Edit tour

Windows Analysis Report
https://start.scholarsapply.org/

Overview

General Information

Sample URL:	https://start.scholarsapply.org/
Analysis ID:	1635595
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish54

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2304,i,12025000276065122419,6215012790100505028,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2336 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://start.scholarsapply.org/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.18..script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.9..script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.1.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
3.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true

Joe Sandbox AI: Score: 9 Reasons: The brand 'Scholarship America' is a known organization that provides scholarships and educational support., The legitimate domain for Scholarship America is 'scholarshipamerica.org'., The URL 'ciamlogin.com' does not match the legitimate domain of Scholarship America., The URL contains a UUID-like subdomain 'a6691cd0-2aca-4f5d-b954-fae129580e64', which is unusual and suspicious., The domain 'ciamlogin.com' does not have any known association with Scholarship America., The presence of a UUID-like subdomain and a domain that does not match the known brand's domain are common phishing indicators. DOM: 3.4.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 1.18..script.csv, type: HTML
Source: Yara match	File source: 1.9..script.csv, type: HTML
Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: 3.2.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 3.3.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.67.d.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: ... This script demonstrates high-risk behaviors, including dynamic code execution through the use of the `Function` constructor and the ability to modify the `sRandomBlob` property, which could potentially be used for data exfiltration or other malicious purposes. The script is also heavily obfuscated, making it difficult to analyze and understand its true intent. These factors contribute to a high-risk assessment.

Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query	HTTP Parser: Number of links: 0
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://start.scholarsapply.org/	HTTP Parser: Title: Login/Register does not match URL
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query	HTTP Parser: Title: Redirecting does not match URL
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: Form action: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query	HTTP Parser: No favicon
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No favicon
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No favicon
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No favicon

Source: https://start.scholarsapply.org/	HTTP Parser: No <meta name="author".. found
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query	HTTP Parser: No <meta name="author".. found
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://start.scholarsapply.org/	HTTP Parser: No <meta name="copyright".. found
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query	HTTP Parser: No <meta name="copyright".. found
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: start.scholarsapply.org to https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3a%2f%2fstart.scholarsapply.org%2foauth.php%3faction%3dnew-student-result&scope=openid+profile+email&response_mode=query

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.206.67
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/unicorn.css?mod=1738585068 HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AWSALB=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; AWSALBCORS=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; PHPSESSID=ok7bc3hcjjk7hea56hgbievuum
Source: global traffic	HTTP traffic detected: GET /css/fapi.css?mod=1738585068 HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AWSALB=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; AWSALBCORS=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; PHPSESSID=ok7bc3hcjjk7hea56hgbievuum
Source: global traffic	HTTP traffic detected: GET /images/sa-logo-secondary-reverse.png HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AWSALB=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; AWSALBCORS=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; PHPSESSID=ok7bc3hcjjk7hea56hgbievuum
Source: global traffic	HTTP traffic detected: GET /jquery-3.7.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://start.scholarsapply.orgsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.13.2/jquery-ui.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://start.scholarsapply.orgsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/sa-logo-primary-reverse.png HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=1atDUztlTZFFaXMlKMIgB7+tInEMrxt7irRspJkdVAuZHyxGu6BZ0LI+z08/5zmo7jg6KJZWIgS0OTeEKsAI3Ley/yrnmyifPzB3RwCvbl2oqnEyzq7thy4mpwyh; AWSALBCORS=1atDUztlTZFFaXMlKMIgB7+tInEMrxt7irRspJkdVAuZHyxGu6BZ0LI+z08/5zmo7jg6KJZWIgS0OTeEKsAI3Ley/yrnmyifPzB3RwCvbl2oqnEyzq7thy4mpwyh
Source: global traffic	HTTP traffic detected: GET /js/framework.js?mod=1738585068 HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy; AWSALBCORS=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy
Source: global traffic	HTTP traffic detected: GET /js/rating.js?mod=1738585068 HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy; AWSALBCORS=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy
Source: global traffic	HTTP traffic detected: GET /js/register.js?mod=1738585068 HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy; AWSALBCORS=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy
Source: global traffic	HTTP traffic detected: GET /images/sa-logo-secondary-reverse.png HTTP/1.1Host: start.scholarsapply.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=Mp0HKuNR6o6igndrg8JIlCNt3rqe9MzxDSd4B7hSZ8u1q1zHV+QWb0ARerhmot1RdpG/lYbgZdvjEx0EEcuZlqdNx73Si+nOvt8pcWlo9V2rLkup5quzFe8Tw2hH; AWSALBCORS=Mp0HKuNR6o6igndrg8JIlCNt3rqe9MzxDSd4B7hSZ8u1q1zHV+QWb0ARerhmot1RdpG/lYbgZdvjEx0EEcuZlqdNx73Si+nOvt8pcWlo9V2rLkup5quzFe8Tw2hH
Source: global traffic	HTTP traffic detected: GET /images/sa-logo-primary-reverse.png HTTP/1.1Host: start.scholarsapply.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa; AWSALBCORS=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa
Source: global traffic	HTTP traffic detected: GET /ui/1.13.2/themes/smoothness/jquery-ui.css HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/jquery-ui-1.11.icon-font.min.css?mod=1738585068 HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa; AWSALBCORS=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa
Source: global traffic	HTTP traffic detected: GET /css/font/jquery-ui.woff2?juif-bac781 HTTP/1.1Host: start.scholarsapply.orgConnection: keep-aliveOrigin: https://start.scholarsapply.orgsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://start.scholarsapply.org/css/jquery-ui-1.11.icon-font.min.css?mod=1738585068Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; _ga=GA1.1.425324139.1741721674; _ga_3R63DZRM89=GS1.1.1741721673.1.0.1741721673.0.0.0; AWSALB=2YuCdMPZBydjkImjgBYz+VtGQ8fnVDaz/O5nUlAuGlQGicRY8nU804q4vLT9iR436s9gOFfgbuuCDtihBUjyAKiC6+qfBquttqYmNZkjWJ4rfhTQOKTWj2nJFIMN; AWSALBCORS=2YuCdMPZBydjkImjgBYz+VtGQ8fnVDaz/O5nUlAuGlQGicRY8nU804q4vLT9iR436s9gOFfgbuuCDtihBUjyAKiC6+qfBquttqYmNZkjWJ4rfhTQOKTWj2nJFIMN
Source: global traffic	HTTP traffic detected: GET /images/site-icons/manifest.json HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/site-icons/favicon-32x32.png HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; _ga=GA1.1.425324139.1741721674; _ga_3R63DZRM89=GS1.1.1741721673.1.0.1741721673.0.0.0; AWSALB=BUbYktuFw9upoTI2a61CgoS4mpeFy+VOtleGcUt3kAJ0US3HXdKFa74qNq0IIFEne9hkOx4beGoImr6302bELGKpPM3t5aOGmcOdLwwuV+VItwzfUCmeZykIupcq; AWSALBCORS=BUbYktuFw9upoTI2a61CgoS4mpeFy+VOtleGcUt3kAJ0US3HXdKFa74qNq0IIFEne9hkOx4beGoImr6302bELGKpPM3t5aOGmcOdLwwuV+VItwzfUCmeZykIupcq
Source: global traffic	HTTP traffic detected: GET /images/site-icons/favicon-32x32.png HTTP/1.1Host: start.scholarsapply.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; _ga=GA1.1.425324139.1741721674; _ga_3R63DZRM89=GS1.1.1741721673.1.0.1741721673.0.0.0; AWSALB=+nwv/lSA9Ku2svg+DzvNutto/rnyNaV9KOkUdH4CcdUckyC7y1a3+0+E875YiQPEnon3MINhQxFbt59oAo1alRoE0b0zPeDPHEgtO09FifBJH5+6yaP/ZtCKw6cP; AWSALBCORS=+nwv/lSA9Ku2svg+DzvNutto/rnyNaV9KOkUdH4CcdUckyC7y1a3+0+E875YiQPEnon3MINhQxFbt59oAo1alRoE0b0zPeDPHEgtO09FifBJH5+6yaP/ZtCKw6cP
Source: global traffic	HTTP traffic detected: GET /oauth.php?action=new-student HTTP/1.1Host: start.scholarsapply.orgConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; _ga=GA1.1.425324139.1741721674; _ga_3R63DZRM89=GS1.1.1741721673.1.0.1741721673.0.0.0; AWSALB=4rOaBR7Bb5dnBILVmfyJTOvrjB9uxAIF7S1W9TnTLHi4i65m0ImnOiNQXpR5QzEbu7oEh1lMij5dfPyO+I2l2HxzM3QMSqx75K1FYCiPFHHNjS+HcmMV9jDxc1nF; AWSALBCORS=4rOaBR7Bb5dnBILVmfyJTOvrjB9uxAIF7S1W9TnTLHi4i65m0ImnOiNQXpR5QzEbu7oEh1lMij5dfPyO+I2l2HxzM3QMSqx75K1FYCiPFHHNjS+HcmMV9jDxc1nF
Source: global traffic	HTTP traffic detected: GET /a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query HTTP/1.1Host: a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://start.scholarsapply.org/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true HTTP/1.1Host: a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=queryAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: esctx-yNUkyAouo2Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQEauAVxKwixPsJYX7kXvth8-L5KsBrXtc7MjXDxhcTxma3x8tj65qvEEqlWNdFmNPgfPtBmpXxt_r_H-OT3FT7wsEVzWogZdyMHg5WIAyW5qN23Wpy59an4vJr-KjOMPwVIEEE7B2LbWcXd9N6dZEPnCAA; fpc=Atht1rEn0bdEsmB9MucjNhk; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEG3NF5ex76vR3Z8SadSrVPaA1XqxYpy-NQAE1UiPZ__WfswusczpvT1hCbyBCTCO-swixKh1-bXQeMVZ97SVgOA06Jv2N1yVq660LYzKc0ZgOLU6fyTFM1EcoXSxOEyovPOzgdbdMcmdexHNCe91hVyImoOS-GBm0LyI97swmoGMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=queryAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: esctx-yNUkyAouo2Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQEauAVxKwixPsJYX7kXvth8-L5KsBrXtc7MjXDxhcTxma3x8tj65qvEEqlWNdFmNPgfPtBmpXxt_r_H-OT3FT7wsEVzWogZdyMHg5WIAyW5qN23Wpy59an4vJr-KjOMPwVIEEE7B2LbWcXd9N6dZEPnCAA; fpc=Atht1rEn0bdEsmB9MucjNhk; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEG3NF5ex76vR3Z8SadSrVPaA1XqxYpy-NQAE1UiPZ__WfswusczpvT1hCbyBCTCO-swixKh1-bXQeMVZ97SVgOA06Jv2N1yVq660LYzKc0ZgOLU6fyTFM1EcoXSxOEyovPOzgdbdMcmdexHNCe91hVyImoOS-GBm0LyI97swmoGMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/attributecollection?ts=638762546964342077 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/customcss?ts=638720724634855146 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/headerlogo?ts=638719783880500358 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/bannerlogo?ts=638720724440186192 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_101.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Kk:function(){e=sb()},Ld:function(){d()}}};var cc=wa(["data-gtm-yt-inspected-"]),tG=["www.youtube.com","www.youtube-nocookie.com"],uG,vG=!1; equals www.youtube.com (Youtube)
Source: chromecache_101.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=fD(a,c,e);R(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return R(122),!0;if(d&&f){for(var m=Db(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},iD=function(){var a=[],b=function(c){return gb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_101.2.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Qh:f,Oh:g,Ph:k,wi:m,xi:n,ef:p,Qb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var u=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){u&&u();d()};E(function(){for(var v=A.getElementsByTagName("script"),t=v.length,w=0;w<t;w++){var x=v[w].getAttribute("src");if(EG(x,"iframe_api")\|\|EG(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!vG&&CG(y[C],q.ef))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_101.2.dr	String found in binary or memory: var GF=function(a,b,c,d,e){var f=DC("fsl",c?"nv.mwt":"mwt",0),g;g=c?DC("fsl","nv.ids",[]):DC("fsl","ids",[]);if(!g.length)return!0;var k=IC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);R(121);if(m==="https://www.facebook.com/tr/")return R(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!qB(k,sB(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: start.scholarsapply.org
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauthimages.net
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /api/report?catId=GW+estsfd+ams2 HTTP/1.1Host: identity.nel.measure.office.netConnection: keep-aliveContent-Length: 755Content-Type: application/reports+jsonOrigin: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 11 Mar 2025 19:34:42 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 199Connection: closeSet-Cookie: AWSALB=6TjyPd52NCwrff/s9EL20bgE/Fx8k8JYpG9uQ+bCDpSQgOT8D69+q6tGUT4Vjj547E5QaBXbwdUMeIK/K/arC+mVOegtkIdxoEMFI0EJCx+WePXv7xKWAcLbLZpD; Expires=Tue, 18 Mar 2025 19:34:42 GMT; Path=/Set-Cookie: AWSALBCORS=6TjyPd52NCwrff/s9EL20bgE/Fx8k8JYpG9uQ+bCDpSQgOT8D69+q6tGUT4Vjj547E5QaBXbwdUMeIK/K/arC+mVOegtkIdxoEMFI0EJCx+WePXv7xKWAcLbLZpD; Expires=Tue, 18 Mar 2025 19:34:42 GMT; Path=/; SameSite=None; SecureServer: ApacheStrict-Transport-Security: max-age=15768000X-Frame-Options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyX-Content-Type-Options: nosniffP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 5b7eb084-a288-43f7-a618-e99892840000x-ms-ests-server: 2.1.20203.6 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.PReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-KiJruKLgu59XSN6wFFJjTQ' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-AllX-XSS-Protection: 0Date: Tue, 11 Mar 2025 19:35:12 GMTConnection: closeContent-Length: 0

Source: chromecache_114.2.dr	String found in binary or memory: http://colorschemedesigner.com/csd-3.5/#3L21Tw0w0w0w0
Source: chromecache_83.2.dr, chromecache_115.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_83.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_116.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_101.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_101.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_116.2.dr	String found in binary or memory: https://creativecommons.org/licenses/by-sa/3.0/
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9C1kiK-u.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9C5kiK-u.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9C9kiK-u.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CBkiK-u.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CFkiK-u.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CdkiK-u.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CxkiK-u.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10UxCF8jA.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10VxCF8jA.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10WxCF8jA.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10XxCF8jA.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10axCF8jA.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10bxCF8jA.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10dxCF8jA.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_90.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://modernizr.com/download/?-setclasses
Source: chromecache_101.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_101.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_101.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_101.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_101.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_101.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_101.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_101.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_101.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_101.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_101.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_101.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown

HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1628_191396935

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1628_191396935

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@22/69@26/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2304,i,12025000276065122419,6215012790100505028,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2336 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://start.scholarsapply.org/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2304,i,12025000276065122419,6215012790100505028,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2336 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://start.scholarsapply.org/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://colorschemedesigner.com/csd-3.5/#3L21Tw0w0w0w0	0%	Avira URL Cloud	safe
https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/favicon.ico	100%	Avira URL Cloud	phishing
https://modernizr.com/download/?-setclasses	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
start.scholarsapply.org	3.140.204.200	true	false	high
e329293.dscd.akamaiedge.net	2.22.242.216	true	false	high
code.jquery.com	151.101.130.137	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.180.67	true	false	high
s-part-0014.t-0009.fb-t-msedge.net	13.107.253.42	true	false	high
www.google.com	142.250.186.132	true	false	high
www.tm.a.prd.aadg.akadns.net	20.190.160.66	true	false	high
a1894.dscb.akamai.net	72.247.154.153	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
aadcdn.msftauthimages.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://start.scholarsapply.org/oauth.php?action=new-student	false		high
https://start.scholarsapply.org/images/site-icons/manifest.json	false		high
https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2	false		high
https://start.scholarsapply.org/js/framework.js?mod=1738585068	false		high
https://start.scholarsapply.org/css/fapi.css?mod=1738585068	false		high
https://start.scholarsapply.org/js/rating.js?mod=1738585068	false		high
https://aadcdn.msftauthimages.net/dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/customcss?ts=638720724634855146	false		high
https://start.scholarsapply.org/css/unicorn.css?mod=1738585068	false		high
https://start.scholarsapply.org/css/font/jquery-ui.woff2?juif-bac781	false		high
https://aadcdn.msftauthimages.net/dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/headerlogo?ts=638719783880500358	false		high
https://code.jquery.com/jquery-3.7.1.min.js	false		high
https://start.scholarsapply.org/js/register.js?mod=1738585068	false		high
https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true	true		unknown
https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query	false		unknown
https://start.scholarsapply.org/images/sa-logo-primary-reverse.png	false		high
https://aadcdn.msftauthimages.net/dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/attributecollection?ts=638762546964342077	false		high
https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://start.scholarsapply.org/images/site-icons/favicon-32x32.png	false		high
https://start.scholarsapply.org/images/sa-logo-secondary-reverse.png	false		high
https://code.jquery.com/ui/1.13.2/jquery-ui.min.js	false		high
https://start.scholarsapply.org/	false		high
https://code.jquery.com/ui/1.13.2/themes/smoothness/jquery-ui.css	false		high
https://aadcdn.msftauthimages.net/dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/bannerlogo?ts=638720724440186192	false		high
https://start.scholarsapply.org/css/jquery-ui-1.11.icon-font.min.css?mod=1738585068	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_101.2.dr	false		high
http://jqueryui.com	chromecache_83.2.dr, chromecache_115.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_101.2.dr	false		high
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	chromecache_83.2.dr	false		high
https://www.google.com	chromecache_101.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_101.2.dr	false		high
http://colorschemedesigner.com/csd-3.5/#3L21Tw0w0w0w0	chromecache_114.2.dr	false	Avira URL Cloud: safe	unknown
https://creativecommons.org/licenses/by-sa/3.0/	chromecache_116.2.dr	false		high
https://modernizr.com/download/?-setclasses	chromecache_86.2.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_101.2.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_101.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_101.2.dr	false		high
http://www.gnu.org/licenses/gpl.html	chromecache_116.2.dr	false		high
https://adservice.google.com/pagead/regclk?	chromecache_101.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.17.33.17	unknown	United States	16509	AMAZON-02US	false
2.22.242.216	e329293.dscd.akamaiedge.net	European Union	20940	AKAMAI-ASN1EU	false
3.140.204.200	start.scholarsapply.org	United States	16509	AMAZON-02US	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
20.190.160.66	www.tm.a.prd.aadg.akadns.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.253.42	s-part-0014.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
72.247.154.153	a1894.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1635595
Start date and time:	2025-03-11 20:33:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://start.scholarsapply.org/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@22/69@26/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.142, 142.250.185.131, 64.233.166.84, 142.250.186.142, 172.217.18.14, 216.58.206.78, 142.250.185.72, 142.250.185.202, 142.250.185.174, 142.250.184.227, 142.250.181.238, 142.250.184.238, 142.250.185.238, 172.217.16.206, 20.190.159.23, 20.190.159.64, 40.126.31.130, 20.190.159.128, 20.190.159.75, 40.126.31.69, 40.126.31.73, 40.126.31.71, 172.217.18.3, 142.250.185.206, 142.250.186.67, 216.58.206.42, 142.250.185.74, 172.217.23.106, 142.250.186.74, 142.250.185.234, 142.250.74.202, 172.217.16.202, 142.250.186.106, 142.250.185.106, 142.250.181.234, 142.250.185.138, 172.217.18.10, 142.250.185.170, 142.250.186.138, 172.217.18.106, 2.16.185.191, 20.12.23.50, 13.107.246.60, 4.245.163.56
Excluded domains from analysis (whitelisted): a-ring-fallback.msedge.net, slscr.update.microsoft.com, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, clients2.google.com, redirector.gvt1.com, www.googletagmanager.com, login.live.com, update.googleapis.com, www.google-analytics.com, fonts.googleapis.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://start.scholarsapply.org/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.877764412002626
Encrypted:	false
SSDEEP:	3:lXqiczXzXWKLmwkMKEASaM7RpTXR:lXqiczXzdLmiASrVdB
MD5:	DF85F8C4D3A40AE00721C95053F69688
SHA1:	2BF895DC15EED7149FAD3C42BBDCF032BD25E914
SHA-256:	9C7E32A334028724AA0258FA4296D757F0DF399071CD4C59DF5225E21BBBDD43
SHA-512:	34569BA17189D4FB19134673330C2D84EFC61E750D2DC44142739C2D5DA2457982BCBEE886FAEC836CCA705CF45B67F9D493A7C8D7AC36ADA57DDC9F666B2245
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCdwiLC0LFogJEgUN0VtRUhIFDVd69_0h5lhs5fsyTkg=?alt=proto
Preview:	CjMKCw3RW1FSGgQIVhgCCiQNV3r3/RoECEsYAioXCApSEwoJIUAkIyotLl8/EAEY/////w8=

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	downloaded
Size (bytes):	363097
Entropy (8bit):	5.601331484374689
Encrypted:	false
SSDEEP:	6144:+4EWomWxk7ybEMMDcB5SyPnV1oDYX7GRev3Z:HELmtubEi7PJG8p
MD5:	630A7A743853D182E347821F2B89FDE0
SHA1:	C3A5773DA3FF8F92BC3B49A3A0AFAA630C336654
SHA-256:	C56C37A277EF39A73731C566EC7C10330D660737A3F64EC9035E49829EE6354E
SHA-512:	848A6323189F48852F74FA31023B7D59CE0BC25A3834FC9A7340E62443513476189B5E6E4D1F37710E7CD901202F9EE1505FFEB647810C60E4C1AB51C07BA85E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-3R63DZRM89
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 205, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17138
Entropy (8bit):	7.949267790869593
Encrypted:	false
SSDEEP:	384:4nod3TnL0zouXIhkvGpyG3iV16DalAvdRIOJq:4oBLmmkupyein6DalAvdlc
MD5:	21EA0DE6C9C52C043256F02405F007D3
SHA1:	AAA9E8FEA13EE3123B0F8411EA75CDAA102108B0
SHA-256:	2DF4AF96259B370F09B5CD89FF43932DF3476D4A90AD06EC5CE1599395F299AB
SHA-512:	EDF230B8CA78D6B3B5597D70654CB659CA8DD4A5063812CCB8F176AA5CEF19551CE0F40DA19B5A6017E89CEA58E04B14BC9180CC42FE620116B5B97837FA3245
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/images/sa-logo-primary-reverse.png
Preview:	.PNG........IHDR................i....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.b7c64cc, 2024/07/16-07:59:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 26.1 (Windows)" xmp:CreateDate="2024-09-17T11:18:12-05:00" xmp:ModifyDate="2024-12-10T07:26:18-06:00" xmp:MetadataDate="2024-12-10T07:26:18-06:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:09250a3f-5863-3e45-95f5-0f22f32cc857" xmpMM:DocumentID="adobe:docid:photoshop:e2ef2e98-9a10-e444-bd76-8f61be95091e" xmpMM:OriginalDocumentID="xmp.did:99f2eb

