Edit tour

Windows Analysis Report
https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTAxOTIyLCJtZXNzYWdlX2lkIjoiMGd4d3poYXc3czloeGZoZWNuNjNuYnFwIzg0YjRlN2VjLTdhZjUtNDU5Yi1hNTYxLWE1ZmVlMTE3NTl

Overview

General Information

Sample URL:	https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTAxOTI
Analysis ID:	1432224
Infos:

Detection

Captcha Phish

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Captcha Phish

HTML page contains hidden URLs or javascript code

Sigma detected: Suspicious Office Token Search Via CLI

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,10201416782276459292,16793361872005347098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.4.pages.csv	JoeSecurity_CaptchaPhish	Yara detected Captcha Phish	Joe Security
0.0.pages.csv	JoeSecurity_CaptchaPhish	Yara detected Captcha Phish	Joe Security

Sigma Signatures

Sigma detected: Suspicious Office Token Search Via CLI

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTAxOTIyLCJtZXNzYWdlX2lkIjoiMGd4d3poYXc3czloeGZoZWNuNjNuYnFwIzg0YjRlN2VjLTdhZjUtNDU5Yi1hNTYxLWE1ZmVlMTE3NTllNiIsImNoYW5uZWxfdHlwZSI6ImVtYWlsIiwiZXhwIjoxNzQ1NjM3OTIyLCJyZWRpcmVjdF91cmwiOiJodHRwczovL3ZtbWVzc2FuZ2VyLnJkb2NtZ2xvYmFsLmNvbS9kb2NzL2luZGV4LnBocD9tYWlsPSUyMGphbWVzLmZheUBjb3VudHluYXRpb25hbGJhbmsuY29tJnBhdGhzPWFib3ZlJmxpbms9RmF4X091dGxvb2siLCJpbmRpdmlkdWFsX2lkIjoiNDA4YWI4OGRlY2JmNDFjMjRhYTZhMDRlOWU1OWMzZDAifQ.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0", CommandLine|base64offset|contains: , Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 5476, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0ZW5hbnRfaWQiOiJhMzYwL3Byb2QvNTBhMGYyODg2ZTg4NDA3Y2I1ODUwYmRjOWQwZGIxZTUiLCJjcmVhdGlvbl90aW1lIjoxNzE0MTAxOTIyLCJtZXNzYWdlX2lkIjoiMGd4d3poYXc3czloeGZoZWNuNjNuYnFwIzg0YjRlN2VjLTdhZjUtNDU5Yi1hNTYxLWE1ZmVlMTE3NTllNiIsImNoYW5uZWxfdHlwZSI6ImVtYWlsIiwiZXhwIjoxNzQ1NjM3OTIyLCJyZWRpcmVjdF91cmwiOiJodHRwczovL3ZtbWVzc2FuZ2VyLnJkb2NtZ2xvYmFsLmNvbS9kb2NzL2luZGV4LnBocD9tYWlsPSUyMGphbWVzLmZheUBjb3VudHluYXRpb25hbGJhbmsuY29tJnBhdGhzPWFib3ZlJmxpbms9RmF4X091dGxvb2siLCJpbmRpdmlkdWFsX2lkIjoiNDA4YWI4OGRlY2JmNDFjMjRhYTZhMDRlOWU1OWMzZDAifQ.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0", ProcessId: 4276, ProcessName: chrome.exe

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected Captcha Phish

Source: Yara match	File source: 0.4.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Source: https://james-fay.bradentoncc.store/index0.php

HTTP Parser: Base64 decoded: https://james-fay.bradentoncc.store:443

Source: https://james-fay.bradentoncc.store/index0.php	HTTP Parser: No favicon
Source: https://james-fay.bradentoncc.store/index0.php	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr	HTTP Parser: No favicon
Source: https://example.com/	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49750 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49719 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49750 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 26 Apr 2024 15:30:07 GMTServer: ApacheX-Content-Type-Options: nosniffVary: Accept-EncodingLast-Modified: Wed, 06 Mar 2024 16:51:21 GMTX-Frame-Options: DENYX-Content-Type-Options: nosniffReferrer-Policy: same-originCross-Origin-Opener-Policy: same-originCache-Control: public, max-age=3600Expires: Fri, 26 Apr 2024 16:30:07 GMTContent-Encoding: gzipContent-Security-Policy: upgrade-insecure-requests; default-src 'self' https://*.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://*.gstatic.com;Age: 1381Content-Length: 1508Keep-Alive: timeout=2, max=358Connection: Keep-AliveContent-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 cd 6e dc 36 10 3e 57 4f c1 e8 d0 93 b5 b2 b7 a8 53 34 5a 01 0b 27 41 0c 14 0b c3 75 10 a0 97 80 a2 66 57 74 28 51 21 a9 dd 6c 4f 7d 8d be 5e 9f a4 33 a4 b4 ff b1 e3 06 68 62 c0 2b 72 c4 f9 e1 37 c3 99 a1 a2 ec 59 a9 85 5b b7 c0 2a 57 ab 3c ca 86 07 f0 32 8f 7e c8 9c 74 0a f2 57 9f 78 dd 2a 60 2f 75 cd 65 63 b3 34 90 23 5c 50 83 e3 4c 54 dc 58 70 93 b8 73 f3 e4 97 98 a5 f9 f0 a6 72 ae 4d e0 63 27 97 93 f8 4a 37 0e 1a 97 90 ba 98 89 30 9b c4 0e 3e b9 94 d4 be d8 c8 39 12 d3 f0 1a 26 f1 52 c2 aa d5 c6 ed 30 af 64 e9 aa 49 09 4b 29 20 f1 93 33 26 1b e9 24 57 89 15 5c c1 e4 22 c8 41 49 4a 36 Data Ascii: Xn6>WOS4Z'AufWt(Q!lO}^3hb+r7Y[*W<2~tWx*`/uec4#\PLTXpsrMc'J70>9&R0dIK) 3&$W\"AIJ6

Source: global traffic	HTTP traffic detected: GET /click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0 HTTP/1.1Host: cdp1.tracking.e360.salesforce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /docs/index.php?mail=%20james.fay@countynationalbank.com&paths=above&link=Fax_Outlook HTTP/1.1Host: vmmessanger.rdocmglobal.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /docs/index0.php HTTP/1.1Host: vmmessanger.rdocmglobal.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=76crr5101audm07kdspq6im631
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.php?mail=%20james.fay@countynationalbank.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook HTTP/1.1Host: james-fay.bradentoncc.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index0.php HTTP/1.1Host: james-fay.bradentoncc.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=u7lm09bt4a2460pnjlb75uu0a9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://james-fay.bradentoncc.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://james-fay.bradentoncc.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: james-fay.bradentoncc.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://james-fay.bradentoncc.store/index0.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=u7lm09bt4a2460pnjlb75uu0a9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9OY0_IQGz67xx_A_2F_zadSaofsLXY2wC6Lv4C0xX9O-rGYwTNhTMt2p03OZKs0Tk5d8V7zt4Ru9WqnvEQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/clr?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9OY0_IQGz67xx_A_2F_zadSaofsLXY2wC6Lv4C0xX9O-rGYwTNhTMt2p03OZKs0Tk5d8V7zt4Ru9WqnvEQ
Source: global traffic	HTTP traffic detected: GET /?xgshwmpx&qrc=james.fay@countynationalbank.com HTTP/1.1Host: migconsultings.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://james-fay.bradentoncc.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?https://example.com HTTP/1.1Host: href.liConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://james-fay.bradentoncc.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: example.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: example.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://example.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /domains/example HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_css/2022/iana_website.css HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/jquery.js HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_js/iana.js HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/iana-logo-header.svg HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/fonts/NotoSans-Regular.woff HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.iana.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.iana.org/_css/2022/iana_website.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/fonts/NotoSans-Bold.woff HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://www.iana.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.iana.org/_css/2022/iana_website.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/bookmark_icon.ico HTTP/1.1Host: www.iana.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/2022/iana-logo-header.svg HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_img/bookmark_icon.ico HTTP/1.1Host: www.iana.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help/example-domains HTTP/1.1Host: www.iana.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdp1.tracking.e360.salesforce.com
Source: global traffic	DNS traffic detected: DNS query: vmmessanger.rdocmglobal.com
Source: global traffic	DNS traffic detected: DNS query: james-fay.bradentoncc.store
Source: global traffic	DNS traffic detected: DNS query: migconsultings.com
Source: global traffic	DNS traffic detected: DNS query: href.li
Source: global traffic	DNS traffic detected: DNS query: example.com
Source: global traffic	DNS traffic detected: DNS query: www.iana.org

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 6949sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbrAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 15:52:35 GMTServer: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30Content-Length: 314Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 77422Cache-Control: max-age=604800Content-Type: text/html; charset=UTF-8Date: Fri, 26 Apr 2024 15:52:40 GMTExpires: Fri, 03 May 2024 15:52:40 GMTLast-Modified: Thu, 25 Apr 2024 18:22:18 GMTServer: ECAcc (mid/8787)Vary: Accept-EncodingX-Cache: 404-HITContent-Length: 1256Connection: close

Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_75.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_75.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_75.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_80.2.dr, chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_83.2.dr, chromecache_75.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_80.2.dr, chromecache_78.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_93.2.dr, chromecache_79.2.dr	String found in binary or memory: https://www.iana.org/domains/example

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49719 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@22/50@28/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,10201416782276459292,16793361872005347098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,10201416782276459292,16793361872005347098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://recaptcha.net	0%	URL Reputation	safe
https://james-fay.bradentoncc.store/index.php?mail=%20james.fay@countynationalbank.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook	0%	Avira URL Cloud	safe
https://vmmessanger.rdocmglobal.com/docs/index.php?mail=%20james.fay@countynationalbank.com&paths=above&link=Fax_Outlook	0%	Avira URL Cloud	safe
https://migconsultings.com/?xgshwmpx&qrc=james.fay@countynationalbank.com	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://james-fay.bradentoncc.store/verify.php	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
https://vmmessanger.rdocmglobal.com/docs/index0.php	0%	Avira URL Cloud	safe
https://james-fay.bradentoncc.store/favicon.ico	0%	Avira URL Cloud	safe
https://vmmessanger.rdocmglobal.com/docs/index0.php	4%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
james-fay.bradentoncc.store	188.116.24.148	true	false	unknown
migconsultings.com	82.180.161.153	true	false	unknown
www.google.com	142.250.217.196	true	false	high
vmmessanger.rdocmglobal.com	38.180.91.41	true	false	unknown
global-cdp1.sfdc-yfeipo.svc.sfdcfc.net	52.205.88.207	true	false	unknown
example.com	93.184.215.14	true	false	high
ianawww.vip.icann.org	192.0.33.8	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
href.li	192.0.78.26	true	false	high
cdp1.tracking.e360.salesforce.com	unknown	unknown	false	high
www.iana.org	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.iana.org/help/example-domains	false		high
https://james-fay.bradentoncc.store/index.php?mail=%20james.fay@countynationalbank.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook	false	Avira URL Cloud: safe	unknown
https://www.iana.org/_img/2022/iana-logo-header.svg	false		high
https://www.iana.org/_img/bookmark_icon.ico	false		high
https://www.iana.org/_css/2022/iana_website.css	false		high
https://vmmessanger.rdocmglobal.com/docs/index.php?mail=%20james.fay@countynationalbank.com&paths=above&link=Fax_Outlook	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	low
https://james-fay.bradentoncc.store/index0.php	false		unknown
https://www.google.com/recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf	false		high
https://www.iana.org/_img/2022/fonts/NotoSans-Bold.woff	false		high
https://migconsultings.com/?xgshwmpx&qrc=james.fay@countynationalbank.com	false	Avira URL Cloud: safe	unknown
https://href.li/?https://example.com	false		high
https://www.iana.org/_js/iana.js	false		high
https://james-fay.bradentoncc.store/verify.php	false	Avira URL Cloud: safe	unknown
https://www.iana.org/_img/2022/fonts/NotoSans-Regular.woff	false		high
https://example.com/favicon.ico	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr	false		high
https://www.iana.org/domains/example	false		high
https://vmmessanger.rdocmglobal.com/docs/index0.php	false	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js?render=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf	false		high
https://www.iana.org/_js/jquery.js	false		high
https://example.com/	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m	false		high
https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js	false		high
https://www.google.com/recaptcha/api2/clr?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf	false		high
https://james-fay.bradentoncc.store/favicon.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://recaptcha.net	chromecache_75.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://cloud.google.com/contact	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_75.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_83.2.dr, chromecache_75.2.dr	false	Avira URL Cloud: safe	low
https://www.google.com/recaptcha/api2/	chromecache_80.2.dr, chromecache_83.2.dr, chromecache_75.2.dr	false		high
https://support.google.com/recaptcha	chromecache_75.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.0.33.8	ianawww.vip.icann.org	United States	40528	ICANN-LAXUS	false
188.116.24.148	james-fay.bradentoncc.store	Poland	42739	FONE-ASNPL	false
192.178.50.68	unknown	United States	15169	GOOGLEUS	false
142.250.217.228	unknown	United States	15169	GOOGLEUS	false
192.0.78.26	href.li	United States	2635	AUTOMATTICUS	false
142.250.217.164	unknown	United States	15169	GOOGLEUS	false
142.250.217.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
93.184.215.14	example.com	European Union	15133	EDGECASTUS	false
38.180.91.41	vmmessanger.rdocmglobal.com	United States	174	COGENT-174US	false
82.180.161.153	migconsultings.com	Denmark	29100	BROADCOMDK	false
52.205.88.207	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432224
Start date and time:	2024-04-26 17:51:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@22/50@28/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.iana.org/domains/example

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.107.84, 142.250.217.163, 192.178.50.78, 34.104.35.123, 199.232.214.172, 40.68.123.157, 192.229.211.108, 20.3.187.198, 142.250.64.163, 142.250.217.234, 142.251.35.234, 142.250.64.170, 142.250.189.138, 172.217.15.202, 192.178.50.42, 142.250.217.202, 142.250.64.202, 142.250.217.170, 172.217.165.202, 192.178.50.74, 142.250.217.195, 172.217.165.195, 23.45.182.76, 23.45.182.83, 23.45.182.100, 23.45.182.80, 23.45.182.107, 23.45.182.66, 23.45.182.86, 23.45.182.73, 23.45.182.105, 13.85.23.206, 142.250.64.227, 23.56.6.162, 23.56.6.208
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:52:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.983576138629962
Encrypted:	false
SSDEEP:	48:8adwT006HGidAKZdA19ehwiZUklqeh2y+3:8Bv7Zy
MD5:	0FF5514D75B326BFDBEEA23F460E4C76
SHA1:	54F8DF6632BA20327A0CC2B8F7ABE4875181DB08
SHA-256:	6D33A482DFD083DC4786EA1126278896FFEE7CAD002D9ECBC08A3F17F6957219
SHA-512:	4E8D10C149BF8B3EF967F9B37CD1A5FD178381AB3600593C1E73308AC73F8C1D02EB547BDA5AD10654191B1A8F6018772CF614D55606DF0461F4E7288EC51686
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....;.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X}~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:52:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9986900856642587
Encrypted:	false
SSDEEP:	48:8KdwT006HGidAKZdA1weh/iZUkAQkqehJy+2:8xvJ9Q0y
MD5:	2835C4D74EDD6A8D516F8A7E3CFC5902
SHA1:	830AAC33D56F56A75606396951B84495B5B607C7
SHA-256:	B858D6A69AAC5DA8267931381D23E128AE1ADE79B64B0912C22482239AD9E46E
SHA-512:	DF63C21A3CA1BFA80F8FF33E79C4D6156162C002F8B10EE2FBAB34FBADA8C9B475D14B6A2DB8014515C2D418B2F215090D575B6B37197E867DC11033EE5713A3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....5.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X}~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008895948918497
Encrypted:	false
SSDEEP:	48:8xtdwT00sHGidAKZdA14tseh7sFiZUkmgqeh7sny+BX:8xQvznVy
MD5:	CB6B084B622989BF4ADB7DD8F5837DBE
SHA1:	6BD17870F4FDBD512BCAD36F45573F4160EB0F15
SHA-256:	7BAC674C4B77009A8C2AC4FCA56B1E083E0AD39C5728223ADD45C4B62C46C388
SHA-512:	374BB2DFFA4BED208E5EDAE26224A8BD3E5E49CA1A68B48ADBD69E7B1B115DB4424C20377E21DC529BEAC5BEA17AC257AD55AB0A749BFD846BA89EECFD42ED34
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X}~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:52:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9989865993418214
Encrypted:	false
SSDEEP:	48:8JdwT006HGidAKZdA1vehDiZUkwqeh9y+R:8cvKvy
MD5:	3F3B18CE4F9E9FE6D0BAA7C88D857877
SHA1:	477273A387B1750591FC578C17AC2F3E70D560BA
SHA-256:	4BE676F82887ED3D37002FD1425DDC19FBB1A01ED0FE0E2157BFB7F00A641783
SHA-512:	2AFB9D9BFB412645F90F9B73C149B8D935987AC726EC77CBC9EEF5595E6A89FBD81E9AA4381F112429378796D3D29295BFBF5DB9A8349D3848FB79A16296ED11
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'%.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X}~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:52:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9868946594152006
Encrypted:	false
SSDEEP:	48:89dwT006HGidAKZdA1hehBiZUk1W1qehjy+C:8gvq9Dy
MD5:	6DCA20536392144CF4232C17B7D05623
SHA1:	A1AF8EE58755D38D20FE784F903D40177EBCCAD9
SHA-256:	9FEE71F424432407132E0EED068618E7225FF6F5921C189091B5C5C5DCDD14B7
SHA-512:	628F84CF3B60BF860014E92A0140B53C171BF2545A386E459F0A013463D45E4AFD7DDF0A14CBBE721D78D7E744A1DA0501649C90FAEEF94F3D5F9763CB0E868A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....R....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X}~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 14:52:08 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.997940970471147
Encrypted:	false
SSDEEP:	48:8YdwT006HGidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbVy+yT+:8fv0T/TbxWOvTbVy7T
MD5:	C158BD4C61F5BC0044550554124ED61E
SHA1:	4B707CB9A4B8254C6E3BAD33970C3CFAB45A45D0
SHA-256:	5381820A239A0A6A7BC7DB9EF44322F997750A2A5B4E17B41DE67E37D8A1FD9D
SHA-512:	2EF0CCA8F3D9906CB5853105EDD57CD7A80621C1C40DDCFC06578CF0796CE75884599C69A3A5A452D3AF52F60A8A68EEDEF279C8DBC7DD445B9127202BE91B56
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....}.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X}~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	32870
Entropy (8bit):	4.300873890135518
Encrypted:	false
SSDEEP:	768:8Zr++SQvCrFQy7t5t1S9+UMTY1UeuXrGI:L+SQ8FQyztg9+UMc1Ue6N
MD5:	426B3AC01D3584C820F3B7F5985D6623
SHA1:	6FA7ECC4EB21D4FD7BFD1FD3550F0AAAB0AB43D7
SHA-256:	888B41C392A51D5AA6CA6DF224E345F74FFBB97A48422753A3E4F90F305D0004
SHA-512:	CD094F2ECE42AB1E4F789BC3027828CF98CC62044D456B8A5A66E946CB5CC3D3A1984A04C11923918F449A7CDEDBC1F54966679AAA8451D7E536B24637128047
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_img/2022/iana-logo-header.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="IANA_Header_Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px".. y="0px" width="234px" height="72px" viewBox="0 0 468 144" enable-background="new 0 0 468 144" xml:space="preserve">.<g id="Text_Paths">..<path fill="#5A5A58" d="M5.129,136.483v-18.872h2.744v18.872H5.129z"/>..<path fill="#5A5A58" d="M21.929,136.483v-10.332c0-0.709-0.178-1.27-0.532-1.68c-0.355-0.411-0.99-0.616-1.904-0.616...c-0.71,0-1.354,0.098-1.932,0.294c-0.579,0.196-1.148,0.48-1.708,0.854v11.48h-2.492v-14.504c0.336-0.056,0.742-0.098,1.218-0.126...s0.9-0.042,1.274-0.042v1.428h0.14c0.728-0.634,1.437-1.068,2.128-1.302c0.69-0.233,1.418-0.351,2.184-0.351...c0.56,0,1.087,0.075,1.582,0.225c0.494,0.149,0.933,0.396,1.316,0.742c0.382,0.346,0.686,0.803,0.91,1.372...c0.224,0.569,0.336,1.273,0.336,2.113v10.444H21.929z"/>..<path fill="#

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkFwzWaHQwEZhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	4.757453290014263
Encrypted:	false
SSDEEP:	24:0pbMMpAYuOjM/fHxAYJwPp2AEPmbW1E6FD8EVyiJZni/1/EmDFf2kzj:0hpqkM6YJwh8PmbWO65siJZi/9jplzj
MD5:	84238DFC8092E5D9C0DAC8EF93371A07
SHA1:	4A3CE8EE11E091DD7923F4D8C6E5B5E41EC7C047
SHA-256:	EA8FAC7C65FB589B0D53560F5251F74F9E9B243478DCB6B3EA79B5E36449C8D9
SHA-512:	D06B93C883F8126A04589937A884032DF031B05518EED9D433EFB6447834DF2596AEBD500D69B8283E5702D988ED49655AE654C1683C7A4AE58BFA6B92F2B73A
Malicious:	false
Reputation:	low
URL:	https://example.com/
Preview:	<!doctype html>.<html>.<head>. <title>Example Domain</title>.. <meta charset="utf-8" />. <meta http-equiv="Content-type" content="text/html; charset=utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <style type="text/css">. body {. background-color: #f0f0f2;. margin: 0;. padding: 0;. font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;. . }. div {. width: 600px;. margin: 5em auto;. padding: 2em;. background-color: #fdfdff;. border-radius: 0.5em;. box-shadow: 2px 3px 7px 2px rgba(0,0,0,0.02);. }. a:link, a:visited {. color: #38488f;. text-decoration: none;. }. @media (max-width: 700px) {. div {. margin: 0 auto;. width: auto;. }. }. </style> .</head>..<body>.<div>. <h1>Example Domain</h1>. <p>This domai

