2e Data Ascii: 9-0.214-1.12-0.479-1.624-0.798c-0.504-0.317-0.924-0.718-1.26-1.204c-0.336-0.484-0.504-1.101-0.504-1.848c0-0.746,0.145-1.4,0.434-1.96c0.289-0.56,0.686-1.026,1.19-1.4c0.504-0.373,1.087-0.652,1.75-0.84c0.663-0.187,1.367-0.28,2.114-0.28c0.466,0,1.017,0.
2024-04-26 15:03:40 UTC	15324	IN	Data Raw: 30 2c 31 2e 33 35 38 2d 30 2e 30 38 39 2c 32 2e 30 35 38 2d 30 2e 32 36 37 63 30 2e 37 2d 30 2e 31 37 37 2c 31 2e 32 36 35 2d 30 2e 33 39 36 2c 31 2e 36 39 34 2d 30 2e 36 35 38 63 30 2e 31 33 2c 30 2e 33 33 36 2c 30 2e 32 35 32 2c 30 2e 37 31 39 2c 30 2e 33 36 34 2c 31 2e 31 34 38 73 30 2e 31 39 36 2c 30 2e 38 33 31 2c 30 2e 32 35 32 2c 31 2e 32 30 34 0a 09 09 63 2d 30 2e 32 38 2c 30 2e 31 34 39 2d 30 2e 36 30 32 2c 30 2e 32 38 35 2d 30 2e 39 36 36 2c 30 2e 34 30 36 63 2d 30 2e 33 36 34 2c 30 2e 31 32 31 2d 30 2e 37 34 32 2c 30 2e 32 32 34 2d 31 2e 31 33 34 2c 30 2e 33 30 38 63 2d 30 2e 33 39 32 2c 30 2e 30 38 34 2d 30 2e 37 38 39 2c 30 2e 31 34 35 2d 31 2e 31 39 2c 30 2e 31 38 32 0a 09 09 73 2d 30 2e 37 37 39 2c 30 2e 30 35 37 2d 31 2e 31 33 34 2c 30 2e Data Ascii: 0,1.358-0.089,2.058-0.267c0.7-0.177,1.265-0.396,1.694-0.658c0.13,0.336,0.252,0.719,0.364,1.148s0.196,0.831,0.252,1.204c-0.28,0.149-0.602,0.285-0.966,0.406c-0.364,0.121-0.742,0.224-1.134,0.308c-0.392,0.084-0.789,0.145-1.19,0.182s-0.779,0.057-1.134,0.
2024-04-26 15:03:40 UTC	5108	IN	Data Raw: 2c 35 2e 36 36 2d 31 34 2e 33 39 32 2c 39 2e 30 31 37 2d 31 38 2e 39 34 38 63 32 2e 36 32 34 2d 33 2e 35 36 31 2c 31 32 2e 35 36 39 2d 32 30 2e 33 31 38 2c 32 31 2e 31 30 37 2d 32 30 2e 35 30 32 0a 09 09 63 34 2e 37 39 36 2d 30 2e 31 30 34 2c 34 2e 36 30 35 2c 31 2e 39 36 38 2c 35 2e 34 36 38 2c 33 2e 37 32 38 43 32 33 31 2e 32 39 34 2c 35 33 2e 31 30 33 2c 32 31 32 2e 34 39 2c 38 31 2e 30 36 2c 32 31 31 2e 34 33 35 2c 38 32 2e 37 31 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 36 37 33 42 41 22 20 64 3d 22 4d 32 32 34 2e 33 35 2c 38 37 2e 34 34 34 63 2d 33 2e 34 31 39 2c 30 2d 33 2e 36 30 33 2d 32 2e 30 39 36 2d 33 2e 35 31 31 2d 33 2e 35 39 63 30 2e 30 39 32 2d 31 2e 34 39 37 2c 32 36 2e 38 38 35 2d 34 32 2e 31 37 39 2c 32 36 2e 38 38 Data Ascii: ,5.66-14.392,9.017-18.948c2.624-3.561,12.569-20.318,21.107-20.502c4.796-0.104,4.605,1.968,5.468,3.728C231.294,53.103,212.49,81.06,211.435,82.716z"/><path fill="#0673BA" d="M224.35,87.444c-3.419,0-3.603-2.096-3.511-3.59c0.092-1.497,26.885-42.179,26.88
2024-04-26 15:03:40 UTC	1118	IN	Data Raw: 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 31 36 2e 31 34 35 35 22 20 79 31 3d 22 32 37 2e 36 31 39 31 22 20 78 32 3d 22 32 35 2e 32 39 36 37 22 20 79 32 3d 22 31 34 2e 37 33 39 39 22 3e 0a 09 09 3c 73 74 6f 70 20 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 73 74 6f 70 2d 63 6f 6c 6f 72 3a 23 31 31 35 44 41 36 22 2f 3e 0a 09 09 3c 73 74 6f 70 20 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 