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20040, version 1.0
Category:	downloaded
Size (bytes):	20040
Entropy (8bit):	7.988990656521094
Encrypted:	false
SSDEEP:	384:eGGkVNOWLp9FGmW0Nx66k68x5W4MJ3XsH7CTN20UN9tKn49:eG3ZHJx66k6OMJSCTN4N9UnS
MD5:	A61C670A24D6794A95A9712F0D12B656
SHA1:	C9B3114B27790109EC51508F51F1A033CCFE0812
SHA-256:	A4F5230D39A7A21971FE62CCDE2443345638D2BEAA369B752820390A687B91B6
SHA-512:	2D546BA3334476E0E3607AEC60B7FAEC310DF853866DB8ECFFD79136AAAB58860696797E193DBF531AB7E79EE10FCB8EE72B344C7D83E4553EF1A8BD4462D6C0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/arimo/v29/P5sMzZCDf9_T_10ZxCE.woff2
Preview:	wOF2......NH.......D..M..............................p..>?HVAR...`?STATV.../8....,....f.0.z.6.$..H. .....+...wx...'.v...5....6..0.u.....d..+.........e...P...y'.....MX. 8. ...X.n..d::...mN\|9(......qY.44x.....t..\|.16..&.....'.A..<....."..,.i.._.r.....A..y..3..`\|.8.U`...Q.Z...T...FdU5..e....v.NFw..:.C......MN....y.....A...9.Um..m.fQL,..?.....D...US&.zo.....:.....3..].o.`..)$.G..x.3.S;.$...NX..8.X>.-,..>..O]...e) .\|..{.I.T)/..?~lB\.B.....F...;-..Jo@H.E}Uu.UF..!.`...(..;.....s.........8...Nb.K.~..\hd......C........Z6On.A..}...hz..h....Q.6q:....$$!.@. 5hn....V...FMd.....r..eJ..s...?....n.yr. .K..L.t..L....P.....].c.VSt.../...P...@.....#....C>\~.F.....(!(.@J...u....@n..Dm..,.i<..NjrRO.&rfS...o[{...N...\|^...%a..........3.W.....$....Y....r.AJg..d......q.5......p...b=.-..'.7Ig....)..rH).e{.._...t....:A....8..v......(7.n.....\.Q..S5..S......t.6q.@.,c.....0.0..C;.7......i.k^.P.(q.+..>Q*....P.g..9 @.d.........#..".....yg![oe}$f=.........7.8.8..c.z..tzU......)rT4

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1028
Entropy (8bit):	6.231860108076104
Encrypted:	false
SSDEEP:	24:+K8a00OYpHBN/6CjWuqylxilgsEv/petkq07aiB:+iLphN/6FKsEvU07pB
MD5:	FFC8E76BF8E5ABE3BC36C7A04963A007
SHA1:	BCE5E967D539883D80B73A2BB00D7C5C44B941BD
SHA-256:	63312B6E282B4B7D6F052E71652796DACDF9DAAC106880A2BB913AF1F216B2A2
SHA-512:	C20766F756CDE83521E16CE2215F6B9F0F9179A266852CCA08FBB3457E59FEE2D7C6F27D57EA7CCB4B4075472048163987D638FC659F1BA64F787671A4B4CDD2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/headerlogo?ts=638719783880500358
Preview:	.PNG........IHDR....................iCCPICC Profile....c``\|.XP.......WR..............A.A..)1...1 ....`4.v...D_....)..p...'...@..\PT.....d+.....@. R.t....b.C.s@.$.{.XMH.3.}..VHBb.#..v..k1.$.. (I.....9...(3=.D..."...y.z:.F.F&..........7F.C......._...'"..10log`....SY........rAbQ"X........>-g`..d`........w.GZ9/.:...xeXIfMM..............................J...........R.(...........i.........Z.......H.......H..................................E.xO....pHYs.................iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <tiff:Orientation>1</tiff:Orientation>. <exif:PixelXDimension>13</exif:PixelXDimension>. <exif:PixelYDimension>9</exif:PixelYDimension>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.:......IDA

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	448
Entropy (8bit):	4.634193185822285
Encrypted:	false
SSDEEP:	6:N5XuhpwmW4eW6/XuhpwDHUvT/XuhzXI3GA5LWLuridkuMWtPAOvHot1by9r:N5mWjB/o/MnkXiyW1FHw4
MD5:	929B11832706DD6D4AF1AFE9FB7E3CEA
SHA1:	B77851C8351428B49BCEE82979A8EAB8159CF274
SHA-256:	CCCE0A188C9F3CD880FD701378EE5D1E1BEBD6B2032CC13D82B066DDCC319351
SHA-512:	3317D6E290B1F6C8DE8AB60CAA6EC49550F3D703256B3C70F1E0E1A151ECE461251869605246A2F30FC28B7F47287ED406CE4A1E2FD01412859611B68F3623B7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/attributecollection?ts=638762546964342077
Preview:	[.. {.. "key": "Attribute_GivenName",.. "value": "First Name".. },.. {.. "key": "Attribute_Surname",.. "value": "Last Name".. },.. {.. "key": "SignIn_Description",.. "value": "We made new security enhancements to our platform. If you are here for the first time since January 14, 2025, please create a new account using the link below. Existing users should use their original email, and new users can use any email.".. }..]

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142588
Category:	downloaded
Size (bytes):	49982
Entropy (8bit):	7.995657643114965
Encrypted:	true
SSDEEP:	1536:Jxgptniucdklf46I3reB9kaGX2VDj/vlzQ4Orr:JehcdSPIbK9ggnnlzor
MD5:	47B6359A09BBEE6AA41B82E06C5A6105
SHA1:	7049BB7A20217A9153F9AED16A0A6B6DF27B1038
SHA-256:	EACBD5A1C958B4A2859D1D59FCDF028EDB6DD7567109218A83AA4E263A253A35
SHA-512:	16CAC5CD306721D5A117CA06CC42BBB38680697E811479F51C315A3967F5716ED9AC2A01A049BDBA027984312F268E2711E359936ED748394100A11953B231FC
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_9810YxmrLqOR1rQ4anyNMg2.js
Preview:	...........m[.8.0........OL....;w.....6.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E...r..r.....r.o....^.......(..q...?.......aP......h.Fn".....\|wR.G.C%...i.~..$.L.8.BC1..U...gn.<W...:./.6.....(.>..}R.......xT..^.XTf.'...?.....(..qR..H...x...OX.7..X$.q.%..ze....>._......{P.:....~.M...X&.&.u..ie..\|.IXy.g..Y....x{..;..U.M.f....f,.Gl.dR..<...bl{E\|..@<y..En.(W...s."!.D.X.<AE....a....Y..'.t&8.T.....".J.K......Rm5.;...F...$........Q......C.G_.s...../1.8b\....ZP9..\?P.:........)`_.... .......6..#lXU.s.\I....Q....Y..\5n,.~.7V.4..su........N\...._.7...........T.....)..L..S}.c_...\_......Y}:...._1-\|p..l@..[q...........?&.0Z_.Aw:3.RsV...qR5..Bv./..7...b.G,..jt...HfQP..:.).a...&9s.N....d.=_,:...B..@...+{.Mx.8k.,m.Q.B.......j....}.2bdEkE.G.a..5...1....G ...T...~....uV6.....i.=...AU.!.+."3c...D.&!*q.9L....8..&`>.....v....6aT\.U.S.q"+!.....Xi.@D2.....g..t\.nw.-..L..S.B@QZ.N>.\-...[...pD....sro//..H...i......}.U.....M.yJ........./.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 455713
Category:	downloaded
Size (bytes):	122939
Entropy (8bit):	7.997746253803481
Encrypted:	true
SSDEEP:	3072:mIoeB2wLj1vxBepFzXu1hafbiBz5ZurwOc4NbCwZQ9HL5:mIQQ0pBXW8qurwOjN+r5
MD5:	20CE87477D6D15DA34A741E403DE3FEC
SHA1:	39506B05FE4C40DF151748CE7D815DA94F484C5C
SHA-256:	25E14EF7716B473D159874C370A076CD21AFCFF5E466AAD0CBFD863EFBA9A084
SHA-512:	F116ACDE307C652A84B3ACC963365353FF348C729BE3E242F9707DFB3A78E3B160A6DF4240E34E64841D80EE44986936A384337A75D57F2CAFF546B336CEA921
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_Z-97xch0omzdvdz9EEve6A2.js
Preview:	...........{w.8.8.....fn..(..o+.....I.....Merd.v.%.$.1.......([NU....s.Q.H... .....w.......Oit....OJ.O..J..............F....^\.x>+...3....0y..F.0....f.o..~i...R..J.(..9I\.8.Bc..2T...K;J^K.....6o..P.....!).a.9.d.....G..."pYTz~...Da.N.R...=A#....M.%;b..%.I.%......!E.15.[...:..P.........8_...L...U..ie..\|.JIXz.....x.`Z...bj......I..a.,z...~)..D...%.2....-M#;@...`..i......cTt.Z.fs...L/.8..s...R..^...J.?.0.W..K.z.h..Z.5....d...>L..a1.:.......C.G.....G..?c^....,]....Q8..@.u.b.4..K..!`_.....q\|q.?]..<>.L....+..R........d..uO...v.G...c..;...A.KX.Y0M....g...>....'a.:g..;.>...9.b.:0.e[.....w...T......JE..V..;....wU...TYf....?.....ua8...i....$)W.....\..7... EC.h.&e.6..D,YDA..W.Na!..T..$k..;..2..ju .1,D}LdY=..a.>\|k....ND/.A...}{+'V?..W%#..o)a.S....c!P8..UI.".n.{.]C.q...-u..a.....$z%...[*.CX......l.}.U.Q.......\.nT..........Z...LK.~.\|."...D;U{>._....T$.C..^\|)..'e..!.k2=...)Y! )..+.Y.#%........C..>0.r_oo..%.>....=..g..!.V....<%J.D......

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	6.231860108076104
Encrypted:	false
SSDEEP:	24:+K8a00OYpHBN/6CjWuqylxilgsEv/petkq07aiB:+iLphN/6FKsEvU07pB
MD5:	FFC8E76BF8E5ABE3BC36C7A04963A007
SHA1:	BCE5E967D539883D80B73A2BB00D7C5C44B941BD
SHA-256:	63312B6E282B4B7D6F052E71652796DACDF9DAAC106880A2BB913AF1F216B2A2
SHA-512:	C20766F756CDE83521E16CE2215F6B9F0F9179A266852CCA08FBB3457E59FEE2D7C6F27D57EA7CCB4B4075472048163987D638FC659F1BA64F787671A4B4CDD2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................iCCPICC Profile....c``\|.XP.......WR..............A.A..)1...1 ....`4.v...D_....)..p...'...@..\PT.....d+.....@. R.t....b.C.s@.$.{.XMH.3.}..VHBb.#..v..k1.$.. (I.....9...(3=.D..."...y.z:.F.F&..........7F.C......._...'"..10log`....SY........rAbQ"X........>-g`..d`........w.GZ9/.:...xeXIfMM..............................J...........R.(...........i.........Z.......H.......H..................................E.xO....pHYs.................iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:exif="http://ns.adobe.com/exif/1.0/">. <tiff:Orientation>1</tiff:Orientation>. <exif:PixelXDimension>13</exif:PixelXDimension>. <exif:PixelYDimension>9</exif:PixelYDimension>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.:......IDA

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2354
Entropy (8bit):	5.048539662848856
Encrypted:	false
SSDEEP:	48:aFJczguzQ3QfYk/82XyOwhGWOgLpRNaTCtxYnrBrQwdY5:aoEAa2XyOwhGFgLpRSbrRldY5
MD5:	108E23CD6E1E65BDD5C09B77C033D64D
SHA1:	211487F09498C5BD7B86B7DEA5389CDF2CFA3786
SHA-256:	15EDEFB987ECF2D03A74BA1B7FB7E2DD629C1C669A2A873BA5781C1D37D2A80D
SHA-512:	26AC56178BCD4654E619D0C9A377C604D0A3B8E0FA890DFA11CCB5626AFA4DB8CEB4F4AC324D3C9AB2C2E6F9DAE85ED919DB2C8EFF4890FFDF68DEDCEFF920D0
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/css/fapi.css?mod=1738585068
Preview:	.page-group {..margin: 0 0 15px;.}...page-group legend {..font-weight: bold;.}...page-content {..margin: 0 0 10px;.}...section-group {..border: none;..margin: 0;..padding: 0;.}...section-group legend {..padding: 0 10px 0 0;.}...section-group > .instructions {..display: none;.}...series-group {..border-top: 1px solid gray;..margin-top: 15px;..padding-top: 15px;.}...series-group[series="1"] {..border-top: none;..margin-top: 0;..padding-top: 0;.}...form-row {..list-style: outside none none;..padding: 0;.}...form-row > li {..display: inline-block;..vertical-align: top;.}...hidden-row {..display: none;.}...field-required {..padding-left: 5px;..font-weight: bold;.}...field-widget textarea {..resize: vertical;..width: 100%;.}...field-widget .ui-icon {..position: relative;..top: 4px;..left: -4px;..margin-left: -20px;.}../..field-widget input.highlight,..field-widget textarea.highlight,..field-widget select.highlight,..field-widget div[role="radiogroup"].highlight {./..field-widget .highlight

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3925 x 1288, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	44494
Entropy (8bit):	7.771579768899259
Encrypted:	false
SSDEEP:	768:Ozo8Tc3MSeWIMxeLQdpUMjcmQmahwhlbLIZufyKYY9gNNmM1afanJWUb5/VG9q36:Ozo8w3i8xQQft4Snu2t+B1jnZb5w9q36
MD5:	2C9DD1967EF38726DC5A8BE2B7C79473
SHA1:	94D7D8FE9AEC3A17EECAFB84EBAF4DD332C0FC1A
SHA-256:	D20E52B0A15BC18825F3104D08BCDAAEDDD2105AC1CF70D12CC8B71104FE7EC3
SHA-512:	7F44AD32FCBD160672D069B242D532D35D52E9B066B9380C9406B6B8496BABD55FECAF2A84AEF7EF92514C01970EA2E534AE766F45A5ACD19DE79CC740553084
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/bannerlogo?ts=638720724440186192
Preview:	.PNG........IHDR...U.........~.. ....pHYs...#...#.x.?v...cPLTEGpL.6].6].6].6].6].6].6].6].6].6].6].6].6].6].6].T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.6].T<..I4....tRNS.`. ..@...0.P.p..0.@..`.. .p.P...z....IDATx..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................a(.....I....M...J R;H8g\|=y.+?.............................................................................................................................................................................................................................

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 58435
Category:	downloaded
Size (bytes):	16556
Entropy (8bit):	7.986602570292376
Encrypted:	false
SSDEEP:	384:hji1Q/wE+7hNotq3IGLdXXS0gQ/7M8OhpHAcIqvkiO:hjN/jqJFDLQHAcIClO
MD5:	209FD70F9BDA807BF117210BBCF03522
SHA1:	FD4A15809E2953DDDEE045F440DA62F9A11680ED
SHA-256:	58AC139774D14AACA1F5C7FE2F2B7DF96CD208AC5B1D03FFCB732552C4C05E54
SHA-512:	76AD5E7641A4F30E5662F48D3DB05F2D3EE2024F6E801EAF9D1F48DC4F8CAACFFF41448FC4E68FB21F69E5527D5119D75A3411DB1285A3BBD0E5C84B7A9C6342
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lh3lajrog_lmhvtw2rbbq2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo.....].YYYY.Y.Y....I......T..............C..C...K......G7,..\|.x....oZ..E.N.....W.....w...U.N.$..}x.j.?..........J.p......F...{...{?&.p.............>.9.wb.s...4.C.G...s..3u"x.\,.{1.L..{.'...J..K..{Q,.a..'b...a.1.$t....p4.....^]z...._.7b1..Oq.......[..&a.....N&......o./Bo.n...f.......;O..>....5....d.......8..ET...~..&..Lo..Ox.f.z..G^.....].s.O..h..V...\|1..@.........KA._..S.^......... .t.;...D.........vZ......R+W.k.../..e..tP...U+..].....O.7.Y....x..]w......fg..3YN.KCz]...$.b........V..+.%h[.&,.p..{^...$..{/...=a..Aw..I..............O...1.]....W>..?N..(.4.K.t../&1....\G..`./[z......u..[,.7....)P..[....T\|..*.a!.!.t....h......d"......w.......y..!T.......)..a0..5....oF-.....S......>...A.....t$G..r.;....\|.....m../..i.....V...i.....-..7_.o.V..)...u.. ..`.n]._..(. d!...........e&d.....Ra(....g..N........> d.C.....^.H.-.e.ck./~...9>..]...`.%4b/b.@O...9n.Y.2.._B.Yzy.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2180)
Category:	downloaded
Size (bytes):	35890
Entropy (8bit):	5.0740022143622685
Encrypted:	false
SSDEEP:	768:AAh+iFaXiMQ8URvvZcnCZFoinpi9VsFk7:AAvYyMRuvBcnIyiusC7
MD5:	9040C4B920212EA2DD1F0903E3144DE0
SHA1:	64A119E0D17238FC714AF6983CB960E4EAF95A7C
SHA-256:	F444BF62F2C538883F0A3A32112CE86B36C0C7CE78A0D7F637850B62D80710AA
SHA-512:	49155C937B9F3049D20972A655A3D7CC4A2C2BC2513027B00AA680EE29126AEC2C1FBAA738ABCDA3C5DDCE2CDBDA959C0B80BCFCCEF78F580DFFF80A043851DD
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/css/unicorn.css?mod=1738585068
Preview:	/.00. Normalize.css (minified).01. Global Resets.02. Grid System.03. Theme (mobile first).- 03a. Theme Globals.- 03b. Theme UI.- 03c. Theme Componnents.- 03d. 3rd Party Componenets (jquery, etc).- 03e. Page Specific.04. Tablet.- 04a. Tablet Grid System.- 04b. Tablet Theme.05. Desktop.- 05a. Desktop Grid System.- 05b. Desktop Theme./..html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block}audio:not([controls]){display:none;height:0}progress{vertical-align:baseline}template,[hidden]{display:none}a{background-color:transparent;-webkit-text-decoration-skip:objects}a:active,a:hover{outline-width:0}abbr[title]{border-bottom:none;text-decoration:none;}b,strong{font-weight:inherit}b,strong{font-weight:bolder}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background-color:#ff0;color:#000}small

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64399)
Category:	downloaded
Size (bytes):	255084
Entropy (8bit):	5.159519117191277
Encrypted:	false
SSDEEP:	3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV
MD5:	1E2047978946A1D271356D0B557A84A3
SHA1:	5F29A324C8AFFB1FDB26AD4564B1E044372BEED2
SHA-256:	9528CA634FECAD433D044DDD3E6F9CE1F068D5D932DAFDBB19D8E6DAEA1968BD
SHA-512:	E7BA19FEF5BC00D32347F290E817BDBFFFBF87A6EAF7F9777F439CEEF9FAA8CAB286F3DDD5CBCA051596A73BB44289DE226AABD929263B8312A94F91A47A26DD
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.13.2/jquery-ui.min.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26359)
Category:	downloaded
Size (bytes):	27136
Entropy (8bit):	4.8430272727407635
Encrypted:	false
SSDEEP:	384:fxacdvpE3p4kdUrUIeYjdMcn417jL4yV9B9Ei6CLA7+KZLZjODalxqcH:fxaCva4/ekdMcny+5vf
MD5:	13D0C5399CE4B93AACA55EA0E78902EC
SHA1:	B48F1C9C62E13911F7A80284A335327DFC78100C
SHA-256:	C36D29AB08E2A5928CABA682382016F8A26D1967AD392875C4F4D861D553B0EF
SHA-512:	1E655841C059E693CD80BBE6C9AE2AF9BDDB4E35D5008B8FBD8D8598C054A0882D4E8D243D7C581479925274B5E65295ECB6D5C2D5CE2B7E3F4AD62C4FE146B8
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/css/jquery-ui-1.11.icon-font.min.css?mod=1738585068
Preview:	/*. ----------------------------------------------------------------------. * Icon Font for jQuery UI. * ----------------------------------------------------------------------. . ICON FONT Version: 2.1. * Glyphs: 332. * Copyright: (c) 2015-2017 Michael Keck.. * License: CC BY-SA 3.0. * https://creativecommons.org/licenses/by-sa/3.0/. * Generated: with IcoMoon-App (Chromium). . STYLESHEET Version: 2.3.2. * Modified: 2017-03-04. * jQuery UI: 1.11.2, 1.11.3 & 1.11.4. * jQMobile: 1.4.5. * Copyright: (c) 2015-2017 Michael Keck.. * License: GPL license. * http://www.gnu.org/licenses/gpl.html. */.@font-face{font-family:'jquery-ui';src:url('font/jquery-ui.eot?juif-bac781');src:url('font/jquery-ui.eot?juif-bac781#ie') format('embedded-opentype'),url('font/jquery-ui.woff2?juif-bac781') format('woff2'),url('font/jquery-u

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 310 x 70, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9231
Entropy (8bit):	7.761960646209006
Encrypted:	false
SSDEEP:	192:oJg2qa1NUcGtxWfIV6BaQ0uLcOUVS7N/0gqKSbOwY6:OgTa1NstxS+6BU6cHg+Zn
MD5:	7D4638D005C019DDEE0505B3C9DAB1D9
SHA1:	2B4F00E4288B4D393E8B8673CFC56364891323B6
SHA-256:	6859285E7FF0356AB2EBC3B6106FD3AD0FB95ECEF37F5AEC13B6CA014DB5C075
SHA-512:	11CDF87B3FF2E7B679C76B8D66F355436ADF44C1F072B657B7E223D11BFB583A4F22AA165BD28786024D675460D414E43D2DD74503CF0188C5BFD0EB3E1131BC
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/images/sa-logo-secondary-reverse.png
Preview:	.PNG........IHDR...6...F.....F.... .IDATx...!..@....=...x)..u<..+...UY..hU0............F4h.a@...Z...7cByLD........I..S....v......g.......Z0..1..{.5....C....N.s...Q0D............u...mU}..>.4./P+p3..w.....F...Q0....Z.100.......e.V.-...D300,.M..`..o..`c``.......v.....P..........'....^...........Q0....Z.100.......f.......d.w....r...'...y,...l...T2.......Q@...5..H.O.............?+Ga...... .........,&Y.EP^..d....Wd"...R,...EO......[..=..<.~.s.....Hl.S9.y.4...{\Dg.%d_.>.....c..0...s.....pl.Lb..aw".....q$....".0.N\|..7....Y,..y\b...D7.W.....b\|Jb.X..{o.....9.pU....;...N.S..?..X."........h.EVQ.M...O$L`9.-.9......V....E..b..m..)Va..wC...a...../I.S<.ELW!....}.?,.&6........J.Q..._Pd.......>A.66.Fs-..G....CK..A....5...~..O...7:p.{...=....[F.c./fx.%.2.B6q.>>2.....l`.U..K......O.J.i...O;.yN.).v......l....K/..~.Xn...8.~..c.G...x.m".)..{.v.....].....`G..Uw.I.6..p......S\.9vFQ.?.......`K#.AG...E...J....A,.. ,@d&../.....c^...$6......X..E.:"..J.w...!......?Dd.....?E.7...