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.850141602190281
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccADfVVaw+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEciVVaKonR3evtTA87b1Muh6LrwUnG
MD5:	4BFE143A6E96663220A888FBD05BE9DE
SHA1:	3F6A373C51AD13604A112831321D8CACAECE7362
SHA-256:	3AED6E7FA351DB3BD63A17991D6E8AE2B46936A24A8E44769D463C1D79941F2A
SHA-512:	F9773D6E5DF5F598FD7AFDA67DECE5CA78B49B04695BD39FBEA21D445BE51E91B25715742B645693C9ED12F1D5F8103D15C3750C0411AD2E6D0EEDECDBF163AB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOV

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_js/jquery.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4747
Category:	downloaded
Size (bytes):	1508
Entropy (8bit):	7.8477027555275205
Encrypted:	false
SSDEEP:	24:Xrzf8XZDffoGGCvdLqfo0PjJSSFQukScnoUZGymbk2s5raS/rhXq6vxndE/6DxfH:Xn0XZTfocvdCPj8SFQ87hvbkTb/d1p6S
MD5:	A4D3A029428859C989B9144EF91C95A7
SHA1:	968CEE1221DE99445307365EA2B5F24DEA7C96B3
SHA-256:	B57EDCA2DE1923384FD84209E44DF9AD844F5786E4A1A63684D8DAF3105DF75F
SHA-512:	74187C0D55B02DA2DB1909EB9C98246D7F79CE04CB4CDA1F35DABEE1F91C0DE353184A861AE0C7B8FBD48192997F7FF69DB11775E1DEF5D5ABDCD3D307760BA9
Malicious:	false
Reputation:	low
URL:	http://www.iana.org/help/example-domains
Preview:	...........X.n.6.>WO.......S4Z..'A....u.....fWt(Q!..lO}..^..3......hb.+r...7....Y..[..W.<...2.~.t..W.x.`/u.ec.4.#\P..LT.Xp..s.....r.M.c'...J7.......0...>.....9....&.R....0.d.I.K) .3&..$W..\..".AIJ6...5..[+.......'q.^X.....T._Aa...Rco..s.&..1.V.v3.e..."e+P....C....vD.S...F.......%..Y#H..M.?v`.{..Y.^.O`...0#.Y...e.....9.<b...r.d9..1..7J/.....Q..\|0.@...c...r.3..ot.-..d)......Bqk'q.r..D....}.'.o.,C...&.9..%..F;-.B.a...MW.`.s..[..Y.<..+b...W.<....sq>..i#.t.....a....h.x....).8)0#......dV....%^....F..@.I/!..wq.b..em>........f'..:5s1.<.....W.F.U..h......F...(...9..NT.[......7.Y0n..j..PFsm.]t5&$....L.-......Fx....Y...Ju...YB.+...A.e+.. k.D-BkS.&(.W(..X{..."L.R...$..,d..8.ac.x..........6...<f.Pe..U0l.....E...0..J........C@..4..x.(.dy...`..9Jtg....[.0.......B@v.. ..o[%.7.AyWI4[6.".qE[... Y...5U..\t...+.I....@y......c..[...n,t..c.<h._" -.?..{sww3..;...;......Ux.......,.. .P...t6MjL....'..$....y._.tm.....g....0.._<O..N.~..y.Y.AH....}.'.y..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	7406
Entropy (8bit):	5.622090120332121
Encrypted:	false
SSDEEP:	96:JHKywzNjZb7coRVbm0SgR0M8cym9TgbvT4j92l6H4Yw7Extm9gnwbn:Nkr9R7uM8rbvT4j9Pw7cMbn
MD5:	E14A2530B3E9141D357AFAF2314D2E49
SHA1:	79B6F05AC4FE930DFC574C9E24B5A5FC11B936FF
SHA-256:	24BFB441173C83B8184B0C19CC8695615B5A3878A00E63E3DC52B3C430B18AB3
SHA-512:	B4D3A47186005F0871B84528E3DDC010366FDFF189FAA2EEB8189DEA3E1CF893593E0D11A7E94D1EDDF62C62F145AA26D5475E9D7E7F1CC5AD725ADD05DE7C24
Malicious:	false
Reputation:	low
Preview:	..............h...6... ..............00..........F...(....... ...............................{w..P...B...>...E...t...j...K...I....f...z..M...W...H...P...T....b...w..u....\.......l..i....t...e...T..X...Z....W!.].#..^$..u&.y.&.a.).T.,..U/.y./.eb0..;4.j.4..b6.Pb:.n.:.r.;..}@..lB..tG..zL.z.L...M.uKN...N.iaO..FQ.czQ...U...V..pX...X..[Z..xZ..m_...c.r~i...i.w.j..yl...s..ry...y...{..o}...................\|....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	41952
Entropy (8bit):	4.972770006286109
Encrypted:	false
SSDEEP:	768:kGrGTvl1TtFF7jYEI3bF8zpxdr3/TscBFqP4qzBoSK7A/T81wMXR83QdkgBBvuy9:kGrGTvl1TtFRHI3bizndr3wcBEwqzBoH
MD5:	8D9495EF3113D16E472CBA7BCE3DDA1F
SHA1:	13D3567D8450227113DF9794FA5DCFFFAC2051C9
SHA-256:	965C94C507BAC30D4CD69669DA239CF854259F371228EF14470D11B17CCC901B
SHA-512:	9B3CDEF0313967DF9100FBD88829A6793BCA7703126831930AE871A6881AC159A1F4EF201403BB04EA7DB0822180F0ADB4A8FB6407FFBF41B7A9C30A6BE445D9
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_css/2022/iana_website.css
Preview:	@charset "UTF-8";.@font-face {. font-family: "Noto";. src: local("Noto Sans"), local("NotoSans"), url("/_img/2022/fonts/NotoSans-Regular.woff");. font-weight: 400;.}.@font-face {. font-family: "Noto";. src: local("Noto Sans"), local("NotoSans"), url("/_img/2022/fonts/NotoSans-Italic.woff");. font-weight: 400;. font-style: italic;.}.@font-face {. font-family: "Noto";. font-weight: 600;. src: local("Noto Sans Bold"), local("NotoSans-Bold"), url("/_img/2022/fonts/NotoSans-Bold.woff");.}.@font-face {. font-family: "Source Code Pro";. src: local("Source Code Pro"), url("/_img/2022/fonts/SourceCodePro-Regular.woff");.}.@font-face {. font-family: "s-deva";. src: url("/_img/2022/fonts/NotoSansDevanagari-Regular.ttf");.}..script-deva {. font-family: "s-deva";.}..@font-face {. font-family: "s-hebr";. src: url("/_img/2022/fonts/NotoSansHebrew-Regular.ttf");.}..script-hebr {. font-family: "s-hebr";.}..html, body, div, span, object, iframe, h1, h2, h3, h4, h5, h6,.p, blockquote, p

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	314
Entropy (8bit):	5.310510993607732
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIR4fLTRONO2FWXons8oD:J0+oxBeRmR9etdzRxGezHxN9FWXons8+
MD5:	90FFF4F721B626C504C9F180038E1306
SHA1:	C6E54F37D05237883C33D8BD5984E38E7C30F370
SHA-256:	6598A38BA4BBD63357F462E61A99399F50529E33130CBCBE129EB8420FB85CE9
SHA-512:	96744315E34982B0289D9EF067CE6F5FB43C6CF9FAA7DB531CDF133A1F579ACD8D2532D98D9867704AD6A7DFBC0181DAE4865A7FA582614A320A627071CE46E9
Malicious:	false
Reputation:	low
URL:	https://james-fay.bradentoncc.store/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 Server at james-fay.bradentoncc.store Port 443</address>.</body></html>.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	416
Entropy (8bit):	5.032789000012038
Encrypted:	false
SSDEEP:	12:hYzx7BqhCjKn7ctQtqqJmrLgFDHo+4Nbx8oA2/T:hYzxBqhCj042Rto+4NBA2r
MD5:	0EB5F7CD507DABA712CA57436C093E81
SHA1:	D931290189362D2B4C4F1529B1EDA6D84AC4303D
SHA-256:	7DDFE06AB75FCAC1EE9065216103F4915D979ED468D989A1AA0FA6B8A2E827F6
SHA-512:	AFADFA10EE6006EB6F3CBF335C2B028C6AC7A02713C51255208A6D049E90EB0E9520D03363F70F8138A212451D376B301A309C1CB5B9CC20CBF7F6BF5C3D4C7E
Malicious:	false
Reputation:	low
URL:	https://href.li/?https://example.com
Preview:	<!DOCTYPE html>.<html><head>.<title>href.li</title>.<meta http-equiv="Refresh" content="0; url=https://example.com" />.<meta name="referrer" content="no-referrer" />.<script type="text/javascript">./* <![CDATA[ /.window.location.replace( "https:\/\/example.com" + window.location.hash );./ */.</script>.</head>.<body><p>Redirecting..<br /><a href="https://example.com">https://example.com</a></p></body></html>

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.285940878544194
Encrypted:	false
SSDEEP:	3:C3scYYhJQkKJdBSEoEGBkADMtv:C3L+dIXCmMtv
MD5:	BA2525002CEDBA259221570E88406E52
SHA1:	B1BBBD7E1220F145C43A176A5232C7FA2593D236
SHA-256:	4328256D40CDAA047D99460B43F6D77366982975E891A932EF8E00736FD82E1A
SHA-512:	39DC70B7D114BD4F90E398844FA8E81B4A79EFA8E13971A5D3339C846FDB98F574B656994F1150FB6A4EB70E747378FF94A0A61C194CE969ABED00B358E5069F
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_js/iana.js
Preview:	if (top !== self) {. top.location.replace(self.location.href);.}.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	4.757453290014263
Encrypted:	false
SSDEEP:	24:0pbMMpAYuOjM/fHxAYJwPp2AEPmbW1E6FD8EVyiJZni/1/EmDFf2kzj:0hpqkM6YJwh8PmbWO65siJZi/9jplzj
MD5:	84238DFC8092E5D9C0DAC8EF93371A07
SHA1:	4A3CE8EE11E091DD7923F4D8C6E5B5E41EC7C047
SHA-256:	EA8FAC7C65FB589B0D53560F5251F74F9E9B243478DCB6B3EA79B5E36449C8D9
SHA-512:	D06B93C883F8126A04589937A884032DF031B05518EED9D433EFB6447834DF2596AEBD500D69B8283E5702D988ED49655AE654C1683C7A4AE58BFA6B92F2B73A
Malicious:	false
Reputation:	low
URL:	https://example.com/favicon.ico
Preview:	<!doctype html>.<html>.<head>. <title>Example Domain</title>.. <meta charset="utf-8" />. <meta http-equiv="Content-type" content="text/html; charset=utf-8" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. <style type="text/css">. body {. background-color: #f0f0f2;. margin: 0;. padding: 0;. font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;. . }. div {. width: 600px;. margin: 5em auto;. padding: 2em;. background-color: #fdfdff;. border-radius: 0.5em;. box-shadow: 2px 3px 7px 2px rgba(0,0,0,0.02);. }. a:link, a:visited {. color: #38488f;. text-decoration: none;. }. @media (max-width: 700px) {. div {. margin: 0 auto;. width: auto;. }. }. </style> .</head>..<body>.<div>. <h1>Example Domain</h1>. <p>This domai

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	7406
Entropy (8bit):	5.622090120332121
Encrypted:	false
SSDEEP:	96:JHKywzNjZb7coRVbm0SgR0M8cym9TgbvT4j92l6H4Yw7Extm9gnwbn:Nkr9R7uM8rbvT4j9Pw7cMbn
MD5:	E14A2530B3E9141D357AFAF2314D2E49
SHA1:	79B6F05AC4FE930DFC574C9E24B5A5FC11B936FF
SHA-256:	24BFB441173C83B8184B0C19CC8695615B5A3878A00E63E3DC52B3C430B18AB3
SHA-512:	B4D3A47186005F0871B84528E3DDC010366FDFF189FAA2EEB8189DEA3E1CF893593E0D11A7E94D1EDDF62C62F145AA26D5475E9D7E7F1CC5AD725ADD05DE7C24
Malicious:	false
Reputation:	low
URL:	https://www.iana.org/_img/bookmark_icon.ico
Preview:	..............h...6... ..............00..........F...(....... ...............................{w..P...B...>...E...t...j...K...I....f...z..M...W...H...P...T....b...w..u....\.......l..i....t...e...T..X...Z....W!.].#..^$..u&.y.&.a.).T.,..U/.y./.eb0..;4.j.4..b6.Pb:.n.:.r.;..}@..lB..tG..zL.z.L...M.uKN...N.iaO..FQ.czQ...U...V..pX...X..[Z..xZ..m_...c.r~i...i.w.j..yl...s..ry...y...{..o}...................\|....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	32870
Entropy (8bit):	4.300873890135518
Encrypted:	false
SSDEEP:	768:8Zr++SQvCrFQy7t5t1S9+UMTY1UeuXrGI:L+SQ8FQyztg9+UMc1Ue6N
MD5:	426B3AC01D3584C820F3B7F5985D6623
SHA1:	6FA7ECC4EB21D4FD7BFD1FD3550F0AAAB0AB43D7
SHA-256:	888B41C392A51D5AA6CA6DF224E345F74FFBB97A48422753A3E4F90F305D0004
SHA-512:	CD094F2ECE42AB1E4F789BC3027828CF98CC62044D456B8A5A66E946CB5CC3D3A1984A04C11923918F449A7CDEDBC1F54966679AAA8451D7E536B24637128047
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">.<svg version="1.1" id="IANA_Header_Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px".. y="0px" width="234px" height="72px" viewBox="0 0 468 144" enable-background="new 0 0 468 144" xml:space="preserve">.<g id="Text_Paths">..<path fill="#5A5A58" d="M5.129,136.483v-18.872h2.744v18.872H5.129z"/>..<path fill="#5A5A58" d="M21.929,136.483v-10.332c0-0.709-0.178-1.27-0.532-1.68c-0.355-0.411-0.99-0.616-1.904-0.616...c-0.71,0-1.354,0.098-1.932,0.294c-0.579,0.196-1.148,0.48-1.708,0.854v11.48h-2.492v-14.504c0.336-0.056,0.742-0.098,1.218-0.126...s0.9-0.042,1.274-0.042v1.428h0.14c0.728-0.634,1.437-1.068,2.128-1.302c0.69-0.233,1.418-0.351,2.184-0.351...c0.56,0,1.087,0.075,1.582,0.225c0.494,0.149,0.933,0.396,1.316,0.742c0.382,0.346,0.686,0.803,0.91,1.372...c0.224,0.569,0.336,1.273,0.336,2.113v10.444H21.929z"/>..<path fill="#