79 6c 65 3d 22 73 74 6f 70 2d 63 6f 6c 6f 72 3a 23 30 30 41 31 34 46 22 2f 3e 0a 09 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 53 56 47 49 44 5f 34 5f 29 22 20 64 3d 22 4d 33 33 2e 39 35 33 2c 33 2e 34 30 39 63 2d 30 2e 33 35 35 2d 30 Data Ascii: gradientUnits="userSpaceOnUse" x1="16.1455" y1="27.6191" x2="25.2967" y2="14.7399"><stop offset="0" style="stop-color:#115DA6"/><stop offset="1" style="stop-color:#00A14F"/></linearGradient><path fill="url(#SVGID_4_)" d="M33.953,3.409c-0.355-0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49754	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:41 UTC	595	OUT	GET /_img/2022/fonts/NotoSans-Regular.woff HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://www.iana.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.iana.org/_css/2022/iana_website.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:41 UTC	1078	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:14:46 GMT Server: Apache Last-Modified: Tue, 05 Oct 2021 16:31:06 GMT Content-Length: 157504 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Thu, 25 Apr 2024 20:44:46 GMT Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 67735 Connection: close Content-Type: font/woff Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:41 UTC	5361	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 02 67 40 00 0f 00 00 00 04 7d d4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 01 38 00 00 01 a0 34 06 28 1b 47 50 4f 53 00 00 02 90 00 00 50 b2 00 00 a4 b6 87 fd a6 05 47 53 55 42 00 00 53 44 00 00 05 31 00 00 09 60 46 0c 8f 23 4f 53 2f 32 00 00 58 78 00 00 00 60 00 00 00 60 f8 c9 f3 ec 63 6d 61 70 00 00 58 d8 00 00 0c 72 00 00 0f b0 52 ed 6e c1 67 61 73 70 00 00 65 4c 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 65 58 00 01 3e f4 00 02 14 b4 c1 1d 2c e7 68 65 61 64 00 01 a4 4c 00 00 00 36 00 00 00 36 f8 be 09 8c 68 68 65 61 00 01 a4 84 00 00 00 21 00 00 00 24 0e af 0c 4f 68 6d 74 78 00 01 a4 a8 00 00 11 0b 00 00 25 be 3d ca 78 99 6b 65 72 6e 00 01 b5 b4 00 00 6d Data Ascii: wOFFg@}GDEFX84(GPOSPGSUBSD1`F#OS/2Xx``cmapXrRngaspeLglyfeX>,headL66hhea!$Ohmtx%=xkernm
2024-04-26 15:03:41 UTC	6385	IN	Data Raw: d8 44 a9 40 1d ab bf d4 81 34 ae 67 09 2d aa d0 be 3a 3e 35 db d0 f2 14 7c 4d 13 25 a7 85 76 66 2c 79 b5 9e bc 92 f4 6d b6 3c 9f 77 47 f3 ee 70 29 81 07 69 e2 4c 65 3c e7 58 6e 6c c8 20 ae 69 13 b5 66 3e f9 c3 d9 f9 8e 71 4d 39 92 c0 45 d2 47 68 8d 2f 53 3e 93 e4 cc 48 de 5d 65 3c 38 f9 1f 21 1d a1 54 24 49 ef 11 3a 38 93 74 5f ca ea 54 a3 3b 94 b4 99 c6 23 7b 9e 1a 25 fe 36 af 26 e8 10 3d a9 bf 52 ee 86 cc d8 ce 09 1d 58 c0 de 3f c1 f5 6d e0 fa d2 92 eb f1 9c cb 1a ce 65 1a 9f 9d c7 f2 35 a6 0e 65 a0 9e 63 3e c9 d6 ea 3d 9f 28 3d f6 64 c9 09 43 73 3c 87 28 0f f7 b0 97 43 c6 2f 0b 1d b6 44 42 72 07 c8 08 c3 16 c7 b6 47 a4 25 87 fa 18 32 f3 fd 99 94 84 ae 52 43 7f c6 31 8f a0 4f ff 23 7b 1f 71 7d 0e d7 11 fc 0f 36 4a 9d c0 60 a3 dd f4 11 13 38 bb 3a 29 09 Data Ascii: D@4g-:>5\|M%vf,ym<wGp)iLe<Xnl if>qM9EGh/S>H]e<8!T$I:8t_T;#{%6&=RX?me5ec>=(=dCs<(C/DBrG%2RC1O#{q}6J`8:)