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	847
Entropy (8bit):	7.68297979785131
Encrypted:	false
SSDEEP:	24:qb0P4XDaw6tH704Ulv+qn85wvokTn+weQvAXu/7:o0AXew61TUlv1850oAn+DQ7/7
MD5:	A562AB34D2683DA864C9597924C52C30
SHA1:	A8E240500BE6A3EB609B46F0BE843AEF172C83F6
SHA-256:	D91FE544D31B412CE614C707610844BA669782CF8345E0FB7D719039F5EB12EB
SHA-512:	72AFE6A1E9266A41CF33AA7C38CD04DA31F38D1CC58ADEB133E1295157C6276AC919723D76A876E84EE15DD74DC41FB068E92E02AFE3F9BA28DF8397A89B4817
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATXG..MH.a....3...A..t?f5...C..V...%<........@.T."vL<l..A]:..y.KtQ.......U..-..yb.u.o..6......C....'......o.....:..5...{=..T.OT.m..g..NO@XK.@.b....b....a....B3.A...f8B...k....]~'..p-..f.a.......0..... .......".!A..........Q&Cb.8.]q....k._..{........g..P...tK....,.....ytW... P.~.@.@.6.W..T..x][..zK.Dnj....P;.!..!.VE1........h......G&.... (e8.\_S..L..,.[...Tk&t...m..fB.`+.6..Q....... ....n...6.... .....$F....wn..9.0./......}..4.@.t+.V..n.....K..0U..R...F}..Q..{...tWK.H....y.G..L........q ....e.G......u....b..L..{.o-........-3.}q...%....i;..l..hd.H 1.PG9.iU...@\....H.C... g=....5..0..I.......e ...M....)E..?>\|SmcIr.a..K`..'..}...s].u..3...b.\|..31...9.kKG.+..u].>..t ...E.n.......H..,.....v...~.}..6..8....~l/.l..{@..G.Css.).yYF.J..e54..c..0.w..]AF0.}.....IEND.B`.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3221
Entropy (8bit):	5.214596089094034
Encrypted:	false
SSDEEP:	48:NHPYozF04GXiAmyoYd1K+AvigAaDURH7MG5xPZ505Bh5+X3UoP05cwkxOnt7k5an:ZKZ0UsURH7FDuFq3UgKnp
MD5:	7DD273A3079C71E22C30AB77B396573D
SHA1:	F7B0D23574AE7EB57611598D5BF079DFE0EF0C3D
SHA-256:	27CC2255362EB51487FCB17357D13EE9F30A3A97A8ADECA0102ACDF9FD5B5A42
SHA-512:	AA87B4D89C50ECE6E175D2EA920087C4668AF8B203E6274AACD614EB515416151DEAC40E3E86D947A86935E08BF74626D292E2F81F7B454FBEC1843F6AB0BA32
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/js/rating.js?mod=1738585068
Preview:	$(document).ready(function () {....$('.rate-entry').keyup(function () {...// Calculate a score for the entry...var score = CalculateStrength($(this).prop('value')),....elem = $('.rating[key="' + $(this).attr('name') + '"]');......// Show the strength indicators...elem.find('.ui-icon').removeClass("pass");...if ( score >= 15 ) {....elem.find('.ui-icon:nth-child(1)').addClass("pass");...}...if ( score >= 30 ) {....elem.find('.ui-icon:nth-child(2)').addClass("pass");...}...if ( score >= 45 ) {....elem.find('.ui-icon:nth-child(3)').addClass("pass");...}...if ( score >= 60 ) {....elem.find('.ui-icon:nth-child(4)').addClass("pass");...}...if ( score > 85 ) {....elem.find('.ui-icon:nth-child(5)').addClass("pass");...}......// A minimum score of 60+ is required to unlock the password confirmation entry...if ( $(this).attr('name') == 'new-password' ) {....if ( score < 60 ) {.....$('input[name="confirm-password"]').......prop('disabled', true).......val('');....}....else {.....$('input[name="con

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	5.112530855532291
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwIgsozEr6VyF02xxdGzsQWr+KqD:J0+oxBgsozR4F0+dgsQo+T
MD5:	BB8F534FBFF5EE61A95AF9C4740AE043
SHA1:	832E403D42AAC1FEC93E4F602338544D3FD2E4F1
SHA-256:	5B13FB5957B84EF7BB9D0B6CD509C947FF6A37D67EFDAC2B896DDD3B908AAD10
SHA-512:	EB423CA8E0F3E026A367130044B1857A1368097F9AC3C8FCAA523FA5E2785437FBC328397B5C6582FB0C872CFF44E70CF0120D874D825472806ADC46ACDBFFDD
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/images/site-icons/manifest.json
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>403 Forbidden</title>.</head><body>.<h1>Forbidden</h1>.<p>You don't have permission to access this resource.</p>.</body></html>.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	36662
Entropy (8bit):	5.274856471619552
Encrypted:	false
SSDEEP:	192:W0OW0QYpynD6l2n+brGtUQnSMfps3+eYQY+h572hk/xrAY5Y6BjSmMErEURH4N/5:jYpynD/+vaW1eyH1F5fyPQtXDS25slak
MD5:	3C2DA607F80184551F63B34EC1333F7A
SHA1:	E6BB00A0EA07DAA01A9537FE66A448F77AF8AB56
SHA-256:	8473ED670B978405CB4EF7A6822385043B30107E0DAE82A008326C6ED237CE51
SHA-512:	D2CD89DD93F96E04B3B7A90C6EC8BA5C38C4D2EE3CCAA4D860CFFDEBD83F5566A2B29DE1420BD4D8F578F3FD4BE2657A682B54F0C6AD5374C5298EB38D47F643
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.13.2/themes/smoothness/jquery-ui.css
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=highlight_soft&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=flat&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=glass&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=glass&bgImgOpacityHover=75&borderColorHover=9

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8164
Entropy (8bit):	5.142662775525545
Encrypted:	false
SSDEEP:	192:jWjxf6p66pUBDqUwjX66J+3r6gJj5iEokl8W+I+KqBg/Jj:jMf6p66pUdqPd+3r6wfX7qu/Jj
MD5:	573EDD225B6E77AEB89E5AD089803148
SHA1:	81E9F82E18403AB09061FDCAE5B0D105B3A4EF01
SHA-256:	92C29440CDCC6CB5D3995E2B9463E2A8269DA792364CAC7748834674453FAC3D
SHA-512:	3DE81D8646CA240685DEF84B7C989D48D8E8A949EA521CA8CCD6700FD198062475EEB48DF42C3D63C417C0A72084D1A45B97FAFF1CE4E7E05ECCE5FF16741BF0
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/js/register.js?mod=1738585068
Preview:	$(document).ready(function () {....function passwordStrengthPass(check_str) {...var pass = true;...if ( 8 > check_str.length....\|\| !/[a-z]/.test(check_str)....\|\| !/[A-Z]/.test(check_str)....\|\| (!/[0-9]/.test(check_str) && !/[!\.,@#$%^&*?_~]/.test(check_str)) )....pass = false;...return pass;..}....var form_login = $(".form-wrap.form-login"),...form_join = $(".form-wrap.form-join"),...form_recommender = $(".form-wrap.form-recommender"),...form_renewal = $(".form-wrap.form-renewal-account"),...form_links = $("#form-picker"),...picker_new = form_links.find(".new-user"),...picker_exist = form_links.find(".existing-user"),...rec_confirm_btn = $("#confirm-recommender-btn");...$("#form-picker a:not(.external)").click( function(e){...e.preventDefault();...$("#form-picker a").removeClass("active");...$(this).addClass("active");...$(window).scrollTop(0);....RemoveFeedbackBlock();...$("#main-content .form-wrap input").removeClass("highlight-value");...form_recommender.find("#rec-form-errors >

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	881
Entropy (8bit):	4.797531268103007
Encrypted:	false
SSDEEP:	24:VlQOuiBuSX01HJWO5qhwD2rN7Je/SWYCQ8i:vQOWk0dJWO5qhdNafG
MD5:	6D17140A3B65481169936E254F816735
SHA1:	561F6B9E136825B7C5011233E5CEAA1D8434F2DA
SHA-256:	A6BC723E3D7754DB00D3A07E9337CCEDBE1D3D5F7FF8F192C31653033F719A65
SHA-512:	1EFDB3DEBFE794615D0C48101F3F0CDA972AFFB1D2CD6F923A80D98DD67CAF6E422ECACA80399A5FC17F78F2779F4209C0EC0AE277750A93688EFB39F61D2964
Malicious:	false
Reputation:	low
Preview:	./* MIDDLE /..ext-middle { / Style for the full-screen background that aligns the sign-in box vertically to the middle and horizontally to the center /..}...ext-vertical-split-main-section { / Style for the container of the partial-screen background in the vertical split template that contains both a sign-in box and a background (This style is also known as the Active Directory Federation Services (ADFS) template.) /.}...ext-vertical-split-background-image-container { / Sign-in box background in the vertical split/ADFS template /.}..ext-sign-in-box { / Sign-in box container /. border-radius: 15px;.}..ext-title { / Title text /.}../ FOOTER /..ext-footer {. background-color: #1b365d !important; / Entra styles forces it to be 0.6 black */. color: #ffffff;. height: 40px;.}...ext-footer-links {. text-align: center;. float: none !important;.}.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1432)
Category:	downloaded
Size (bytes):	6438
Entropy (8bit):	5.2800330455373095
Encrypted:	false
SSDEEP:	96:4mPs2hy2L4zxEBnhch0K4QEb4OL6r28cXhbBbj1rXgZoXkvUVwxwyiwv6psv:dET2xBnhch027nChJryv
MD5:	5810EC69D728BBB98C65BAE41C966A36
SHA1:	773F63B2CF0131FD38782681ED00D6BFD365B7DA
SHA-256:	3382012585B9009C446BF96F13E3FDB651B8738158C6D61A709665A11C60A628
SHA-512:	833C92DC400224D216E22EC4E64B7343C9D792F4F011F92A7A30DF2855192926EF26B8211C0A388545684795AB6771A422B95E571F357D84768C4B370851583C
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/js/framework.js?mod=1738585068
Preview:	/! modernizr 3.3.1 (Custom Build) \| MIT . * https://modernizr.com/download/?-setclasses !*/.!function(n,e,s){function o(n,e){return typeof n===e}function a(){var n,e,s,a,i,l,r;for(var c in f)if(f.hasOwnProperty(c)){if(n=[],e=f[c],e.name&&(n.push(e.name.toLowerCase()),e.options&&e.options.aliases&&e.options.aliases.length))for(s=0;s<e.options.aliases.length;s++)n.push(e.options.aliases[s].toLowerCase());for(a=o(e.fn,"function")?e.fn():e.fn,i=0;i<n.length;i++)l=n[i],r=l.split("."),1===r.length?Modernizr[r[0]]=a:(!Modernizr[r[0]]\|\|Modernizr[r[0]]instanceof Boolean\|\|(Modernizr[r[0]]=new Boolean(Modernizr[r[0]])),Modernizr[r[0]][r[1]]=a),t.push((a?"":"no-")+r.join("-"))}}function i(n){var e=r.className,s=Modernizr._config.classPrefix\|\|"";if(c&&(e=e.baseVal),Modernizr._config.enableJSClass){var o=new RegExp("(^\|\\s)"+s+"no-js(\\s\|$)");e=e.replace(o,"$1"+s+"js$2")}Modernizr._config.enableClasses&&(e+=" "+s+n.join(" "+s),c?r.className.baseVal=e:r.className=e)}var t=[],f=[],l={_version:"3.3.1

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	847
Entropy (8bit):	7.68297979785131
Encrypted:	false
SSDEEP:	24:qb0P4XDaw6tH704Ulv+qn85wvokTn+weQvAXu/7:o0AXew61TUlv1850oAn+DQ7/7
MD5:	A562AB34D2683DA864C9597924C52C30
SHA1:	A8E240500BE6A3EB609B46F0BE843AEF172C83F6
SHA-256:	D91FE544D31B412CE614C707610844BA669782CF8345E0FB7D719039F5EB12EB
SHA-512:	72AFE6A1E9266A41CF33AA7C38CD04DA31F38D1CC58ADEB133E1295157C6276AC919723D76A876E84EE15DD74DC41FB068E92E02AFE3F9BA28DF8397A89B4817
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/images/site-icons/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....IDATXG..MH.a....3...A..t?f5...C..V...%<........@.T."vL<l..A]:..y.KtQ.......U..-..yb.u.o..6......C....'......o.....:..5...{=..T.OT.m..g..NO@XK.@.b....b....a....B3.A...f8B...k....]~'..p-..f.a.......0..... .......".!A..........Q&Cb.8.]q....k._..{........g..P...tK....,.....ytW... P.~.@.@.6.W..T..x][..zK.Dnj....P;.!..!.VE1........h......G&.... (e8.\_S..L..,.[...Tk&t...m..fB.`+.6..Q....... ....n...6.... .....$F....wn..9.0./......}..4.@.t+.V..n.....K..0U..R...F}..Q..{...tWK.H....y.G..L........q ....e.G......u....b..L..{.o-........-3.}q...%....i;..l..hd.H 1.PG9.iU...@\....H.C... g=....5..0..I.......e ...M....)E..?>\|SmcIr.a..K`..'..}...s].u..3...b.\|..31...9.kKG.+..u].>..t ...E.n.......H..,.....v...~.}..6..8....~l/.l..{@..G.Css.).yYF.J..e54..c..0.w..]AF0.}.....IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21208, version 2.0
Category:	downloaded
Size (bytes):	21208
Entropy (8bit):	7.9911780136509005
Encrypted:	true
SSDEEP:	384:cybayYd8LNQmcUFM3y00R6IgGvLD/CJRL/82D/CtQ4d/jqDYZvrm3V49g+9:caay9LNQm1rRPDD6J9Uzt/kSwV4gQ
MD5:	291BB25762163386886A04ABA68E13A1
SHA1:	AC4F842FC24599E8603B595A82DDAAF85368EEF3
SHA-256:	CBC61D8D1AC607D07EA0C268A32DD90B84C8B1F0F46586BBC576626E0EC0B6DF
SHA-512:	F91AB182C9315E6DB615411204F6C43730822A8253CA58800A838A4100F20DFB446ED5163A1B906F8DF09F3E323300822700D26EA7D8255B8FA2CB0E131D4A4B
Malicious:	false
Reputation:	low
URL:	https://start.scholarsapply.org/css/font/jquery-ui.woff2?juif-bac781
Preview:	wOF2......R...........R..........................`.\.....\|..!.6.$..@..".. .... ...U.r......f.b..0xnD....:.8.... p...i..+.61......rK....3.....F.<-o...b#....u-..1....$.S(#d..7.BL.I6..v.....mc.$.........s57.&.;0.&.;Y.....1.A.;..0_8Q.......I.7)#...l..6...@.....m....5.. ..4.H...`....(`A)FD.."..hL4.TM..i../....t.O.WM+Ws..].Z._U....~.. ..E.Mq..2@J...E....h..h.f\|!m.....C........."0.x@...&w.JS....`......Hb.`i...^F.K..f..K%R...H9DJN....]V.3M.!%.u..)g...g...6..e.b......{%...d.L..S ^...z..,..e........... ......!X.!..m0...!L&.^...?S....-5.=R:.s^:.b......._].].(..@.MbH.....j...!9.h...p...:.@j....W.5.g..}.6.w.\.]x.....[...D..A...B.o.k.m....k....cJ.\.1.$s..X.+..c...AH%.@:M......+......t.K..!.]r..i....%.s.y.8........I..h...e`...aS].6W.q....;.<.LuSB...}.....W&>./.....'.:..#%.d.2#1.5s...#...........QMM>.P-T..A.80ne...\..!j.....l.L..../s1...l..yi..@.K.3r..)...L#..%CAu.Vf.t..Q.vl..Xy,%..!....).."..*fQe........TL%.H.f.D..d0.4..[..a.a..F...>...7.}..N....(.3.SZ..%}5.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3925 x 1288, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	44494
Entropy (8bit):	7.771579768899259
Encrypted:	false
SSDEEP:	768:Ozo8Tc3MSeWIMxeLQdpUMjcmQmahwhlbLIZufyKYY9gNNmM1afanJWUb5/VG9q36:Ozo8w3i8xQQft4Snu2t+B1jnZb5w9q36
MD5:	2C9DD1967EF38726DC5A8BE2B7C79473
SHA1:	94D7D8FE9AEC3A17EECAFB84EBAF4DD332C0FC1A
SHA-256:	D20E52B0A15BC18825F3104D08BCDAAEDDD2105AC1CF70D12CC8B71104FE7EC3
SHA-512:	7F44AD32FCBD160672D069B242D532D35D52E9B066B9380C9406B6B8496BABD55FECAF2A84AEF7EF92514C01970EA2E534AE766F45A5ACD19DE79CC740553084
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...U.........~.. ....pHYs...#...#.x.?v...cPLTEGpL.6].6].6].6].6].6].6].6].6].6].6].6].6].6].6].T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.T<.6].T<..I4....tRNS.`. ..@...0.P.p..0.@..`.. .p.P...z....IDATx..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................a(.....I....M...J R;H8g\|=y.+?.............................................................................................................................................................................................................................