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:51:55.646147013 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:51:55.802392960 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:51:55.849317074 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:05.271200895 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:05.583703041 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:06.916445971 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:06.916562080 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:08.972683907 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:08.972754002 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:08.972839117 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:08.976116896 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:08.976142883 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:09.301973104 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.302023888 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.302090883 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.303040981 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.303050041 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.303103924 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.303631067 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.303641081 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.304001093 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.304008961 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.430953026 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:09.433016062 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:09.433028936 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:09.434551001 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:09.434621096 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:09.437541962 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:09.437644958 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:09.546156883 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:09.546205997 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:09.616523981 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.617321968 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.617345095 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.618483067 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.618566036 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.623533010 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.623986959 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.624129057 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.624602079 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.624612093 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.625035048 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.625042915 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.626173019 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.626262903 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.627717972 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.627816916 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.679209948 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.741302967 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:09.741317034 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.741338015 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.931569099 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.931655884 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.931704998 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.938560009 CEST	49712	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:09.938577890 CEST	443	49712	52.205.88.207	192.168.2.5
Apr 26, 2024 17:52:09.943834066 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:10.101783991 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:10.101834059 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:10.101893902 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:10.102804899 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:10.102814913 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:10.428216934 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:10.428858042 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:10.428881884 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:10.429933071 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:10.430008888 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:10.432904959 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:10.432960987 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:10.433309078 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:10.433316946 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:10.640119076 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:10.640201092 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.429102898 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.429199934 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.429248095 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.452323914 CEST	49714	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.452347994 CEST	443	49714	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.510077000 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.510113955 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.510179043 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.513720989 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.513737917 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.850234032 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.909184933 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.909204006 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.909780025 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.920020103 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.920173883 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:15.920449972 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:15.968113899 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:16.659671068 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:16.659708977 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:16.659766912 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:16.712353945 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:16.712372065 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:16.970160007 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:16.970237970 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:16.981633902 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:16.981651068 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:16.981856108 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.072030067 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.112566948 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.160145044 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.238672972 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.238743067 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.239180088 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.291691065 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.291728020 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.392108917 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.392158031 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.392533064 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.393615007 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.393637896 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.647723913 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.647835970 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.650165081 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.650176048 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.650384903 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.654822111 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.700129032 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.903419971 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.903477907 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.903625965 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.905142069 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.905142069 CEST	49719	443	192.168.2.5	23.204.76.112
Apr 26, 2024 17:52:17.905164957 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:17.905174017 CEST	443	49719	23.204.76.112	192.168.2.5
Apr 26, 2024 17:52:19.410270929 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:19.410343885 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:19.410439968 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:20.516825914 CEST	49710	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:52:20.516849995 CEST	443	49710	142.250.217.196	192.168.2.5
Apr 26, 2024 17:52:20.722703934 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:20.722793102 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:20.722986937 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:20.724694967 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:20.724711895 CEST	443	49715	38.180.91.41	192.168.2.5
Apr 26, 2024 17:52:20.724721909 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:20.724766016 CEST	49715	443	192.168.2.5	38.180.91.41
Apr 26, 2024 17:52:20.854767084 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:20.854795933 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:20.854906082 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:20.855233908 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:20.855242014 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.346039057 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.346347094 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.346373081 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.347527981 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.347603083 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.353451014 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.353518963 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.353651047 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.396166086 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.400887012 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.400904894 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.447675943 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.902992964 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.903178930 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.903245926 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.904547930 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.904561996 CEST	443	49725	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.904580116 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.904606104 CEST	49725	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.905462027 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.905549049 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:21.905631065 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.905842066 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:21.905879021 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:22.388643026 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:22.389101028 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:22.389163017 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:22.390372992 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:22.390836000 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:22.390997887 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:22.391010046 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:22.391088009 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:22.433305979 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:22.947654009 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:22.947781086 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:22.947923899 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:22.954940081 CEST	49726	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:22.954996109 CEST	443	49726	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:23.110857964 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:23.110893011 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:23.111032963 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:23.111251116 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:23.111265898 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:23.577459097 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:23.579710960 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:23.579734087 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:23.580705881 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:23.580905914 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:23.581804991 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:23.581870079 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:23.582079887 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:23.628120899 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:23.635860920 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:23.635879993 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:23.683073997 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:24.052355051 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:24.052478075 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:24.055381060 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:24.065741062 CEST	49727	443	192.168.2.5	142.250.217.164
Apr 26, 2024 17:52:24.065769911 CEST	443	49727	142.250.217.164	192.168.2.5
Apr 26, 2024 17:52:27.216514111 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.216607094 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.216685057 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.217190027 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.217210054 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.554018974 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.560762882 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.560798883 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.561944962 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.562352896 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.567085981 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.567200899 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.567801952 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.567819118 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.619443893 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.898847103 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.898888111 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.898912907 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.898956060 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.898971081 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.898977995 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.899059057 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.899096012 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.899118900 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.909245014 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.920047998 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.920116901 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.920125961 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.920145988 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.920195103 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.928217888 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.939205885 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.939259052 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:27.939277887 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:27.986200094 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.055088997 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.060302019 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.060333014 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.060367107 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.060393095 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.060446024 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.071194887 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.082175970 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.082243919 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.082277060 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.092986107 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.093015909 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.093059063 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.093079090 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.093286037 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.103873014 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.114757061 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.114845991 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.114866972 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.124798059 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.124886036 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.124907017 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.134872913 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.134960890 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.134980917 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.145068884 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.145143032 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.145157099 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.154906988 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.154948950 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.154959917 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.154979944 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.155149937 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.164974928 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.165010929 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.165097952 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.165118933 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.175040007 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:28.175748110 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.176307917 CEST	49729	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:28.176343918 CEST	443	49729	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.307225943 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.307269096 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.307370901 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.307877064 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.307889938 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.756438017 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.779824018 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.779850960 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.780283928 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.783221960 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.783288956 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.783529997 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.796324968 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.796375990 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.796494961 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.797451019 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:31.797465086 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:31.828116894 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.188932896 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.188973904 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.188996077 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.189064026 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.189094067 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.189132929 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.189137936 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.189229012 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.189276934 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.189280987 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.207586050 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.207638025 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.207645893 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.220621109 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.220700979 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.220709085 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.235857964 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.239084959 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.239092112 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.242702961 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.243139029 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.243184090 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.243668079 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.245218992 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.245315075 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.245343924 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.288134098 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.401685953 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.401715994 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.401746035 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.401757956 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.401807070 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.409337997 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.409432888 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.409487963 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.409650087 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.409667969 CEST	443	49733	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.409742117 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.409742117 CEST	49733	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.412447929 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.683949947 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.684153080 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:32.684288025 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.685807943 CEST	49735	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:32.685833931 CEST	443	49735	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:34.817738056 CEST	49739	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:34.817800045 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:34.817867041 CEST	49739	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:34.818166018 CEST	49739	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:34.818178892 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:34.834496975 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:34.834541082 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:34.834597111 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:34.834966898 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:34.834980965 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.189663887 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.190006971 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.190045118 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.191181898 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.191561937 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.191653967 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.191910982 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.191967010 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.191999912 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.308753014 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.309350014 CEST	49739	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:35.309376955 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.309724092 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.310055971 CEST	49739	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:35.310122967 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.310429096 CEST	49739	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:35.352124929 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.568692923 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.568752050 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.568805933 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.568813086 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.568870068 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.568963051 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.568979025 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.574603081 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.574656963 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.574668884 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.590126038 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.590166092 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.590193987 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.590208054 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.590306997 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.602220058 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.614351988 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.614425898 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.614672899 CEST	49740	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.614701033 CEST	443	49740	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.621263981 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.621308088 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.621519089 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.622193098 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.622209072 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.638423920 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:35.638514996 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.638597012 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:35.638858080 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:35.638887882 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.745326042 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:35.745393991 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:35.745464087 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:35.745692015 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:35.745718002 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:35.794961929 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.795053005 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.795121908 CEST	49739	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:35.816107035 CEST	49739	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:35.816144943 CEST	443	49739	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:35.956070900 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.956334114 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.956396103 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.956893921 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.957375050 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.957465887 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:35.957654953 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.957700014 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:35.957751989 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:36.072380066 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.072612047 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.072654963 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.074079990 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.074155092 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.074582100 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.074657917 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.074779034 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.074795961 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.120699883 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:36.121053934 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:36.121084929 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:36.121473074 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:36.121968031 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:36.122046947 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:36.122911930 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:36.122955084 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:36.122992039 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:36.168019056 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.289000034 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:36.289216042 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:36.289282084 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:36.290024996 CEST	49741	443	192.168.2.5	192.178.50.68
Apr 26, 2024 17:52:36.290045023 CEST	443	49741	192.178.50.68	192.168.2.5
Apr 26, 2024 17:52:36.295289040 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.295334101 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.295393944 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.295681953 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.295705080 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.406419992 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.407320023 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.407383919 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.407694101 CEST	49743	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.407720089 CEST	443	49743	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.737121105 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:36.737200022 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:36.737298012 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:36.740255117 CEST	49742	443	192.168.2.5	188.116.24.148
Apr 26, 2024 17:52:36.740298033 CEST	443	49742	188.116.24.148	192.168.2.5
Apr 26, 2024 17:52:36.748785973 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.749102116 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.749133110 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.749424934 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.749960899 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.750031948 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:36.750278950 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:36.796134949 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:37.205142021 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:37.205198050 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:37.205300093 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:37.205358982 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:37.205387115 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:37.205440044 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:37.898061991 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:37.898103952 CEST	443	49745	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:37.898293018 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:37.899069071 CEST	49744	443	192.168.2.5	142.250.217.228
Apr 26, 2024 17:52:37.899128914 CEST	443	49744	142.250.217.228	192.168.2.5
Apr 26, 2024 17:52:37.900760889 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:37.900850058 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:37.900929928 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:37.901175976 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:37.901190042 CEST	443	49745	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:37.901415110 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:37.901448965 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.267060041 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.268343925 CEST	443	49745	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.268802881 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.268831015 CEST	443	49745	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.268939018 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.269001007 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.270344019 CEST	443	49745	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.270407915 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.270508051 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.270577908 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.296618938 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.296824932 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.320408106 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.320522070 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.320560932 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.320574045 CEST	443	49745	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.360354900 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.360373974 CEST	443	49745	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.375633955 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.406023979 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.611932993 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.612076044 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.612229109 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.612386942 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.612415075 CEST	443	49746	82.180.161.153	192.168.2.5
Apr 26, 2024 17:52:38.612437963 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.612464905 CEST	49746	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:52:38.741997957 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:38.742043018 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:38.742098093 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:38.742479086 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:38.742491961 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.005494118 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.005779028 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:39.005800962 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.006479979 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.006546021 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:39.007486105 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.007529974 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:39.009243965 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:39.009329081 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.009671926 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:39.009690046 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.050723076 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:39.274394989 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.274512053 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.275182009 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:39.276688099 CEST	49747	443	192.168.2.5	192.0.78.26
Apr 26, 2024 17:52:39.276710987 CEST	443	49747	192.0.78.26	192.168.2.5
Apr 26, 2024 17:52:39.503948927 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.503956079 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.503981113 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.503990889 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.504065037 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.504069090 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.504435062 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.504442930 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.507065058 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.507075071 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.885669947 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.886199951 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.886219025 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.887250900 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.887361050 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.888555050 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.888617039 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.888967991 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.888972998 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.889575958 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.891259909 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.891288996 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.892916918 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.893229961 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.893762112 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.893840075 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.930485964 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.945732117 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:39.945758104 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:39.995374918 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:40.131825924 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:40.132132053 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:40.135258913 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:40.143954039 CEST	49749	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:40.143973112 CEST	443	49749	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:40.254271030 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:40.296139956 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:40.381314039 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:40.381460905 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:40.381509066 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:40.382914066 CEST	49748	443	192.168.2.5	93.184.215.14
Apr 26, 2024 17:52:40.382936001 CEST	443	49748	93.184.215.14	192.168.2.5
Apr 26, 2024 17:52:47.748918056 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:47.749089956 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:47.749610901 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:47.749643087 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:47.749718904 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:47.750097036 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:47.750112057 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:47.978522062 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:47.978549957 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.250319958 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.250489950 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:48.331090927 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:48.331115007 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.332730055 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.332866907 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:48.333786964 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:48.333856106 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.334445953 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:48.334453106 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.768691063 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.768884897 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:48.769234896 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.769301891 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:48.769309044 CEST	443	49750	23.1.237.91	192.168.2.5
Apr 26, 2024 17:52:48.769732952 CEST	49750	443	192.168.2.5	23.1.237.91
Apr 26, 2024 17:52:54.742480993 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:52:54.742501974 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:53:04.994488001 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:04.994570017 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:04.994682074 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:04.995645046 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:04.995687962 CEST	443	49753	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:04.996002913 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:04.996198893 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:04.996232986 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:04.996634960 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:04.996653080 CEST	443	49753	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:05.409917116 CEST	443	49753	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:05.460315943 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:05.468437910 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:05.513482094 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.522447109 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.522486925 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.522883892 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.522919893 CEST	443	49753	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.523721933 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.523789883 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.526757002 CEST	443	49753	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.526792049 CEST	443	49753	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.526818991 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.539026022 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.539145947 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.539608955 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.539805889 CEST	443	49753	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.544131994 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.544190884 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.585563898 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.585587025 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.585592985 CEST	443	49753	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.632004976 CEST	49753	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.789908886 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.790005922 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.790072918 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.792782068 CEST	49752	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:07.792819977 CEST	443	49752	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:07.995515108 CEST	49755	80	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.058979034 CEST	49756	80	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.219961882 CEST	80	49755	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.220074892 CEST	49755	80	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.220326900 CEST	49755	80	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.299880981 CEST	80	49756	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.299973011 CEST	49756	80	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.452397108 CEST	80	49755	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.456126928 CEST	80	49755	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.456197977 CEST	80	49755	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.456218004 CEST	80	49755	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.456278086 CEST	49755	80	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.614523888 CEST	49757	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:53:08.614567995 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:08.615098953 CEST	49757	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:53:08.628819942 CEST	49757	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:53:08.628837109 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:08.837153912 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.837204933 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.837287903 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.837685108 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.837719917 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.837799072 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.837805986 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.837851048 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.837853909 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.838196039 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.838208914 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.838593006 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.838610888 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:08.838768005 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:08.838778973 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.055927992 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:09.085362911 CEST	49757	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:53:09.085393906 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:09.085959911 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:09.089396000 CEST	49757	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:53:09.089476109 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:09.232345104 CEST	49757	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:53:09.283107996 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.294840097 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.294853926 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.298665047 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.298727036 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.299623013 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.299784899 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.299791098 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.299808979 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.329917908 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.339653015 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.345957994 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.345980883 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.346152067 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.346158981 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.347543955 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.347610950 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.348450899 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.348540068 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.348601103 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.350106955 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.350169897 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.350846052 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.350965977 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.351026058 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.396122932 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.432668924 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.432688951 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.457722902 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.457736969 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.457763910 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.457772017 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.596205950 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.596409082 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.638897896 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.722800970 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.722867012 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.722889900 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.722955942 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.722973108 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.723001003 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.723042011 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.723087072 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.723094940 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.723232031 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.723288059 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.723294020 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.723329067 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.724807024 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.724841118 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.724858999 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.724865913 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.724891901 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.724905968 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.724910021 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.724936962 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.724988937 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.940315962 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940354109 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940371990 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940398932 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.940466881 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.940500021 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940608025 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940629959 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940665960 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.940677881 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940715075 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.940727949 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940783978 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.940884113 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.940933943 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:09.940974951 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.941131115 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:09.941478968 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.269884109 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.270117044 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.270224094 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.453051090 CEST	80	49755	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.453121901 CEST	49755	80	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.552021980 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552081108 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552128077 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552138090 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.552156925 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552176952 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.552182913 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552195072 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.552211046 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552232027 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.552320957 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552339077 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552367926 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.552373886 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552390099 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.552534103 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552584887 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552598953 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.552608013 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.552629948 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.623204947 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792155027 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792187929 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792238951 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792265892 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792292118 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792295933 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792309046 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792313099 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792330027 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792332888 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792351007 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792356014 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792362928 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792376041 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792391062 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792393923 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792411089 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792426109 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792439938 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792515039 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792558908 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:10.792566061 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:10.792599916 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.034375906 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.034398079 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.034449100 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.034467936 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.034502983 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.034507990 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.034542084 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.256786108 CEST	49760	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.256813049 CEST	443	49760	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.271147013 CEST	49759	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.271162033 CEST	443	49759	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.272205114 CEST	49755	80	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.272232056 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:53:11.272330999 CEST	443	49711	52.205.88.207	192.168.2.5
Apr 26, 2024 17:53:11.272380114 CEST	49711	443	192.168.2.5	52.205.88.207
Apr 26, 2024 17:53:11.272808075 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.272830009 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.272877932 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.283611059 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.283624887 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.514931917 CEST	80	49755	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529047966 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529063940 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529139996 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.529145002 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529217958 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529230118 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.529256105 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.529540062 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529581070 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529582024 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.529593945 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529625893 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.529675007 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529797077 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.529834986 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.629893064 CEST	49758	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.629914999 CEST	443	49758	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.705560923 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.705605030 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.705667019 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.705981970 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.706020117 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.706078053 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.706271887 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.706278086 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.706617117 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.706623077 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.787408113 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.787705898 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.787717104 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.788043976 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.788384914 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.788439989 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:11.788528919 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:11.836107016 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.120024920 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.120457888 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.120490074 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.123752117 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.123815060 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.124175072 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.124248981 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.124308109 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.124314070 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.181041002 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.183949947 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.183968067 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.185542107 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.185599089 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.186397076 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.186538935 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.186543941 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.186629057 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.272888899 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.272912025 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.272960901 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.272972107 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.273013115 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.273020983 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.273113012 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.273154020 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.273160934 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.273197889 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.324740887 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.324742079 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.324764013 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.429965019 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.514569998 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.514580011 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.514612913 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.514652967 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.514663935 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.514707088 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.514712095 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.514743090 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.514805079 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.514842033 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.515451908 CEST	49761	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.515466928 CEST	443	49761	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.517656088 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.517716885 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.517736912 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.517776012 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.517800093 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.517812014 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.517930984 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.517951012 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.517981052 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.517987013 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.518011093 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.518027067 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.518830061 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.518863916 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.518879890 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.518887997 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.518924952 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.518974066 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.518991947 CEST	443	49762	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.519026041 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.519041061 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.538263083 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.538278103 CEST	49762	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.641200066 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.642096996 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.642122984 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.642143011 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.642178059 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.642179966 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.642213106 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.642247915 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.642436028 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.642492056 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.642503977 CEST	443	49763	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.642541885 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.643701077 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.643726110 CEST	49763	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.679917097 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.679959059 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.680090904 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.681492090 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.681504965 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.690789938 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.690834999 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:12.690934896 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.691332102 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:12.691346884 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.086781025 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.096746922 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.096770048 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.097146988 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.097563028 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.097620010 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.098109961 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.140125036 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.185847998 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.207106113 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.207138062 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.208242893 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.208301067 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.209387064 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.209453106 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.209825993 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.209836006 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.336378098 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.485645056 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.485691071 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.485737085 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.485816002 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.485836029 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.485836029 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.485929012 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.498359919 CEST	49764	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.498377085 CEST	443	49764	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.522310972 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.522392035 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.522497892 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.523602962 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.523622990 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677093029 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677469969 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677475929 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677506924 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677522898 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.677525043 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677553892 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677568913 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.677575111 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.677659988 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677666903 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677690983 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677699089 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677707911 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.677716017 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.677743912 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.836317062 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.917917967 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.917928934 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.917956114 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.917989016 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.918015957 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.918024063 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.918059111 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.918080091 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.918092966 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.918107986 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.919145107 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:13.928752899 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:13.976989031 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.140655041 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.140738964 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.141273022 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.167962074 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.168087959 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.168272018 CEST	49765	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.168303967 CEST	443	49765	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.169135094 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.216124058 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.369786978 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.369806051 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.369865894 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.369901896 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.370016098 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.370023012 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.370058060 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.370062113 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.370074034 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.370115042 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.370124102 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.370137930 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:15.370173931 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.372323036 CEST	49766	443	192.168.2.5	192.0.33.8
Apr 26, 2024 17:53:15.372344971 CEST	443	49766	192.0.33.8	192.168.2.5
Apr 26, 2024 17:53:19.083173037 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:19.083247900 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:19.083295107 CEST	49757	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:53:20.512553930 CEST	49757	443	192.168.2.5	142.250.217.196
Apr 26, 2024 17:53:20.512600899 CEST	443	49757	142.250.217.196	192.168.2.5
Apr 26, 2024 17:53:23.367151976 CEST	49745	443	192.168.2.5	82.180.161.153
Apr 26, 2024 17:53:23.367180109 CEST	443	49745	82.180.161.153	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:52:06.407119989 CEST	53	64376	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:06.407253981 CEST	53	64616	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:08.828855991 CEST	59685	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:08.829271078 CEST	60713	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:08.954437017 CEST	53	59685	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:08.954736948 CEST	53	60713	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:09.169225931 CEST	65464	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:09.169498920 CEST	51455	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:09.296452999 CEST	53	65464	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:09.300971985 CEST	53	51455	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:09.337233067 CEST	53	55878	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:09.943782091 CEST	58191	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:09.944410086 CEST	62145	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:10.069986105 CEST	53	58191	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:10.126199961 CEST	53	62145	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:20.725661993 CEST	49966	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:20.725989103 CEST	58357	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:20.853004932 CEST	53	49966	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:20.854233027 CEST	53	58357	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:22.984215975 CEST	52955	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:22.984384060 CEST	63131	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:23.109674931 CEST	53	52955	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:23.110337019 CEST	53	63131	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:24.214745998 CEST	53	57676	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:27.087980032 CEST	54961	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:27.088646889 CEST	51635	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:27.214039087 CEST	53	54961	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:27.214116096 CEST	53	51635	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:27.218677044 CEST	53	58561	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:28.148308992 CEST	53	54754	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:31.123629093 CEST	53	50973	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:31.924499035 CEST	53	51376	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:32.810048103 CEST	53	56470	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:35.619676113 CEST	53979	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:35.619817019 CEST	54017	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:35.744601011 CEST	53	53979	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:35.744688034 CEST	53	54017	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:36.741674900 CEST	57722	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:36.741833925 CEST	59017	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:36.868927956 CEST	53	57722	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:36.870013952 CEST	53	59017	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:38.614509106 CEST	64791	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:38.614690065 CEST	60687	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:38.740247965 CEST	53	64791	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:38.741238117 CEST	53	60687	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:39.374174118 CEST	49574	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:39.374439001 CEST	50355	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:52:39.499720097 CEST	53	49574	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:39.500123978 CEST	53	50355	1.1.1.1	192.168.2.5
Apr 26, 2024 17:52:51.275526047 CEST	53	61585	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:04.821922064 CEST	52930	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:53:04.822074890 CEST	52344	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:53:04.949383974 CEST	53	52930	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:05.000818968 CEST	53	52344	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:07.660478115 CEST	53	59280	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:07.799464941 CEST	61656	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:53:07.799947977 CEST	64971	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:53:07.952261925 CEST	53	61656	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:08.013370037 CEST	53	64971	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:08.678740978 CEST	62736	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:53:08.679867029 CEST	57568	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:53:08.806183100 CEST	53	62736	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:08.854011059 CEST	53	57568	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:12.537247896 CEST	53397	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:53:12.537692070 CEST	59284	53	192.168.2.5	1.1.1.1
Apr 26, 2024 17:53:12.665123940 CEST	53	59284	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:12.688371897 CEST	53	53397	1.1.1.1	192.168.2.5
Apr 26, 2024 17:53:15.758043051 CEST	53	64216	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 17:52:10.126261950 CEST	192.168.2.5	1.1.1.1	c22f	(Port unreachable)	Destination Unreachable
Apr 26, 2024 17:53:05.000888109 CEST	192.168.2.5	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable
Apr 26, 2024 17:53:08.013441086 CEST	192.168.2.5	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 17:52:08.828855991 CEST	192.168.2.5	1.1.1.1	0x7d60	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:08.829271078 CEST	192.168.2.5	1.1.1.1	0x17e6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:52:09.169225931 CEST	192.168.2.5	1.1.1.1	0xc273	Standard query (0)	cdp1.tracking.e360.salesforce.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:09.169498920 CEST	192.168.2.5	1.1.1.1	0x515f	Standard query (0)	cdp1.tracking.e360.salesforce.com	65	IN (0x0001)	false
Apr 26, 2024 17:52:09.943782091 CEST	192.168.2.5	1.1.1.1	0xadf6	Standard query (0)	vmmessanger.rdocmglobal.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:09.944410086 CEST	192.168.2.5	1.1.1.1	0x2244	Standard query (0)	vmmessanger.rdocmglobal.com	65	IN (0x0001)	false
Apr 26, 2024 17:52:20.725661993 CEST	192.168.2.5	1.1.1.1	0x96ca	Standard query (0)	james-fay.bradentoncc.store	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:20.725989103 CEST	192.168.2.5	1.1.1.1	0x3642	Standard query (0)	james-fay.bradentoncc.store	65	IN (0x0001)	false
Apr 26, 2024 17:52:22.984215975 CEST	192.168.2.5	1.1.1.1	0x9ea5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:22.984384060 CEST	192.168.2.5	1.1.1.1	0x4c51	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:52:27.087980032 CEST	192.168.2.5	1.1.1.1	0xc468	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:27.088646889 CEST	192.168.2.5	1.1.1.1	0xfb9b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:52:35.619676113 CEST	192.168.2.5	1.1.1.1	0x8764	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:35.619817019 CEST	192.168.2.5	1.1.1.1	0x7a23	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:52:36.741674900 CEST	192.168.2.5	1.1.1.1	0x6fc6	Standard query (0)	migconsultings.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:36.741833925 CEST	192.168.2.5	1.1.1.1	0xf289	Standard query (0)	migconsultings.com	65	IN (0x0001)	false
Apr 26, 2024 17:52:38.614509106 CEST	192.168.2.5	1.1.1.1	0xdef	Standard query (0)	href.li	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:38.614690065 CEST	192.168.2.5	1.1.1.1	0x5d7d	Standard query (0)	href.li	65	IN (0x0001)	false
Apr 26, 2024 17:52:39.374174118 CEST	192.168.2.5	1.1.1.1	0x5e09	Standard query (0)	example.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:39.374439001 CEST	192.168.2.5	1.1.1.1	0xd7ad	Standard query (0)	example.com	65	IN (0x0001)	false
Apr 26, 2024 17:53:04.821922064 CEST	192.168.2.5	1.1.1.1	0x1924	Standard query (0)	www.iana.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:04.822074890 CEST	192.168.2.5	1.1.1.1	0x57c0	Standard query (0)	www.iana.org	65	IN (0x0001)	false
Apr 26, 2024 17:53:07.799464941 CEST	192.168.2.5	1.1.1.1	0xc6ab	Standard query (0)	www.iana.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:07.799947977 CEST	192.168.2.5	1.1.1.1	0xade	Standard query (0)	www.iana.org	65	IN (0x0001)	false
Apr 26, 2024 17:53:08.678740978 CEST	192.168.2.5	1.1.1.1	0xde90	Standard query (0)	www.iana.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:08.679867029 CEST	192.168.2.5	1.1.1.1	0x7f45	Standard query (0)	www.iana.org	65	IN (0x0001)	false
Apr 26, 2024 17:53:12.537247896 CEST	192.168.2.5	1.1.1.1	0x8c82	Standard query (0)	www.iana.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:12.537692070 CEST	192.168.2.5	1.1.1.1	0xfbdb	Standard query (0)	www.iana.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 17:52:08.954437017 CEST	1.1.1.1	192.168.2.5	0x7d60	No error (0)	www.google.com		142.250.217.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:08.954736948 CEST	1.1.1.1	192.168.2.5	0x17e6	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:52:09.296452999 CEST	1.1.1.1	192.168.2.5	0xc273	No error (0)	cdp1.tracking.e360.salesforce.com	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:52:09.296452999 CEST	1.1.1.1	192.168.2.5	0xc273	No error (0)	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		52.205.88.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:09.296452999 CEST	1.1.1.1	192.168.2.5	0xc273	No error (0)	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		3.94.175.225	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:09.296452999 CEST	1.1.1.1	192.168.2.5	0xc273	No error (0)	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		52.72.218.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:09.300971985 CEST	1.1.1.1	192.168.2.5	0x515f	No error (0)	cdp1.tracking.e360.salesforce.com	global-cdp1.sfdc-yfeipo.svc.sfdcfc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:52:10.069986105 CEST	1.1.1.1	192.168.2.5	0xadf6	No error (0)	vmmessanger.rdocmglobal.com		38.180.91.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:17.259207010 CEST	1.1.1.1	192.168.2.5	0x2c2d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:52:17.259207010 CEST	1.1.1.1	192.168.2.5	0x2c2d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:18.715059996 CEST	1.1.1.1	192.168.2.5	0xfa72	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:18.715059996 CEST	1.1.1.1	192.168.2.5	0xfa72	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:20.853004932 CEST	1.1.1.1	192.168.2.5	0x96ca	No error (0)	james-fay.bradentoncc.store		188.116.24.148	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:23.109674931 CEST	1.1.1.1	192.168.2.5	0x9ea5	No error (0)	www.google.com		142.250.217.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:23.110337019 CEST	1.1.1.1	192.168.2.5	0x4c51	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:52:27.214039087 CEST	1.1.1.1	192.168.2.5	0xc468	No error (0)	www.google.com		192.178.50.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:27.214116096 CEST	1.1.1.1	192.168.2.5	0xfb9b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:52:35.744601011 CEST	1.1.1.1	192.168.2.5	0x8764	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:35.744688034 CEST	1.1.1.1	192.168.2.5	0x7a23	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:52:36.868927956 CEST	1.1.1.1	192.168.2.5	0x6fc6	No error (0)	migconsultings.com		82.180.161.153	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:38.740247965 CEST	1.1.1.1	192.168.2.5	0xdef	No error (0)	href.li		192.0.78.26	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:38.740247965 CEST	1.1.1.1	192.168.2.5	0xdef	No error (0)	href.li		192.0.78.27	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:52:39.499720097 CEST	1.1.1.1	192.168.2.5	0x5e09	No error (0)	example.com		93.184.215.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:04.949383974 CEST	1.1.1.1	192.168.2.5	0x1924	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:53:04.949383974 CEST	1.1.1.1	192.168.2.5	0x1924	No error (0)	ianawww.vip.icann.org		192.0.33.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:05.000818968 CEST	1.1.1.1	192.168.2.5	0x57c0	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:53:07.090118885 CEST	1.1.1.1	192.168.2.5	0xd852	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:07.090118885 CEST	1.1.1.1	192.168.2.5	0xd852	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:07.952261925 CEST	1.1.1.1	192.168.2.5	0xc6ab	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:53:07.952261925 CEST	1.1.1.1	192.168.2.5	0xc6ab	No error (0)	ianawww.vip.icann.org		192.0.33.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:08.013370037 CEST	1.1.1.1	192.168.2.5	0xade	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:53:08.806183100 CEST	1.1.1.1	192.168.2.5	0xde90	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:53:08.806183100 CEST	1.1.1.1	192.168.2.5	0xde90	No error (0)	ianawww.vip.icann.org		192.0.33.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:08.854011059 CEST	1.1.1.1	192.168.2.5	0x7f45	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:53:12.665123940 CEST	1.1.1.1	192.168.2.5	0xfbdb	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:53:12.688371897 CEST	1.1.1.1	192.168.2.5	0x8c82	No error (0)	www.iana.org	ianawww.vip.icann.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:53:12.688371897 CEST	1.1.1.1	192.168.2.5	0x8c82	No error (0)	ianawww.vip.icann.org		192.0.33.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:23.274409056 CEST	1.1.1.1	192.168.2.5	0x779e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:53:23.274409056 CEST	1.1.1.1	192.168.2.5	0x779e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cdp1.tracking.e360.salesforce.com