2024-04-26 15:03:41 UTC	10216	IN	Data Raw: 29 34 18 77 a6 e6 ce c8 9d 9d 3b 37 77 41 ee e2 dc 65 b9 2b c1 c9 de b9 83 73 d7 84 97 e7 8c 10 09 90 b8 06 da 35 80 36 41 2c d0 ec dc 75 b9 1b 43 ad b9 9b 65 b4 a1 01 b0 61 27 73 b7 e6 ee c8 dd 15 8a e4 b6 e6 ee cb 3d 90 bb 03 e3 db 97 7b 18 7d 1c c5 9d 64 ee a9 dc 33 b9 e7 73 2f a2 8e 9b 7b 2d cf ca dd 95 17 46 89 2b 12 96 57 98 17 cb ab cc ab 0c 2d c8 ab 13 9b 91 d7 33 67 43 5e 43 5e bf bc 81 39 1b b0 be 1b 32 f6 e3 4c e8 4c de 10 5c c3 f3 46 05 57 84 f2 29 09 69 db 91 85 bc b1 79 13 b8 d6 90 12 83 bc c9 c1 d5 79 d3 04 79 33 f3 1a f3 46 e5 cd a3 96 0a 3c cb 91 b7 10 23 58 92 b7 fc 06 8d 5a 81 d9 09 28 2f 79 ab 04 79 af e4 35 ca fa e5 ad cf db 94 b6 27 79 4d a0 21 e3 79 db f2 9a 31 f2 dd 79 7b f2 f6 e7 1d 0c 45 f2 ec bc 63 79 27 30 de e3 79 a7 89 93 a1 Data Ascii: )4w;7wAe+s56A,uCea's={}d3s/{-F+W-3gC^C^92LL\FW)iyyy3F<#XZ(/yy5'yM!y1y{Ecy'0y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49755	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:41 UTC	592	OUT	GET /_img/2022/fonts/NotoSans-Bold.woff HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://www.iana.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.iana.org/_css/2022/iana_website.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:41 UTC	1078	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 03:07:16 GMT Server: Apache Last-Modified: Tue, 05 Oct 2021 16:31:06 GMT Content-Length: 156596 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Fri, 26 Apr 2024 03:37:16 GMT Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 42985 Connection: close Content-Type: font/woff Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:41 UTC	1530	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 02 63 b4 00 0f 00 00 00 04 83 80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 01 38 00 00 01 a0 35 0e 28 1b 47 50 4f 53 00 00 02 90 00 00 51 a7 00 00 a6 1e c9 c2 8d 0d 47 53 55 42 00 00 54 38 00 00 05 31 00 00 09 60 46 0c 8f 23 4f 53 2f 32 00 00 59 6c 00 00 00 60 00 00 00 60 f9 f5 f7 27 63 6d 61 70 00 00 59 cc 00 00 0c 72 00 00 0f b0 52 ed 6e c1 67 61 73 70 00 00 66 40 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 66 4c 00 01 3a bb 00 02 18 cc ce 7c 94 21 68 65 61 64 00 01 a1 08 00 00 00 36 00 00 00 36 f9 34 09 90 68 68 65 61 00 01 a1 40 00 00 00 21 00 00 00 24 0f 24 0d 37 68 6d 74 78 00 01 a1 64 00 00 10 c8 00 00 25 be a8 55 13 aa 6b 65 72 6e 00 01 b2 2c 00 00 6d Data Ascii: wOFFcGDEFX85(GPOSQGSUBT81`F#OS/2Yl``'cmapYrRngaspf@glyffL:\|!head664hhea@!