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14588
Entropy (8bit):	5.487974661769243
Encrypted:	false
SSDEEP:	384:Xqn+8WGIE5sjnLht7IPGLTQlH0WPo2/cn40TCB2yl62:6RPoMcn44CBVl62
MD5:	7B715B67893B26572A892CF655DC0DDE
SHA1:	E51E8364543BF0644B2BCCFC7235DCD473399AD1
SHA-256:	D62C66420B6662B0453631732D3A231BDFFF18037FAAEF588549F0E860D464E1
SHA-512:	F634F48A34ABFA8B642578C3B35BE9474C17A3CE10CDA4904864AE2EA74F68FE6A67FD6F01AC5E8C96137A19B7C012B08A37081D15D3CDD4E0859A52E41B2C85
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Arimo:400,400i,700,700i\|Roboto+Slab:400,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Arimo';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9C5kiK-u.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Arimo';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CdkiK-u.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Arimo';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9C9kiK-u.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Arimo';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CBkiK-u.woff2) format('woff2');. unicode-range: U+0370-0377, U+

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 205 x 205, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17138
Entropy (8bit):	7.949267790869593
Encrypted:	false
SSDEEP:	384:4nod3TnL0zouXIhkvGpyG3iV16DalAvdRIOJq:4oBLmmkupyein6DalAvdlc
MD5:	21EA0DE6C9C52C043256F02405F007D3
SHA1:	AAA9E8FEA13EE3123B0F8411EA75CDAA102108B0
SHA-256:	2DF4AF96259B370F09B5CD89FF43932DF3476D4A90AD06EC5CE1599395F299AB
SHA-512:	EDF230B8CA78D6B3B5597D70654CB659CA8DD4A5063812CCB8F176AA5CEF19551CE0F40DA19B5A6017E89CEA58E04B14BC9180CC42FE620116B5B97837FA3245
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................i....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.b7c64cc, 2024/07/16-07:59:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 26.1 (Windows)" xmp:CreateDate="2024-09-17T11:18:12-05:00" xmp:ModifyDate="2024-12-10T07:26:18-06:00" xmp:MetadataDate="2024-12-10T07:26:18-06:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:09250a3f-5863-3e45-95f5-0f22f32cc857" xmpMM:DocumentID="adobe:docid:photoshop:e2ef2e98-9a10-e444-bd76-8f61be95091e" xmpMM:OriginalDocumentID="xmp.did:99f2eb

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35169
Entropy (8bit):	7.993210932978764
Encrypted:	true
SSDEEP:	768:j6PfHtcQsNe72gH9i6EndaklFS0VBrXFm4soze9NJthWnXpjTbI8PgzK:5xoCgH9i6EFFhrXFmUzVXtbI8YO
MD5:	57EADECAC2A031883A702F6B12A14502
SHA1:	3C1E4F5ABE11775DD678085EAC97029DF618A9F7
SHA-256:	C76276A58DFB0E4D68D277526E5F05EE357E13957B4C91BE2C74BE7CD20B065E
SHA-512:	D98AC263512C6CDB0A522C8B550F4CA8B901F620A1ED416C49163B28E0D5D08EA9605BF681F9F0C5567EB244BBD319D6596C6B46E860F48AD5CE31154DD2CA5A
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_c4928fb5cff147a39780.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:{...r..._........,...A........:..x.>.y..u.....N..f...).......<?._.f..C.....%..@..~....`P../.Q4..IQ.' ...e)'.q..Y:...%.z..x..k.z.../....@.D.r?......GP....`..o.'..~1.....&.HJ.`.@.}mV../8.b.m..guo.H_.7Qv.....dQ.....-.NE......G:.U'.....~.1.....H.k...O..dk.d.\|.7..x\/..i^.Y..Q_/.`..i.&...-.......P...yEv....,....'.^...X.......YK.".....l.r.ax.....<...1!..4GQ.M_.....L..F..51.!.....].....y...(...=O5?.nT...~

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.7.1.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116362
Entropy (8bit):	7.997473195483862
Encrypted:	true
SSDEEP:	3072:b4AjEJ6y6ebFHqvxmN75LyWZh7nUOJc4TG91lJa5l+2EqFonU:0AgsnM79PZh7nuN1naTdFoU
MD5:	81C7B985343C317ADEEA2C28F5C6FF4D
SHA1:	7A04D6215D0B79EEDE6823C4B3621795AD552534
SHA-256:	6BDBA6F0D2271DD20E6E6AEA2B459A1A23050EDE1B3BBADE4C913A1716F6E491
SHA-512:	DDF40137ED7F870C5E7475685BA9006F9C99C7C0632A9E7738DCF9BD081C105ABA5B94B3302BBD26DFF413DC065FC442D3CDDA33684709D6185B409F08158085
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_72a1051aa2aa2943d8c1.js
Preview:	...........k{.H.(.}.......c....8=.Ib......#Ca.....K..o..ZU%...q..9...ct).....S..?U.6..rqyt~Y9}W..........Z.xzy..x.z.Q.w9......^...U.........<..G....=wZ.....Oxe.._.0.S/..k>..&T..gn.?TN....6.....a0...I\......)....$......7.T>x.0..q\...{..H...\|.....2..x"..\`IYkD..#....FP....a.^.].'0h.&.....ie..\|.qPy....l<..S.y.E..>.....a...3..-vq:..P<..dE.....C.h.P..]..\5.......3.<N.^?T...:B#c....\|...T.........(...Q.l7[...V.e.W.8.G.....O...0.m...f.F...7..h.......F..b...Yr.=...f.....?......S.}U..g.......t..../...G.......~.+...)y.X\...<.&.........`.v.....`^....c4c.Yh=.a.wB.m.......i..~v-..O..nY....A....5...v...t..FSw...Q/n...c.9Y{.-..>a..7h..o..ec...O...)~..8...j-M..nD....9......f5..'Q#...L.'......fZW."Q[.<.nx..O...LU.;..a.m..&.k.$...;.=L...yv....,.f<Hb{.w.@.8...8F.D.>.04.[K6v.i..2.#?..&.;-.].....1.X0w.H6mZ..A...t..e-.\...MC6.xt`..cu...@_...v....;z'.mV.T/o.i....-...K......\..Sn>B......%x..%......W.\|......~.6.%...+.:..x5..s5P.-..!.G...ZT.i...;.&

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22052, version 1.0
Category:	downloaded
Size (bytes):	22052
Entropy (8bit):	7.9905780307251435
Encrypted:	true
SSDEEP:	384:Q8TNDdlNW9m4u5oRXXoBK+lSxbuk5vUB61/m9DiX0Z35d4G661Ror2NCzbABQd:Q8ZCm4/RnoB7Qc9+XE3gE2rXbABa
MD5:	F0E48CE2BEDA9E8CBD7D915BF1B1AE71
SHA1:	3DC1CFFF1759B0959CC7FB17517651EC850D584D
SHA-256:	B2504B3C20C2FEB37E78773B788DD09A9CC43C9F36086BC1E2F83A6366EBAA34
SHA-512:	E508030F4D1EB809AFF40D9AC57C65DF2F069AC495058330C3D315B3BA23AB5C0100053635CE4D5DBE672BCEB116AAF7D5AAA547CC60335CD55A9597C80D4948
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/arimo/v29/P5sCzZCDf9_T_10c9CNkiA.woff2
Preview:	wOF2......V$..........U...........................%.....4?HVAR...`?STATR..v/8.....<.!..d.0...6.$..D. ...........5.].....V.6.k...6.`..E#..zr........YI.Ka....c.%.t4......U\....4....ZD{.PB.u.r...Vn5QS?.}..bc].`.E3.s.\|......b..;E.........3....K....^1.h...n.{..V.e.]....(2...?..}...3.B.#...a.........sV.R..@.v..o...............c..........._L....+....X.".........3....:...vo.L+...G....vw.<.F...j$!..D]U.k. ....R.+f@....4T.xH..IM..v[=.^.uwO.pZ.e.U.....u.{....1.U.DR.D..LUW:~;D.i..V..^..g......3..7M%p..l.j.J.At..mVIH AK.....g.........mo..&....9.....&...A.v.S@6..T....~....H,AK.}...."t.$.zNMI..;f&k@..x.~.^6&Y.AJ....;M....7..;'<D..2v.....elw...@.A4/...o...Z...o_...jOm.UTq........V[d.....{.Z...j.y.h}....XPXxX..`8<>....`@98..Ox.utu.s..J..I.J:...8.k^...+..uN.nV.=.y.J...V.E.X4%S.7Qg....c...4..=_.~...lw....,../....>.*..q.....E...\.i."sH....f.......Q-t...MA.x....)..2...}........5..k..=..G..I .n..i..}...x..z.......hz..f.<8/.~s..x.W....m..$7..F".a...K3x.<.t.0.^2...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34328, version 1.0
Category:	downloaded
Size (bytes):	34328
Entropy (8bit):	7.992979044306872
Encrypted:	true
SSDEEP:	768:uqpAcq0VxJf84TA7p22MZ1m6wm17Uvm87BfmrrfpoQHzB:HqixJk7YlHmXm1gvm3hoQHzB
MD5:	6581AB53C220B5828E37162349375431
SHA1:	1922912CA5AB6EB5A55DB138B183B38D066E85C8
SHA-256:	A8E429611131E3FDC2018EC943A36100DBABB4AAA788C8DEAD6BDCF927917293
SHA-512:	B8FE079BD4AACD01FA41799999452B27051A4CCB4DBB91D9E1F2662C5D6112032B1633DFB2E31DB71F57FB4511A48B55646D034BD6F81CAF017ED0DACE0603F2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2
Preview:	wOF2...............D..............................l..H...?HVAR...`?STAT..'...@/l.....p.<....0..F.6.$..(. ............l.V3.....'%6..&...%;N5.!l.@4.[.......}Xw.F....R..z..i"\:.S.v..g..j..s\...E(...B...#43....f..i.ql....\|>6.4..C..\..D\|fmt..C......'./.`..T.........[.3.......}H\.R.8.6w].b.:.]'..x..}/....J tA...V>..w\..5..W..j6..f.Z.b...#( .@bHH..nv....3.;...@......\..v..1Hr.v....=<.._P.......l..#...@....h.kx^....U..t..E.g4K.D....#.1v.7.3VD.....)...jt.yk..s..O.'.U.Z.....y.D....\.b.<!$..!h....x(T.B.!..n....kG.;k...kU).u..jG.."..@..Hc.B..o)ex..?"G.16....F...q.}.z...g.U..(....?...?........E.F1.1P.Ft.....c.w....n3.o.9.Z2..P,5..QNmF+Hv.V..!..!..)....}.z.../ .r.x......db..GY.e.;.....l..k.....h..S.....X.1..y.P.v>..V..h@j.m.......Z..n..am..s>w.C...4.Rl.....s.J..n...1.h..........'.5(..s..Zc..>r.s..G.r6...l.xf,mJ.,........J..4.......>m&.=.u..[v...y37I&K...,~ ..An..A.P1...'l....p.u.U.....k.i..5w.ou..~u._E.`....}?..............BF...(....1**.=2...#q.m?K.YD....y

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	448
Entropy (8bit):	4.634193185822285
Encrypted:	false
SSDEEP:	6:N5XuhpwmW4eW6/XuhpwDHUvT/XuhzXI3GA5LWLuridkuMWtPAOvHot1by9r:N5mWjB/o/MnkXiyW1FHw4
MD5:	929B11832706DD6D4AF1AFE9FB7E3CEA
SHA1:	B77851C8351428B49BCEE82979A8EAB8159CF274
SHA-256:	CCCE0A188C9F3CD880FD701378EE5D1E1BEBD6B2032CC13D82B066DDCC319351
SHA-512:	3317D6E290B1F6C8DE8AB60CAA6EC49550F3D703256B3C70F1E0E1A151ECE461251869605246A2F30FC28B7F47287ED406CE4A1E2FD01412859611B68F3623B7
Malicious:	false
Reputation:	low
Preview:	[.. {.. "key": "Attribute_GivenName",.. "value": "First Name".. },.. {.. "key": "Attribute_Surname",.. "value": "Last Name".. },.. {.. "key": "SignIn_Description",.. "value": "We made new security enhancements to our platform. If you are here for the first time since January 14, 2025, please create a new account using the link below. Existing users should use their original email, and new users can use any email.".. }..]