vmmessanger.rdocmglobal.com

fs.microsoft.com

james-fay.bradentoncc.store

https:

www.google.com

migconsultings.com

href.li

example.com

www.bing.com

www.iana.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49755	192.0.33.8	80	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 26, 2024 17:53:08.220326900 CEST	447	OUT	GET /help/example-domains HTTP/1.1 Host: www.iana.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 26, 2024 17:53:08.456126928 CEST	1289	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:30:07 GMT Server: Apache X-Content-Type-Options: nosniff Vary: Accept-Encoding Last-Modified: Wed, 06 Mar 2024 16:51:21 GMT X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, max-age=3600 Expires: Fri, 26 Apr 2024 16:30:07 GMT Content-Encoding: gzip Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 1381 Content-Length: 1508 Keep-Alive: timeout=2, max=358 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 58 cd 6e dc 36 10 3e 57 4f c1 e8 d0 93 b5 b2 b7 a8 53 34 5a 01 0b 27 41 0c 14 0b c3 75 10 a0 97 80 a2 66 57 74 28 51 21 a9 dd 6c 4f 7d 8d be 5e 9f a4 33 a4 b4 ff b1 e3 06 68 62 c0 2b 72 c4 f9 e1 37 c3 99 a1 a2 ec 59 a9 85 5b b7 c0 2a 57 ab 3c ca 86 07 f0 32 8f 7e c8 9c 74 0a f2 57 9f 78 dd 2a 60 2f 75 cd 65 63 b3 34 90 23 5c 50 83 e3 4c 54 dc 58 70 93 b8 73 f3 e4 97 98 a5 f9 f0 a6 72 ae 4d e0 63 27 97 93 f8 4a 37 0e 1a 97 90 ba 98 89 30 9b c4 0e 3e b9 94 d4 be d8 c8 39 12 d3 f0 1a 26 f1 52 c2 aa d5 c6 ed 30 af 64 e9 aa 49 09 4b 29 20 f1 93 33 26 1b e9 24 57 89 15 5c c1 e4 22 c8 41 49 4a 36 Data Ascii: Xn6>WOS4Z'AufWt(Q!lO}^3hb+r7Y[W<2~tWx`/uec4#\PLTXpsrMc'J70>9&R0dIK) 3&$W\"AIJ6
Apr 26, 2024 17:53:08.456197977 CEST	1289	IN	Data Raw: 1f 98 01 35 89 ad 5b 2b b0 15 00 8a aa 0c cc 27 71 fa 5e 58 9b 8e cf c7 e3 54 f2 86 bf 5f 41 61 a5 83 11 52 63 6f c6 0e 73 85 26 88 ce 31 89 56 c4 8c 76 33 89 65 cd 17 90 22 65 2b 50 d6 8b b4 d0 fa 43 cd cd 87 f7 b4 76 44 af 53 8f 9a 15 46 b6 ae Data Ascii: 5[+'q^XT_AaRcos&1Vv3e"e+PCvDSF%Y#HM?v`{Y^O`0#Ye.9<brd917J/Q\|0@cr3ot-d)Bqk'qrD}'*o,C&9%F;-BaMW
Apr 26, 2024 17:53:08.456218004 CEST	9	IN	Data Raw: 01 06 8d 14 2b 8b 12 00 00 Data Ascii: +