$$7hmtxd%Ukern,m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49756	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:41 UTC	366	OUT	GET /_img/2022/iana-logo-header.svg HTTP/1.1 Host: www.iana.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:42 UTC	1080	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:03:41 GMT Server: Apache Vary: Accept-Encoding Last-Modified: Tue, 05 Oct 2021 16:31:06 GMT Content-Length: 32870 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Expires: Fri, 26 Apr 2024 15:10:10 GMT X-Content-Type-Options: nosniff Age: 1411 Content-Type: image/svg+xml Cache-Control: public, s-maxage=86402, max-age=604814 Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:42 UTC	5359	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 41 4e 41 5f 48 65 61 64 65 72 5f 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id="IANA_Header_Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink
2024-04-26 15:03:42 UTC	2129	IN	Data Raw: 33 2e 31 31 37 2c 32 2e 31 34 36 2d 36 2e 32 37 31 2c 33 2e 33 30 34 2d 39 2e 34 36 34 68 32 2e 39 31 32 63 31 2e 30 36 34 2c 33 2e 30 38 2c 32 2e 31 31 38 2c 36 2e 32 31 32 2c 33 2e 31 36 34 2c 39 2e 33 39 35 43 31 32 34 2e 38 39 32 2c 31 33 30 2e 31 38 38 2c 31 32 35 2e 38 39 31 2c 31 33 33 2e 32 39 31 2c 31 32 36 2e 38 34 33 2c 31 33 36 2e 33 31 35 7a 0a 09 09 20 4d 31 31 39 2e 34 32 33 2c 31 32 31 2e 36 31 35 63 2d 30 2e 30 37 35 2d 30 2e 32 30 35 2d 30 2e 31 32 36 2d 30 2e 34 31 35 2d 30 2e 31 35 34 2d 30 2e 36 33 63 2d 30 2e 30 32 38 2d 30 2e 32 31 34 2d 30 2e 30 35 32 2d 30 2e 34 35 32 2d 30 2e 30 37 2d 30 2e 37 31 34 68 2d 30 2e 31 39 36 0a 09 09 63 30 2c 30 2e 35 30 34 2d 30 2e 30 36 35 2c 30 2e 39 35 32 2d 30 2e 31 39 36 2c 31 2e 33 34 34 6c 2d Data Ascii: 3.117,2.146-6.271,3.304-9.464h2.912c1.064,3.08,2.118,6.212,3.164,9.395C124.892,130.188,125.891,133.291,126.843,136.315z M119.423,121.615c-0.075-0.205-0.126-0.415-0.154-0.63c-0.028-0.214-0.052-0.452-0.07-0.714h-0.196c0,0.504-0.065,0.952-0.196,1.344l-
2024-04-26 15:03:42 UTC	3831	IN	Data Raw: 37 39 2d 30 2e 32 31 34 2d 31 2e 31 32 2d 30 2e 34 37 39 2d 31 2e 36 32 34 2d 30 2e 37 39 38 63 2d 30 2e 35 30 34 2d 30 2e 33 31 37 2d 30 2e 39 32 34 2d 30 2e 37 31 38 2d 31 2e 32 36 2d 31 2e 32 30 34 0a 09 09 63 2d 30 2e 33 33 36 2d 30 2e 34 38 34 2d 30 2e 35 30 34 2d 31 2e 31 30 31 2d 30 2e 35 30 34 2d 31 2e 38 34 38 63 30 2d 30 2e 37 34 36 2c 30 2e 31 34 35 2d 31 2e 34 2c 30 2e 34 33 34 2d 31 2e 39 36 63 30 2e 32 38 39 2d 30 2e 35 36 2c 30 2e 36 38 36 2d 31 2e 30 32 36 2c 31 2e 31 39 2d 31 2e 34 0a 09 09 63 30 2e 35 30 34 2d 30 2e 33 37 33 2c 31 2e 30 38 37 2d 30 2e 36 35 32 2c 31 2e 37 35 2d 30 2e 38 34 63 30 2e 36 36 33 2d 30 2e 31 38 37 2c 31 2e 33 36 37 2d 30 2e 32 38 2c 32 2e 31 31 34 2d 30 2e 32 38 63 30 2e 34 36 36 2c 30 2c 31 2e 30 31 37 2c 30 Data Ascii: 79-0.214-1.12-0.479-1.624-0.798c-0.504-0.317-0.924-0.718-1.26-1.204c-0.336-0.484-0.504-1.101-0.504-1.848c0-0.746,0.145-1.4,0.434-1.96c0.289-0.56,0.686-1.026,1.19-1.4c0.504-0.373,1.087-0.652,1.75-0.84c0.663-0.187,1.367-0.28,2.114-0.28c0.466,0,1.017,0