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	881
Entropy (8bit):	4.797531268103007
Encrypted:	false
SSDEEP:	24:VlQOuiBuSX01HJWO5qhwD2rN7Je/SWYCQ8i:vQOWk0dJWO5qhdNafG
MD5:	6D17140A3B65481169936E254F816735
SHA1:	561F6B9E136825B7C5011233E5CEAA1D8434F2DA
SHA-256:	A6BC723E3D7754DB00D3A07E9337CCEDBE1D3D5F7FF8F192C31653033F719A65
SHA-512:	1EFDB3DEBFE794615D0C48101F3F0CDA972AFFB1D2CD6F923A80D98DD67CAF6E422ECACA80399A5FC17F78F2779F4209C0EC0AE277750A93688EFB39F61D2964
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/customcss?ts=638720724634855146
Preview:	./* MIDDLE /..ext-middle { / Style for the full-screen background that aligns the sign-in box vertically to the middle and horizontally to the center /..}...ext-vertical-split-main-section { / Style for the container of the partial-screen background in the vertical split template that contains both a sign-in box and a background (This style is also known as the Active Directory Federation Services (ADFS) template.) /.}...ext-vertical-split-background-image-container { / Sign-in box background in the vertical split/ADFS template /.}..ext-sign-in-box { / Sign-in box container /. border-radius: 15px;.}..ext-title { / Title text /.}../ FOOTER /..ext-footer {. background-color: #1b365d !important; / Entra styles forces it to be 0.6 black */. color: #ffffff;. height: 40px;.}...ext-footer-links {. text-align: center;. float: none !important;.}.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 310 x 70, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9231
Entropy (8bit):	7.761960646209006
Encrypted:	false
SSDEEP:	192:oJg2qa1NUcGtxWfIV6BaQ0uLcOUVS7N/0gqKSbOwY6:OgTa1NstxS+6BU6cHg+Zn
MD5:	7D4638D005C019DDEE0505B3C9DAB1D9
SHA1:	2B4F00E4288B4D393E8B8673CFC56364891323B6
SHA-256:	6859285E7FF0356AB2EBC3B6106FD3AD0FB95ECEF37F5AEC13B6CA014DB5C075
SHA-512:	11CDF87B3FF2E7B679C76B8D66F355436ADF44C1F072B657B7E223D11BFB583A4F22AA165BD28786024D675460D414E43D2DD74503CF0188C5BFD0EB3E1131BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...F.....F.... .IDATx...!..@....=...x)..u<..+...UY..hU0............F4h.a@...Z...7cByLD........I..S....v......g.......Z0..1..{.5....C....N.s...Q0D............u...mU}..>.4./P+p3..w.....F...Q0....Z.100.......e.V.-...D300,.M..`..o..`c``.......v.....P..........'....^...........Q0....Z.100.......f.......d.w....r...'...y,...l...T2.......Q@...5..H.O.............?+Ga...... .........,&Y.EP^..d....Wd"...R,...EO......[..=..<.~.s.....Hl.S9.y.4...{\Dg.%d_.>.....c..0...s.....pl.Lb..aw".....q$....".0.N\|..7....Y,..y\b...D7.W.....b\|Jb.X..{o.....9.pU....;...N.S..?..X."........h.EVQ.M...O$L`9.-.9......V....E..b..m..)Va..wC...a...../I.S<.ELW!....}.?,.&6........J.Q..._Pd.......>A.66.Fs-..G....CK..A....5...~..O...7:p.{...=....[F.c./fx.%.2.B6q.>>2.....l`.U..K......O.J.i...O;.yN.).v......l....K/..~.Xn...8.~..c.G...x.m".)..{.v.....].....`G..Uw.I.6..p......S\.9vFQ.?.......`K#.AG...E...J....A,.. ,@d&../.....c^...$6......X..E.:"..J.w...!......?Dd.....?E.7...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 11, 2025 20:34:20.319849968 CET	49671	443	192.168.2.4	204.79.197.203
Mar 11, 2025 20:34:20.627986908 CET	49671	443	192.168.2.4	204.79.197.203
Mar 11, 2025 20:34:21.237370968 CET	49671	443	192.168.2.4	204.79.197.203
Mar 11, 2025 20:34:22.469273090 CET	49671	443	192.168.2.4	204.79.197.203
Mar 11, 2025 20:34:24.878123045 CET	49671	443	192.168.2.4	204.79.197.203
Mar 11, 2025 20:34:25.527719021 CET	49729	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:25.527808905 CET	443	49729	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:25.527966976 CET	49729	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:25.528281927 CET	49729	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:25.528326035 CET	443	49729	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:25.828846931 CET	49729	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:25.876317024 CET	443	49729	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:27.480164051 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:27.480273008 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:27.480365992 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:27.481019974 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:27.481064081 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:27.481283903 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:27.481617928 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:27.481658936 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:27.482095003 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:27.482106924 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:27.649892092 CET	443	49729	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:27.649959087 CET	49729	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:28.477495909 CET	49678	443	192.168.2.4	20.189.173.27
Mar 11, 2025 20:34:28.788662910 CET	49678	443	192.168.2.4	20.189.173.27
Mar 11, 2025 20:34:29.395674944 CET	49678	443	192.168.2.4	20.189.173.27
Mar 11, 2025 20:34:29.417697906 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.418113947 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.418159008 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.419229984 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.419290066 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.425509930 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.425731897 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.425746918 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.442106962 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.442372084 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.442384005 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.443444014 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.443535089 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.444137096 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.444202900 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.468378067 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.475601912 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.475626945 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.491431952 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.491446972 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:29.518137932 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.533221960 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:29.683613062 CET	49671	443	192.168.2.4	204.79.197.203
Mar 11, 2025 20:34:30.125063896 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.125092983 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.125098944 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.125138998 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.125155926 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.125159025 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.125216961 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.125252008 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.125322104 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.125375986 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.126828909 CET	49732	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.126862049 CET	443	49732	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.167207003 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.167242050 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.167421103 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.167798996 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.167849064 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.167912960 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.168036938 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.168639898 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.168658972 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.169080973 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.169095039 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.208328962 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.599186897 CET	49678	443	192.168.2.4	20.189.173.27
Mar 11, 2025 20:34:30.672287941 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.672331095 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.672338009 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.672353983 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.672370911 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.672378063 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.672388077 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.672399044 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.672450066 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.730262041 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.730274916 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.730295897 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.730338097 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.730351925 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.730437994 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.748682976 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.748747110 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.748753071 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.748784065 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.748828888 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.749218941 CET	49733	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.749238014 CET	443	49733	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.753067970 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.753168106 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.753243923 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.754713058 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:30.754753113 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:30.763431072 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:30.763463020 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:30.763531923 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:30.763622046 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:30.763645887 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:30.763715029 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:30.764002085 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:30.764017105 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:30.764194012 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:30.764220953 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.197385073 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.197890043 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.197916031 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.198251009 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.200001001 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.200066090 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.200380087 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.244343996 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.398957968 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.399291039 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.399317026 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.399662018 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.400012970 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.400079012 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.400182962 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.440331936 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.765058041 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.765077114 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.765136003 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.765146017 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.765187979 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.766321898 CET	49735	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.766339064 CET	443	49735	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.767828941 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.767852068 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.767927885 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.769596100 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.769694090 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.769781113 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.770112991 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.770152092 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.770569086 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.773047924 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.773062944 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.773729086 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.773768902 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.774692059 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.774708033 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.828954935 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.829293966 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.829303026 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.830311060 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.830399990 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.835135937 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.835205078 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.835345030 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.835350037 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.837337971 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.837675095 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.837704897 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.838756084 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.838840008 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.839332104 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.839405060 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.839540958 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.839556932 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:32.875909090 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.876153946 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.876188040 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.877652884 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.877722979 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.878083944 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.878170967 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.878213882 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.880520105 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.880639076 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:32.920346022 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.927828074 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.927845001 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.947133064 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.947160959 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.947232008 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.947247028 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.947293043 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.959892988 CET	49736	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.959913969 CET	443	49736	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:32.976347923 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:32.992774963 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:32.992847919 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:32.992964983 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:32.993357897 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:32.993392944 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:33.006917953 CET	49678	443	192.168.2.4	20.189.173.27
Mar 11, 2025 20:34:33.314757109 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.317137957 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.317183971 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.317190886 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.317203999 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.317270041 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.323725939 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.330517054 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.330568075 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.330578089 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.336837053 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.336874008 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.336910009 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.336920023 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.337033987 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.337443113 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.344492912 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.344548941 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.344638109 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.344646931 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.372684956 CET	49710	443	192.168.2.4	52.113.196.254
Mar 11, 2025 20:34:33.377474070 CET	443	49710	52.113.196.254	192.168.2.4
Mar 11, 2025 20:34:33.379343033 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.379350901 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.379364967 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.379436970 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.379502058 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.379534006 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.379551888 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.379580975 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.382991076 CET	49710	443	192.168.2.4	52.113.196.254
Mar 11, 2025 20:34:33.386939049 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.387703896 CET	443	49710	52.113.196.254	192.168.2.4
Mar 11, 2025 20:34:33.433774948 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.434976101 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.434987068 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.435003996 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.435028076 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.435034990 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.435039043 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.435051918 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.435101032 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.435108900 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.435158968 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.450126886 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.450136900 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.450187922 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.450200081 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.450201988 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.450232983 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.450258970 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.450283051 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.450314045 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.450314045 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.450340986 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.455892086 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.455933094 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.455941916 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.455955029 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.455981970 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.455990076 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.456005096 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:33.456032038 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.456057072 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:33.456084013 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:33.456090927 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.456110001 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.456192970 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.456238985 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:33.459069967 CET	49738	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:33.459098101 CET	443	49738	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.481606960 CET	443	49710	52.113.196.254	192.168.2.4
Mar 11, 2025 20:34:33.481684923 CET	49710	443	192.168.2.4	52.113.196.254
Mar 11, 2025 20:34:33.490462065 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.490472078 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.490502119 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.490545988 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.490572929 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.490598917 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.490618944 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.501518011 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:33.501569033 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:33.501869917 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:33.502377987 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:33.502388954 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:33.548253059 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.548273087 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.548348904 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.548372984 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.548397064 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.548418999 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.565016031 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.565037012 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.565079927 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.565097094 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.565150023 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.565150023 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.583920002 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.583940029 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.584007978 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.584023952 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.584270000 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.607789040 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.607808113 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.607867956 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.607889891 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.607948065 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.635222912 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.635241032 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.635308027 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.635324001 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.635354996 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.635375023 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.643615961 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.643636942 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.643721104 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.643737078 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.643790007 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.658540010 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.658557892 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.658651114 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.658665895 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.658734083 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.669749022 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.669768095 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.669836998 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.669852018 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.669882059 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.671160936 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.681978941 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.681996107 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.682079077 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.682094097 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.682156086 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.693175077 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.693201065 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.693269014 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.693284035 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.693311930 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.694118023 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.702070951 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.702086926 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.702148914 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.702168941 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.702214003 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.710858107 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.710870981 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.710903883 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.710969925 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.710982084 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.710997105 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.711070061 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.712353945 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.712368965 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.712426901 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.712440968 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.712874889 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.721630096 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.721698046 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.721710920 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.721734047 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.721782923 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.729841948 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.736248970 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.736275911 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.736335993 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.736346006 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.736366987 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.736407995 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.750401020 CET	49740	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.750422955 CET	443	49740	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.757694006 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.757723093 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.757774115 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.757774115 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.757782936 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.758196115 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.766393900 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.766478062 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.766485929 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.766509056 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.766546965 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.766585112 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.901640892 CET	49739	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.901662111 CET	443	49739	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.994390965 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.994482994 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.994678020 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.995023012 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:33.995064020 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:33.995388031 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:33.995445967 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:33.995513916 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:33.996381044 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:33.996393919 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.176475048 CET	49750	443	192.168.2.4	131.253.33.254
Mar 11, 2025 20:34:34.176500082 CET	443	49750	131.253.33.254	192.168.2.4
Mar 11, 2025 20:34:34.176769018 CET	49750	443	192.168.2.4	131.253.33.254
Mar 11, 2025 20:34:34.184483051 CET	49750	443	192.168.2.4	131.253.33.254
Mar 11, 2025 20:34:34.184506893 CET	443	49750	131.253.33.254	192.168.2.4
Mar 11, 2025 20:34:34.477118015 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:34.477164030 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:34.477231026 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:34.485506058 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:34.485538960 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:34.702208042 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.702521086 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.702542067 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.703135967 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.703320026 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.703342915 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.703598022 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.703660965 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.703810930 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.704082966 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.704144001 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.704437971 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.704520941 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.704649925 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.704658985 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.704714060 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.714066982 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.714339018 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.714361906 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.714710951 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.715025902 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.715101957 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.715193987 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.752114058 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:34.752322912 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.756359100 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:34.975577116 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:34.976015091 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:34.976062059 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:34.977123976 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:34.977195978 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:34.977608919 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:34.977693081 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:34.978849888 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:34.978868008 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.019572020 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.231585026 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.231614113 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.231664896 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.231690884 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.231719017 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.231762886 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.232920885 CET	49742	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.232939005 CET	443	49742	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.238248110 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.238276005 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.238328934 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.238339901 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.238365889 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.238379002 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.238419056 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.239413977 CET	49743	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.239427090 CET	443	49743	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.261984110 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.262015104 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.262043953 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.262067080 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.262079954 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.262096882 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.262121916 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.262171984 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.262964010 CET	49741	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.262976885 CET	443	49741	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.399868965 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.400151968 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.400166988 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.401597977 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.401668072 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.401968002 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.402034044 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.402151108 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.402158976 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.455532074 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.519787073 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.519813061 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.519819975 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.519851923 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.519886017 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.519891024 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.520076036 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.521514893 CET	49744	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.521557093 CET	443	49744	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.904109955 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:35.904417038 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:35.904462099 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:35.905477047 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:35.905544043 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:35.905968904 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:35.906039000 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:35.906122923 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:35.913669109 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.913897038 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.913908958 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.914262056 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.914671898 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.914729118 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.914863110 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:35.948354006 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:35.955828905 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:35.955852032 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:35.956331015 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:35.984800100 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.984826088 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.984838963 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.984855890 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.984867096 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.984880924 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.984891891 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.984903097 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.984920979 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.984947920 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.984982014 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.985018015 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.985023022 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.985085964 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:35.985138893 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.986716032 CET	49745	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:35.986730099 CET	443	49745	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:36.005613089 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.346575975 CET	443	49750	131.253.33.254	192.168.2.4
Mar 11, 2025 20:34:36.346698046 CET	49750	443	192.168.2.4	131.253.33.254
Mar 11, 2025 20:34:36.395678997 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.401880026 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.402007103 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.402091026 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.402167082 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.404915094 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.410634995 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.419365883 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.419444084 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.419509888 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.419532061 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.420886040 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.428122997 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.437035084 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.437064886 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.437131882 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.437150002 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.440901041 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.448719978 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.474302053 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.474328041 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.474361897 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.474404097 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.474411964 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.474502087 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.492847919 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.494328022 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.499449968 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.499475002 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.499500036 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.499535084 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.499569893 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.499597073 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.503942013 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.504980087 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.504995108 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.512696028 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.512897015 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.512911081 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.521475077 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.521532059 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.521545887 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.530294895 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.530355930 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.530369997 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.536864042 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.536902905 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.536931038 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.536936045 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.536947012 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.536976099 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.537028074 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.541111946 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.541182995 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.541187048 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.541234016 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.542303085 CET	49748	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.542319059 CET	443	49748	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.543081045 CET	49747	443	192.168.2.4	151.101.130.137
Mar 11, 2025 20:34:36.543117046 CET	443	49747	151.101.130.137	192.168.2.4
Mar 11, 2025 20:34:36.585330009 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:36.591201067 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:36.591269970 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:36.592428923 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:36.592509031 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:36.597265959 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:36.597357988 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:36.602210999 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.602255106 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.602344990 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.602632999 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:36.602646112 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:36.643479109 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:36.643524885 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:36.689945936 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:37.818878889 CET	49678	443	192.168.2.4	20.189.173.27
Mar 11, 2025 20:34:38.627314091 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:38.627665043 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:38.627676010 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:38.628029108 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:38.628637075 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:38.628695965 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:38.629162073 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:38.672332048 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.220227957 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.220254898 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.220272064 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.220324993 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.220349073 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.220360041 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.220397949 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.246268988 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.246326923 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.246332884 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.246345997 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.246385098 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.246628046 CET	49754	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.246642113 CET	443	49754	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.284497976 CET	49671	443	192.168.2.4	204.79.197.203
Mar 11, 2025 20:34:39.949002981 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.949070930 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.949152946 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.949435949 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.949475050 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.949893951 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.949915886 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:39.949980974 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.950242996 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:39.950268984 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.075179100 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.075530052 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.075575113 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.076595068 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.076673985 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.077269077 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.077269077 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.077342987 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.088784933 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.089047909 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.089066982 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.089415073 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.089742899 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.089850903 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.089898109 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.127978086 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.127998114 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.132354975 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.143594027 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.174844980 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.664411068 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.664484978 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.664562941 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.666393995 CET	49759	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.666431904 CET	443	49759	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.720148087 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.720241070 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.720303059 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.721560955 CET	49760	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:42.721576929 CET	443	49760	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:42.726771116 CET	49761	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:42.726799011 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:42.726914883 CET	49761	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:42.727252007 CET	49761	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:42.727267027 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:44.733266115 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:44.743272066 CET	49761	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:44.743284941 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:44.743635893 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:44.744112968 CET	49761	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:44.744175911 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:44.744375944 CET	49761	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:44.788364887 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:45.293894053 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:45.293986082 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:45.296879053 CET	49761	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:45.299967051 CET	49761	443	192.168.2.4	3.17.33.17
Mar 11, 2025 20:34:45.299983025 CET	443	49761	3.17.33.17	192.168.2.4
Mar 11, 2025 20:34:46.223326921 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:46.223403931 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:46.223546028 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:47.437236071 CET	49678	443	192.168.2.4	20.189.173.27
Mar 11, 2025 20:34:48.201773882 CET	49752	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:34:48.201822042 CET	443	49752	142.250.186.132	192.168.2.4
Mar 11, 2025 20:34:58.987010956 CET	49762	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:58.987065077 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:58.987312078 CET	49762	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:58.987868071 CET	49763	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:58.987909079 CET	443	49763	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:58.988023043 CET	49763	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:58.988904953 CET	49763	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:58.988922119 CET	443	49763	3.140.204.200	192.168.2.4
Mar 11, 2025 20:34:58.989304066 CET	49762	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:34:58.989320040 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.074251890 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.074666977 CET	49762	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:35:01.074696064 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.075050116 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.075494051 CET	49762	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:35:01.075555086 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.075684071 CET	49762	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:35:01.120330095 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.202224016 CET	443	49763	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.202529907 CET	49763	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:35:01.202543974 CET	443	49763	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.203653097 CET	443	49763	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.204047918 CET	49763	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:35:01.204128981 CET	443	49763	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.244080067 CET	49763	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:35:01.643181086 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.645869970 CET	49762	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:35:01.645920038 CET	443	49762	3.140.204.200	192.168.2.4
Mar 11, 2025 20:35:01.646071911 CET	49762	443	192.168.2.4	3.140.204.200
Mar 11, 2025 20:35:01.697354078 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:01.697407961 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:01.697537899 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:01.697844982 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:01.697892904 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:04.478415012 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:04.478735924 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:04.478777885 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:04.479186058 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:04.479249954 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:04.479854107 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:04.479911089 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:04.480936050 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:04.481014013 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:04.481156111 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:04.525047064 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:04.525068045 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:04.566283941 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:05.619420052 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:05.619452000 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:05.619461060 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:05.619491100 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:05.619504929 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:05.619505882 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:05.619569063 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:05.619607925 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:05.619607925 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:05.619643927 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:05.711632967 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:05.711710930 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:05.712973118 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:05.713042021 CET	443	49764	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:05.713116884 CET	49764	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:07.869858980 CET	49715	80	192.168.2.4	216.58.206.67
Mar 11, 2025 20:35:07.869962931 CET	49714	80	192.168.2.4	199.232.214.172
Mar 11, 2025 20:35:07.870021105 CET	49716	80	192.168.2.4	199.232.214.172
Mar 11, 2025 20:35:07.874784946 CET	80	49715	216.58.206.67	192.168.2.4
Mar 11, 2025 20:35:07.874852896 CET	49715	80	192.168.2.4	216.58.206.67
Mar 11, 2025 20:35:07.875344038 CET	80	49714	199.232.214.172	192.168.2.4
Mar 11, 2025 20:35:07.875360012 CET	80	49716	199.232.214.172	192.168.2.4
Mar 11, 2025 20:35:07.875391006 CET	49714	80	192.168.2.4	199.232.214.172
Mar 11, 2025 20:35:07.875427961 CET	49716	80	192.168.2.4	199.232.214.172
Mar 11, 2025 20:35:09.509522915 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:09.509577990 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:09.509699106 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:09.510135889 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:09.510155916 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:09.511240005 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:09.511284113 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:09.511384964 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:09.512862921 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:09.512881041 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.158900023 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.159410000 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.159446001 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.160783052 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.161231995 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.161411047 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.161453962 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.161520004 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.212582111 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.261559010 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.261843920 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.261861086 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.262306929 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.262365103 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.263052940 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.263127089 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.263331890 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.263394117 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.263490915 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.263499022 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.306754112 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:12.306763887 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:12.353097916 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.049942017 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.053738117 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.053797960 CET	443	49767	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.053920031 CET	49767	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.063843966 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:13.063875914 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:13.063954115 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:13.064361095 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:13.064392090 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:13.546348095 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.546415091 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.546430111 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.546442032 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.546473026 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.546473980 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.546514988 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.546535969 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.546555996 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.546595097 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.546627045 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.573149920 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.573196888 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:13.573255062 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.574035883 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.574052095 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:13.647384882 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.647406101 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.647475958 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.647490025 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.647533894 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.653945923 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.654027939 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.654098034 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.654158115 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.654326916 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.654372931 CET	49768	443	192.168.2.4	20.190.160.66
Mar 11, 2025 20:35:13.654382944 CET	443	49768	20.190.160.66	192.168.2.4