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	52.205.88.207	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:09 UTC	1289	OUT	GET /click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0 HTTP/1.1 Host: cdp1.tracking.e360.salesforce.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:09 UTC	254	IN	HTTP/1.1 302 Found location: https://vmmessanger.rdocmglobal.com/docs/index.php?mail=%20james.fay@countynationalbank.com&paths=above&link=Fax_Outlook content-language: en-US content-length: 0 date: Fri, 26 Apr 2024 15:52:09 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	38.180.91.41	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:10 UTC	754	OUT	GET /docs/index.php?mail=%20james.fay@countynationalbank.com&paths=above&link=Fax_Outlook HTTP/1.1 Host: vmmessanger.rdocmglobal.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:15 UTC	409	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 15:52:10 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Set-Cookie: PHPSESSID=76crr5101audm07kdspq6im631; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: index0.php Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	38.180.91.41	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:15 UTC	731	OUT	GET /docs/index0.php HTTP/1.1 Host: vmmessanger.rdocmglobal.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=76crr5101audm07kdspq6im631
2024-04-26 15:52:20 UTC	603	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 15:52:16 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: https://james-fay.bradentoncc.store/index.php?mail= james.fay@countynationalbank.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:52:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=54688 Date: Fri, 26 Apr 2024 15:52:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:52:17 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=54682 Date: Fri, 26 Apr 2024 15:52:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 15:52:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49725	188.116.24.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:21 UTC	898	OUT	GET /index.php?mail=%20james.fay@countynationalbank.com&codeveri=shareddocument18293sgdickd857&denys=102.129.152.220&paths=above&file=https://drive.google.com/file/d/1TmxsZZG1hQtw87bBlO_DVay1gYIMbGhE/view?usp=sharing&link=Fax_Outlook HTTP/1.1 Host: james-fay.bradentoncc.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:21 UTC	409	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 15:52:21 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Set-Cookie: PHPSESSID=u7lm09bt4a2460pnjlb75uu0a9; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: index0.php Content-Length: 2 Connection: close Content-Type: text/html; charset=UTF-8
2024-04-26 15:52:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49726	188.116.24.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:22 UTC	726	OUT	GET /index0.php HTTP/1.1 Host: james-fay.bradentoncc.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=u7lm09bt4a2460pnjlb75uu0a9
2024-04-26 15:52:22 UTC	329	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:52:22 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 1255 Connection: close Content-Type: text/html; charset=UTF-8
2024-04-26 15:52:22 UTC	1255	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 20 49 6e 74 65 67 72 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 49 6e 63 6c 75 64 65 20 74 68 65 20 72 65 43 41 50 54 43 48 41 20 76 33 20 41 50 49 20 73 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>reCAPTCHA Integration</title> ... Include the reCAPTCHA v3 API script --> <script sr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49727	142.250.217.164	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:23 UTC	686	OUT	GET /recaptcha/api.js?render=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://james-fay.bradentoncc.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:24 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 15:52:23 GMT Date: Fri, 26 Apr 2024 15:52:23 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:52:24 UTC	727	IN	Data Raw: 34 65 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4e8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 15:52:24 UTC	536	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.i
2024-04-26 15:52:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49729	192.178.50.68	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:27 UTC	974	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://james-fay.bradentoncc.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:27 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 15:52:27 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-d2d1qXOsCVm2BxN1uhNr0g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:52:27 UTC	364	IN	Data Raw: 32 61 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2afc<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 15:52:27 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 15:52:27 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 15:52:27 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 15:52:27 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 15:52:27 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 15:52:27 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 64 32 64 31 71 58 4f 73 43 56 6d 32 42 78 4e 31 75 68 4e 72 30 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="d2d1qXOsCVm2BxN1uhNr0g" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 15:52:27 UTC	1255	IN	Data Raw: 4d 45 4a 73 55 41 39 41 33 58 66 4f 4c 67 62 62 6d 49 33 4a 71 65 4e 53 4d 32 5a 73 59 54 4f 77 2d 66 64 79 4f 52 70 66 61 41 49 46 30 47 62 7a 31 57 35 65 32 76 63 6c 70 41 39 73 41 34 65 54 38 38 41 45 31 6a 54 42 46 63 50 51 31 64 64 4c 47 47 54 74 79 48 49 30 49 31 71 50 48 49 4e 5a 61 4b 50 72 44 55 46 4d 5a 61 58 68 6e 34 31 7a 6b 6b 52 35 64 47 33 39 4f 6a 49 6b 49 6d 35 6c 5f 39 62 6a 43 67 49 73 49 50 6c 70 5f 39 66 50 4b 58 64 33 66 39 4f 75 63 52 4d 75 66 31 53 78 49 77 6f 2d 30 76 6c 42 65 63 57 45 50 37 66 6d 62 75 4e 59 72 38 4d 70 5f 6e 6a 75 6c 67 62 69 61 32 5a 63 47 69 68 38 75 74 4d 75 49 47 52 61 48 73 32 78 71 62 63 46 6f 69 52 42 5f 39 43 4f 57 38 71 65 79 59 75 56 56 6a 49 31 69 6f 32 4c 54 4f 31 66 70 30 73 51 74 50 33 62 59 69 2d Data Ascii: MEJsUA9A3XfOLgbbmI3JqeNSM2ZsYTOw-fdyORpfaAIF0Gbz1W5e2vclpA9sA4eT88AE1jTBFcPQ1ddLGGTtyHI0I1qPHINZaKPrDUFMZaXhn41zkkR5dG39OjIkIm5l_9bjCgIsIPlp_9fPKXd3f9OucRMuf1SxIwo-0vlBecWEP7fmbuNYr8Mp_njulgbia2ZcGih8utMuIGRaHs2xqbcFoiRB_9COW8qeyYuVVjI1io2LTO1fp0sQtP3bYi-
2024-04-26 15:52:27 UTC	1255	IN	Data Raw: 42 5f 38 51 73 6d 42 39 37 68 69 74 78 33 69 78 7a 57 33 61 50 45 77 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 64 32 64 31 71 58 4f 73 43 56 6d 32 42 78 4e 31 75 68 4e 72 30 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 6c 56 31 46 77 63 32 5a 57 58 31 52 72 4c 6d 70 7a 5c 78 32 32 Data Ascii: B_8QsmB97hitx3ixzW3aPEw"><script type="text/javascript" nonce="d2d1qXOsCVm2BxN1uhNr0g"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3RlV1Fwc2ZWX1RrLmpz\x22
2024-04-26 15:52:27 UTC	608	IN	Data Raw: 56 69 62 45 64 79 61 48 46 54 54 6d 64 4a 51 32 46 6e 4f 57 46 32 4e 6a 5a 51 54 47 52 78 4b 33 4a 30 52 46 46 56 59 6c 56 6b 5a 57 68 36 61 33 5a 4d 5a 47 35 61 55 6d 6c 31 61 6a 64 36 64 30 39 4c 54 55 4a 61 65 45 70 72 54 45 55 35 53 55 6b 30 53 44 4e 59 52 7a 52 52 52 54 59 77 65 6c 70 55 62 6c 67 33 5a 6c 4a 56 4e 45 51 78 4e 6e 6c 36 52 6e 46 78 65 44 42 31 5a 6d 46 6f 55 57 68 6e 52 7a 63 7a 52 30 74 52 64 6c 4a 71 55 6b 56 61 64 6d 74 47 64 7a 5a 4e 5a 30 73 31 61 30 46 34 63 45 4a 46 57 53 74 46 59 6c 46 54 56 6a 46 48 4d 6e 68 70 62 45 64 32 53 54 51 79 63 31 4e 33 52 46 56 51 53 46 4e 56 53 54 68 6b 65 44 4e 42 5a 79 39 36 53 57 39 55 55 31 42 70 4e 6b 70 6d 56 58 56 76 54 47 70 35 4e 6e 6c 46 53 6c 56 4e 63 45 31 6b 51 6d 31 43 4d 44 64 48 65 Data Ascii: VibEdyaHFTTmdJQ2FnOWF2NjZQTGRxK3J0RFFVYlVkZWh6a3ZMZG5aUml1ajd6d09LTUJaeEprTEU5SUk0SDNYRzRRRTYwelpUblg3ZlJVNEQxNnl6RnFxeDB1ZmFoUWhnRzczR0tRdlJqUkVadmtGdzZNZ0s1a0F4cEJFWStFYlFTVjFHMnhpbEd2STQyc1N3RFVQSFNVSThkeDNBZy96SW9UU1BpNkpmVXVvTGp5NnlFSlVNcE1kQm1CMDdHe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49733	192.178.50.68	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:31 UTC	851	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:32 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 18:09:12 GMT Expires: Thu, 24 Apr 2025 18:09:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 164600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 15:52:32 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 Data Ascii: reateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 2e 67 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d Data Ascii: .g[w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 54 2e 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 Data Ascii: T.gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)r
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 37 37 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e Data Ascii: 77,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c Data Ascii: ,function(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 Data Ascii: P),P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,24
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: rn[function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 5b 4e 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 Data Ascii: [N]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.me
2024-04-26 15:52:32 UTC	1255	IN	Data Raw: 65 2e 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 Data Ascii: e.A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49735	192.178.50.68	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:32 UTC	863	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:32 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 26 Apr 2024 15:52:32 GMT Date: Fri, 26 Apr 2024 15:52:32 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:52:32 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-26 15:52:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49740	192.178.50.68	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:35 UTC	955	OUT	POST /recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6949 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:35 UTC	6949	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 a4 0f 30 33 41 46 63 57 65 41 37 66 57 79 50 64 6c 39 52 45 6d 31 4a 73 52 5f 51 67 46 4a 36 36 4b 74 56 39 4f 76 6b 53 33 7a 52 38 44 63 6d 37 57 41 50 54 4a 4a 42 35 50 51 6a 75 4a 59 6b 75 59 5a 53 73 66 61 37 30 76 39 7a 5a 75 46 58 42 52 67 6a 55 46 4d 6b 70 62 71 6f 33 7a 37 6f 4b 61 49 56 6d 51 62 4f 6d 48 71 56 5a 56 7a 36 55 42 6d 61 6a 41 39 57 49 52 44 5a 5a 52 41 5f 38 47 70 38 42 48 43 35 65 6f 34 67 53 6a 73 63 33 38 79 45 6f 57 6c 31 2d 39 78 6d 5f 37 51 6c 45 62 74 51 49 72 39 69 59 34 77 4b 76 4c 35 38 4e 6e 32 67 44 75 37 53 6d 4e 4e 61 6c 55 42 77 35 5a 53 6f 79 36 33 52 49 6a 66 36 73 61 4f 61 76 56 48 6b 72 66 7a 46 35 41 34 4d 36 77 32 77 47 61 4d 52 2d Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA7fWyPdl9REm1JsR_QgFJ66KtV9OvkS3zR8Dcm7WAPTJJB5PQjuJYkuYZSsfa70v9zZuFXBRgjUFMkpbqo3z7oKaIVmQbOmHqVZVz6UBmajA9WIRDZZRA_8Gp8BHC5eo4gSjsc38yEoWl1-9xm_7QlEbtQIr9iY4wKvL58Nn2gDu7SmNNalUBw5ZSoy63RIjf6saOavVHkrfzF5A4M6w2wGaMR-
2024-04-26 15:52:35 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 26 Apr 2024 15:52:35 GMT Expires: Fri, 26 Apr 2024 15:52:35 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AEdsM9OY0_IQGz67xx_A_2F_zadSaofsLXY2wC6Lv4C0xX9O-rGYwTNhTMt2p03OZKs0Tk5d8V7zt4Ru9WqnvEQ;Path=/recaptcha;Expires=Wed, 23-Oct-2024 15:52:35 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:52:35 UTC	559	IN	Data Raw: 39 65 62 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 63 58 6b 43 75 36 7a 4d 7a 32 5f 30 41 41 56 2d 32 38 75 35 6a 32 37 37 30 71 7a 67 72 66 4d 42 57 72 78 50 5a 47 51 31 43 34 48 5a 65 45 6d 58 41 37 65 6e 4f 68 52 49 46 34 37 46 49 6f 41 6f 75 74 33 39 79 4a 32 6e 49 35 71 6c 61 33 59 72 74 75 36 62 63 6c 4b 6a 35 59 59 78 72 63 49 50 44 43 4f 47 76 53 57 73 6a 48 71 32 62 49 56 6d 4c 64 2d 74 4b 44 68 75 50 79 4d 53 6a 39 4f 64 4e 4d 79 79 49 50 34 73 74 44 56 39 6f 57 79 42 47 44 57 57 38 68 47 73 6d 4f 55 30 69 53 41 54 46 78 46 55 79 5a 69 65 2d 62 41 58 77 48 74 6b 73 67 7a 33 44 51 63 4c 45 4d 39 4d 79 38 4c 64 51 78 5f 46 44 6c 4d 75 71 72 35 38 63 77 49 56 70 65 49 37 4e 6c 51 71 75 57 6b 4e 5f 32 57 31 31 79 Data Ascii: 9eb)]}'["rresp","03AFcWeA6cXkCu6zMz2_0AAV-28u5j2770qzgrfMBWrxPZGQ1C4HZeEmXA7enOhRIF47FIoAout39yJ2nI5qla3Yrtu6bclKj5YYxrcIPDCOGvSWsjHq2bIVmLd-tKDhuPyMSj9OdNMyyIP4stDV9oWyBGDWW8hGsmOU0iSATFxFUyZie-bAXwHtksgz3DQcLEM9My8LdQx_FDlMuqr58cwIVpeI7NlQquWkN_2W11y
2024-04-26 15:52:35 UTC	1255	IN	Data Raw: 39 32 38 66 51 32 4c 67 31 43 52 56 2d 71 6a 71 44 35 6b 48 4b 59 72 44 4d 4a 63 6c 4b 64 37 4e 74 4b 71 48 65 5a 74 66 64 4a 61 57 52 50 5a 37 59 53 59 37 37 30 30 72 47 4d 77 38 6e 39 51 78 30 43 52 4b 72 4e 49 70 39 2d 55 4f 4a 62 39 45 4e 31 68 6f 42 6e 4f 69 75 59 69 47 30 4d 6c 69 71 72 67 67 35 39 46 72 77 47 45 6d 70 4a 38 39 37 69 34 4c 47 7a 33 4c 37 59 61 46 6e 53 4b 56 66 41 5f 73 71 33 71 72 35 45 72 73 70 33 49 45 77 4f 7a 42 67 39 41 71 77 64 46 36 76 6c 57 6c 46 4c 59 33 2d 4f 74 53 4f 56 6c 52 47 30 46 56 69 68 36 48 2d 52 53 70 61 38 5f 41 45 76 63 30 4b 37 31 36 63 65 4f 77 75 68 35 4a 51 33 68 35 5f 48 4b 69 79 53 6f 41 6d 4a 31 41 67 6a 76 4c 4b 75 32 71 78 54 56 67 36 47 44 62 79 39 71 74 31 75 6f 6c 30 6f 37 36 73 4c 72 38 70 46 63 Data Ascii: 928fQ2Lg1CRV-qjqD5kHKYrDMJclKd7NtKqHeZtfdJaWRPZ7YSY7700rGMw8n9Qx0CRKrNIp9-UOJb9EN1hoBnOiuYiG0Mliqrgg59FrwGEmpJ897i4LGz3L7YaFnSKVfA_sq3qr5Ersp3IEwOzBg9AqwdF6vlWlFLY3-OtSOVlRG0FVih6H-RSpa8_AEvc0K716ceOwuh5JQ3h5_HKiySoAmJ1AgjvLKu2qxTVg6GDby9qt1uol0o76sLr8pFc
2024-04-26 15:52:35 UTC	732	IN	Data Raw: 6f 55 62 38 44 41 72 35 70 75 6c 75 77 4e 38 72 73 50 72 31 55 52 62 36 57 49 46 55 71 4b 71 6d 4e 61 74 56 68 41 47 47 53 47 55 77 59 5f 55 66 62 4f 47 66 31 38 34 67 33 4f 48 35 53 34 59 72 76 6f 34 63 35 46 6f 47 48 64 5f 41 50 38 68 48 59 50 37 32 7a 63 58 34 73 2d 36 5f 4d 2d 6c 74 58 5a 47 37 6d 6c 61 78 5f 65 69 62 63 4e 75 69 30 6d 6c 75 79 45 55 30 32 6c 67 35 48 55 34 5a 53 4a 39 4e 49 6d 64 36 41 41 77 46 6b 66 36 32 49 51 73 39 71 4b 35 39 4b 2d 78 7a 6d 35 77 61 4b 39 35 73 55 6e 67 33 4b 48 38 70 4b 78 44 63 47 63 61 56 41 6d 6c 65 54 75 44 71 4b 31 68 54 30 72 6f 6a 4e 54 77 59 34 34 54 35 47 6e 47 6e 41 70 49 5a 61 68 48 76 33 33 66 69 6c 58 7a 52 56 46 73 38 66 78 47 54 49 32 49 32 64 53 61 54 34 35 49 47 5f 30 62 44 7a 64 69 68 6c 34 34 Data Ascii: oUb8DAr5puluwN8rsPr1URb6WIFUqKqmNatVhAGGSGUwY_UfbOGf184g3OH5S4Yrvo4c5FoGHd_AP8hHYP72zcX4s-6_M-ltXZG7mlax_eibcNui0mluyEU02lg5HU4ZSJ9NImd6AAwFkf62IQs9qK59K-xzm5waK95sUng3KH8pKxDcGcaVAmleTuDqK1hT0rojNTwY44T5GnGnApIZahHv33filXzRVFs8fxGTI2I2dSaT45IG_0bDzdihl44
2024-04-26 15:52:35 UTC	1255	IN	Data Raw: 31 36 35 62 0d 0a 47 52 7a 4d 47 4a 4f 51 58 64 4e 5a 44 4a 46 64 6b 4e 58 4f 58 52 49 55 6b 51 35 56 56 68 75 4d 58 49 31 59 6e 5a 68 51 6a 56 6c 59 33 42 71 4e 44 5a 56 4d 6a 4a 50 64 53 39 79 59 6c 4e 35 54 6e 55 35 4e 6d 67 31 52 32 56 6b 59 32 38 35 62 47 5a 55 55 6a 6c 4b 54 57 6c 30 59 31 45 72 62 33 49 79 4d 30 4e 4a 5a 33 4e 73 65 57 39 54 54 32 77 7a 61 6a 49 76 5a 47 39 30 57 48 4d 35 52 6d 5a 51 4e 55 68 42 61 30 39 31 61 48 42 50 4d 56 4d 33 54 47 78 53 52 6c 70 53 55 48 4e 49 51 6b 56 36 55 56 70 51 4d 57 64 4e 54 57 4e 32 51 6c 64 44 64 6a 49 7a 4d 33 56 76 65 46 68 51 4c 31 5a 31 54 54 52 44 5a 57 68 36 57 45 4d 35 55 45 74 4e 59 6e 64 4b 64 54 64 69 55 47 68 34 4b 31 52 4a 53 56 45 31 5a 6c 59 78 4d 32 56 69 5a 45 64 79 65 6b 6b 35 59 7a Data Ascii: 165bGRzMGJOQXdNZDJFdkNXOXRIUkQ5VVhuMXI1YnZhQjVlY3BqNDZVMjJPdS9yYlN5TnU5Nmg1R2VkY285bGZUUjlKTWl0Y1Erb3IyM0NJZ3NseW9TT2wzajIvZG90WHM5RmZQNUhBa091aHBPMVM3TGxSRlpSUHNIQkV6UVpQMWdNTWN2QldDdjIzM3VveFhQL1Z1TTRDZWh6WEM5UEtNYndKdTdiUGh4K1RJSVE1ZlYxM2ViZEdyekk5Yz