2024-04-26 15:03:42 UTC	2554	IN	Data Raw: 2c 30 2c 31 2e 33 35 38 2d 30 2e 30 38 39 2c 32 2e 30 35 38 2d 30 2e 32 36 37 63 30 2e 37 2d 30 2e 31 37 37 2c 31 2e 32 36 35 2d 30 2e 33 39 36 2c 31 2e 36 39 34 2d 30 2e 36 35 38 63 30 2e 31 33 2c 30 2e 33 33 36 2c 30 2e 32 35 32 2c 30 2e 37 31 39 2c 30 2e 33 36 34 2c 31 2e 31 34 38 73 30 2e 31 39 36 2c 30 2e 38 33 31 2c 30 2e 32 35 32 2c 31 2e 32 30 34 0a 09 09 63 2d 30 2e 32 38 2c 30 2e 31 34 39 2d 30 2e 36 30 32 2c 30 2e 32 38 35 2d 30 2e 39 36 36 2c 30 2e 34 30 36 63 2d 30 2e 33 36 34 2c 30 2e 31 32 31 2d 30 2e 37 34 32 2c 30 2e 32 32 34 2d 31 2e 31 33 34 2c 30 2e 33 30 38 63 2d 30 2e 33 39 32 2c 30 2e 30 38 34 2d 30 2e 37 38 39 2c 30 2e 31 34 35 2d 31 2e 31 39 2c 30 2e 31 38 32 0a 09 09 73 2d 30 2e 37 37 39 2c 30 2e 30 35 37 2d 31 2e 31 33 34 2c 30 Data Ascii: ,0,1.358-0.089,2.058-0.267c0.7-0.177,1.265-0.396,1.694-0.658c0.13,0.336,0.252,0.719,0.364,1.148s0.196,0.831,0.252,1.204c-0.28,0.149-0.602,0.285-0.966,0.406c-0.364,0.121-0.742,0.224-1.134,0.308c-0.392,0.084-0.789,0.145-1.19,0.182s-0.779,0.057-1.134,0
2024-04-26 15:03:42 UTC	7662	IN	Data Raw: 30 37 35 2d 31 2e 35 38 32 2d 30 2e 32 32 35 63 2d 30 2e 34 39 34 2d 30 2e 31 34 38 2d 30 2e 39 32 39 2d 30 2e 33 39 32 2d 31 2e 33 30 32 2d 30 2e 37 32 38 63 2d 30 2e 33 37 34 2d 30 2e 33 33 36 2d 30 2e 36 37 32 2d 30 2e 37 38 38 2d 30 2e 38 39 36 2d 31 2e 33 35 38 0a 09 09 63 2d 30 2e 32 32 35 2d 30 2e 35 36 39 2d 30 2e 33 33 37 2d 31 2e 32 37 33 2d 30 2e 33 33 37 2d 32 2e 31 31 33 76 2d 31 30 2e 33 38 39 63 30 2e 33 35 34 2d 30 2e 30 33 37 2c 30 2e 37 36 36 2d 30 2e 30 37 34 2c 31 2e 32 33 32 2d 30 2e 31 31 31 63 30 2e 34 36 37 2d 30 2e 30 33 38 2c 30 2e 38 39 36 2d 30 2e 30 35 37 2c 31 2e 32 38 38 2d 30 2e 30 35 37 76 31 30 2e 33 36 0a 09 09 63 30 2c 30 2e 37 32 38 2c 30 2e 31 38 32 2c 31 2e 33 30 32 2c 30 2e 35 34 36 2c 31 2e 37 32 32 73 31 2e 30 31 Data Ascii: 075-1.582-0.225c-0.494-0.148-0.929-0.392-1.302-0.728c-0.374-0.336-0.672-0.788-0.896-1.358c-0.225-0.569-0.337-1.273-0.337-2.113v-10.389c0.354-0.037,0.766-0.074,1.232-0.111c0.467-0.038,0.896-0.057,1.288-0.057v10.36c0,0.728,0.182,1.302,0.546,1.722s1.01
2024-04-26 15:03:42 UTC	4913	IN	Data Raw: 33 32 2c 31 32 39 2e 31 37 36 7a 20 4d 34 31 39 2e 32 34 34 2c 31 32 39 2e 31 37 36 63 30 2d 31 2e 30 30 39 2d 30 2e 30 38 34 2d 31 2e 38 35 37 2d 30 2e 32 35 33 2d 32 2e 35 34 39 0a 09 09 63 2d 30 2e 31 36 38 2d 30 2e 36 38 39 2d 30 2e 34 30 35 2d 31 2e 32 34 35 2d 30 2e 37 31 34 2d 31 2e 36 36 36 63 2d 30 2e 33 30 38 2d 30 2e 34 32 2d 30 2e 36 38 32 2d 30 2e 37 32 33 2d 31 2e 31 32 2d 30 2e 39 30 39 73 2d 30 2e 39 33 38 2d 30 2e 32 38 2d 31 2e 34 39 37 2d 30 2e 32 38 0a 09 09 63 2d 30 2e 35 32 33 2c 30 