Mar 11, 2025 20:35:13.669594049 CET	49776	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.669639111 CET	443	49776	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:13.669724941 CET	49776	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.670190096 CET	49777	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.670222044 CET	443	49777	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:13.670305014 CET	49777	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.670892000 CET	49776	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.670905113 CET	443	49776	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:13.671210051 CET	49777	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:13.671228886 CET	443	49777	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:15.201519966 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:15.201817036 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.201845884 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:15.202856064 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:15.202927113 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.203934908 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.204001904 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:15.204122066 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.204138041 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:15.255265951 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.873181105 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:15.873508930 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.873537064 CET	443	49774	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:15.873661041 CET	49774	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.874660015 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.874753952 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:15.874876022 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.875205040 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:15.875224113 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:17.701491117 CET	443	49777	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.701550961 CET	443	49777	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.701736927 CET	49777	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.701750994 CET	443	49777	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.730973959 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.731041908 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.731137037 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.731163979 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.735009909 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.735024929 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.735251904 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.735255957 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.735310078 CET	49776	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.735555887 CET	443	49776	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.735625029 CET	49777	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.735646963 CET	49776	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.735718966 CET	443	49777	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.735759974 CET	49777	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.736382008 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.736387014 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.736418962 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.736422062 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.736453056 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:17.736457109 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:17.992351055 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:17.992672920 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:17.992691994 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:17.993746996 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:17.993803024 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:17.994165897 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:17.994235039 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:17.994322062 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:18.036325932 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:18.036463022 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:18.036469936 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:18.083412886 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:18.275976896 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.318275928 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.419254065 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.419322014 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.419342041 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.419950962 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.419964075 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.425071955 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.425139904 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.425225973 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.425231934 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.428472042 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.428504944 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.428536892 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.435084105 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.435131073 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.435137033 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.473156929 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.473215103 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.473227024 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.473484039 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.479598999 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.522277117 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.522284985 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.550303936 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.550389051 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.550398111 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.552967072 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.553034067 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.553040028 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.559612989 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.559663057 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.566061974 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.566087008 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.566237926 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.566245079 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.566335917 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.573363066 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.573422909 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.573431015 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.579633951 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.579687119 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.586205959 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.586255074 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.586261988 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.592957973 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.592979908 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.593007088 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.593015909 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.593065023 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.599698067 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.599740982 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.599843025 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.599848986 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.606312037 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.606378078 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.606384039 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.613045931 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.613091946 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.613117933 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.613128901 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.613176107 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.619779110 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.619847059 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.619918108 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.619924068 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.626549006 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.626602888 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.626609087 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.645704985 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.645806074 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.645822048 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.648912907 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.648967981 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.648968935 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.648979902 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.649036884 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.661385059 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.661433935 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.661505938 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.661514997 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.684932947 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.684993982 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.685003042 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.687335968 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.687402964 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.687453985 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.703571081 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.703622103 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.703628063 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.703641891 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.703685045 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.703691959 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.707880974 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.707925081 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.707931042 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.712356091 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.712431908 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.712445021 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.712450027 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.712488890 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.718137980 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.718221903 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.718270063 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.718276024 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.718324900 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.729679108 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.729773045 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.729827881 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.731631994 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.731690884 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.731739044 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.731745005 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.735574961 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.735683918 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.735690117 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.742317915 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.742369890 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.742376089 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.747486115 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.747539043 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.747545004 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.754158020 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.754210949 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.754271984 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.755525112 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.755567074 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.755573034 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.767410994 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.767456055 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.767462015 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.768523932 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.768568039 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.768624067 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.771142006 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.771181107 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.771192074 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.771198988 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.771239042 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.776359081 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.776400089 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.776453018 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.776460886 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.790746927 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.790796995 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.791927099 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.791970968 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.792018890 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.792026997 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.792067051 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.794559002 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.794605970 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.794730902 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.794738054 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.797194958 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.797230005 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.797235966 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.804661989 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.804752111 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.804759026 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.807121038 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.807163000 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.807168961 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.811669111 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.811712027 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.811717033 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.814150095 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.814205885 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.814227104 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.814414978 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.814419985 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.823792934 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.823844910 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.823894024 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.823905945 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.825031042 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.833110094 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.833161116 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.833220959 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.833230972 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.834532976 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.834594965 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.834603071 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.836374998 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:18.836462021 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:18.836570978 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:18.838846922 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.838908911 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.838958025 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.838963985 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.841037035 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.843693018 CET	49780	443	192.168.2.4	72.247.154.153
Mar 11, 2025 20:35:18.843708038 CET	443	49780	72.247.154.153	192.168.2.4
Mar 11, 2025 20:35:18.855813026 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.855861902 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.855946064 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.855952024 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.856154919 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.856199026 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.856204033 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.860594034 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.860629082 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.860696077 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.861062050 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.861076117 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.863684893 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.863760948 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:18.864101887 CET	443	49775	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:18.864151001 CET	49775	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:23.041179895 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:23.041244030 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:23.166841984 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:23.167368889 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:23.167393923 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:23.167524099 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:23.167531013 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:23.167670965 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:23.167676926 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:23.846806049 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:23.891577005 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.038351059 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.038404942 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.038721085 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.038746119 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.038775921 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.039084911 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.041321993 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.041403055 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.041527987 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.041538000 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.049695015 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.049751997 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.049777031 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.060499907 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.060564995 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.060575008 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.111031055 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.111040115 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.119752884 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.119805098 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.120323896 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.120332956 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.120435953 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.124808073 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.124866962 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.125019073 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.125026941 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.130022049 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.130095005 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.130842924 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.135787010 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.135940075 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.135948896 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.136075974 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.139117002 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.139167070 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.139256954 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.139265060 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.145903111 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.145967960 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.146013975 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.152748108 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.152832031 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.152839899 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.192713022 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.213637114 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.213669062 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.213743925 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.213753939 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.213917017 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.219820023 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.219852924 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.221189022 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.221199036 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.232728004 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.232769012 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.232907057 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.232917070 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.233020067 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.236095905 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.240818024 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.240870953 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.241054058 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.241067886 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.244999886 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.245151997 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.245158911 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.254880905 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.255774975 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.255783081 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.256830931 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.258838892 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.258846998 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.268630981 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.268677950 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.268687010 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.275134087 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.275224924 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.275233030 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.275310040 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.317020893 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.360321045 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.838047981 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.849688053 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.849733114 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.849755049 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.849771023 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.849901915 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.849910021 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.858699083 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.858756065 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.858762980 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.862500906 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.862552881 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.862560034 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.867801905 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.867861986 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.867955923 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.890831947 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.890904903 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.890914917 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.892564058 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.892615080 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.892622948 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.915095091 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.915163040 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.915170908 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:24.956356049 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:24.956373930 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.018728018 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.045543909 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.096851110 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.116065979 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.117759943 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.117789984 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.117844105 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.117877960 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.117893934 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.117928982 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.121887922 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.121934891 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.121947050 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.121989012 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.125545979 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.125610113 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.125654936 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.125670910 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.129451036 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.129503965 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.133451939 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.133497000 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.133502007 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.133512020 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.133548021 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.137202978 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.137252092 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.137299061 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.137307882 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.141102076 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.141146898 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.141230106 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.145035982 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.145078897 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.145087004 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.149255991 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.149296045 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.149296045 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.149307013 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.149338961 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.152789116 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.152846098 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.152920008 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.152929068 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.156725883 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.156774998 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.160576105 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.160617113 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.160626888 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.164519072 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.164556980 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.164563894 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.164573908 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.164624929 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.168541908 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.168590069 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.168601990 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.172499895 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.172563076 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.176193953 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.176245928 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.176254988 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.176299095 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.180025101 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.180068016 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.180118084 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.180128098 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.184459925 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.184511900 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.187869072 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.187912941 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.187927961 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.191852093 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.191904068 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.191910982 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.191925049 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.191966057 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.195554018 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.199604988 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.199628115 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.199675083 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.199683905 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.199723005 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.199728012 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.203427076 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.203475952 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.203491926 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.207320929 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.207386971 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.207431078 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.207439899 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.207484007 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.211174965 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.215357065 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.215390921 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.215405941 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.215415955 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.215429068 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.219038010 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.219080925 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.219090939 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.222826004 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.222910881 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.222963095 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.222971916 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.223011971 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.228099108 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.228147984 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.228198051 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.228208065 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.230775118 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.230823994 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.234927893 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:25.234977961 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:25.597316027 CET	49786	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:35:25.597357988 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:25.597433090 CET	49786	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:35:25.605155945 CET	49786	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:35:25.605169058 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:27.921991110 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:27.922347069 CET	49786	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:35:27.922368050 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:27.922708035 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:27.923158884 CET	49786	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:35:27.923218012 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:27.971931934 CET	49786	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:35:31.396842957 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:31.396935940 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:31.399271965 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:31.403198004 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:31.403253078 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:32.063219070 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.063275099 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.099056959 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:32.099153996 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:32.099284887 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:32.099850893 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:32.099891901 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:32.654515982 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.654593945 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.654654026 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.654804945 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.654850006 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.654990911 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.698766947 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.698812962 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.698823929 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.698839903 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.698884010 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.699409008 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.699455023 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.699465990 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.700504065 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.700551033 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.700740099 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.700787067 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.702013016 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.702243090 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.702284098 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.702294111 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.703428984 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.703473091 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.703480959 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.703628063 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.703643084 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.705087900 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.705127954 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.705137014 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.705951929 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.706012964 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.706022024 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.725075960 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.725089073 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.725125074 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.725136042 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.725181103 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.725828886 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.740005016 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.740061998 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:32.740071058 CET	443	49781	2.22.242.216	192.168.2.4
Mar 11, 2025 20:35:32.789674997 CET	49781	443	192.168.2.4	2.22.242.216
Mar 11, 2025 20:35:33.994110107 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:33.996119976 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:33.996153116 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:33.997204065 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:33.997417927 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:33.997695923 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:33.997775078 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:33.997904062 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.040374041 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.049952984 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.049978971 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.096596956 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.446805000 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.446836948 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.447029114 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.447336912 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.447346926 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.559480906 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.559549093 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.559674025 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.576723099 CET	49790	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.576742887 CET	443	49790	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.648886919 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.650099039 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.650125027 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.651168108 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.651232958 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.651941061 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.652018070 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.652323961 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:34.652338982 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:34.706240892 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:35.134632111 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:35.134680986 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:35.134821892 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:35.135169029 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:35.135202885 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:35.222563982 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:35.222630024 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:35.222696066 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:35.223491907 CET	49794	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:35.223517895 CET	443	49794	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:36.817488909 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:36.817931890 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:36.817961931 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:36.818298101 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:36.818814039 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:36.818814039 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:36.818873882 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:36.862313032 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:37.530504942 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:37.539422989 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:37.539470911 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:37.539876938 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:37.546925068 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:37.547010899 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:37.566148043 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:37.571541071 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:37.571616888 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:37.571690083 CET	49786	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:35:37.587081909 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:37.587148905 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:37.587198019 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:37.588706970 CET	49796	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:37.588723898 CET	443	49796	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:37.594388962 CET	49786	443	192.168.2.4	142.250.186.132
Mar 11, 2025 20:35:37.594394922 CET	443	49786	142.250.186.132	192.168.2.4
Mar 11, 2025 20:35:37.612327099 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.128351927 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.128382921 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.128417969 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.128427029 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.128464937 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.128540993 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.128578901 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.128601074 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.258620977 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.258649111 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.258708000 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.258732080 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.258766890 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.258805037 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.351202965 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.351272106 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.351304054 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.351315975 CET	443	49797	13.107.253.42	192.168.2.4
Mar 11, 2025 20:35:38.351341963 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.351380110 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.351829052 CET	49797	443	192.168.2.4	13.107.253.42
Mar 11, 2025 20:35:38.351860046 CET	443	49797	13.107.253.42	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 11, 2025 20:34:22.111408949 CET	53	51385	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:22.168260098 CET	53	54645	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:25.519910097 CET	56684	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:34:25.520117044 CET	56153	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:34:25.526699066 CET	53	56684	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:25.526861906 CET	53	56153	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:25.929222107 CET	53	62465	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:27.440248966 CET	63392	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:34:27.440521002 CET	51783	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:34:27.478970051 CET	53	63392	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:27.479573011 CET	53	51783	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:30.174417019 CET	53	59845	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:30.753771067 CET	59714	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:34:30.754198074 CET	49916	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:34:30.760365963 CET	53	59714	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:30.763025999 CET	53	49916	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:32.966214895 CET	55475	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:34:32.966392040 CET	56583	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:34:32.985439062 CET	53	55475	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:33.003040075 CET	53	56583	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:33.838634968 CET	53	59633	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:34.076205015 CET	53	61013	1.1.1.1	192.168.2.4
Mar 11, 2025 20:34:42.918952942 CET	53	58763	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:01.647051096 CET	58908	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:01.647051096 CET	65504	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:01.690012932 CET	53	58908	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:01.696808100 CET	53	65504	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:01.886332989 CET	53	61655	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:13.052953005 CET	50817	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:13.053114891 CET	55498	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:13.062333107 CET	53	55498	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:13.063333988 CET	53	50817	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:13.557626963 CET	51628	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:13.558078051 CET	51860	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:13.565038919 CET	53	51628	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:13.565931082 CET	53	51860	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:21.156380892 CET	53	52934	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:24.356990099 CET	53	58410	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:25.249531031 CET	52687	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:25.249737024 CET	52227	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:25.256890059 CET	53	52687	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:25.257358074 CET	53	52227	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:26.355041027 CET	53	63166	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:29.900278091 CET	138	138	192.168.2.4	192.168.2.255
Mar 11, 2025 20:35:31.387368917 CET	49584	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:31.387520075 CET	59999	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:31.394783974 CET	53	59999	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:31.395802021 CET	53	49584	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:31.499675989 CET	53	62580	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:36.194334984 CET	56786	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:36.194648981 CET	50284	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:36.201683998 CET	53	56786	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:36.201772928 CET	53	50284	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:37.206491947 CET	57918	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:37.206726074 CET	51218	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:37.213500023 CET	53	51218	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:37.213676929 CET	53	57918	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:39.238357067 CET	54709	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:39.245773077 CET	53	54709	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:40.241935015 CET	54709	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:40.249027967 CET	53	54709	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:41.256217003 CET	54709	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:41.263226986 CET	53	54709	1.1.1.1	192.168.2.4
Mar 11, 2025 20:35:43.268609047 CET	54709	53	192.168.2.4	1.1.1.1
Mar 11, 2025 20:35:43.275603056 CET	53	54709	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 11, 2025 20:34:33.003153086 CET	192.168.2.4	1.1.1.1	c23e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 11, 2025 20:34:25.519910097 CET	192.168.2.4	1.1.1.1	0x4d58	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:25.520117044 CET	192.168.2.4	1.1.1.1	0x4dde	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 11, 2025 20:34:27.440248966 CET	192.168.2.4	1.1.1.1	0x281b	Standard query (0)	start.scholarsapply.org	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:27.440521002 CET	192.168.2.4	1.1.1.1	0x7b7c	Standard query (0)	start.scholarsapply.org	65	IN (0x0001)	false
Mar 11, 2025 20:34:30.753771067 CET	192.168.2.4	1.1.1.1	0xeb35	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:30.754198074 CET	192.168.2.4	1.1.1.1	0x40d1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 11, 2025 20:34:32.966214895 CET	192.168.2.4	1.1.1.1	0xafe7	Standard query (0)	start.scholarsapply.org	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:32.966392040 CET	192.168.2.4	1.1.1.1	0x2c25	Standard query (0)	start.scholarsapply.org	65	IN (0x0001)	false
Mar 11, 2025 20:35:01.647051096 CET	192.168.2.4	1.1.1.1	0x4584	Standard query (0)	a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.647051096 CET	192.168.2.4	1.1.1.1	0x317e	Standard query (0)	a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com	65	IN (0x0001)	false
Mar 11, 2025 20:35:13.052953005 CET	192.168.2.4	1.1.1.1	0xd6df	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:13.053114891 CET	192.168.2.4	1.1.1.1	0x9bf9	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Mar 11, 2025 20:35:13.557626963 CET	192.168.2.4	1.1.1.1	0x1b1c	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:13.558078051 CET	192.168.2.4	1.1.1.1	0xe762	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Mar 11, 2025 20:35:25.249531031 CET	192.168.2.4	1.1.1.1	0xf6f1	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:25.249737024 CET	192.168.2.4	1.1.1.1	0xc9ba	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Mar 11, 2025 20:35:31.387368917 CET	192.168.2.4	1.1.1.1	0xbf37	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:31.387520075 CET	192.168.2.4	1.1.1.1	0xa978	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Mar 11, 2025 20:35:36.194334984 CET	192.168.2.4	1.1.1.1	0x2ac1	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:36.194648981 CET	192.168.2.4	1.1.1.1	0x76d5	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 11, 2025 20:35:37.206491947 CET	192.168.2.4	1.1.1.1	0xbe2f	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:37.206726074 CET	192.168.2.4	1.1.1.1	0xf5d6	Standard query (0)	beacons.gcp.gvt2.com	65	IN (0x0001)	false
Mar 11, 2025 20:35:39.238357067 CET	192.168.2.4	1.1.1.1	0xc7a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:40.241935015 CET	192.168.2.4	1.1.1.1	0xc7a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:41.256217003 CET	192.168.2.4	1.1.1.1	0xc7a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:43.268609047 CET	192.168.2.4	1.1.1.1	0xc7a0	Standard query (0)	beacons.gcp.gvt2.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 11, 2025 20:34:25.526699066 CET	1.1.1.1	192.168.2.4	0x4d58	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:25.526861906 CET	1.1.1.1	192.168.2.4	0x4dde	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 11, 2025 20:34:27.478970051 CET	1.1.1.1	192.168.2.4	0x281b	No error (0)	start.scholarsapply.org		3.140.204.200	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:27.478970051 CET	1.1.1.1	192.168.2.4	0x281b	No error (0)	start.scholarsapply.org		3.17.33.17	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:27.478970051 CET	1.1.1.1	192.168.2.4	0x281b	No error (0)	start.scholarsapply.org		3.137.90.211	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:30.760365963 CET	1.1.1.1	192.168.2.4	0xeb35	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:30.760365963 CET	1.1.1.1	192.168.2.4	0xeb35	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:30.760365963 CET	1.1.1.1	192.168.2.4	0xeb35	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:30.760365963 CET	1.1.1.1	192.168.2.4	0xeb35	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:32.985439062 CET	1.1.1.1	192.168.2.4	0xafe7	No error (0)	start.scholarsapply.org		3.17.33.17	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:32.985439062 CET	1.1.1.1	192.168.2.4	0xafe7	No error (0)	start.scholarsapply.org		3.137.90.211	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:34:32.985439062 CET	1.1.1.1	192.168.2.4	0xafe7	No error (0)	start.scholarsapply.org		3.140.204.200	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com	ak.privatelink.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	ak.privatelink.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	www.tm.a.prd.aadg.akadns.net		20.190.160.66	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.32.76	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.32.72	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.32.134	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	www.tm.a.prd.aadg.akadns.net		20.190.160.5	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.32.68	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.32.136	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.690012932 CET	1.1.1.1	192.168.2.4	0x4584	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.32.138	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:01.696808100 CET	1.1.1.1	192.168.2.4	0x317e	No error (0)	a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com	ak.privatelink.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:01.696808100 CET	1.1.1.1	192.168.2.4	0x317e	No error (0)	ak.privatelink.msidentity.com	www.tm.a.prd.aadg.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:05.736654997 CET	1.1.1.1	192.168.2.4	0x5b30	No error (0)	firstparty-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:05.736654997 CET	1.1.1.1	192.168.2.4	0x5b30	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:05.736654997 CET	1.1.1.1	192.168.2.4	0x5b30	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:05.737449884 CET	1.1.1.1	192.168.2.4	0xc70	No error (0)	firstparty-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.062333107 CET	1.1.1.1	192.168.2.4	0x9bf9	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.062333107 CET	1.1.1.1	192.168.2.4	0x9bf9	No error (0)	nel.measure.office.net.edgesuite.net	a1894.dscb.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.063333988 CET	1.1.1.1	192.168.2.4	0xd6df	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.063333988 CET	1.1.1.1	192.168.2.4	0xd6df	No error (0)	nel.measure.office.net.edgesuite.net	a1894.dscb.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.063333988 CET	1.1.1.1	192.168.2.4	0xd6df	No error (0)	a1894.dscb.akamai.net		72.247.154.153	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:13.063333988 CET	1.1.1.1	192.168.2.4	0xd6df	No error (0)	a1894.dscb.akamai.net		72.247.154.152	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:13.565038919 CET	1.1.1.1	192.168.2.4	0x1b1c	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.565038919 CET	1.1.1.1	192.168.2.4	0x1b1c	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.565038919 CET	1.1.1.1	192.168.2.4	0x1b1c	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.565038919 CET	1.1.1.1	192.168.2.4	0x1b1c	No error (0)	e329293.dscd.akamaiedge.net		2.22.242.216	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:13.565038919 CET	1.1.1.1	192.168.2.4	0x1b1c	No error (0)	e329293.dscd.akamaiedge.net		2.22.242.18	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:13.565931082 CET	1.1.1.1	192.168.2.4	0xe762	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.565931082 CET	1.1.1.1	192.168.2.4	0xe762	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:13.565931082 CET	1.1.1.1	192.168.2.4	0xe762	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.256890059 CET	1.1.1.1	192.168.2.4	0xf6f1	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.256890059 CET	1.1.1.1	192.168.2.4	0xf6f1	No error (0)	aadcdn-msft.azureedge.net	aadcdn-msft.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.256890059 CET	1.1.1.1	192.168.2.4	0xf6f1	No error (0)	aadcdn-msft.afd.azureedge.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.256890059 CET	1.1.1.1	192.168.2.4	0xf6f1	No error (0)	firstparty-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.256890059 CET	1.1.1.1	192.168.2.4	0xf6f1	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.256890059 CET	1.1.1.1	192.168.2.4	0xf6f1	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:25.257358074 CET	1.1.1.1	192.168.2.4	0xc9ba	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.257358074 CET	1.1.1.1	192.168.2.4	0xc9ba	No error (0)	aadcdn-msft.azureedge.net	aadcdn-msft.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.257358074 CET	1.1.1.1	192.168.2.4	0xc9ba	No error (0)	aadcdn-msft.afd.azureedge.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:25.257358074 CET	1.1.1.1	192.168.2.4	0xc9ba	No error (0)	firstparty-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.394783974 CET	1.1.1.1	192.168.2.4	0xa978	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.394783974 CET	1.1.1.1	192.168.2.4	0xa978	No error (0)	aadcdn-msft.azureedge.net	aadcdn-msft.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.394783974 CET	1.1.1.1	192.168.2.4	0xa978	No error (0)	aadcdn-msft.afd.azureedge.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.394783974 CET	1.1.1.1	192.168.2.4	0xa978	No error (0)	firstparty-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.395802021 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.395802021 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	aadcdn-msft.azureedge.net	aadcdn-msft.afd.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.395802021 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	aadcdn-msft.afd.azureedge.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.395802021 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	firstparty-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0048.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.395802021 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	shed.dual-low.s-part-0048.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.395802021 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	azurefd-t-fb-prod.trafficmanager.net	dual.s-part-0014.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.395802021 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	dual.s-part-0014.t-0009.fb-t-msedge.net	s-part-0014.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:31.395802021 CET	1.1.1.1	192.168.2.4	0xbf37	No error (0)	s-part-0014.t-0009.fb-t-msedge.net		13.107.253.42	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:36.201683998 CET	1.1.1.1	192.168.2.4	0x2ac1	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:36.201683998 CET	1.1.1.1	192.168.2.4	0x2ac1	No error (0)	beacons-handoff.gcp.gvt2.com		142.250.180.67	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:36.201772928 CET	1.1.1.1	192.168.2.4	0x76d5	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:37.213500023 CET	1.1.1.1	192.168.2.4	0xf5d6	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:37.213676929 CET	1.1.1.1	192.168.2.4	0xbe2f	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:37.213676929 CET	1.1.1.1	192.168.2.4	0xbe2f	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.67	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:39.245773077 CET	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:39.245773077 CET	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:40.249027967 CET	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:40.249027967 CET	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:41.263226986 CET	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:41.263226986 CET	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	beacons-handoff.gcp.gvt2.com		142.251.143.35	A (IP address)	IN (0x0001)	false
Mar 11, 2025 20:35:43.275603056 CET	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	beacons.gcp.gvt2.com	beacons-handoff.gcp.gvt2.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2025 20:35:43.275603056 CET	1.1.1.1	192.168.2.4	0xc7a0	No error (0)	beacons-handoff.gcp.gvt2.com		216.58.206.35	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