2024-04-26 15:52:35 UTC	1255	IN	Data Raw: 55 7a 4d 7a 56 45 4d 33 59 79 53 33 5a 47 53 6e 64 58 56 45 56 7a 55 57 56 58 52 45 52 6b 56 48 42 6a 55 58 5a 5a 4e 31 4d 30 4e 6a 5a 4f 63 57 64 7a 4d 30 63 7a 5a 6d 5a 6f 61 44 46 69 51 31 42 69 55 6d 4e 51 54 6d 5a 61 54 46 41 33 54 6a 4a 61 59 57 4a 6b 61 6e 5a 79 63 31 64 30 61 7a 46 70 57 69 39 74 65 6c 55 32 4b 31 4a 49 4e 31 55 32 52 6a 68 33 54 57 70 33 51 7a 4a 59 55 55 56 45 56 47 78 6a 4f 45 77 33 62 33 4e 6e 4e 45 4a 35 52 32 55 31 56 31 4d 35 61 32 35 53 5a 48 70 71 59 57 35 71 53 32 31 6a 51 56 70 36 62 57 56 56 59 6e 56 44 65 47 51 72 5a 45 64 48 4d 7a 52 59 53 69 74 32 4e 55 4e 57 53 6d 5a 61 64 57 4e 43 56 32 56 69 4b 33 42 70 63 7a 52 58 56 57 6f 79 62 57 56 49 52 30 78 6c 53 48 52 71 55 31 6c 34 52 57 77 72 59 6e 5a 6d 64 6d 6c 52 56 Data Ascii: UzMzVEM3YyS3ZGSndXVEVzUWVXRERkVHBjUXZZN1M0NjZOcWdzM0czZmZoaDFiQ1BiUmNQTmZaTFA3TjJaYWJkanZyc1d0azFpWi9telU2K1JIN1U2Rjh3TWp3QzJYUUVEVGxjOEw3b3NnNEJ5R2U1V1M5a25SZHpqYW5qS21jQVp6bWVVYnVDeGQrZEdHMzRYSit2NUNWSmZadWNCV2ViK3BpczRXVWoybWVIR0xlSHRqU1l4RWwrYnZmdmlRV
2024-04-26 15:52:35 UTC	1255	IN	Data Raw: 57 74 69 59 6e 56 31 56 7a 68 6a 57 55 4e 7a 61 58 42 74 63 6a 64 77 55 33 64 6b 64 47 78 43 52 46 4d 7a 56 55 35 32 64 31 52 75 64 6d 35 55 65 46 64 6b 61 6a 68 78 5a 6e 56 74 51 55 46 4d 54 58 6c 73 4d 56 46 43 52 32 68 54 4f 48 63 33 57 48 6f 30 4e 48 5a 42 54 47 31 47 64 46 46 4f 5a 46 56 4e 61 32 45 35 55 48 4a 54 62 46 4a 77 57 6c 52 6f 65 6d 31 6f 63 47 56 36 64 47 4a 48 59 57 46 4c 65 47 45 79 61 48 56 50 54 7a 55 78 53 48 42 44 51 54 6b 35 54 6d 64 4a 65 58 67 72 55 58 5a 5a 52 6b 30 7a 57 44 42 48 59 30 39 5a 53 45 68 53 61 48 4e 69 51 55 6b 31 59 55 4a 51 5a 47 35 69 51 57 4e 33 4f 46 64 6b 4e 44 46 72 52 7a 63 34 65 6d 39 34 5a 46 5a 4c 4d 58 46 47 54 30 52 36 55 55 74 7a 59 55 59 32 61 58 64 5a 51 55 56 7a 65 46 56 57 62 55 46 5a 52 46 5a 50 Data Ascii: WtiYnV1VzhjWUNzaXBtcjdwU3dkdGxCRFMzVU52d1Rudm5UeFdkajhxZnVtQUFMTXlsMVFCR2hTOHc3WHo0NHZBTG1GdFFOZFVNa2E5UHJTbFJwWlRoem1ocGV6dGJHYWFLeGEyaHVPTzUxSHBDQTk5TmdJeXgrUXZZRk0zWDBHY09ZSEhSaHNiQUk1YUJQZG5iQWN3OFdkNDFrRzc4em94ZFZLMXFGT0R6UUtzYUY2aXdZQUVzeFVWbUFZRFZP
2024-04-26 15:52:35 UTC	1255	IN	Data Raw: 56 44 68 34 4f 48 6c 69 56 6c 41 33 52 6d 56 75 54 56 4a 5a 57 43 74 6b 5a 6b 52 6c 65 58 63 76 57 44 5a 50 64 54 64 74 54 32 39 4b 64 48 64 4c 63 30 46 34 5a 31 6c 30 65 6c 4d 76 65 6c 42 52 52 6e 42 78 4e 6e 55 35 51 32 52 6d 55 46 64 56 53 47 35 75 4e 6e 6c 46 63 6c 52 6f 53 6a 4a 68 64 57 31 36 59 58 4e 51 53 33 41 31 62 57 56 43 52 48 70 58 65 47 6c 61 62 54 42 71 55 6e 64 6a 59 30 35 42 64 57 4a 4e 54 45 74 49 4f 48 5a 6f 4d 44 68 69 59 32 55 77 61 33 64 4b 63 44 63 79 61 57 70 77 64 58 59 7a 4e 47 74 51 62 54 6c 73 51 57 38 76 63 48 70 76 4d 31 5a 32 59 32 35 74 51 33 56 51 64 54 63 31 56 48 5a 6c 59 30 70 6b 55 6e 64 6d 4e 30 35 71 4f 56 56 45 59 30 74 36 5a 55 67 79 52 53 39 31 54 6e 68 79 4d 30 68 6d 52 6c 42 68 62 32 35 48 55 6d 78 4a 56 7a 56 Data Ascii: VDh4OHliVlA3RmVuTVJZWCtkZkRleXcvWDZPdTdtT29KdHdLc0F4Z1l0elMvelBRRnBxNnU5Q2RmUFdVSG5uNnlFclRoSjJhdW16YXNQS3A1bWVCRHpXeGlabTBqUndjY05BdWJNTEtIOHZoMDhiY2Uwa3dKcDcyaWpwdXYzNGtQbTlsQW8vcHpvM1Z2Y25tQ3VQdTc1VHZlY0pkUndmN05qOVVEY0t6ZUgyRS91TnhyM0hmRlBhb25HUmxJVzV
2024-04-26 15:52:35 UTC	711	IN	Data Raw: 72 61 6c 5a 70 4d 57 4e 49 53 6b 46 7a 5a 30 77 31 4e 46 4e 58 52 58 6c 75 4b 31 64 74 62 46 42 57 57 45 68 59 62 6e 6c 52 51 30 68 59 4e 45 35 71 53 30 31 35 65 45 4e 4b 4d 30 38 79 56 30 46 5a 63 7a 42 61 62 32 39 6a 52 46 51 79 61 6c 5a 79 59 56 5a 30 55 6a 56 48 4f 47 64 53 56 47 55 31 59 57 51 31 64 6a 6c 71 4e 55 68 4d 62 58 46 59 56 6a 6c 68 4d 30 70 50 4e 54 4e 44 52 44 52 44 4b 33 56 69 4e 6e 46 50 57 47 35 6d 59 32 4e 6d 64 6d 31 54 64 55 56 7a 61 6d 39 50 4e 6c 56 6e 56 47 4a 75 4e 6c 6c 54 4e 43 39 4c 62 33 5a 43 61 6e 64 42 64 6e 67 76 54 6e 68 50 4c 32 4e 4f 4e 46 5a 6d 57 55 31 78 54 32 39 48 63 57 52 47 63 57 55 30 54 6b 73 7a 4f 47 68 59 4d 31 4e 57 65 56 70 56 4d 55 59 30 4b 33 4a 5a 62 58 46 57 51 31 46 75 4b 79 74 6a 5a 55 73 32 62 47 Data Ascii: ralZpMWNISkFzZ0w1NFNXRXluK1dtbFBWWEhYbnlRQ0hYNE5qS015eENKM08yV0FZczBab29jRFQyalZyYVZ0UjVHOGdSVGU1YWQ1djlqNUhMbXFYVjlhM0pPNTNDRDRDK3ViNnFPWG5mY2Nmdm1TdUVzam9PNlVnVGJuNllTNC9Lb3ZCandBdngvTnhPL2NONFZmWU1xT29HcWRGcWU0TkszOGhYM1NWeVpVMUY0K3JZbXFWQ1FuKytjZUs2bG
2024-04-26 15:52:35 UTC	1255	IN	Data Raw: 31 33 64 65 0d 0a 5a 6c 6b 35 59 33 42 54 4c 30 39 51 61 7a 41 34 56 6b 77 32 54 30 4e 48 61 56 4e 6a 55 57 70 4f 65 57 4a 30 61 43 73 34 4f 56 46 48 53 6b 64 70 4d 6c 52 70 59 58 46 6f 63 45 78 42 63 69 73 72 51 30 74 50 56 44 64 4d 4d 6b 6c 69 56 30 46 4d 4f 43 39 31 4e 47 6c 30 63 54 6c 78 63 44 6c 46 63 57 68 52 5a 30 49 78 57 54 59 7a 64 30 68 78 57 6c 4e 45 63 31 6b 78 51 33 46 4d 56 6d 52 30 55 6d 4e 36 53 58 52 77 53 32 78 79 59 6d 52 43 4c 31 6c 51 5a 30 68 70 5a 6b 55 30 52 58 4a 58 5a 6d 4e 6b 63 55 35 42 57 45 6c 51 4e 45 52 42 52 46 42 42 63 31 59 7a 5a 45 30 77 65 6e 6c 30 61 6b 39 34 4e 54 42 4f 4d 46 68 69 4e 7a 46 43 51 32 78 6d 62 54 6c 79 53 30 74 35 57 54 56 4d 54 30 39 32 64 32 70 6a 4d 6a 6c 49 61 44 46 4b 4f 57 64 49 61 57 38 32 53 Data Ascii: 13deZlk5Y3BTL09QazA4Vkw2T0NHaVNjUWpOeWJ0aCs4OVFHSkdpMlRpYXFocExBcisrQ0tPVDdMMkliV0FMOC91NGl0cTlxcDlFcWhRZ0IxWTYzd0hxWlNEc1kxQ3FMVmR0UmN6SXRwS2xyYmRCL1lQZ0hpZkU0RXJXZmNkcU5BWElQNERBRFBBc1YzZE0wenl0ak94NTBOMFhiNzFCQ2xmbTlyS0t5WTVMT092d2pjMjlIaDFKOWdIaW82S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49739	188.116.24.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:35 UTC	666	OUT	GET /favicon.ico HTTP/1.1 Host: james-fay.bradentoncc.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://james-fay.bradentoncc.store/index0.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=u7lm09bt4a2460pnjlb75uu0a9
2024-04-26 15:52:35 UTC	204	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 15:52:35 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 Content-Length: 314 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-04-26 15:52:35 UTC	314	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 38 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 33 2e 31 2e 33 20 50 48 50 2f 38 2e 30 2e 33 30 20 53 65 72 76 65 72 20 61 74 20 6a 61 6d Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 Server at jam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49741	192.178.50.68	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:35 UTC	1060	OUT	POST /recaptcha/api2/clr?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 2034 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuf Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf&co=aHR0cHM6Ly9qYW1lcy1mYXkuYnJhZGVudG9uY2Muc3RvcmU6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=vxeyk0h3vqbr Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9OY0_IQGz67xx_A_2F_zadSaofsLXY2wC6Lv4C0xX9O-rGYwTNhTMt2p03OZKs0Tk5d8V7zt4Ru9WqnvEQ
2024-04-26 15:52:35 UTC	2034	OUT	Data Raw: 0a 28 36 4c 63 35 6a 4b 73 70 41 41 41 41 41 50 7a 46 62 76 5a 34 78 36 5a 61 74 75 6d 36 31 33 47 6f 34 53 30 75 6a 65 6c 66 12 a4 0f 30 33 41 46 63 57 65 41 37 66 57 79 50 64 6c 39 52 45 6d 31 4a 73 52 5f 51 67 46 4a 36 36 4b 74 56 39 4f 76 6b 53 33 7a 52 38 44 63 6d 37 57 41 50 54 4a 4a 42 35 50 51 6a 75 4a 59 6b 75 59 5a 53 73 66 61 37 30 76 39 7a 5a 75 46 58 42 52 67 6a 55 46 4d 6b 70 62 71 6f 33 7a 37 6f 4b 61 49 56 6d 51 62 4f 6d 48 71 56 5a 56 7a 36 55 42 6d 61 6a 41 39 57 49 52 44 5a 5a 52 41 5f 38 47 70 38 42 48 43 35 65 6f 34 67 53 6a 73 63 33 38 79 45 6f 57 6c 31 2d 39 78 6d 5f 37 51 6c 45 62 74 51 49 72 39 69 59 34 77 4b 76 4c 35 38 4e 6e 32 67 44 75 37 53 6d 4e 4e 61 6c 55 42 77 35 5a 53 6f 79 36 33 52 49 6a 66 36 73 61 4f 61 76 56 48 6b 72 Data Ascii: (6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf03AFcWeA7fWyPdl9REm1JsR_QgFJ66KtV9OvkS3zR8Dcm7WAPTJJB5PQjuJYkuYZSsfa70v9zZuFXBRgjUFMkpbqo3z7oKaIVmQbOmHqVZVz6UBmajA9WIRDZZRA_8Gp8BHC5eo4gSjsc38yEoWl1-9xm_7QlEbtQIr9iY4wKvL58Nn2gDu7SmNNalUBw5ZSoy63RIjf6saOavVHkr
2024-04-26 15:52:36 UTC	417	IN	HTTP/1.1 200 OK Content-Type: application/binary Date: Fri, 26 Apr 2024 15:52:36 GMT Expires: Fri, 26 Apr 2024 15:52:36 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 0 Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49743	142.250.217.228	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:36 UTC	610	OUT	GET /recaptcha/api2/reload?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9OY0_IQGz67xx_A_2F_zadSaofsLXY2wC6Lv4C0xX9O-rGYwTNhTMt2p03OZKs0Tk5d8V7zt4Ru9WqnvEQ
2024-04-26 15:52:36 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 15:52:36 GMT Expires: Fri, 26 Apr 2024 15:52:36 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:52:36 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-26 15:52:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49742	188.116.24.148	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:36 UTC	913	OUT	POST /verify.php HTTP/1.1 Host: james-fay.bradentoncc.store Connection: keep-alive Content-Length: 2297 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://james-fay.bradentoncc.store Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://james-fay.bradentoncc.store/index0.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=u7lm09bt4a2460pnjlb75uu0a9
2024-04-26 15:52:36 UTC	2297	OUT	Data Raw: 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 3d 30 33 41 46 63 57 65 41 36 63 58 6b 43 75 36 7a 4d 7a 32 5f 30 41 41 56 2d 32 38 75 35 6a 32 37 37 30 71 7a 67 72 66 4d 42 57 72 78 50 5a 47 51 31 43 34 48 5a 65 45 6d 58 41 37 65 6e 4f 68 52 49 46 34 37 46 49 6f 41 6f 75 74 33 39 79 4a 32 6e 49 35 71 6c 61 33 59 72 74 75 36 62 63 6c 4b 6a 35 59 59 78 72 63 49 50 44 43 4f 47 76 53 57 73 6a 48 71 32 62 49 56 6d 4c 64 2d 74 4b 44 68 75 50 79 4d 53 6a 39 4f 64 4e 4d 79 79 49 50 34 73 74 44 56 39 6f 57 79 42 47 44 57 57 38 68 47 73 6d 4f 55 30 69 53 41 54 46 78 46 55 79 5a 69 65 2d 62 41 58 77 48 74 6b 73 67 7a 33 44 51 63 4c 45 4d 39 4d 79 38 4c 64 51 78 5f 46 44 6c 4d 75 71 72 35 38 63 77 49 56 70 65 49 37 4e 6c 51 71 75 57 6b 4e 5f 32 57 31 31 Data Ascii: g-recaptcha-response=03AFcWeA6cXkCu6zMz2_0AAV-28u5j2770qzgrfMBWrxPZGQ1C4HZeEmXA7enOhRIF47FIoAout39yJ2nI5qla3Yrtu6bclKj5YYxrcIPDCOGvSWsjHq2bIVmLd-tKDhuPyMSj9OdNMyyIP4stDV9oWyBGDWW8hGsmOU0iSATFxFUyZie-bAXwHtksgz3DQcLEM9My8LdQx_FDlMuqr58cwIVpeI7NlQquWkN_2W11
2024-04-26 15:52:36 UTC	416	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 15:52:36 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30 X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: https://migconsultings.com/?xgshwmpx&qrc=james.fay@countynationalbank.com Content-Length: 107 Connection: close Content-Type: text/html; charset=UTF-8
2024-04-26 15:52:36 UTC	107	IN	Data Raw: 3c 62 72 20 2f 3e 0a 3c 62 3e 57 61 72 6e 69 6e 67 3c 2f 62 3e 3a 20 20 55 6e 64 65 66 69 6e 65 64 20 61 72 72 61 79 20 6b 65 79 20 31 20 69 6e 20 3c 62 3e 43 3a 5c 78 61 6d 70 70 5c 68 74 64 6f 63 73 5c 76 65 72 69 66 79 2e 70 68 70 3c 2f 62 3e 20 6f 6e 20 6c 69 6e 65 20 3c 62 3e 39 36 3c 2f 62 3e 3c 62 72 20 2f 3e 0a Data Ascii: <br /><b>Warning</b>: Undefined array key 1 in <b>C:\xampp\htdocs\verify.php</b> on line <b>96</b><br />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49744	142.250.217.228	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:36 UTC	607	OUT	GET /recaptcha/api2/clr?k=6Lc5jKspAAAAAPzFbvZ4x6Zatum613Go4S0ujelf HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9OY0_IQGz67xx_A_2F_zadSaofsLXY2wC6Lv4C0xX9O-rGYwTNhTMt2p03OZKs0Tk5d8V7zt4Ru9WqnvEQ
2024-04-26 15:52:37 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 15:52:37 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 15:52:37 UTC	782	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-04-26 15:52:37 UTC	879	IN	Data Raw: 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 Data Ascii: color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.c
2024-04-26 15:52:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49746	82.180.161.153	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:38 UTC	766	OUT	GET /?xgshwmpx&qrc=james.fay@countynationalbank.com HTTP/1.1 Host: migconsultings.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://james-fay.bradentoncc.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:38 UTC	153	IN	HTTP/1.1 302 Found location: https://href.li?https://example.com Date: Fri, 26 Apr 2024 15:52:38 GMT Connection: close Transfer-Encoding: chunked
2024-04-26 15:52:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49747	192.0.78.26	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:39 UTC	729	OUT	GET /?https://example.com HTTP/1.1 Host: href.li Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://james-fay.bradentoncc.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:39 UTC	279	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 15:52:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-ac: 3.mia _dca MISS Alt-Svc: h3=":443"; ma=86400
2024-04-26 15:52:39 UTC	428	IN	Data Raw: 31 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 68 72 65 66 2e 6c 69 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 52 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 20 22 68 74 74 70 73 3a 5c 2f 5c 2f Data Ascii: 1a0<!DOCTYPE html><html><head><title>href.li</title><meta http-equiv="Refresh" content="0; url=https://example.com" /><meta name="referrer" content="no-referrer" /><script type="text/javascript">/* <![CDATA[ */window.location.replace( "https:\/\/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49749	93.184.215.14	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:39 UTC	640	OUT	GET / HTTP/1.1 Host: example.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:40 UTC	356	IN	HTTP/1.1 200 OK Age: 336217 Cache-Control: max-age=604800 Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 15:52:40 GMT Etag: "3147526947+ident" Expires: Fri, 03 May 2024 15:52:40 GMT Last-Modified: Thu, 17 Oct 2019 07:18:26 GMT Server: ECAcc (mid/8733) Vary: Accept-Encoding X-Cache: HIT Content-Length: 1256 Connection: close
2024-04-26 15:52:40 UTC	1256	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 78 61 6d 70 6c 65 20 44 6f 6d 61 69 6e 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 Data Ascii: <!doctype html><html><head> <title>Example Domain</title> <meta charset="utf-8" /> <meta http-equiv="Content-type" content="text/html; charset=utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <style t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49748	93.184.215.14	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:40 UTC	578	OUT	GET /favicon.ico HTTP/1.1 Host: example.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://example.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:52:40 UTC	340	IN	HTTP/1.1 404 Not Found Age: 77422 Cache-Control: max-age=604800 Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 15:52:40 GMT Expires: Fri, 03 May 2024 15:52:40 GMT Last-Modified: Thu, 25 Apr 2024 18:22:18 GMT Server: ECAcc (mid/8787) Vary: Accept-Encoding X-Cache: 404-HIT Content-Length: 1256 Connection: close
2024-04-26 15:52:40 UTC	1256	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 78 61 6d 70 6c 65 20 44 6f 6d 61 69 6e 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 Data Ascii: <!doctype html><html><head> <title>Example Domain</title> <meta charset="utf-8" /> <meta http-equiv="Content-type" content="text/html; charset=utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <style t