2d 31 2e 30 30 34 2c 30 2e 30 38 34 2d 31 2e 34 34 32 2c 30 2e 32 35 32 73 2d 30 2e 38 31 37 2c 30 2e 34 36 32 2d 31 2e 31 33 34 2c 30 2e 38 38 32 63 2d 30 2e 33 31 38 2c 30 2e 34 32 2d 30 2e 35 36 35 2c 30 2e 39 37 36 2d 30 2e 37 34 32 2c 31 2e 36 36 36 Data Ascii: 32,129.176z M419.244,129.176c0-1.009-0.084-1.857-0.253-2.549c-0.168-0.689-0.405-1.245-0.714-1.666c-0.308-0.42-0.682-0.723-1.12-0.909s-0.938-0.28-1.497-0.28c-0.523,0-1.004,0.084-1.442,0.252s-0.817,0.462-1.134,0.882c-0.318,0.42-0.565,0.976-0.742,1.666
2024-04-26 15:03:42 UTC	6422	IN	Data Raw: 31 2e 39 36 37 2c 35 2e 34 36 38 2c 33 2e 37 32 38 0a 09 09 43 39 36 2e 39 39 39 2c 35 33 2e 31 33 38 2c 37 38 2e 31 39 35 2c 38 31 2e 30 39 35 2c 37 37 2e 31 34 2c 38 32 2e 37 35 31 7a 20 4d 32 31 31 2e 34 33 35 2c 38 32 2e 37 31 36 63 2d 31 2e 30 31 31 2c 31 2e 35 38 38 2d 31 2e 39 31 39 2c 33 2e 31 30 37 2d 31 2e 39 31 39 2c 35 2e 30 37 34 63 30 2c 30 2d 37 2e 33 37 33 2c 35 2e 32 31 33 2d 31 30 2e 32 36 36 2c 35 2e 32 38 31 0a 09 09 63 2d 33 2e 38 33 35 2c 30 2e 30 39 31 2d 33 2e 36 34 36 2d 32 2e 34 38 36 2d 33 2e 35 34 38 2d 34 2e 32 34 36 63 30 2e 32 38 38 2d 35 2e 31 37 38 2c 35 2e 36 36 2d 31 34 2e 33 39 32 2c 39 2e 30 31 37 2d 31 38 2e 39 34 38 63 32 2e 36 32 34 2d 33 2e 35 36 31 2c 31 32 2e 35 36 39 2d 32 30 2e 33 31 38 2c 32 31 2e 31 30 37 2d Data Ascii: 1.967,5.468,3.728C96.999,53.138,78.195,81.095,77.14,82.751z M211.435,82.716c-1.011,1.588-1.919,3.107-1.919,5.074c0,0-7.373,5.213-10.266,5.281c-3.835,0.091-3.646-2.486-3.548-4.246c0.288-5.178,5.66-14.392,9.017-18.948c2.624-3.561,12.569-20.318,21.107-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49757	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:42 UTC	558	OUT	GET /_img/bookmark_icon.ico HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:42 UTC	1091	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:07:41 GMT Server: Apache Last-Modified: Sun, 18 Jul 2021 22:53:39 GMT Content-Length: 7406 Age: 69748 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Thu, 25 Apr 2024 20:37:41 GMT Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Content-Type: image/vnd.microsoft.icon Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:42 UTC	5348	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 08 00 68 05 00 00 36 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 9e 05 00 00 30 30 00 00 01 00 08 00 a8 0e 00 00 46 0e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 77 00 00 50 8b 00 00 42 95 00 00 3e 98 00 00 45 9d 03 00 74 85 04 00 6a 9d 05 00 4b 9d 06 00 49 9d 07 00 95 66 0a 00 86 7a 0a 00 4d a3 0b 00 57 a2 0e 00 48 8e 11 00 50 a1 11 00 54 a9 12 00 b1 62 13 00 8d 77 13 00 75 92 13 00 a4 5c 14 00 85 82 14 00 9b 6c 15 00 69 96 16 00 96 74 17 00 a3 65 19 00 90 54 1b 00 58 a4 1b 00 5a a6 1f 00 7f 57 21 00 5d a9 23 00 99 5e 24 00 99 75 26 00 79 9c 26 00 61 aa 29 00 54 8a 2c 00 a6 55 2f 00 79 a5 2f 00 65 62 30 00 97 3b 34 00 6a af 34 00 aa Data Ascii: h6 00F( {wPB>EtjKIfzMWHPTbwu\liteTXZW!]#^$u&y&a)T,U/y/eb0;4j4