start.scholarsapply.org

code.jquery.com

a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com

identity.nel.measure.office.net

aadcdn.msftauthimages.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49732	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:29 UTC	673	OUT	GET / HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:34:30 UTC	930	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; Expires=Tue, 18 Mar 2025 19:34:29 GMT; Path=/ Set-Cookie: AWSALBCORS=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; Expires=Tue, 18 Mar 2025 19:34:29 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; path=/; secure; HttpOnly X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:30 UTC	11166	IN	Data Raw: 32 62 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 0a 09 09 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 33 52 36 33 44 5a 52 4d 38 39 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 73 63 72 69 70 74 3e 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 Data Ascii: 2b96<!DOCTYPE html><html lang="en"><head>... Google tag (gtag.js) --><script async src="https://www.googletagmanager.com/gtag/js?id=G-3R63DZRM89"></script><script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(ar
2025-03-11 19:34:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49733	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:30 UTC	898	OUT	GET /css/unicorn.css?mod=1738585068 HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; AWSALBCORS=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; PHPSESSID=ok7bc3hcjjk7hea56hgbievuum
2025-03-11 19:34:30 UTC	863	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:30 GMT Content-Type: text/css Content-Length: 35890 Connection: close Set-Cookie: AWSALB=1atDUztlTZFFaXMlKMIgB7+tInEMrxt7irRspJkdVAuZHyxGu6BZ0LI+z08/5zmo7jg6KJZWIgS0OTeEKsAI3Ley/yrnmyifPzB3RwCvbl2oqnEyzq7thy4mpwyh; Expires=Tue, 18 Mar 2025 19:34:30 GMT; Path=/ Set-Cookie: AWSALBCORS=1atDUztlTZFFaXMlKMIgB7+tInEMrxt7irRspJkdVAuZHyxGu6BZ0LI+z08/5zmo7jg6KJZWIgS0OTeEKsAI3Ley/yrnmyifPzB3RwCvbl2oqnEyzq7thy4mpwyh; Expires=Tue, 18 Mar 2025 19:34:30 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:30 GMT Vary: Accept-Encoding Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:30 UTC	15521	IN	Data Raw: 2f 2a 0a 30 30 2e 20 4e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 28 6d 69 6e 69 66 69 65 64 29 0a 30 31 2e 20 47 6c 6f 62 61 6c 20 52 65 73 65 74 73 0a 30 32 2e 20 47 72 69 64 20 53 79 73 74 65 6d 0a 30 33 2e 20 54 68 65 6d 65 20 28 6d 6f 62 69 6c 65 20 66 69 72 73 74 29 0a 2d 20 30 33 61 2e 20 54 68 65 6d 65 20 47 6c 6f 62 61 6c 73 0a 2d 20 30 33 62 2e 20 54 68 65 6d 65 20 55 49 0a 2d 20 30 33 63 2e 20 54 68 65 6d 65 20 43 6f 6d 70 6f 6e 6e 65 6e 74 73 0a 2d 20 30 33 64 2e 20 33 72 64 20 50 61 72 74 79 20 43 6f 6d 70 6f 6e 65 6e 65 74 73 20 28 6a 71 75 65 72 79 2c 20 65 74 63 29 0a 2d 20 30 33 65 2e 20 50 61 67 65 20 53 70 65 63 69 66 69 63 0a 30 34 2e 20 54 61 62 6c 65 74 0a 2d 20 30 34 61 2e 20 54 61 62 6c 65 74 20 47 72 69 64 20 53 79 73 74 65 6d 0a 2d Data Ascii: /*00. Normalize.css (minified)01. Global Resets02. Grid System03. Theme (mobile first)- 03a. Theme Globals- 03b. Theme UI- 03c. Theme Componnents- 03d. 3rd Party Componenets (jquery, etc)- 03e. Page Specific04. Tablet- 04a. Tablet Grid System-
2025-03-11 19:34:30 UTC	10893	IN	Data Raw: 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 20 23 63 39 34 34 34 36 20 30 25 2c 23 62 32 30 30 30 30 20 31 30 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 20 23 63 39 34 34 34 36 20 30 25 2c 23 62 32 30 30 30 30 20 31 30 30 25 29 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 0a 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 2d 63 6c 6f 73 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 62 32 63 32 66 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 62 32 63 32 66 3b Data Ascii: kit-linear-gradient(top, #c94446 0%,#b20000 100%); background: linear-gradient(to bottom, #c94446 0%,#b20000 100%); color: #fff;}.ui-dialog-titlebar-close { background: #fff; border: 1px solid #cb2c2f; border-radius: 10px; color: #cb2c2f;
2025-03-11 19:34:30 UTC	9476	IN	Data Raw: 0a 20 20 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 0a 20 20 2e 73 69 64 65 62 61 72 31 2c 0a 20 20 2e 73 69 64 65 62 61 72 32 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 0a 20 20 2f 2a 20 46 6f 6f 74 65 72 20 2a 2f 0a 0a 20 20 2e 66 6f 6f 74 65 72 32 20 7b 0a 0a 20 20 7d 0a 0a 20 20 2f 2a 20 53 63 68 6f 6c 61 72 73 68 69 70 73 20 50 61 67 65 20 2a 2f 0a 0a 20 20 2e 73 63 68 6f 6c 61 72 73 68 69 70 2d 6c 69 73 74 2d 69 74 65 6d 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 7d 0a 0a 20 20 2e 73 63 68 6f 6c 61 72 73 68 69 70 2d 69 6d 61 67 65 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 37 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 Data Ascii: .main-content, .sidebar1, .sidebar2 { width: 100%; } /* Footer / .footer2 { } / Scholarships Page */ .scholarship-list-item { overflow: hidden; } .scholarship-image { float: left; min-height: 170px; width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49735	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:32 UTC	895	OUT	GET /css/fapi.css?mod=1738585068 HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; AWSALBCORS=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; PHPSESSID=ok7bc3hcjjk7hea56hgbievuum
2025-03-11 19:34:32 UTC	862	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:32 GMT Content-Type: text/css Content-Length: 2354 Connection: close Set-Cookie: AWSALB=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy; Expires=Tue, 18 Mar 2025 19:34:32 GMT; Path=/ Set-Cookie: AWSALBCORS=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy; Expires=Tue, 18 Mar 2025 19:34:32 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:32 GMT Vary: Accept-Encoding Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:32 UTC	2354	IN	Data Raw: 2e 70 61 67 65 2d 67 72 6f 75 70 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 35 70 78 3b 0a 7d 0a 0a 2e 70 61 67 65 2d 67 72 6f 75 70 20 6c 65 67 65 6e 64 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 2e 73 65 63 74 69 6f 6e 2d 67 72 6f 75 70 20 7b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 73 65 63 74 69 6f 6e 2d 67 72 6f 75 70 20 6c 65 67 65 6e 64 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 20 30 20 30 3b 0a 7d 0a 0a 2e 73 65 63 74 69 6f 6e 2d 67 72 6f 75 70 20 3e 20 2e 69 6e 73 74 72 75 63 74 69 6f Data Ascii: .page-group {margin: 0 0 15px;}.page-group legend {font-weight: bold;}.page-content {margin: 0 0 10px;}.section-group {border: none;margin: 0;padding: 0;}.section-group legend {padding: 0 10px 0 0;}.section-group > .instructio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49736	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:32 UTC	950	OUT	GET /images/sa-logo-secondary-reverse.png HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; AWSALBCORS=DiLEWIlktACA5Xd9SOhD7y73g8meMaUI1PuOTGDTM1/HpD0M1Eh+iuR3pFRIjZ6ZOIMFmZ4bzJnKawMs04zkD+PZXxp7M+l2ttfqaFbIEXkGosPsqNyBtUDK3Vwu; PHPSESSID=ok7bc3hcjjk7hea56hgbievuum
2025-03-11 19:34:32 UTC	840	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:32 GMT Content-Type: image/png Content-Length: 9231 Connection: close Set-Cookie: AWSALB=Mp0HKuNR6o6igndrg8JIlCNt3rqe9MzxDSd4B7hSZ8u1q1zHV+QWb0ARerhmot1RdpG/lYbgZdvjEx0EEcuZlqdNx73Si+nOvt8pcWlo9V2rLkup5quzFe8Tw2hH; Expires=Tue, 18 Mar 2025 19:34:32 GMT; Path=/ Set-Cookie: AWSALBCORS=Mp0HKuNR6o6igndrg8JIlCNt3rqe9MzxDSd4B7hSZ8u1q1zHV+QWb0ARerhmot1RdpG/lYbgZdvjEx0EEcuZlqdNx73Si+nOvt8pcWlo9V2rLkup5quzFe8Tw2hH; Expires=Tue, 18 Mar 2025 19:34:32 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:32 GMT Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:32 UTC	9231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 36 00 00 00 46 08 06 00 00 00 46 e9 b8 dc 00 00 20 00 49 44 41 54 78 9c ec d4 21 0a 80 40 14 04 d0 b7 98 3d 85 d9 13 78 29 c1 e6 75 3c 90 c1 2b 08 16 9b 55 59 11 b4 68 55 30 ec 8b 1f 86 99 f4 83 9b 18 e3 fd f4 a6 0a 0b 46 34 68 b1 61 40 81 fc ec 5a 91 e1 da 37 63 42 79 4c 44 8d ee cc 1c f9 fe cb d1 49 92 fc 53 08 8f 17 06 76 00 00 00 ff ff a2 67 c1 16 cb c0 c0 b0 10 5a 30 81 0a 2a 31 0a cd 7b 05 35 e3 1b 03 03 43 10 03 03 c3 4e 2a b9 73 14 8c 82 51 30 44 00 d6 82 8d 81 81 01 00 00 00 ff ff a2 75 c1 d6 07 6d 55 7d 81 16 3e 1c 34 0a 2f 50 2b 70 33 b4 c5 77 8a 81 81 a1 85 46 f6 8c 82 51 30 0a 06 11 c0 5a b0 31 30 30 00 00 00 00 ff ff a2 65 c1 56 08 2d d8 06 02 44 33 30 30 2c 1b 4d 80 a3 60 14 0c 6f 80 Data Ascii: PNGIHDR6FF IDATx!@=x)u<+UYhU0F4ha@Z7cByLDISvgZ01{5CNsQ0DumU}>4/P+p3wFQ0Z100eV-D300,M`o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	151.101.130.137	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:32 UTC	586	OUT	GET /jquery-3.7.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://start.scholarsapply.org sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:34:33 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 87533 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-155ed" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 11 Mar 2025 19:34:33 GMT Age: 3563352 X-Served-By: cache-lga21978-LGA, cache-dfw-kdfw8210145-DFW X-Cache: HIT, HIT X-Cache-Hits: 6575, 36 X-Timer: S1741721673.110474,VS0,VE0 Vary: Accept-Encoding
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 63 65 2e 66 6e 3d 63 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 74 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 63 65 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 61 65 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e Data Ascii: ==t.toLowerCase()}ce.fn=ce.prototype={jquery:t,constructor:ce,length:0,toArray:function(){return ae.call(this)},get:function(e){return null==e?ae.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=ce.merge(this.constructor(),e);return
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 22 2b 28 74 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 69 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 75 65 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: "+(t+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==i.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=ue.call(t,"constructor")&&t.constructor
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 74 75 72 6e 20 67 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 6c 65 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 63 65 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 6f 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 63 65 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 76 61 72 20 70 65 3d 6f 65 2e Data Ascii: turn g(a)},guid:1,support:le}),"function"==typeof Symbol&&(ce.fn[Symbol.iterator]=oe[Symbol.iterator]),ce.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var pe=oe.
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 2c 22 2b 67 65 2b 22 2a 22 29 2c 6d 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 67 65 2b 22 29 22 2b 67 65 2b 22 2a 22 29 2c 78 3d 6e 65 77 20 52 65 67 45 78 70 28 67 65 2b 22 7c 3e 22 29 2c 6a 3d 6e 65 77 20 52 65 67 45 78 70 28 67 29 2c 41 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 74 2b 22 24 22 29 2c 44 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 74 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 74 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 74 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 70 29 2c 50 53 45 55 44 4f Data Ascii: gExp("^"+ge+","+ge+""),m=new RegExp("^"+ge+"([>+~]\|"+ge+")"+ge+""),x=new RegExp(ge+"\|>"),j=new RegExp(g),A=new RegExp("^"+t+"$"),D={ID:new RegExp("^#("+t+")"),CLASS:new RegExp("^\\.("+t+")"),TAG:new RegExp("^("+t+"\|[*])"),ATTR:new RegExp("^"+p),PSEUDO
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 26 28 75 3d 4c 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6b 2e 63 61 6c 6c 28 6e 2c 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 66 26 26 28 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6b 2e 63 61 6c 6c 28 6e 2c 61 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 29 2c 6e 3b 69 66 28 28 69 3d 75 Data Ascii: &(u=L.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return k.call(n,a),n}else if(f&&(a=f.getElementById(i))&&I.contains(e,a)&&a.id===i)return k.call(n,a),n}else{if(u[2])return k.apply(n,e.getElementsByTagName(t)),n;if((i=u
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 65 29 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 28 61 29 7b 72 65 74 75 72 6e 20 46 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 46 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 Data Ascii: e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function X(a){return F(function(o){return o=+o,F(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function U(e){return e&&"undefined"!=typeof e.getElementsByT
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 3b 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 65 29 2c 72 3d 30 3b 77 68 69 6c 65 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 Data Ascii: ((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTa
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 6c 65 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 3d 54 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 79 65 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 79 65 2c 65 29 3f 2d 31 3a 74 3d 3d 3d 54 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 79 65 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 79 65 2c 74 29 3f 31 3a 6f 3f 73 65 2e 63 61 6c 6c 28 6f 2c 65 29 2d 73 65 2e 63 61 6c 6c 28 6f 2c 74 29 3a 30 3a 34 26 Data Ascii: =(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!le.sortDetached&&t.compareDocumentPosition(e)===n?e===T\|\|e.ownerDocument==ye&&I.contains(ye,e)?-1:t===T\|\|t.ownerDocument==ye&&I.contains(ye,t)?1:o?se.call(o,e)-se.call(o,t):0:4&
2025-03-11 19:34:33 UTC	1378	IN	Data Raw: 72 3a 7b 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 2c 65 5b 33 5d 3d 28 65 5b 33 5d 7c 7c 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 2c 22 7e 3d 22 3d 3d 3d 65 5b 32 5d 26 26 28 65 5b 33 5d 3d 22 20 22 2b 65 5b 33 5d 2b 22 20 22 29 2c 65 2e 73 6c 69 63 65 28 30 2c 34 29 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 6e 74 68 22 3d 3d 3d 65 5b 31 5d 2e 73 6c 69 63 65 28 30 2c 33 29 3f 28 65 5b 33 5d 7c 7c 49 2e 65 72 72 6f 72 28 65 5b 30 5d 29 2c 65 5b 34 5d 3d 2b 28 65 5b 34 5d 3f 65 5b 35 5d 2b 28 65 5b 36 5d 7c Data Ascii: r:{ATTR:function(e){return e[1]=e[1].replace(O,P),e[3]=(e[3]\|\|e[4]\|\|e[5]\|\|"").replace(O,P),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]\|\|I.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49740	151.101.130.137	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:32 UTC	593	OUT	GET /ui/1.13.2/jquery-ui.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://start.scholarsapply.org sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:34:33 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 255084 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-3e46c" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2062569 Date: Tue, 11 Mar 2025 19:34:33 GMT X-Served-By: cache-lga13623-LGA, cache-dfw-kdfw8210054-DFW X-Cache: HIT, HIT X-Cache-Hits: 586, 0 X-Timer: S1741721673.124609,VS0,VE1 Vary: Accept-Encoding
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 74 5b 31 5d 2c 74 5b 32 5d 2f 31 30 30 2c 74 5b 33 5d 2f 31 30 30 2c 74 5b 34 5d 5d 7d 7d 5d 2c 6d 3d 64 2e 43 6f 6c 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 73 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 64 2e 43 6f 6c 6f 72 2e 66 6e 2e 70 61 72 73 65 28 74 2c 65 2c 69 2c 73 29 7d 2c 5f 3d 7b 72 67 62 61 3a 7b 70 72 6f 70 73 3a 7b 72 65 64 3a 7b 69 64 78 3a 30 2c 74 79 70 65 3a 22 62 79 74 65 22 7d 2c 67 72 65 65 6e 3a 7b 69 64 78 3a 31 2c 74 79 70 65 3a 22 62 79 74 65 22 7d 2c 62 6c 75 65 3a 7b 69 64 78 3a 32 2c 74 79 70 65 3a 22 62 79 74 65 22 7d 7d 7d 2c 68 73 6c 61 3a 7b 70 72 6f 70 73 3a 7b 68 75 65 3a 7b 69 64 78 3a 30 2c 74 79 70 65 3a 22 64 65 67 72 65 65 73 22 7d Data Ascii: parse:function(t){return[t[1],t[2]/100,t[3]/100,t[4]]}}],m=d.Color=function(t,e,i,s){return new d.Color.fn.parse(t,e,i,s)},_={rgba:{props:{red:{idx:0,type:"byte"},green:{idx:1,type:"byte"},blue:{idx:2,type:"byte"}}},hsla:{props:{hue:{idx:0,type:"degrees"}
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 6f 6e 3a 74 2e 64 75 72 61 74 69 6f 6e 2c 65 61 73 69 6e 67 3a 74 2e 65 61 73 69 6e 67 2c 63 6f 6d 70 6c 65 74 65 3a 65 7d 29 7d 29 2c 56 2e 65 66 66 65 63 74 73 2e 64 65 66 69 6e 65 28 22 62 6f 75 6e 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 73 2c 6e 3d 56 28 74 68 69 73 29 2c 6f 3d 74 2e 6d 6f 64 65 2c 61 3d 22 68 69 64 65 22 3d 3d 3d 6f 2c 72 3d 22 73 68 6f 77 22 3d 3d 3d 6f 2c 6c 3d 74 2e 64 69 72 65 63 74 69 6f 6e 7c 7c 22 75 70 22 2c 68 3d 74 2e 64 69 73 74 61 6e 63 65 2c 63 3d 74 2e 74 69 6d 65 73 7c 7c 35 2c 6f 3d 32 2a 63 2b 28 72 7c 7c 61 3f 31 3a 30 29 2c 75 3d 74 2e 64 75 72 61 74 69 6f 6e 2f 6f 2c 64 3d 74 2e 65 61 73 69 6e 67 2c 70 3d 22 75 70 22 3d 3d 3d 6c 7c 7c 22 64 6f 77 6e 22 3d 3d 3d 6c 3f 22 74 6f 70 22 Data Ascii: on:t.duration,easing:t.easing,complete:e})}),V.effects.define("bounce",function(t,e){var i,s,n=V(this),o=t.mode,a="hide"===o,r="show"===o,l=t.direction\|\|"up",h=t.distance,c=t.times\|\|5,o=2*c+(r\|\|a?1:0),u=t.duration/o,d=t.easing,p="up"===l\|\|"down"===l?"top"
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 63 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 68 69 73 2e 68 65 61 64 65 72 73 2e 65 71 28 74 29 3a 56 28 29 7d 2c 5f 73 65 74 75 70 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 6b 65 79 64 6f 77 6e 3a 22 5f 6b 65 79 64 6f 77 6e 22 7d 3b 74 26 26 56 2e 65 61 63 68 28 74 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 5b 65 5d 3d 22 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 22 7d 29 2c 74 68 69 73 2e 5f 6f 66 66 28 74 68 69 73 2e 68 65 61 64 65 72 73 2e 61 64 64 28 74 68 69 73 2e 68 65 61 64 65 72 73 2e 6e 65 78 74 28 29 29 29 2c 74 68 69 73 2e 5f 6f 6e 28 74 68 69 73 2e 68 65 61 64 65 72 73 2c 69 29 2c 74 68 Data Ascii: ctive:function(t){return"number"==typeof t?this.headers.eq(t):V()},_setupEvents:function(t){var i={keydown:"_keydown"};t&&V.each(t.split(" "),function(t,e){i[e]="_eventHandler"}),this._off(this.headers.add(this.headers.next())),this._on(this.headers,i),th
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 65 22 3d 3d 3d 74 26 26 74 68 69 73 2e 5f 69 6e 69 74 53 6f 75 72 63 65 28 29 2c 22 61 70 70 65 6e 64 54 6f 22 3d 3d 3d 74 26 26 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 5f 61 70 70 65 6e 64 54 6f 28 29 29 2c 22 64 69 73 61 62 6c 65 64 22 3d 3d 3d 74 26 26 65 26 26 74 68 69 73 2e 78 68 72 26 26 74 68 69 73 2e 78 68 72 2e 61 62 6f 72 74 28 29 7d 2c 5f 69 73 45 76 65 6e 74 54 61 72 67 65 74 49 6e 57 69 64 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 5b 30 5d 3b 72 65 74 75 72 6e 20 74 2e 74 61 72 67 65 74 3d 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 7c 7c 74 2e 74 61 72 67 65 74 3d 3d 3d 65 7c 7c 56 2e 63 6f 6e 74 61 69 6e Data Ascii: e"===t&&this._initSource(),"appendTo"===t&&this.menu.element.appendTo(this._appendTo()),"disabled"===t&&e&&this.xhr&&this.xhr.abort()},_isEventTargetInWidget:function(t){var e=this.menu.element[0];return t.target===this.element[0]\|\|t.target===e\|\|V.contain
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 73 2e 74 65 78 74 26 26 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 65 78 74 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 68 6f 77 4c 61 62 65 6c 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 7c 7c 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 73 2e 70 72 69 6d 61 72 79 26 26 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 73 2e 73 65 63 6f 6e 64 61 72 79 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 26 26 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 73 2e 70 72 69 6d 61 72 79 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 29 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 73 2e 70 72 69 6d 61 72 79 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 6f 6e 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 63 Data Ascii: s.text&&(this.options.text=this.options.showLabel),this.options.icon\|\|!this.options.icons.primary&&!this.options.icons.secondary?this.options.icon&&(this.options.icons.primary=this.options.icon):this.options.icons.primary?this.options.icon=this.options.ic
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 69 6e 70 75 74 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 2c 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 63 75 72 49 6e 73 74 3d 6e 29 29 29 7d 2c 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 6d 61 78 52 6f 77 73 3d 34 2c 28 69 74 3d 74 29 2e 64 70 44 69 76 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 67 65 6e 65 72 61 74 65 48 54 4d 4c 28 74 29 29 2c 74 68 69 73 2e 5f 61 74 74 61 63 68 48 61 6e 64 6c 65 72 73 28 74 29 3b 76 61 72 20 65 2c 69 3d 74 68 69 73 2e 5f 67 65 74 4e 75 6d 62 65 72 4f 66 4d 6f 6e 74 68 73 28 74 29 2c 73 3d 69 5b 31 5d 2c 6e 3d 74 2e 64 70 44 69 76 2e 66 69 6e 64 28 22 2e 22 2b 74 68 69 73 2e 5f 64 61 79 4f 76 65 72 43 6c 61 73 73 2b 22 20 61 22 Data Ascii: input.trigger("focus"),V.datepicker._curInst=n)))},_updateDatepicker:function(t){this.maxRows=4,(it=t).dpDiv.empty().append(this._generateHTML(t)),this._attachHandlers(t);var e,i=this._getNumberOfMonths(t),s=i[1],n=t.dpDiv.find("."+this._dayOverClass+" a"
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 3d 3d 4b 29 26 26 21 64 7c 7c 21 53 5b 30 5d 7c 7c 6a 26 26 54 3c 6a 7c 7c 71 26 26 71 3c 54 2c 4d 2b 3d 22 3c 74 64 20 63 6c 61 73 73 3d 27 22 2b 28 35 3c 3d 28 67 2b 6e 2b 36 29 25 37 3f 22 20 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 77 65 65 6b 2d 65 6e 64 22 3a 22 22 29 2b 28 48 3f 22 20 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6f 74 68 65 72 2d 6d 6f 6e 74 68 22 3a 22 22 29 2b 28 54 2e 67 65 74 54 69 6d 65 28 29 3d 3d 3d 62 2e 67 65 74 54 69 6d 65 28 29 26 26 4b 3d 3d 3d 74 2e 73 65 6c 65 63 74 65 64 4d 6f 6e 74 68 26 26 74 2e 5f 6b 65 79 45 76 65 6e 74 7c 7c 70 2e 67 65 74 54 69 6d 65 28 29 3d 3d 3d 54 2e 67 65 74 54 69 6d 65 28 29 26 26 70 2e 67 65 74 54 69 6d 65 28 29 3d 3d 3d 62 2e 67 65 74 54 69 6d 65 28 29 3f 22 20 22 2b 74 68 69 73 2e 5f 64 Data Ascii: ==K)&&!d\|\|!S[0]\|\|j&&T<j\|\|q&&q<T,M+="<td class='"+(5<=(g+n+6)%7?" ui-datepicker-week-end":"")+(H?" ui-datepicker-other-month":"")+(T.getTime()===b.getTime()&&K===t.selectedMonth&&t._keyEvent\|\|p.getTime()===T.getTime()&&p.getTime()===b.getTime()?" "+this._d
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 69 76 65 43 6f 6e 74 61 69 6e 65 72 3d 6e 75 6c 6c 2c 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 3f 22 77 69 6e 64 6f 77 22 21 3d 3d 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 3f 22 64 6f 63 75 6d 65 6e 74 22 21 3d 3d 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 3f 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 3f 28 22 70 61 72 65 6e 74 22 3d 3d 3d 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 26 26 28 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 3d 74 68 69 73 2e 68 65 6c 70 65 72 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 28 69 3d 28 65 3d 56 28 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 29 29 5b 30 5d 29 26 26 28 74 3d 2f 28 73 63 72 6f 6c 6c 7c 61 75 74 6f 29 2f 2e 74 65 73 74 28 65 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 Data Ascii: iveContainer=null,s.containment?"window"!==s.containment?"document"!==s.containment?s.containment.constructor!==Array?("parent"===s.containment&&(s.containment=this.helper[0].parentNode),(i=(e=V(s.containment))[0])&&(t=/(scroll\|auto)/.test(e.css("overflow
2025-03-11 19:34:33 UTC	16384	IN	Data Raw: 74 3a 6e 2e 68 65 69 67 68 74 28 29 7d 2c 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 53 69 7a 65 3d 74 68 69 73 2e 5f 68 65 6c 70 65 72 3f 7b 77 69 64 74 68 3a 6e 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 7d 3a 7b 77 69 64 74 68 3a 6e 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 6e 2e 68 65 69 67 68 74 28 29 7d 2c 74 68 69 73 2e 73 69 7a 65 44 69 66 66 3d 7b 77 69 64 74 68 3a 6e 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2d 6e 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2d 6e 2e 68 65 69 67 68 74 28 29 7d 2c 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 3d 7b 6c 65 66 74 3a 65 2c 74 6f 70 3a 69 7d 2c 74 68 69 73 2e 6f 72 69 67 69 Data Ascii: t:n.height()},this.originalSize=this._helper?{width:n.outerWidth(),height:n.outerHeight()}:{width:n.width(),height:n.height()},this.sizeDiff={width:n.outerWidth()-n.width(),height:n.outerHeight()-n.height()},this.originalPosition={left:e,top:i},this.origi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49738	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:32 UTC	948	OUT	GET /images/sa-logo-primary-reverse.png HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=1atDUztlTZFFaXMlKMIgB7+tInEMrxt7irRspJkdVAuZHyxGu6BZ0LI+z08/5zmo7jg6KJZWIgS0OTeEKsAI3Ley/yrnmyifPzB3RwCvbl2oqnEyzq7thy4mpwyh; AWSALBCORS=1atDUztlTZFFaXMlKMIgB7+tInEMrxt7irRspJkdVAuZHyxGu6BZ0LI+z08/5zmo7jg6KJZWIgS0OTeEKsAI3Ley/yrnmyifPzB3RwCvbl2oqnEyzq7thy4mpwyh
2025-03-11 19:34:33 UTC	841	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:33 GMT Content-Type: image/png Content-Length: 17138 Connection: close Set-Cookie: AWSALB=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa; Expires=Tue, 18 Mar 2025 19:34:33 GMT; Path=/ Set-Cookie: AWSALBCORS=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa; Expires=Tue, 18 Mar 2025 19:34:33 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:33 GMT Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:33 UTC	15543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 cd 08 06 00 00 00 1b bc f4 69 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 05 c9 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 62 37 63 36 34 63 63 2c 20 32 30 32 34 2f 30 37 2f 31 36 2d 30 37 3a 35 39 3a 34 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDRipHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.b7c64cc, 2024/07/16-07:59:40 "> <rdf:R
2025-03-11 19:34:33 UTC	1595	IN	Data Raw: 4e 3f fd f4 56 5f f3 56 4a 44 ba 90 24 d9 43 be 85 a3 a2 18 8d 33 ae ec 8a 1f f2 42 6a e7 ef 6a 16 cb 31 79 f1 57 78 9d 71 3f 66 2b 2f a0 14 38 d6 8f 05 f7 29 6c 4d 9c 55 e3 7c 1b e3 8c 96 a1 a0 2c c2 02 19 a6 b8 5a 1a fc bd 01 fe 70 17 07 fb 4c 09 fa 12 ad e8 dc 17 1c 97 67 6c c9 5a f8 99 9e 85 85 35 8f 88 dd 6a e8 c7 f7 3b 0f 5b 0c 7f 19 5c b7 88 2a 76 75 d1 25 15 65 cc 4a 85 69 f8 c3 78 23 5e 3c 4e a3 38 e1 09 71 3e 66 e5 3e 4d eb 2a a1 8d c4 26 de dd 70 51 ab 79 98 2d 5c ab 2e e6 1e 98 01 bc 1d fe 68 ee c6 74 9e 78 80 5d 2f 66 20 af c0 03 42 d4 c2 57 c4 cb 1d 85 d7 57 9f c0 d1 aa 45 66 e1 19 c4 66 fb db 31 63 fb 2a aa e7 af 6b 19 da 2d 34 51 6c 89 17 90 79 d6 f8 ac 86 d9 c0 f7 70 6e 83 17 29 66 e6 c9 8a 09 58 60 46 61 53 7d da 02 ae 45 61 24 56 fb 0e Data Ascii: N?V_VJD$C3Bjj1yWxq?f+/8)lMU\|,ZpLglZ5j;[\vu%eJix#^<N8q>f>M&pQy-\.htx]/f BWWEff1c*k-4Qlypn)fX`FaS}Ea$V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:34 UTC	884	OUT	GET /js/framework.js?mod=1738585068 HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy; AWSALBCORS=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy
2025-03-11 19:34:35 UTC	876	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:35 GMT Content-Type: application/javascript Content-Length: 6438 Connection: close Set-Cookie: AWSALB=Nw60apzioh48zB79WfH3sxt6gSR6Ty64EQVXmxz5Evv/DEqj40Qi455B7C/ZyQHe/GdqIYMb4765XVUYuTqNji+OXZob19Auc6B+m3OmbzqFff5Qyztgi3GQ/ZZm; Expires=Tue, 18 Mar 2025 19:34:34 GMT; Path=/ Set-Cookie: AWSALBCORS=Nw60apzioh48zB79WfH3sxt6gSR6Ty64EQVXmxz5Evv/DEqj40Qi455B7C/ZyQHe/GdqIYMb4765XVUYuTqNji+OXZob19Auc6B+m3OmbzqFff5Qyztgi3GQ/ZZm; Expires=Tue, 18 Mar 2025 19:34:34 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:35 GMT Vary: Accept-Encoding Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:35 UTC	6438	IN	Data Raw: 2f 2a 21 20 6d 6f 64 65 72 6e 69 7a 72 20 33 2e 33 2e 31 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 3f 2d 73 65 74 63 6c 61 73 73 65 73 20 21 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 73 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 6e 2c 65 2c 73 2c 61 2c 69 2c 6c 2c 72 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 66 29 69 66 28 66 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 29 7b 69 66 28 6e 3d 5b 5d 2c 65 3d 66 5b 63 5d 2c 65 2e 6e 61 6d 65 26 26 28 6e 2e 70 75 73 68 28 65 2e 6e 61 6d 65 2e Data Ascii: /! modernizr 3.3.1 (Custom Build) \| MIT * https://modernizr.com/download/?-setclasses !*/!function(n,e,s){function o(n,e){return typeof n===e}function a(){var n,e,s,a,i,l,r;for(var c in f)if(f.hasOwnProperty(c)){if(n=[],e=f[c],e.name&&(n.push(e.name.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49742	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:34 UTC	881	OUT	GET /js/rating.js?mod=1738585068 HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy; AWSALBCORS=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy
2025-03-11 19:34:35 UTC	876	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:35 GMT Content-Type: application/javascript Content-Length: 3221 Connection: close Set-Cookie: AWSALB=/3iMvivq+4HfGMnLE7qisGOzkfD7QZJr4BBGE2D1N1c6JzUjyD7sfgQ3gHGmWozM/Xi9ZJSgnvIACeRa2Y9f/hi3Cl4n2SVhNoZNfAsLEHqVPw+KBIfbMqT03zJO; Expires=Tue, 18 Mar 2025 19:34:35 GMT; Path=/ Set-Cookie: AWSALBCORS=/3iMvivq+4HfGMnLE7qisGOzkfD7QZJr4BBGE2D1N1c6JzUjyD7sfgQ3gHGmWozM/Xi9ZJSgnvIACeRa2Y9f/hi3Cl4n2SVhNoZNfAsLEHqVPw+KBIfbMqT03zJO; Expires=Tue, 18 Mar 2025 19:34:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:35 GMT Vary: Accept-Encoding Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:35 UTC	3221	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 0a 09 24 28 27 2e 72 61 74 65 2d 65 6e 74 72 79 27 29 2e 6b 65 79 75 70 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 2f 2f 20 43 61 6c 63 75 6c 61 74 65 20 61 20 73 63 6f 72 65 20 66 6f 72 20 74 68 65 20 65 6e 74 72 79 0a 09 09 76 61 72 20 73 63 6f 72 65 20 3d 20 43 61 6c 63 75 6c 61 74 65 53 74 72 65 6e 67 74 68 28 24 28 74 68 69 73 29 2e 70 72 6f 70 28 27 76 61 6c 75 65 27 29 29 2c 0a 09 09 09 65 6c 65 6d 20 3d 20 24 28 27 2e 72 61 74 69 6e 67 5b 6b 65 79 3d 22 27 20 2b 20 24 28 74 68 69 73 29 2e 61 74 74 72 28 27 6e 61 6d 65 27 29 20 2b 20 27 22 5d 27 29 3b 0a 09 09 0a 09 09 2f 2f 20 53 68 6f 77 20 74 68 65 20 73 74 72 65 6e 67 74 68 20 69 6e 64 69 Data Ascii: $(document).ready(function () {$('.rate-entry').keyup(function () {// Calculate a score for the entryvar score = CalculateStrength($(this).prop('value')),elem = $('.rating[key="' + $(this).attr('name') + '"]');// Show the strength indi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49741	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:34 UTC	883	OUT	GET /js/register.js?mod=1738585068 HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy; AWSALBCORS=GGzWgMwUgoP9Yrk4al0ZhIyPKM0YhfjykAHfM5p6Oqu432JK2vWsP/H4Q2vEb54RbkrVUQeEAdv5IQVVJ7/RySMggG3rn+eCX229aJ/gYb5IoP3gh3MRvZPU9Rmy
2025-03-11 19:34:35 UTC	876	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:35 GMT Content-Type: application/javascript Content-Length: 8164 Connection: close Set-Cookie: AWSALB=+WXwSpaHTsIc+vjsv1zbL6Dwfn4EeaoCVbdgea9um/ue+k+PoLQPPv18Kr/c6E6Fy/yEtvua+RAUJZewRiMM/jL6wSVM3OT3oEgRDku0/sj4xhbUhIFKuQDeKfkJ; Expires=Tue, 18 Mar 2025 19:34:35 GMT; Path=/ Set-Cookie: AWSALBCORS=+WXwSpaHTsIc+vjsv1zbL6Dwfn4EeaoCVbdgea9um/ue+k+PoLQPPv18Kr/c6E6Fy/yEtvua+RAUJZewRiMM/jL6wSVM3OT3oEgRDku0/sj4xhbUhIFKuQDeKfkJ; Expires=Tue, 18 Mar 2025 19:34:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:35 GMT Vary: Accept-Encoding Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:35 UTC	8164	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 0a 09 66 75 6e 63 74 69 6f 6e 20 70 61 73 73 77 6f 72 64 53 74 72 65 6e 67 74 68 50 61 73 73 28 63 68 65 63 6b 5f 73 74 72 29 20 7b 0a 09 09 76 61 72 20 70 61 73 73 20 3d 20 74 72 75 65 3b 0a 09 09 69 66 20 28 20 20 20 38 20 3e 20 63 68 65 63 6b 5f 73 74 72 2e 6c 65 6e 67 74 68 0a 09 09 09 7c 7c 20 21 2f 5b 61 2d 7a 5d 2f 2e 74 65 73 74 28 63 68 65 63 6b 5f 73 74 72 29 0a 09 09 09 7c 7c 20 21 2f 5b 41 2d 5a 5d 2f 2e 74 65 73 74 28 63 68 65 63 6b 5f 73 74 72 29 0a 09 09 09 7c 7c 20 28 21 2f 5b 30 2d 39 5d 2f 2e 74 65 73 74 28 63 68 65 63 6b 5f 73 74 72 29 20 20 26 26 20 21 2f 5b 21 5c 2e 2c 40 23 24 25 5e 26 2a 3f 5f 7e 5d 2f 2e 74 65 73 74 28 63 68 65 63 6b Data Ascii: $(document).ready(function () {function passwordStrengthPass(check_str) {var pass = true;if ( 8 > check_str.length\|\| !/[a-z]/.test(check_str)\|\| !/[A-Z]/.test(check_str)\|\| (!/[0-9]/.test(check_str) && !/[!\.,@#$%^&*?_~]/.test(check