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49750	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:52:48 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714146705568&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-26 15:52:48 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-26 15:52:48 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-26 15:52:48 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: FB97B3951A184632836BCB38DDA33570 Ref B: LAX311000111035 Ref C: 2024-04-26T15:52:48Z Date: Fri, 26 Apr 2024 15:52:48 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714146768.1218d281

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49752	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:07 UTC	650	OUT	GET /domains/example HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:07 UTC	1010	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 14:45:52 GMT Server: Apache Vary: Accept-Encoding Location: http://www.iana.org/help/example-domains Cache-Control: public, max-age=21603 Expires: Fri, 26 Apr 2024 16:45:52 GMT Content-Length: 248 X-Frame-Options: SAMEORIGIN Referrer-Policy: origin-when-cross-origin Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 4035 Connection: close Content-Type: text/html; charset=iso-8859-1 Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:07 UTC	248	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 69 61 6e 61 2e 6f 72 67 2f 68 65 6c 70 2f 65 78 61 6d 70 6c 65 2d 64 6f 6d 61 69 6e 73 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.iana.org/help/example-domains">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49759	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:09 UTC	516	OUT	GET /_css/2022/iana_website.css HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:09 UTC	1074	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:53:09 GMT Server: Apache Vary: Accept-Encoding Last-Modified: Fri, 09 Feb 2024 01:10:55 GMT Content-Length: 41952 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Expires: Fri, 26 Apr 2024 16:19:22 GMT X-Content-Type-Options: nosniff Age: 227 Content-Type: text/css Cache-Control: public, s-maxage=86402, max-age=604814 Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:09 UTC	5365	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4e 6f 74 6f 22 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 22 4e 6f 74 6f 20 53 61 6e 73 22 29 2c 20 6c 6f 63 61 6c 28 22 4e 6f 74 6f 53 61 6e 73 22 29 2c 20 75 72 6c 28 22 2f 5f 69 6d 67 2f 32 30 32 32 2f 66 6f 6e 74 73 2f 4e 6f 74 6f 53 61 6e 73 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 22 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4e 6f 74 6f 22 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 22 4e 6f 74 6f 20 53 61 6e 73 22 29 2c 20 6c 6f 63 61 6c 28 22 4e 6f 74 6f 53 61 6e 73 22 29 2c 20 75 72 6c 28 Data Ascii: @charset "UTF-8";@font-face { font-family: "Noto"; src: local("Noto Sans"), local("NotoSans"), url("/_img/2022/fonts/NotoSans-Regular.woff"); font-weight: 400;}@font-face { font-family: "Noto"; src: local("Noto Sans"), local("NotoSans"), url(
2024-04-26 15:53:09 UTC	2129	IN	Data Raw: 3a 20 32 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 64 34 37 34 65 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 20 33 70 78 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6c 6f 77 65 72 63 61 73 65 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 6f 75 72 63 65 20 43 6f 64 65 20 50 72 6f 22 2c 20 43 6f 6e 73 6f 6c 61 73 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 7d 0a 2e 64 6f 6d 61 69 6e 2d 64 65 75 78 20 61 3a 6c 69 6e 6b 2c 20 2e 64 6f 6d 61 69 6e 2d 64 65 75 78 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 64 34 37 34 65 3b 0a 7d 0a 0a 2e 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6c 6f 77 65 72 Data Ascii: : 2px; color: #2d474e; padding: 1px 3px; text-transform: lowercase; font-family: "Source Code Pro", Consolas, monospace;}.domain-deux a:link, .domain-deux a:visited { text-decoration: none; color: #2d474e;}.label { text-transform: lower
2024-04-26 15:53:09 UTC	1277	IN	Data Raw: 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 32 70 78 20 30 70 78 20 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 62 33 30 33 37 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 20 34 70 78 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 72 66 63 72 65 66 20 61 3a 6c 69 6e 6b 2c 20 2e 72 66 63 72 65 66 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 62 33 30 33 37 3b 0a 7d 0a 0a 2e 72 69 72 2d 63 68 61 72 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 77 69 64 74 68 3a 20 36 35 76 77 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 32 30 70 78 3b 0a 20 Data Ascii: r-radius: 4px; margin: 0px 2px 0px 0px; color: #2b3037; padding: 1px 4px; white-space: nowrap;}.rfcref a:link, .rfcref a:visited { text-decoration: none; color: #2b3037;}.rir-chart { position: relative; width: 65vw; height: 320px;
2024-04-26 15:53:09 UTC	2554	IN	Data Raw: 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 37 35 25 3b 0a 20 20 7d 0a 7d 0a 23 68 65 61 64 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 29 20 7b 0a 20 20 23 68 65 61 64 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 37 70 78 3b 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 Data Ascii: width: 75%; height: 75%; }}#header .navigation { text-align: right; float: right;}@media only screen and (max-width: 800px) { #header .navigation { float: left; margin-top: 7px; clear: both; }}@media only screen and (ma
2024-04-26 15:53:09 UTC	10216	IN	Data Raw: 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 20 61 75 74 6f 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 39 61 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 7d 0a 23 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 35 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 30 70 78 29 20 7b 0a 20 20 23 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 32 35 70 78 3b 0a 20 20 7d 0a 7d 0a 23 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 6c 69 6e 6b 2c 20 23 66 6f 6f 74 65 72 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 76 69 73 69 Data Ascii: x; margin: 0px auto; color: #9999a0; font-size: 12px;}#footer .navigation { margin: 10px 50px;}@media only screen and (max-width: 1000px) { #footer .navigation { margin: 10px 25px; }}#footer .navigation:link, #footer .navigation:visi
2024-04-26 15:53:09 UTC	7662	IN	Data Raw: 2e 34 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 61 65 36 38 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 33 66 33 66 33 20 30 25 2c 20 23 64 65 64 65 64 65 20 31 30 30 25 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 62 36 33 35 62 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 29 20 30 20 30 20 31 70 78 20 30 20 30 20 30 20 30 20 31 70 78 20 69 6e 73 65 74 2c 20 23 66 66 66 20 30 20 31 70 78 20 30 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 65 64 65 64 65 20 23 63 35 63 35 63 35 20 23 61 66 61 66 61 66 3b 0a 7d 0a 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 20 2e 62 75 Data Ascii: .4); background: #8ae68a; background: linear-gradient(to bottom, #f3f3f3 0%, #dedede 100%); color: #6b635b; box-shadow: rgba(255, 255, 255, 0) 0 0 1px 0 0 0 0 1px inset, #fff 0 1px 0 0; border-color: #dedede #c5c5c5 #afafaf;}button:active, .bu
2024-04-26 15:53:09 UTC	1277	IN	Data Raw: 6f 74 6f 63 6f 6c 73 2d 74 61 62 6c 65 20 74 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0a 7d 0a 23 70 72 6f 74 6f 63 6f 6c 73 2d 74 61 62 6c 65 20 2e 69 61 6e 61 2d 70 72 6f 74 6f 63 6f 6c 2d 67 72 6f 75 70 20 74 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 30 70 78 29 20 7b 0a 20 20 23 70 72 6f 74 6f 63 6f 6c 73 2d 74 61 62 6c 65 20 74 64 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 70 78 3b 0a 20 20 7d 0a 20 20 23 70 72 6f 74 6f 63 6f 6c 73 2d 74 61 62 6c 65 20 2e 69 61 6e 61 2d 70 72 6f 74 6f 63 Data Ascii: otocols-table td { padding-left: 20px;}#protocols-table .iana-protocol-group td { padding-left: 0; font-weight: bold;}@media only screen and (max-width: 1000px) { #protocols-table td { padding-left: 0px; } #protocols-table .iana-protoc
2024-04-26 15:53:09 UTC	6385	IN	Data Raw: 67 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0a 7d 0a 0a 2e 63 65 72 65 6d 6f 6e 79 2d 61 74 74 65 6e 64 61 6e 63 65 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 7d 0a 2e 63 65 72 65 6d 6f 6e 79 2d 61 74 74 65 6e 64 61 6e 63 65 20 74 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 38 70 78 20 38 70 78 20 34 70 78 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0a 7d 0a 2e 63 65 72 65 6d 6f 6e 79 2d 61 74 74 65 6e 64 61 6e 63 65 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 38 38 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e Data Ascii: g-bottom: 8px;}.ceremony-attendance { width: 100%; margin-bottom: 15px;}.ceremony-attendance td { padding: 8px 8px 8px 4px; vertical-align: top;}.ceremony-attendance td:first-child { padding-left: 0; color: #888;}@media only screen an
2024-04-26 15:53:09 UTC	2629	IN	Data Raw: 73 2d 62 6f 64 79 20 23 74 79 70 65 2d 66 69 6c 74 65 72 2d 6e 61 76 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 23 6e 65 77 73 2d 62 6f 64 79 20 23 74 79 70 65 2d 66 69 6c 74 65 72 2d 6e 61 76 20 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 67 72 61 79 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 23 6e 65 77 73 2d 62 6f 64 79 20 23 74 79 70 65 2d 66 69 6c 74 65 72 2d 6e 61 76 20 2e 72 73 73 2d 61 74 6f 6d 2d 6e 61 76 2d 62 74 6e 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 23 6e 65 77 73 2d 62 6f 64 79 20 23 74 79 70 65 2d 66 69 6c 74 65 72 2d 6e 61 76 20 2e 72 73 73 2d 61 74 6f 6d 2d 6e 61 76 2d 62 74 6e 20 64 69 76 20 7b 0a 20 20 64 69 73 70 Data Ascii: s-body #type-filter-nav { display: inline;}#news-body #type-filter-nav button.active { background: gray; color: #ffffff;}#news-body #type-filter-nav .rss-atom-nav-btn { float: right;}#news-body #type-filter-nav .rss-atom-nav-btn div { disp
2024-04-26 15:53:09 UTC	2458	IN	Data Raw: 2d 62 6f 64 79 20 2e 73 65 61 72 63 68 20 66 6f 72 6d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 62 62 62 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 35 70 78 3b 0a 7d 0a 23 73 65 61 72 63 68 2d 62 6f 64 79 20 2e 73 65 61 72 63 68 20 66 6f 72 6d 3a 68 6f 76 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 0a 7d 0a 23 73 65 61 72 63 68 2d 62 6f 64 79 20 2e 73 65 61 72 63 68 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 6d 61 Data Ascii: -body .search form { color: #555; display: flex; padding: 2px; border: 2px solid #bbb; border-radius: 15px;}#search-body .search form:hover { border: 2px solid #999;}#search-body .search input[type=search] { background: transparent; ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49758	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:09 UTC	489	OUT	GET /_js/jquery.js HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:10 UTC	1088	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:53:09 GMT Server: Apache Vary: Accept-Encoding Last-Modified: Fri, 24 Sep 2021 20:20:55 GMT Content-Length: 89501 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Expires: Fri, 26 Apr 2024 16:07:20 GMT X-Content-Type-Options: nosniff Age: 949 Content-Type: application/javascript Cache-Control: public, s-maxage=86402, max-age=604814 Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:10 UTC	11311	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-26 15:53:10 UTC	5108	IN	Data Raw: 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 Data Ascii: disabled'><option/></select>";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(
2024-04-26 15:53:10 UTC	5108	IN	Data Raw: 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d Data Ascii: =(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===
2024-04-26 15:53:10 UTC	15324	IN	Data Raw: 68 28 7b 76 61 6c 75 65 3a 6e 2c 74 79 70 65 3a 72 5b 30 5d 2e 72 65 70 6c 61 63 65 28 24 2c 22 20 22 29 7d 29 2c 61 3d 61 2e 73 6c 69 63 65 28 6e 2e 6c 65 6e 67 74 68 29 29 2c 62 2e 66 69 6c 74 65 72 29 21 28 72 3d 47 5b 6f 5d 2e 65 78 65 63 28 61 29 29 7c 7c 75 5b 6f 5d 26 26 21 28 72 3d 75 5b 6f 5d 28 72 29 29 7c 7c 28 6e 3d 72 2e 73 68 69 66 74 28 29 2c 69 2e 70 75 73 68 28 7b 76 61 6c 75 65 3a 6e 2c 74 79 70 65 3a 6f 2c 6d 61 74 63 68 65 73 3a 72 7d 29 2c 61 3d 61 2e 73 6c 69 63 65 28 6e 2e 6c 65 6e 67 74 68 29 29 3b 69 66 28 21 6e 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 3f 61 2e 6c 65 6e 67 74 68 3a 61 3f 73 65 2e 65 72 72 6f 72 28 65 29 3a 78 28 65 2c 73 29 2e 73 6c 69 63 65 28 30 29 7d 2c 66 3d 73 65 2e 63 6f 6d 70 69 6c 65 3d 66 75 6e 63 74 Data Ascii: h({value:n,type:r[0].replace($," ")}),a=a.slice(n.length)),b.filter)!(r=G[o].exec(a))\|\|u[o]&&!(r=u[o](r))\|\|(n=r.shift(),i.push({value:n,type:o,matches:r}),a=a.slice(n.length));if(!n)break}return t?a.length:a?se.error(e):x(e,s).slice(0)},f=se.compile=funct
2024-04-26 15:53:10 UTC	10216	IN	Data Raw: 29 53 2e 73 74 79 6c 65 28 65 2c 74 2c 63 2b 6c 29 2c 28 31 2d 6f 29 2a 28 31 2d 28 6f 3d 73 28 29 2f 75 7c 7c 2e 35 29 29 3c 3d 30 26 26 28 61 3d 30 29 2c 63 2f 3d 6f 3b 63 2a 3d 32 2c 53 2e 73 74 79 6c 65 28 65 2c 74 2c 63 2b 6c 29 2c 6e 3d 6e 7c 7c 5b 5d 7d 72 65 74 75 72 6e 20 6e 26 26 28 63 3d 2b 63 7c 7c 2b 75 7c 7c 30 2c 69 3d 6e 5b 31 5d 3f 63 2b 28 6e 5b 31 5d 2b 31 29 2a 6e 5b 32 5d 3a 2b 6e 5b 32 5d 2c 72 26 26 28 72 2e 75 6e 69 74 3d 6c 2c 72 2e 73 74 61 72 74 3d 63 2c 72 2e 65 6e 64 3d 69 29 29 2c 69 7d 76 61 72 20 75 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 5b 5d 2c 63 3d 30 2c 66 3d 65 2e 6c 65 6e 67 74 68 3b 63 3c 66 3b 63 2b 2b 29 28 72 3d 65 Data Ascii: )S.style(e,t,c+l),(1-o)(1-(o=s()/u\|\|.5))<=0&&(a=0),c/=o;c=2,S.style(e,t,c+l),n=n\|\|[]}return n&&(c=+c\|\|+u\|\|0,i=n[1]?c+(n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=i)),i}var ue={};function le(e,t){for(var n,r,i,o,a,s,u,l=[],c=0,f=e.length;c<f;c++)(r=e
2024-04-26 15:53:10 UTC	1277	IN	Data Raw: 6e 28 29 7b 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 2c 6e 2c 74 29 7d 29 7d 7d 29 3b 76 61 72 20 6b 65 3d 2f 3c 73 63 72 69 70 74 7c 3c 73 74 79 6c 65 7c 3c 6c 69 6e 6b 2f 69 2c 41 65 3d 2f 63 68 65 63 6b 65 64 5c 73 2a 28 3f 3a 5b 5e 3d 5d 7c 3d 5c 73 2a 2e 63 68 65 63 6b 65 64 2e 29 2f 69 2c 4e 65 3d 2f 5e 5c 73 2a 3c 21 28 3f 3a 5c 5b 43 44 41 54 41 5c 5b 7c 2d 2d 29 7c 28 3f 3a 5c 5d 5c 5d 7c 2d 2d 29 3e 5c 73 2a 24 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6a 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 74 61 62 6c 65 22 29 26 26 41 28 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 74 2e 66 69 72 73 74 43 68 69 6c 64 2c 22 74 72 22 29 26 26 53 28 65 29 2e 63 68 69 6c 64 72 65 6e 28 22 74 62 6f 64 79 22 29 5b 30 5d Data Ascii: n(){S.event.remove(this,e,n,t)})}});var ke=/<script\|<style\|<link/i,Ae=/checked\s(?:[^=]\|=\s.checked.)/i,Ne=/^\s<!(?:\[CDATA\[\|--)\|(?:\]\]\|--)>\s$/g;function je(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.firstChild,"tr")&&S(e).children("tbody")[0]
2024-04-26 15:53:10 UTC	3831	IN	Data Raw: 22 21 3d 3d 28 75 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 53 2e 5f 65 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 4e 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 Data Ascii: "!==(u.type\|\|"").toLowerCase()?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(Ne,""),u,l))}return n}function Oe(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S
2024-04-26 15:53:11 UTC	10216	IN	Data Raw: 65 66 74 3a 2d 31 31 31 31 31 70 78 3b 77 69 64 74 68 3a 36 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 22 2c 6c 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 6f 6c 6c 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 31 70 78 3b 77 69 64 74 68 3a 36 30 25 3b 74 6f 70 3a 31 25 22 2c 72 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 3b 76 61 72 20 65 3d 43 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c Data Ascii: eft:-11111px;width:60px;margin-top:1px;padding:0;border:0",l.style.cssText="position:relative;display:block;box-sizing:border-box;overflow:scroll;margin:auto;border:1px;padding:1px;width:60%;top:1%",re.appendChild(u).appendChild(l);var e=C.getComputedStyl
2024-04-26 15:53:11 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 72 20 69 6e 20 67 7c 7c 6c 65 28 5b 65 5d 29 2c 59 2e 72 65 6d 6f 76 65 28 65 2c 22 66 78 73 68 6f 77 22 29 2c 64 29 53 2e 73 74 79 6c 65 28 65 2c 72 2c 64 5b 72 5d 29 7d 29 29 2c 75 3d 75 74 28 67 3f 76 5b 72 5d 3a 30 2c 72 2c 70 29 2c 72 20 69 6e 20 76 7c 7c 28 76 5b 72 5d 3d 75 2e 73 74 61 72 74 2c 67 26 26 28 75 2e 65 6e 64 3d 75 2e 73 74 61 72 74 2c 75 2e 73 74 61 72 74 3d 30 29 29 7d 5d 2c 70 72 65 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3f 6c 74 2e 70 72 65 66 69 6c 74 65 72 73 2e 75 6e 73 68 69 66 74 28 65 29 3a 6c 74 2e 70 72 65 66 69 6c 74 65 72 73 2e 70 75 73 68 28 65 29 7d 7d 29 2c 53 2e 73 70 65 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 26 Data Ascii: unction(){for(r in g\|\|le([e]),Y.remove(e,"fxshow"),d)S.style(e,r,d[r])})),u=ut(g?v[r]:0,r,p),r in v\|\|(v[r]=u.start,g&&(u.end=u.start,u.start=0))}],prefilter:function(e,t){t?lt.prefilters.unshift(e):lt.prefilters.push(e)}}),S.speed=function(e,t,n){var r=e&
2024-04-26 15:53:11 UTC	4048	IN	Data Raw: 66 74 28 69 29 3b 62 72 65 61 6b 7d 69 66 28 75 5b 30 5d 69 6e 20 6e 29 6f 3d 75 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 69 20 69 6e 20 6e 29 7b 69 66 28 21 75 5b 30 5d 7c 7c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 69 2b 22 20 22 2b 75 5b 30 5d 5d 29 7b 6f 3d 69 3b 62 72 65 61 6b 7d 61 7c 7c 28 61 3d 69 29 7d 6f 3d 6f 7c 7c 61 7d 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 21 3d 3d 75 5b 30 5d 26 26 75 2e 75 6e 73 68 69 66 74 28 6f 29 2c 6e 5b 6f 5d 7d 28 76 2c 54 2c 6e 29 29 2c 21 69 26 26 2d 31 3c 53 2e 69 6e 41 72 72 61 79 28 22 73 63 72 69 70 74 22 2c 76 2e 64 61 74 61 54 79 70 65 73 29 26 26 53 2e 69 6e 41 72 72 61 79 28 22 6a 73 6f 6e 22 2c 76 2e 64 61 74 61 54 79 70 65 73 29 3c 30 26 26 28 76 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 74 65 78 74 20 73 63 72 Data Ascii: ft(i);break}if(u[0]in n)o=u[0];else{for(i in n){if(!u[0]\|\|e.converters[i+" "+u[0]]){o=i;break}a\|\|(a=i)}o=o\|\|a}if(o)return o!==u[0]&&u.unshift(o),n[o]}(v,T,n)),!i&&-1<S.inArray("script",v.dataTypes)&&S.inArray("json",v.dataTypes)<0&&(v.converters["text scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49760	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:09 UTC	487	OUT	GET /_js/iana.js HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:10 UTC	1086	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:52:39 GMT Server: Apache Vary: Accept-Encoding Last-Modified: Fri, 24 Sep 2021 20:20:55 GMT Content-Length: 68 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Expires: Fri, 26 Apr 2024 15:59:07 GMT X-Content-Type-Options: nosniff Age: 1441 Cache-Control: public, s-maxage=86402, max-age=604814 Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Content-Type: application/javascript Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:10 UTC	68	IN	Data Raw: 69 66 20 28 74 6f 70 20 21 3d 3d 20 73 65 6c 66 29 20 7b 0a 20 20 20 20 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0a 7d 0a Data Ascii: if (top !== self) { top.location.replace(self.location.href);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49761	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:11 UTC	566	OUT	GET /_img/2022/iana-logo-header.svg HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:12 UTC	1080	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:53:12 GMT Server: Apache Vary: Accept-Encoding Last-Modified: Tue, 05 Oct 2021 16:31:06 GMT Content-Length: 32870 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Expires: Fri, 26 Apr 2024 16:03:12 GMT X-Content-Type-Options: nosniff Age: 1199 Content-Type: image/svg+xml Cache-Control: public, s-maxage=86402, max-age=604814 Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:12 UTC	7505	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 41 4e 41 5f 48 65 61 64 65 72 5f 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id="IANA_Header_Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink
2024-04-26 15:53:12 UTC	3831	IN	Data Raw: 37 39 2d 31 2e 36 32 34 2d 30 2e 37 39 38 63 2d 30 2e 35 30 34 2d 30 2e 33 31 37 2d 30 2e 39 32 34 2d 30 2e 37 31 38 2d 31 2e 32 36 2d 31 2e 32 30 34 0a 09 09 63 2d 30 2e 33 33 36 2d 30 2e 34 38 34 2d 30 2e 35 30 34 2d 31 2e 31 30 31 2d 30 2e 35 30 34 2d 31 2e 38 34 38 63 30 2d 30 2e 37 34 36 2c 30 2e 31 34 35 2d 31 2e 34 2c 30 2e 34 33 34 2d 31 2e 39 36 63 30 2e 32 38 39 2d 30 2e 35 36 2c 30 2e 36 38 36 2d 31 2e 30 32 36 2c 31 2e 31 39 2d 31 2e 34 0a 09 09 63 30 2e 35 30 34 2d 30 2e 33 37 33 2c 31 2e 30 38 37 2d 30 2e 36 35 32 2c 31 2e 37 35 2d 30 2e 38 34 63 30 2e 36 36 33 2d 30 2e 31 38 37 2c 31 2e 33 36 37 2d 30 2e 32 38 2c 32 2e 31 31 34 2d 30 2e 32 38 63 30 2e 34 36 36 2c 30 2c 31 2e 30 31 37 2c 30 2e 30 33 33 2c 31 2e 36 35 32 2c 30 2e 30 39 39 0a Data Ascii: 79-1.624-0.798c-0.504-0.317-0.924-0.718-1.26-1.204c-0.336-0.484-0.504-1.101-0.504-1.848c0-0.746,0.145-1.4,0.434-1.96c0.289-0.56,0.686-1.026,1.19-1.4c0.504-0.373,1.087-0.652,1.75-0.84c0.663-0.187,1.367-0.28,2.114-0.28c0.466,0,1.017,0.033,1.652,0.099
2024-04-26 15:53:12 UTC	16384	IN	Data Raw: 30 35 38 2d 30 2e 32 36 37 63 30 2e 37 2d 30 2e 31 37 37 2c 31 2e 32 36 35 2d 30 2e 33 39 36 2c 31 2e 36 39 34 2d 30 2e 36 35 38 63 30 2e 31 33 2c 30 2e 33 33 36 2c 30 2e 32 35 32 2c 30 2e 37 31 39 2c 30 2e 33 36 34 2c 31 2e 31 34 38 73 30 2e 31 39 36 2c 30 2e 38 33 31 2c 30 2e 32 35 32 2c 31 2e 32 30 34 0a 09 09 63 2d 30 2e 32 38 2c 30 2e 31 34 39 2d 30 2e 36 30 32 2c 30 2e 32 38 35 2d 30 2e 39 36 36 2c 30 2e 34 30 36 63 2d 30 2e 33 36 34 2c 30 2e 31 32 31 2d 30 2e 37 34 32 2c 30 2e 32 32 34 2d 31 2e 31 33 34 2c 30 2e 33 30 38 63 2d 30 2e 33 39 32 2c 30 2e 30 38 34 2d 30 2e 37 38 39 2c 30 2e 31 34 35 2d 31 2e 31 39 2c 30 2e 31 38 32 0a 09 09 73 2d 30 2e 37 37 39 2c 30 2e 30 35 37 2d 31 2e 31 33 34 2c 30 2e 30 35 37 63 2d 32 2e 32 30 33 2c 30 2d 33 2e 38 Data Ascii: 058-0.267c0.7-0.177,1.265-0.396,1.694-0.658c0.13,0.336,0.252,0.719,0.364,1.148s0.196,0.831,0.252,1.204c-0.28,0.149-0.602,0.285-0.966,0.406c-0.364,0.121-0.742,0.224-1.134,0.308c-0.392,0.084-0.789,0.145-1.19,0.182s-0.779,0.057-1.134,0.057c-2.203,0-3.8
2024-04-26 15:53:12 UTC	1248	IN	Data Raw: 33 31 2d 31 36 2e 33 32 39 2c 37 2e 37 33 34 63 2d 33 2e 38 30 34 2c 30 2e 30 39 31 2d 33 2e 38 39 36 2d 31 2e 37 35 32 2d 33 2e 38 31 31 2d 33 2e 35 34 37 63 30 2e 31 36 35 2d 33 2e 34 39 34 2c 39 2e 36 30 38 2d 31 36 2e 36 35 31 2c 31 32 2e 32 38 37 2d 32 30 2e 35 34 0a 09 09 63 32 2e 36 37 39 2d 33 2e 38 38 39 2c 31 34 2e 37 38 33 2d 32 32 2e 33 33 36 2c 31 34 2e 37 38 33 2d 32 32 2e 33 33 36 63 2d 33 2e 30 34 39 2c 31 2e 33 39 36 2d 31 34 2e 33 32 2c 38 2e 35 37 35 2d 32 31 2e 31 35 36 2c 36 2e 32 38 32 63 30 2c 30 2d 32 30 2e 37 36 36 2c 32 39 2e 36 39 35 2d 32 32 2e 32 36 35 2c 33 33 2e 39 30 33 0a 09 09 63 2d 32 2c 35 2e 36 31 37 2c 34 2e 31 35 36 2c 31 30 2e 30 39 37 2c 31 31 2e 33 36 33 2c 31 30 2e 31 36 39 63 31 30 2e 35 32 35 2c 30 2e 31 30 36 Data Ascii: 31-16.329,7.734c-3.804,0.091-3.896-1.752-3.811-3.547c0.165-3.494,9.608-16.651,12.287-20.54c2.679-3.889,14.783-22.336,14.783-22.336c-3.049,1.396-14.32,8.575-21.156,6.282c0,0-20.766,29.695-22.265,33.903c-2,5.617,4.156,10.097,11.363,10.169c10.525,0.106