2024-04-26 15:03:42 UTC	2058	IN	Data Raw: 30 30 30 30 30 30 2e 4e 93 96 96 96 9b 5b 37 37 38 39 45 45 32 32 1f 1f 12 71 a1 a1 a1 a1 a3 88 0a 0a 0f 18 41 82 7b ca 00 00 00 00 ef 67 2e 30 30 30 30 30 30 30 22 7d 9b 9b 9b 9b 91 37 38 38 39 45 45 32 1f 1f 1c 12 55 a1 a3 a3 a3 a9 a3 4f 04 0f 15 21 28 5d 82 99 f5 00 00 00 c2 4e 22 30 30 30 30 30 30 2e 43 9b a1 a1 a1 a3 67 1a 39 45 45 32 32 1f 1f 1c 20 12 88 aa a9 aa aa b1 76 04 15 15 21 2a 2c 33 80 7f d5 00 00 00 a2 9b 69 30 30 30 30 30 30 22 69 a3 a3 a3 a3 a1 45 38 45 45 32 1f 1f 1c 1c 20 12 55 af af b1 b1 b2 a2 3e 0b 21 21 2a 2b 25 2d 5d 7f ab 00 00 d6 a1 a3 a3 91 5b 22 22 34 34 43 91 a9 a9 a9 aa 84 39 45 32 32 1f 1f 1c 20 20 29 12 97 b5 b3 b5 b5 b8 76 0b 21 2a 2a 2b 25 25 2d 4b 7f 95 ee 00 ba a9 a3 a9 a9 a9 91 5b 34 31 48 aa af af af b1 59 32 32 32 Data Ascii: 000000.N[7789EE22qA{g.0000000"}7889EE2UO!(]N"000000.Cg9EE22 v!,3i000000"iE8EE2 U>!!+%-][""44C9E22 )v!**+%%-K[41HY222

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49758	192.0.33.8	443	1464	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:03:45 UTC	358	OUT	GET /_img/bookmark_icon.ico HTTP/1.1 Host: www.iana.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:03:45 UTC	1091	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 21:25:34 GMT Server: Apache Last-Modified: Sun, 18 Jul 2021 22:53:39 GMT Content-Length: 7406 Age: 63532 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Thu, 25 Apr 2024 21:55:34 GMT Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Content-Type: image/vnd.microsoft.icon Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:03:45 UTC	240	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 08 00 68 05 00 00 36 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 9e 05 00 00 30 30 00 00 01 00 08 00 a8 0e 00 00 46 0e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 77 00 00 50 8b 00 00 42 95 00 00 3e 98 00 00 45 9d 03 00 74 85 04 00 6a 9d 05 00 4b 9d 06 00 49 9d 07 00 95 66 0a 00 86 7a 0a 00 4d a3 0b 00 57 a2 0e 00 48 8e 11 00 50 a1 11 00 54 a9 12 00 b1 62 13 00 8d 77 13 00 75 92 13 00 a4 5c 14 00 85 82 14 00 9b 6c 15 00 69 96 16 00 96 74 17 00 a3 65 19 00 90 54 1b 00 58 a4 1b 00 5a a6 1f 00 7f 57 21 00 5d a9 23 00 99 5e 24 00 99 75 26 00 79 9c 26 00 61 aa 29 00 54 8a 2c 00 a6 55 2f 00 79 a5 Data Ascii: h6 00F( {wPB>EtjKIfzMWHPTbwu\liteTXZW!]#^$u&y&a)T,U/y
2024-04-26 15:03:45 UTC	3831	IN	Data Raw: 2f 00 65 62 30 00 97 3b 34 00 6a af 34 00 aa 62 36 00 50 62 3a 00 6e b1 3a 00 72 af 3b 00 a6 7d 40 00 a7 6c 42 00 a0 74 47 00 b2 7a 4c 00 7a b7 4c 00 8d ae 4d 00 75 4b 4e 00 bc 85 4e 00 69 61 4f 00 9e 46 51 00 63 7a 51 00 9f 85 55 00 83 bc 56 00 87 70 58 00 92 a3 58 00 a8 5b 5a 00 b6 78 5a 00 ab 6d 5f 00 ae 94 63 00 72 7e 69 00 91 c3 69 00 77 88 6a 00 b7 79 6c 00 b3 b8 73 00 be 72 79 00 9c ca 79 00 a7 c2 7b 00 b4 6f 7d 00 bd 82 87 00 91 89 87 00 aa ce 87 00 a9 d0 8a 00 c5 8d 8d 00 c3 7c 92 00 93 90 92 00 c4 92 92 00 ce b8 92 00 bf ca 93 00 be d1 94 00 9f 9e 9b 00 ca c4 9e 00 ba df 9e 00 cb 97 9f 00 ce a3 9f 00 d4 b5 a2 00 a8 a8 a4 00 bd db a5 00 c9 93 a6 00 b2 b2 b2 00 be be b9 00 dc c2 bd 00 ce e5 bd 00 dc b4 be 00 df d8 be 00 da c7 c0 00 d1 e8 c0 00 e3 Data Ascii: /eb0;4j4b6Pb:n:r;}@lBtGzLzLMuKNNiaOFQczQUVpXX[ZxZm_cr~iiwjylsryy{o}\|
2024-04-26 15:03:45 UTC	2554	IN	Data Raw: a9 35 00 97 38 37 00 6d b0 38 00 63 4e 39 00 98 85 3b 00 8b a4 3b 00 71 b3 3d 00 63 46 41 00 7f a3 41 00 af 77 43 00 65 55 44 00 aa 68 44 00 9c 44 45 00 4e 5a 45 00 76 b6 45 00 5b 4b 46 00 57 65 46 00 a3 52 47 00 a1 4d 49 00 a5 78 4a 00 94 a8 4a 00 85 b0 4a 00 63 80 4b 00 5a 53 4c 00 96 93 4f 00 a9 92 50 00 a0 4c 51 00 7a 55 51 00 82 ba 53 00 55 55 54 00 95 75 54 00 ab 69 56 00 a5 56 57 00 58 58 57 00 5b 5c 57 00 ac 7c 5b 00 5d 5e 5c 00 8f 5e 5c 00 b3 84 5c 00 8a c0 60 00 a9 5a 61 00 6c 73 66 00 ab 84 66 00 ad 62 67 00 bb 82 67 00 94 bd 67 00 68 68 68 00 ab a7 68 00 a7 b8 68 00 93 c8 6a 00 7c 74 6c 00 b6 78 6d 00 bf a0 6d 00 af 68 6e 00 c6 9c 6e 00 70 70 70 00 b3 6d 73 00 b5 99 73 00 99 c7 73 00 77 76 76 00 b9 b8 79 00 b6 74 7a 00 7b 7b 7b 00 c1 aa 7c 00 Data Ascii: 587m8cN9;;q=cFAAwCeUDhDDENZEvE[KFWeFRGMIxJJJcKZSLOPLQzUQSUUTuTiVVWXXW[\W\|[]^\^\\`Zalsffbggghhhhhj\|tlxmmhnnpppmssswvvytz{{{\|
2024-04-26 15:03:45 UTC	781	IN	Data Raw: bc f6 fd fd fd e6 d5 00 00 00 00 00 00 00 00 00 00 00 00 b0 0c 6c fd fd fd d2 02 3a 9e e7 fd fd fd fd b7 98 f9 fd fd f1 60 14 25 25 25 25 25 14 0c 6c d0 f9 f9 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ae 6c fd fd fd d2 1d 1d 06 51 ae ed fd fd fd f6 fd fd f9 e9 51 1d 25 25 25 25 25 25 25 0c 14 9e fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 f4 fd fd d2 1d 24 25 1d 06 5c bc f7 fd fd fd fd fd da 24 1d 25 25 25 25 25 25 25 25 60 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 fd fd d7 24 24 25 25 25 14 0c 6c cc fd fd fd fd e4 64 06 1d 25 25 25 25 25 25 98 ed 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd e0 3a 1d 25 25 25 25 25 0c 06 ae fa fd fd fd f0 ae 4c 06 24 25 25 64 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: l:`%%%%%llQQ%%%%%%%$%\$%%%%%%%%`$$%%%ld%%%%%%:%%%%%L$%%d

Target ID:	0
Start time:	17:02:28
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:02:33
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2016,i,6281715248989916148,14129476578495374566,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:02:36
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.AryFGbNWOut6hGg1x_WBQ4QL5QU_wggDk6q2PUj7rNI"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Static File Info

Network Behavior

Network Port Distribution