2024-04-26 15:53:12 UTC	1277	IN	Data Raw: 30 2e 32 38 38 2d 35 2e 31 37 38 2c 35 2e 36 36 2d 31 34 2e 33 39 32 2c 39 2e 30 31 37 2d 31 38 2e 39 34 38 63 32 2e 36 32 34 2d 33 2e 35 36 31 2c 31 32 2e 35 36 39 2d 32 30 2e 33 31 38 2c 32 31 2e 31 30 36 2d 32 30 2e 35 30 32 0a 09 09 63 34 2e 37 39 36 2d 30 2e 31 30 34 2c 34 2e 36 30 35 2c 31 2e 39 36 38 2c 35 2e 34 36 38 2c 33 2e 37 32 38 43 32 32 37 2e 30 33 39 2c 34 37 2e 38 30 33 2c 32 30 38 2e 32 33 35 2c 37 35 2e 37 36 2c 32 30 37 2e 31 38 2c 37 37 2e 34 31 36 7a 22 2f 3e 0a 09 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 53 56 47 49 44 5f 31 5f 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 32 32 2e 38 38 30 39 22 20 79 31 3d 22 33 33 2e 34 33 34 36 22 20 78 32 3d 22 Data Ascii: 0.288-5.178,5.66-14.392,9.017-18.948c2.624-3.561,12.569-20.318,21.106-20.502c4.796-0.104,4.605,1.968,5.468,3.728C227.039,47.803,208.235,75.76,207.18,77.416z"/><linearGradient id="SVGID_1_" gradientUnits="userSpaceOnUse" x1="22.8809" y1="33.4346" x2="
2024-04-26 15:53:12 UTC	2625	IN	Data Raw: 3d 22 73 74 6f 70 2d 63 6f 6c 6f 72 3a 23 31 31 37 33 42 41 22 2f 3e 0a 09 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 53 56 47 49 44 5f 32 5f 29 22 20 64 3d 22 4d 31 38 2e 32 39 37 2c 31 32 2e 37 37 33 6c 2d 35 2e 35 35 39 2c 33 2e 33 32 35 63 2d 30 2e 34 36 35 2c 31 2e 33 35 36 2d 30 2e 37 39 39 2c 32 2e 37 37 38 2d 30 2e 39 38 35 2c 34 2e 32 35 34 6c 36 2e 37 31 33 2d 34 2e 32 39 39 0a 09 09 63 30 2e 31 38 33 2c 32 2e 33 31 37 2c 30 2e 35 30 36 2c 34 2e 35 39 37 2c 30 2e 39 33 37 2c 36 2e 38 33 39 6c 2d 37 2e 33 39 37 2c 34 2e 35 32 32 63 30 2e 33 30 32 2c 31 2e 34 38 33 2c 30 2e 37 36 33 2c 32 2e 38 39 37 2c 31 2e 33 34 39 2c 34 2e 32 33 37 6c 37 2e 30 34 32 2d 34 2e 33 39 31 0a 09 09 63 Data Ascii: ="stop-color:#1173BA"/></linearGradient><path fill="url(#SVGID_2_)" d="M18.297,12.773l-5.559,3.325c-0.465,1.356-0.799,2.778-0.985,4.254l6.713-4.299c0.183,2.317,0.506,4.597,0.937,6.839l-7.397,4.522c0.302,1.483,0.763,2.897,1.349,4.237l7.042-4.391c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49762	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:12 UTC	595	OUT	GET /_img/2022/fonts/NotoSans-Regular.woff HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://www.iana.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.iana.org/_css/2022/iana_website.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:12 UTC	1078	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 07:17:04 GMT Server: Apache Last-Modified: Tue, 05 Oct 2021 16:31:06 GMT Content-Length: 157504 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Fri, 26 Apr 2024 07:47:04 GMT Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 30968 Connection: close Content-Type: font/woff Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:12 UTC	5361	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 02 67 40 00 0f 00 00 00 04 7d d4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 01 38 00 00 01 a0 34 06 28 1b 47 50 4f 53 00 00 02 90 00 00 50 b2 00 00 a4 b6 87 fd a6 05 47 53 55 42 00 00 53 44 00 00 05 31 00 00 09 60 46 0c 8f 23 4f 53 2f 32 00 00 58 78 00 00 00 60 00 00 00 60 f8 c9 f3 ec 63 6d 61 70 00 00 58 d8 00 00 0c 72 00 00 0f b0 52 ed 6e c1 67 61 73 70 00 00 65 4c 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 65 58 00 01 3e f4 00 02 14 b4 c1 1d 2c e7 68 65 61 64 00 01 a4 4c 00 00 00 36 00 00 00 36 f8 be 09 8c 68 68 65 61 00 01 a4 84 00 00 00 21 00 00 00 24 0e af 0c 4f 68 6d 74 78 00 01 a4 a8 00 00 11 0b 00 00 25 be 3d ca 78 99 6b 65 72 6e 00 01 b5 b4 00 00 6d Data Ascii: wOFFg@}GDEFX84(GPOSPGSUBSD1`F#OS/2Xx``cmapXrRngaspeLglyfeX>,headL66hhea!$Ohmtx%=xkernm
2024-04-26 15:53:12 UTC	6385	IN	Data Raw: d8 44 a9 40 1d ab bf d4 81 34 ae 67 09 2d aa d0 be 3a 3e 35 db d0 f2 14 7c 4d 13 25 a7 85 76 66 2c 79 b5 9e bc 92 f4 6d b6 3c 9f 77 47 f3 ee 70 29 81 07 69 e2 4c 65 3c e7 58 6e 6c c8 20 ae 69 13 b5 66 3e f9 c3 d9 f9 8e 71 4d 39 92 c0 45 d2 47 68 8d 2f 53 3e 93 e4 cc 48 de 5d 65 3c 38 f9 1f 21 1d a1 54 24 49 ef 11 3a 38 93 74 5f ca ea 54 a3 3b 94 b4 99 c6 23 7b 9e 1a 25 fe 36 af 26 e8 10 3d a9 bf 52 ee 86 cc d8 ce 09 1d 58 c0 de 3f c1 f5 6d e0 fa d2 92 eb f1 9c cb 1a ce 65 1a 9f 9d c7 f2 35 a6 0e 65 a0 9e 63 3e c9 d6 ea 3d 9f 28 3d f6 64 c9 09 43 73 3c 87 28 0f f7 b0 97 43 c6 2f 0b 1d b6 44 42 72 07 c8 08 c3 16 c7 b6 47 a4 25 87 fa 18 32 f3 fd 99 94 84 ae 52 43 7f c6 31 8f a0 4f ff 23 7b 1f 71 7d 0e d7 11 fc 0f 36 4a 9d c0 60 a3 dd f4 11 13 38 bb 3a 29 09 Data Ascii: D@4g-:>5\|M%vf,ym<wGp)iLe<Xnl if>qM9EGh/S>H]e<8!T$I:8t_T;#{%6&=RX?me5ec>=(=dCs<(C/DBrG%2RC1O#{q}6J`8:)
2024-04-26 15:53:12 UTC	12770	IN	Data Raw: 29 34 18 77 a6 e6 ce c8 9d 9d 3b 37 77 41 ee e2 dc 65 b9 2b c1 c9 de b9 83 73 d7 84 97 e7 8c 10 09 90 b8 06 da 35 80 36 41 2c d0 ec dc 75 b9 1b 43 ad b9 9b 65 b4 a1 01 b0 61 27 73 b7 e6 ee c8 dd 15 8a e4 b6 e6 ee cb 3d 90 bb 03 e3 db 97 7b 18 7d 1c c5 9d 64 ee a9 dc 33 b9 e7 73 2f a2 8e 9b 7b 2d cf ca dd 95 17 46 89 2b 12 96 57 98 17 cb ab cc ab 0c 2d c8 ab 13 9b 91 d7 33 67 43 5e 43 5e bf bc 81 39 1b b0 be 1b 32 f6 e3 4c e8 4c de 10 5c c3 f3 46 05 57 84 f2 29 09 69 db 91 85 bc b1 79 13 b8 d6 90 12 83 bc c9 c1 d5 79 d3 04 79 33 f3 1a f3 46 e5 cd a3 96 0a 3c cb 91 b7 10 23 58 92 b7 fc 06 8d 5a 81 d9 09 28 2f 79 ab 04 79 af e4 35 ca fa e5 ad cf db 94 b6 27 79 4d a0 21 e3 79 db f2 9a 31 f2 dd 79 7b f2 f6 e7 1d 0c 45 f2 ec bc 63 79 27 30 de e3 79 a7 89 93 a1 Data Ascii: )4w;7wAe+s56A,uCea's={}d3s/{-F+W-3gC^C^92LL\FW)iyyy3F<#XZ(/yy5'yM!y1y{Ecy'0y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49763	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:12 UTC	592	OUT	GET /_img/2022/fonts/NotoSans-Bold.woff HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://www.iana.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.iana.org/_css/2022/iana_website.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:12 UTC	1078	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 09:57:31 GMT Server: Apache X-Content-Type-Options: nosniff Vary: Accept-Encoding Last-Modified: Tue, 05 Oct 2021 16:31:06 GMT Content-Length: 156596 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Fri, 26 Apr 2024 10:27:31 GMT Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 21341 Connection: close Content-Type: font/woff Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:12 UTC	253	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 02 63 b4 00 0f 00 00 00 04 83 80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 01 38 00 00 01 a0 35 0e 28 1b 47 50 4f 53 00 00 02 90 00 00 51 a7 00 00 a6 1e c9 c2 8d 0d 47 53 55 42 00 00 54 38 00 00 05 31 00 00 09 60 46 0c 8f 23 4f 53 2f 32 00 00 59 6c 00 00 00 60 00 00 00 60 f9 f5 f7 27 63 6d 61 70 00 00 59 cc 00 00 0c 72 00 00 0f b0 52 ed 6e c1 67 61 73 70 00 00 66 40 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 66 4c 00 01 3a bb 00 02 18 cc ce 7c 94 21 68 65 61 64 00 01 a1 08 00 00 00 36 00 00 00 36 f9 34 09 90 68 68 65 61 00 01 a1 40 00 00 00 21 00 00 00 24 0f 24 0d 37 68 6d 74 78 00 01 a1 64 00 00 10 c8 00 00 25 be a8 55 13 aa 6b 65 72 6e 00 01 b2 2c 00 Data Ascii: wOFFcGDEFX85(GPOSQGSUBT81`F#OS/2Yl``'cmapYrRngaspf@glyffL:\|!head664hhea@!$$7hmtxd%Ukern,
2024-04-26 15:53:12 UTC	10216	IN	Data Raw: 00 6d b0 00 01 00 02 5b a4 9e 6c 6c 6f 63 61 00 02 1f dc 00 00 17 0a 00 00 25 c4 09 ef c3 94 6d 61 78 70 00 02 36 e8 00 00 00 1d 00 00 00 20 09 cd 01 b3 6e 61 6d 65 00 02 37 08 00 00 03 4c 00 00 06 c0 39 7f da 9b 70 6f 73 74 00 02 3a 54 00 00 29 60 00 00 55 b8 3d e8 14 18 78 9c 1d d0 df 2b 43 61 18 07 f0 ef fb bc ef f3 7a 8f 5c b9 9a 2c 92 4d 84 64 ec 6c a6 28 37 98 22 db e4 67 59 9a 6b 65 d7 5c 98 a2 26 f3 e7 b8 36 7f 09 fb 13 a4 2c c5 77 eb ed 7c fb 9c e7 d4 39 df e7 c0 00 18 e2 f5 8a 0f 08 92 80 2c c1 c8 b2 64 21 12 4b 0c 2b 39 c9 71 92 97 02 bd 2a c7 f4 89 9c f2 e9 99 9c d3 55 a9 71 7e 29 4d fa 49 5a f4 8b bd 86 b1 75 7b 03 6b 6f dd 1b 8c 6b bb 36 ac 7b 77 9f 74 47 77 61 75 4f ef 60 b4 a1 0d fa de 6f c2 f8 2d 5f 81 f5 07 03 7f 30 01 01 b0 c1 84 07 fa Data Ascii: m[lloca%maxp6 name7L9post:T)`U=x+Caz\,Mdl(7"gYke\&6,w\|9,d!K+9q*Uq~)MIZu{kok6{wtGwauO`o-_0
2024-04-26 15:53:12 UTC	1277	IN	Data Raw: 5d f2 17 b9 73 4f 3d b3 14 58 01 ac 06 d6 ba cf 6c 70 64 5f e6 95 bf 09 d8 0a 6c cf 98 6f 8a cf 73 33 f8 30 a5 63 8e e9 18 68 af db 57 2b b0 07 d8 d7 c1 5b 96 1f 74 e6 98 d9 5e fe e1 dc 6b 63 ac 8c d8 2a 3f e1 f2 60 97 db 7e a6 2c cc ca 58 ef 13 6e 1b d3 dd 7c 81 53 4e 79 9b 72 9d fc 7a f1 c6 bb e5 ff a8 4f 38 ef cc eb 46 71 c7 8d f2 6b f4 3a 65 4b ba e6 ef 16 73 64 f8 d2 74 7e a3 d8 e3 bd e2 8e 54 5e e7 f2 3a 95 df 28 0e f9 47 e3 91 f7 8a 4b fe d9 f8 a4 c1 95 8f 54 de 35 d6 18 ed ca 4e 2a cf f4 79 d7 8b 5d 16 b8 fd a7 f4 4f e4 ad dd b1 5d f9 a7 ba f0 bb ce 9d f7 44 f7 19 d4 cf 87 1c f0 0d be 86 d4 f9 96 52 dc c9 71 b7 e7 9c 6f 39 67 5a ce 29 97 b3 ff cb 3c a3 72 ce bd 9c 13 29 f7 8c c1 39 27 fb 62 d7 93 30 67 bf 78 ed c9 93 73 42 e6 ec 20 9d 53 28 67 1f Data Ascii: ]sO=Xlpd_los30chW+[t^kc?`~,Xn\|SNyrzO8Fqk:eKsdt~T^:(GKT5Ny]O]DRqo9gZ)<r)9'b0gxsB S(g
2024-04-26 15:53:12 UTC	2554	IN	Data Raw: 67 ad ca 5a 05 6d 3f 9a b5 86 3d 41 5a b3 d6 67 6d 64 eb 22 13 fe ac 2d c2 c7 ac 6d a0 36 82 9e cc cb 1f dc 8b 6b 01 24 26 8e 51 ef cc da 1d 98 1c dc 8c fe f1 54 d6 01 ff 9a ac 43 59 47 b3 8e 67 25 03 e7 b3 ce 64 9d 43 f9 c5 ac cb 81 c1 d9 2a db 9f 9d 9b 1d c6 15 0b 0c cb 8e 07 7a 66 77 cb ee 19 98 9c dd 3b bb 1f ae 01 d9 83 b3 87 65 8f 80 d4 8a ae ce cc 6e 04 c6 66 4f c8 9e 9c 55 9f 55 9f 3d 2d 7b 66 f6 9c ec f9 fe 9d d9 8b b2 97 fa 8f 67 af 08 f4 ce 5e 9d bd 36 30 82 77 36 64 6f ca de 9a bd 3d bb 35 7b 4f f6 be e0 91 ec 83 fe a3 d9 87 b3 13 d9 27 30 f6 5c d8 23 b1 41 c3 68 13 c4 02 cd cf 8e 65 9f ca 9e 9f 7d 16 23 38 8f f5 5b 10 5c 90 6d 67 5f c9 31 02 f1 9c 60 4e 28 27 9a 53 16 18 86 bc 3a b8 2c a7 7b 4e 5d 4e 9f 9c fe 39 03 73 86 e4 34 e4 8c cc 19 9d Data Ascii: gZm?=AZgmd"-m6k$&QTCYGg%dC*zfw;enfOUU=-{fg^60w6do=5{O'0\#Ahe}#8[\mg_1`N('S:,{N]N9s4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49764	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:13 UTC	558	OUT	GET /_img/bookmark_icon.ico HTTP/1.1 Host: www.iana.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:13 UTC	1091	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 20:05:48 GMT Server: Apache Last-Modified: Sun, 18 Jul 2021 22:53:39 GMT Content-Length: 7406 Age: 72896 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Thu, 25 Apr 2024 20:35:48 GMT Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Content-Type: image/vnd.microsoft.icon Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:13 UTC	240	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 08 00 68 05 00 00 36 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 9e 05 00 00 30 30 00 00 01 00 08 00 a8 0e 00 00 46 0e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 77 00 00 50 8b 00 00 42 95 00 00 3e 98 00 00 45 9d 03 00 74 85 04 00 6a 9d 05 00 4b 9d 06 00 49 9d 07 00 95 66 0a 00 86 7a 0a 00 4d a3 0b 00 57 a2 0e 00 48 8e 11 00 50 a1 11 00 54 a9 12 00 b1 62 13 00 8d 77 13 00 75 92 13 00 a4 5c 14 00 85 82 14 00 9b 6c 15 00 69 96 16 00 96 74 17 00 a3 65 19 00 90 54 1b 00 58 a4 1b 00 5a a6 1f 00 7f 57 21 00 5d a9 23 00 99 5e 24 00 99 75 26 00 79 9c 26 00 61 aa 29 00 54 8a 2c 00 a6 55 2f 00 79 a5 Data Ascii: h6 00F( {wPB>EtjKIfzMWHPTbwu\liteTXZW!]#^$u&y&a)T,U/y
2024-04-26 15:53:13 UTC	6385	IN	Data Raw: 2f 00 65 62 30 00 97 3b 34 00 6a af 34 00 aa 62 36 00 50 62 3a 00 6e b1 3a 00 72 af 3b 00 a6 7d 40 00 a7 6c 42 00 a0 74 47 00 b2 7a 4c 00 7a b7 4c 00 8d ae 4d 00 75 4b 4e 00 bc 85 4e 00 69 61 4f 00 9e 46 51 00 63 7a 51 00 9f 85 55 00 83 bc 56 00 87 70 58 00 92 a3 58 00 a8 5b 5a 00 b6 78 5a 00 ab 6d 5f 00 ae 94 63 00 72 7e 69 00 91 c3 69 00 77 88 6a 00 b7 79 6c 00 b3 b8 73 00 be 72 79 00 9c ca 79 00 a7 c2 7b 00 b4 6f 7d 00 bd 82 87 00 91 89 87 00 aa ce 87 00 a9 d0 8a 00 c5 8d 8d 00 c3 7c 92 00 93 90 92 00 c4 92 92 00 ce b8 92 00 bf ca 93 00 be d1 94 00 9f 9e 9b 00 ca c4 9e 00 ba df 9e 00 cb 97 9f 00 ce a3 9f 00 d4 b5 a2 00 a8 a8 a4 00 bd db a5 00 c9 93 a6 00 b2 b2 b2 00 be be b9 00 dc c2 bd 00 ce e5 bd 00 dc b4 be 00 df d8 be 00 da c7 c0 00 d1 e8 c0 00 e3 Data Ascii: /eb0;4j4b6Pb:n:r;}@lBtGzLzLMuKNNiaOFQczQUVpXX[ZxZm_cr~iiwjylsryy{o}\|
2024-04-26 15:53:13 UTC	781	IN	Data Raw: bc f6 fd fd fd e6 d5 00 00 00 00 00 00 00 00 00 00 00 00 b0 0c 6c fd fd fd d2 02 3a 9e e7 fd fd fd fd b7 98 f9 fd fd f1 60 14 25 25 25 25 25 14 0c 6c d0 f9 f9 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ae 6c fd fd fd d2 1d 1d 06 51 ae ed fd fd fd f6 fd fd f9 e9 51 1d 25 25 25 25 25 25 25 0c 14 9e fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 f4 fd fd d2 1d 24 25 1d 06 5c bc f7 fd fd fd fd fd da 24 1d 25 25 25 25 25 25 25 25 60 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 fd fd d7 24 24 25 25 25 14 0c 6c cc fd fd fd fd e4 64 06 1d 25 25 25 25 25 25 98 ed 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd e0 3a 1d 25 25 25 25 25 0c 06 ae fa fd fd fd f0 ae 4c 06 24 25 25 64 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: l:`%%%%%llQQ%%%%%%%$%\$%%%%%%%%`$$%%%ld%%%%%%:%%%%%L$%%d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49765	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:13 UTC	366	OUT	GET /_img/2022/iana-logo-header.svg HTTP/1.1 Host: www.iana.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:13 UTC	1069	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:53:13 GMT Server: Apache X-Content-Type-Options: nosniff Vary: Accept-Encoding Last-Modified: Tue, 05 Oct 2021 16:31:06 GMT Content-Length: 32870 X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Fri, 26 Apr 2024 16:23:13 GMT Content-Type: image/svg+xml Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Connection: close Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:13 UTC	262	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 41 4e 41 5f 48 65 61 64 65 72 5f 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id="IANA_Header_Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink
2024-04-26 15:53:13 UTC	11016	IN	Data Raw: 78 22 0a 09 20 79 3d 22 30 70 78 22 20 77 69 64 74 68 3d 22 32 33 34 70 78 22 20 68 65 69 67 68 74 3d 22 37 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 36 38 20 31 34 34 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 34 36 38 20 31 34 34 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 3e 0a 3c 67 20 69 64 3d 22 54 65 78 74 5f 50 61 74 68 73 22 3e 0a 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 41 35 41 35 38 22 20 64 3d 22 4d 35 2e 31 32 39 2c 31 33 36 2e 34 38 33 76 2d 31 38 2e 38 37 32 68 32 2e 37 34 34 76 31 38 2e 38 37 32 48 35 2e 31 32 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 41 35 41 35 38 22 20 64 3d 22 4d 32 31 2e 39 32 39 2c 31 33 36 2e 34 38 33 76 2d 31 Data Ascii: x" y="0px" width="234px" height="72px" viewBox="0 0 468 144" enable-background="new 0 0 468 144" xml:space="preserve"><g id="Text_Paths"><path fill="#5A5A58" d="M5.129,136.483v-18.872h2.744v18.872H5.129z"/><path fill="#5A5A58" d="M21.929,136.483v-1
2024-04-26 15:53:13 UTC	10216	IN	Data Raw: 2e 35 31 33 2c 30 2e 31 38 37 2c 31 2e 31 36 32 2c 30 2e 32 38 2c 31 2e 39 34 36 2c 30 2e 32 38 0a 09 09 63 30 2e 36 37 32 2c 30 2c 31 2e 33 35 38 2d 30 2e 30 38 39 2c 32 2e 30 35 38 2d 30 2e 32 36 37 63 30 2e 37 2d 30 2e 31 37 37 2c 31 2e 32 36 35 2d 30 2e 33 39 36 2c 31 2e 36 39 34 2d 30 2e 36 35 38 63 30 2e 31 33 2c 30 2e 33 33 36 2c 30 2e 32 35 32 2c 30 2e 37 31 39 2c 30 2e 33 36 34 2c 31 2e 31 34 38 73 30 2e 31 39 36 2c 30 2e 38 33 31 2c 30 2e 32 35 32 2c 31 2e 32 30 34 0a 09 09 63 2d 30 2e 32 38 2c 30 2e 31 34 39 2d 30 2e 36 30 32 2c 30 2e 32 38 35 2d 30 2e 39 36 36 2c 30 2e 34 30 36 63 2d 30 2e 33 36 34 2c 30 2e 31 32 31 2d 30 2e 37 34 32 2c 30 2e 32 32 34 2d 31 2e 31 33 34 2c 30 2e 33 30 38 63 2d 30 2e 33 39 32 2c 30 2e 30 38 34 2d 30 2e 37 38 39 Data Ascii: .513,0.187,1.162,0.28,1.946,0.28c0.672,0,1.358-0.089,2.058-0.267c0.7-0.177,1.265-0.396,1.694-0.658c0.13,0.336,0.252,0.719,0.364,1.148s0.196,0.831,0.252,1.204c-0.28,0.149-0.602,0.285-0.966,0.406c-0.364,0.121-0.742,0.224-1.134,0.308c-0.392,0.084-0.789
2024-04-26 15:53:13 UTC	6385	IN	Data Raw: 0a 09 09 43 34 32 31 2e 37 37 32 2c 31 32 36 2e 36 32 33 2c 34 32 31 2e 39 33 32 2c 31 32 37 2e 37 39 34 2c 34 32 31 2e 39 33 32 2c 31 32 39 2e 31 37 36 7a 20 4d 34 31 39 2e 32 34 34 2c 31 32 39 2e 31 37 36 63 30 2d 31 2e 30 30 39 2d 30 2e 30 38 34 2d 31 2e 38 35 37 2d 30 2e 32 35 33 2d 32 2e 35 34 39 0a 09 09 63 2d 30 2e 31 36 38 2d 30 2e 36 38 39 2d 30 2e 34 30 35 2d 31 2e 32 34 35 2d 30 2e 37 31 34 2d 31 2e 36 36 36 63 2d 30 2e 33 30 38 2d 30 2e 34 32 2d 30 2e 36 38 32 2d 30 2e 37 32 33 2d 31 2e 31 32 2d 30 2e 39 30 39 73 2d 30 2e 39 33 38 2d 30 2e 32 38 2d 31 2e 34 39 37 2d 30 2e 32 38 0a 09 09 63 2d 30 2e 35 32 33 2c 30 2d 31 2e 30 30 34 2c 30 2e 30 38 34 2d 31 2e 34 34 32 2c 30 2e 32 35 32 73 2d 30 2e 38 31 37 2c 30 2e 34 36 32 2d 31 2e 31 33 34 2c Data Ascii: C421.772,126.623,421.932,127.794,421.932,129.176z M419.244,129.176c0-1.009-0.084-1.857-0.253-2.549c-0.168-0.689-0.405-1.245-0.714-1.666c-0.308-0.42-0.682-0.723-1.12-0.909s-0.938-0.28-1.497-0.28c-0.523,0-1.004,0.084-1.442,0.252s-0.817,0.462-1.134,
2024-04-26 15:53:13 UTC	1277	IN	Data Raw: 32 31 2e 31 35 36 2c 36 2e 32 38 32 63 30 2c 30 2d 32 30 2e 37 36 36 2c 32 39 2e 36 39 35 2d 32 32 2e 32 36 35 2c 33 33 2e 39 30 33 0a 09 09 63 2d 32 2c 35 2e 36 31 37 2c 34 2e 31 35 36 2c 31 30 2e 30 39 37 2c 31 31 2e 33 36 33 2c 31 30 2e 31 36 39 63 31 30 2e 35 32 35 2c 30 2e 31 30 36 2c 32 31 2e 33 34 2d 35 2e 36 38 33 2c 32 34 2e 38 35 32 2d 38 2e 32 37 34 63 30 2c 30 2c 30 2c 38 2e 30 37 36 2c 31 32 2e 35 36 34 2c 38 2e 31 37 36 0a 09 09 63 31 32 2e 35 36 34 2c 30 2e 30 39 39 2c 31 36 2e 31 36 38 2d 35 2e 30 38 35 2c 31 38 2e 30 31 35 2d 35 2e 39 38 33 63 30 2c 30 2c 32 2e 36 37 39 2c 36 2e 32 38 33 2c 31 31 2e 36 34 2c 36 2e 31 38 34 63 38 2e 39 36 31 2d 30 2e 31 30 32 2c 31 37 2e 37 33 37 2d 34 2e 36 38 37 2c 32 31 2e 34 33 33 2d 37 2e 31 38 0a 09 Data Ascii: 21.156,6.282c0,0-20.766,29.695-22.265,33.903c-2,5.617,4.156,10.097,11.363,10.169c10.525,0.106,21.34-5.683,24.852-8.274c0,0,0,8.076,12.564,8.176c12.564,0.099,16.168-5.085,18.015-5.983c0,0,2.679,6.283,11.64,6.184c8.961-0.102,17.737-4.687,21.433-7.18
2024-04-26 15:53:13 UTC	3714	IN	Data Raw: 44 5f 31 5f 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 32 32 2e 38 38 30 39 22 20 79 31 3d 22 33 33 2e 34 33 34 36 22 20 78 32 3d 22 33 32 2e 31 33 31 22 20 79 32 3d 22 32 30 2e 34 31 36 22 3e 0a 09 09 3c 73 74 6f 70 20 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 73 74 6f 70 2d 63 6f 6c 6f 72 3a 23 30 36 37 33 42 41 22 2f 3e 0a 09 09 3c 73 74 6f 70 20 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 79 6c 65 3d 22 73 74 6f 70 2d 63 6f 6c 6f 72 3a 23 31 31 41 31 34 45 22 2f 3e 0a 09 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 53 56 47 49 44 5f 31 5f 29 22 20 64 3d 22 4d 34 35 2e 34 38 38 2c 31 31 2e 36 32 31 6c 2d 31 30 Data Ascii: D_1_" gradientUnits="userSpaceOnUse" x1="22.8809" y1="33.4346" x2="32.131" y2="20.416"><stop offset="0" style="stop-color:#0673BA"/><stop offset="1" style="stop-color:#11A14E"/></linearGradient><path fill="url(#SVGID_1_)" d="M45.488,11.621l-10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49766	192.0.33.8	443	6468	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:53:15 UTC	358	OUT	GET /_img/bookmark_icon.ico HTTP/1.1 Host: www.iana.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:53:15 UTC	1091	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 21:27:43 GMT Server: Apache Last-Modified: Sun, 18 Jul 2021 22:53:39 GMT Content-Length: 7406 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin Cache-Control: public, s-maxage=86402, max-age=604814 Expires: Thu, 25 Apr 2024 21:57:43 GMT Content-Security-Policy: upgrade-insecure-requests; default-src 'self' https://.iana.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://cse.google.com https://clients1.google.com; style-src 'self' 'unsafe-inline' https://www.google.com; child-src 'self' https://www.youtube.com https://clients1.google.com https://cse.google.com https://www.google.com/; img-src 'self' https://data.iana.org https://www.iana.org https://www.google.com https://www.googleapis.com https://clients1.google.com https://.gstatic.com; Age: 66332 Connection: close Content-Type: image/vnd.microsoft.icon Strict-Transport-Security: max-age=48211200; preload
2024-04-26 15:53:15 UTC	1517	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 08 00 68 05 00 00 36 00 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 9e 05 00 00 30 30 00 00 01 00 08 00 a8 0e 00 00 46 0e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7b 77 00 00 50 8b 00 00 42 95 00 00 3e 98 00 00 45 9d 03 00 74 85 04 00 6a 9d 05 00 4b 9d 06 00 49 9d 07 00 95 66 0a 00 86 7a 0a 00 4d a3 0b 00 57 a2 0e 00 48 8e 11 00 50 a1 11 00 54 a9 12 00 b1 62 13 00 8d 77 13 00 75 92 13 00 a4 5c 14 00 85 82 14 00 9b 6c 15 00 69 96 16 00 96 74 17 00 a3 65 19 00 90 54 1b 00 58 a4 1b 00 5a a6 1f 00 7f 57 21 00 5d a9 23 00 99 5e 24 00 99 75 26 00 79 9c 26 00 61 aa 29 00 54 8a 2c 00 a6 55 2f 00 79 a5 2f 00 65 62 30 00 97 3b 34 00 6a af 34 00 aa Data Ascii: h6 00F( {wPB>EtjKIfzMWHPTbwu\liteTXZW!]#^$u&y&a)T,U/y/eb0;4j4
2024-04-26 15:53:15 UTC	5108	IN	Data Raw: 00 4d 9f 0c 00 90 6d 0d 00 84 7f 0d 00 7c 85 0e 00 4f a0 0f 00 5a 9b 10 00 50 a1 11 00 8d 78 12 00 53 a7 12 00 56 aa 12 00 a7 5d 13 00 4f 9a 14 00 a9 63 16 00 9d 6b 17 00 94 72 18 00 6d 9b 18 00 54 a3 18 00 49 87 19 00 94 5a 1a 00 58 a5 1c 00 77 99 1e 00 a7 58 20 00 4e 79 23 00 88 90 28 00 67 a8 2a 00 a6 67 2b 00 9d 48 2e 00 97 6f 2f 00 80 9c 2f 00 78 55 30 00 68 ae 32 00 55 83 33 00 9f 7f 37 00 99 38 39 00 51 67 39 00 75 ac 39 00 8c a8 3c 00 71 b3 3d 00 5e 48 42 00 98 8e 42 00 a2 51 49 00 9d 46 4a 00 a8 8d 4c 00 7d b9 4e 00 57 55 4f 00 ac 6c 50 00 79 51 51 00 88 63 52 00 9a b5 58 00 a7 59 5f 00 8a c0 60 00 c3 9a 69 00 6e 6c 6a 00 af 62 6b 00 b8 7d 6f 00 96 c7 6f 00 b1 6a 70 00 af 68 72 00 ab b9 72 00 b4 6e 73 00 b5 8f 74 00 8d 8a 76 00 b6 74 7c 00 7d 7d Data Ascii: Mm\|OZPxSV]OckrmTIZXwX Ny#(g*g+H.o//xU0h2U3789Qg9u9<q=^HBBQIFJL}NWUOlPyQQcRXY_`inljbk}oojphrrnstvt\|}}
2024-04-26 15:53:15 UTC	781	IN	Data Raw: bc f6 fd fd fd e6 d5 00 00 00 00 00 00 00 00 00 00 00 00 b0 0c 6c fd fd fd d2 02 3a 9e e7 fd fd fd fd b7 98 f9 fd fd f1 60 14 25 25 25 25 25 14 0c 6c d0 f9 f9 e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ae 6c fd fd fd d2 1d 1d 06 51 ae ed fd fd fd f6 fd fd f9 e9 51 1d 25 25 25 25 25 25 25 0c 14 9e fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 f4 fd fd d2 1d 24 25 1d 06 5c bc f7 fd fd fd fd fd da 24 1d 25 25 25 25 25 25 25 25 60 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f7 fd fd d7 24 24 25 25 25 14 0c 6c cc fd fd fd fd e4 64 06 1d 25 25 25 25 25 25 98 ed 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd e0 3a 1d 25 25 25 25 25 0c 06 ae fa fd fd fd f0 ae 4c 06 24 25 25 64 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: l:`%%%%%llQQ%%%%%%%$%\$%%%%%%%%`$$%%%ld%%%%%%:%%%%%L$%%d

Target ID:	0
Start time:	17:51:56
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:52:02
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,10201416782276459292,16793361872005347098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:52:07
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cdp1.tracking.e360.salesforce.com/click?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.i-tkK1Lnys-MM487ot1MrSYQb6ExLgZNRQbgsH8B2K0"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94