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49744	3.17.33.17	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:34 UTC	739	OUT	GET /images/sa-logo-secondary-reverse.png HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=Mp0HKuNR6o6igndrg8JIlCNt3rqe9MzxDSd4B7hSZ8u1q1zHV+QWb0ARerhmot1RdpG/lYbgZdvjEx0EEcuZlqdNx73Si+nOvt8pcWlo9V2rLkup5quzFe8Tw2hH; AWSALBCORS=Mp0HKuNR6o6igndrg8JIlCNt3rqe9MzxDSd4B7hSZ8u1q1zHV+QWb0ARerhmot1RdpG/lYbgZdvjEx0EEcuZlqdNx73Si+nOvt8pcWlo9V2rLkup5quzFe8Tw2hH
2025-03-11 19:34:35 UTC	840	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:35 GMT Content-Type: image/png Content-Length: 9231 Connection: close Set-Cookie: AWSALB=hBl2Nf9nTX0e3tvhSwLmHF7qc6iXR2ZxBjEht4tLG1ZqYwjTtaZDIqLclPrCn/cpXn0q4v5dtf8zaqAlQTiHINOoHEYEPdUeM8K/tyBUDzfFKUFcDlCkbVbZYD54; Expires=Tue, 18 Mar 2025 19:34:35 GMT; Path=/ Set-Cookie: AWSALBCORS=hBl2Nf9nTX0e3tvhSwLmHF7qc6iXR2ZxBjEht4tLG1ZqYwjTtaZDIqLclPrCn/cpXn0q4v5dtf8zaqAlQTiHINOoHEYEPdUeM8K/tyBUDzfFKUFcDlCkbVbZYD54; Expires=Tue, 18 Mar 2025 19:34:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:35 GMT Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:35 UTC	9231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 36 00 00 00 46 08 06 00 00 00 46 e9 b8 dc 00 00 20 00 49 44 41 54 78 9c ec d4 21 0a 80 40 14 04 d0 b7 98 3d 85 d9 13 78 29 c1 e6 75 3c 90 c1 2b 08 16 9b 55 59 11 b4 68 55 30 ec 8b 1f 86 99 f4 83 9b 18 e3 fd f4 a6 0a 0b 46 34 68 b1 61 40 81 fc ec 5a 91 e1 da 37 63 42 79 4c 44 8d ee cc 1c f9 fe cb d1 49 92 fc 53 08 8f 17 06 76 00 00 00 ff ff a2 67 c1 16 cb c0 c0 b0 10 5a 30 81 0a 2a 31 0a cd 7b 05 35 e3 1b 03 03 43 10 03 03 c3 4e 2a b9 73 14 8c 82 51 30 44 00 d6 82 8d 81 81 01 00 00 00 ff ff a2 75 c1 d6 07 6d 55 7d 81 16 3e 1c 34 0a 2f 50 2b 70 33 b4 c5 77 8a 81 81 a1 85 46 f6 8c 82 51 30 0a 06 11 c0 5a b0 31 30 30 00 00 00 00 ff ff a2 65 c1 56 08 2d d8 06 02 44 33 30 30 2c 1b 4d 80 a3 60 14 0c 6f 80 Data Ascii: PNGIHDR6FF IDATx!@=x)u<+UYhU0F4ha@Z7cByLDISvgZ01{5CNsQ0DumU}>4/P+p3wFQ0Z100eV-D300,M`o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49745	3.17.33.17	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:35 UTC	737	OUT	GET /images/sa-logo-primary-reverse.png HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa; AWSALBCORS=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa
2025-03-11 19:34:35 UTC	841	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:35 GMT Content-Type: image/png Content-Length: 17138 Connection: close Set-Cookie: AWSALB=/uZFJ7MdCPFIBz2WO9JAqiRALShXdLnnXEuhXtJXereQF8M9hUr+BJSGECTHXyRr1ax/6arrFOq6FceRXMxcPjONSCPylfNux7ToRsWKwTBOpERaY55Pv7dYqA1z; Expires=Tue, 18 Mar 2025 19:34:35 GMT; Path=/ Set-Cookie: AWSALBCORS=/uZFJ7MdCPFIBz2WO9JAqiRALShXdLnnXEuhXtJXereQF8M9hUr+BJSGECTHXyRr1ax/6arrFOq6FceRXMxcPjONSCPylfNux7ToRsWKwTBOpERaY55Pv7dYqA1z; Expires=Tue, 18 Mar 2025 19:34:35 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:35 GMT Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:35 UTC	15543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 cd 00 00 00 cd 08 06 00 00 00 1b bc f4 69 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 05 c9 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 62 37 63 36 34 63 63 2c 20 32 30 32 34 2f 30 37 2f 31 36 2d 30 37 3a 35 39 3a 34 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 Data Ascii: PNGIHDRipHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.b7c64cc, 2024/07/16-07:59:40 "> <rdf:R
2025-03-11 19:34:35 UTC	1595	IN	Data Raw: 4e 3f fd f4 56 5f f3 56 4a 44 ba 90 24 d9 43 be 85 a3 a2 18 8d 33 ae ec 8a 1f f2 42 6a e7 ef 6a 16 cb 31 79 f1 57 78 9d 71 3f 66 2b 2f a0 14 38 d6 8f 05 f7 29 6c 4d 9c 55 e3 7c 1b e3 8c 96 a1 a0 2c c2 02 19 a6 b8 5a 1a fc bd 01 fe 70 17 07 fb 4c 09 fa 12 ad e8 dc 17 1c 97 67 6c c9 5a f8 99 9e 85 85 35 8f 88 dd 6a e8 c7 f7 3b 0f 5b 0c 7f 19 5c b7 88 2a 76 75 d1 25 15 65 cc 4a 85 69 f8 c3 78 23 5e 3c 4e a3 38 e1 09 71 3e 66 e5 3e 4d eb 2a a1 8d c4 26 de dd 70 51 ab 79 98 2d 5c ab 2e e6 1e 98 01 bc 1d fe 68 ee c6 74 9e 78 80 5d 2f 66 20 af c0 03 42 d4 c2 57 c4 cb 1d 85 d7 57 9f c0 d1 aa 45 66 e1 19 c4 66 fb db 31 63 fb 2a aa e7 af 6b 19 da 2d 34 51 6c 89 17 90 79 d6 f8 ac 86 d9 c0 f7 70 6e 83 17 29 66 e6 c9 8a 09 58 60 46 61 53 7d da 02 ae 45 61 24 56 fb 0e Data Ascii: N?V_VJD$C3Bjj1yWxq?f+/8)lMU\|,ZpLglZ5j;[\vu%eJix#^<N8q>f>M&pQy-\.htx]/f BWWEff1c*k-4Qlypn)fX`FaS}Ea$V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49747	151.101.130.137	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:35 UTC	618	OUT	GET /ui/1.13.2/themes/smoothness/jquery-ui.css HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:34:36 UTC	538	IN	HTTP/1.1 200 OK Connection: close Content-Length: 36662 Server: nginx Content-Type: text/css Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-8f36" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2974717 Date: Tue, 11 Mar 2025 19:34:36 GMT X-Served-By: cache-lga21963-LGA, cache-dfw-kdfw8210040-DFW X-Cache: HIT, HIT X-Cache-Hits: 185, 0 X-Timer: S1741721676.190207,VS0,VE1 Vary: Accept-Encoding
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selecta
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 39 35 26 62 6f 72 64 65 72 43 6f 6c 6f 72 45 72 72 6f 72 3d 63 64 30 61 30 61 26 66 63 45 72 72 6f 72 3d 63 64 30 61 30 61 26 69 63 6f 6e 43 6f 6c 6f 72 45 72 72 6f 72 3d 63 64 30 61 30 61 26 62 67 43 6f 6c 6f 72 4f 76 65 72 6c 61 79 3d 61 61 61 61 61 61 26 62 67 54 65 78 74 75 72 65 4f 76 65 72 6c 61 79 3d 66 6c 61 74 26 62 67 49 6d 67 4f 70 61 63 69 74 79 4f 76 65 72 6c 61 79 3d 30 26 6f 70 61 63 69 74 79 4f 76 65 72 6c 61 79 3d 33 30 26 62 67 43 6f 6c 6f 72 53 68 61 64 6f 77 3d 61 61 61 61 61 61 26 62 67 54 65 78 74 75 72 65 53 68 61 64 6f 77 3d 66 6c 61 74 26 62 67 49 6d 67 4f 70 61 63 69 74 79 53 68 61 64 6f 77 3d 30 26 6f 70 61 63 69 74 79 53 68 61 64 6f 77 3d 33 30 26 74 68 69 63 6b 6e 65 73 73 53 68 61 64 6f 77 3d 38 70 78 26 6f 66 66 73 65 74 54 Data Ascii: 95&borderColorError=cd0a0a&fcError=cd0a0a&iconColorError=cd0a0a&bgColorOverlay=aaaaaa&bgTextureOverlay=flat&bgImgOpacityOverlay=0&opacityOverlay=30&bgColorShadow=aaaaaa&bgTextureShadow=flat&bgImgOpacityShadow=0&opacityShadow=30&thicknessShadow=8px&offsetT
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 2e 32 35 65 6d 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 2d 39 39 39 39 39 70 78 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 0a 2e 75 69 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 62 6c 6f 63 6b 20 7b 0a 09 6c 65 66 74 3a 20 35 30 25 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 38 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 20 4d 69 73 63 20 76 69 73 75 61 6c 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2f 2a 20 4f 76 65 Data Ascii: margin-top: -.25em;position: relative;text-indent: -99999px;overflow: hidden;background-repeat: no-repeat;}.ui-widget-icon-block {left: 50%;margin-left: -8px;display: block;}/* Misc visuals----------------------------------// Ove
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 70 70 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 65 6d 3b 0a 7d 0a 0a 2f 2a 20 6c 65 66 74 2d 61 6c 69 67 6e 65 64 20 2a 2f 0a 2e 75 69 2d 6d 65 6e 75 20 2e 75 69 2d 69 63 6f 6e 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 2e 32 65 6d 3b 0a 09 6d 61 72 67 69 6e 3a 20 61 75 74 6f 20 30 3b 0a 7d 0a 0a 2f 2a 20 72 69 67 68 74 2d 61 6c 69 67 6e 65 64 20 2a 2f 0a 2e 75 69 2d 6d 65 6e 75 20 2e 75 69 2d 6d 65 6e 75 2d 69 63 6f 6e 20 7b 0a 09 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 09 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 62 75 74 74 6f 6e 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 34 65 6d 20 31 65 6d 3b 0a 09 64 69 73 70 6c 61 Data Ascii: pper {padding-left: 2em;}/* left-aligned /.ui-menu .ui-icon {position: absolute;top: 0;bottom: 0;left: .2em;margin: auto 0;}/ right-aligned */.ui-menu .ui-menu-icon {left: auto;right: 0;}.ui-button {padding: .4em 1em;displa
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 35 20 2d 20 34 30 20 2a 2f 0a 69 6e 70 75 74 2e 75 69 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 0a 62 75 74 74 6f 6e 2e 75 69 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 20 7b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 20 3e 20 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 69 74 65 6d 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 09 6d Data Ascii: 5 - 40 */input.ui-button::-moz-focus-inner,button.ui-button::-moz-focus-inner {border: 0;padding: 0;}.ui-controlgroup {vertical-align: middle;display: inline-block;}.ui-controlgroup > .ui-controlgroup-item {float: left;margin-left: 0;m
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 70 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 7d 0a 0a 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 6c 61 62 65 6c 20 2e 75 69 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 31 70 78 20 31 70 78 20 31 70 78 20 23 63 63 63 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 31 32 65 6d 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 20 2e 75 69 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 09 77 69 64 74 68 3a 20 31 36 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 65 6d 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 Data Ascii: p-style: solid;}.ui-checkboxradio-label .ui-icon-background {box-shadow: inset 1px 1px 1px #ccc;border-radius: .12em;border: none;}.ui-checkboxradio-radio-label .ui-icon-background {width: 16px;height: 16px;border-radius: 1em;overflow:
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 64 61 74 65 70 69 63 6b 65 72 2d 74 69 74 6c 65 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 32 2e 33 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 38 65 6d 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 74 69 74 6c 65 20 73 65 6c 65 63 74 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 09 6d 61 72 67 69 6e 3a 20 31 70 78 20 30 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 6f 6e 74 68 2c 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 79 65 61 72 20 7b 0a 09 77 69 64 74 68 3a 20 Data Ascii: datepicker-title {margin: 0 2.3em;line-height: 1.8em;text-align: center;}.ui-datepicker .ui-datepicker-title select {font-size: 1em;margin: 1px 0;}.ui-datepicker select.ui-datepicker-month,.ui-datepicker select.ui-datepicker-year {width:
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 20 7b 0a 09 77 69 64 74 68 3a 20 33 33 2e 33 25 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 2d 34 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 20 7b 0a 09 77 69 64 74 68 3a 20 32 35 25 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 2d 6c 61 73 74 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 2c 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 2d 6d 69 64 64 6c 65 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 20 7b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 Data Ascii: ui-datepicker-group {width: 33.3%;}.ui-datepicker-multi-4 .ui-datepicker-group {width: 25%;}.ui-datepicker-multi .ui-datepicker-group-last .ui-datepicker-header,.ui-datepicker-multi .ui-datepicker-group-middle .ui-datepicker-header {border-left
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 3b 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 34 65 6d 20 31 65 6d 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 2e 31 65 6d 20 30 3b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 09 77 69 64 74 68 3a 20 39 30 25 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a Data Ascii: {position: absolute;top: 0;left: 0;padding: .2em;outline: 0;}.ui-dialog .ui-dialog-titlebar {padding: .4em 1em;position: relative;}.ui-dialog .ui-dialog-title {float: left;margin: .1em 0;white-space: nowrap;width: 90%;overflow:
2025-03-11 19:34:36 UTC	1378	IN	Data Raw: 73 69 7a 61 62 6c 65 2d 6e 65 20 7b 0a 09 72 69 67 68 74 3a 20 30 3b 0a 09 74 6f 70 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 6e 77 20 7b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 74 6f 70 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 64 72 61 67 67 61 62 6c 65 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 20 7b 0a 09 63 75 72 73 6f 72 3a 20 6d 6f 76 65 3b 0a 7d 0a 2e 75 69 2d 64 72 61 67 67 61 62 6c 65 2d 68 61 6e 64 6c 65 20 7b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 75 69 2d 72 65 Data Ascii: sizable-ne {right: 0;top: 0;}.ui-dialog .ui-resizable-nw {left: 0;top: 0;}.ui-draggable .ui-dialog-titlebar {cursor: move;}.ui-draggable-handle {-ms-touch-action: none;touch-action: none;}.ui-resizable {position: relative;}.ui-re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49748	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:35 UTC	919	OUT	GET /css/jquery-ui-1.11.icon-font.min.css?mod=1738585068 HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; AWSALB=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa; AWSALBCORS=j74RUOsD4GhH/aR8UUcw7MNi4eZik2wGnPQpu53UVpiWW+iGZq3n0hqpMZGaziSbO1XYKWyF3jKQGEYWPR4y6aanGTQKvHm5+cHQ3WYrZuaYWZ062RgGJ20e3JDa
2025-03-11 19:34:36 UTC	863	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:36 GMT Content-Type: text/css Content-Length: 27136 Connection: close Set-Cookie: AWSALB=2YuCdMPZBydjkImjgBYz+VtGQ8fnVDaz/O5nUlAuGlQGicRY8nU804q4vLT9iR436s9gOFfgbuuCDtihBUjyAKiC6+qfBquttqYmNZkjWJ4rfhTQOKTWj2nJFIMN; Expires=Tue, 18 Mar 2025 19:34:36 GMT; Path=/ Set-Cookie: AWSALBCORS=2YuCdMPZBydjkImjgBYz+VtGQ8fnVDaz/O5nUlAuGlQGicRY8nU804q4vLT9iR436s9gOFfgbuuCDtihBUjyAKiC6+qfBquttqYmNZkjWJ4rfhTQOKTWj2nJFIMN; Expires=Tue, 18 Mar 2025 19:34:36 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:36 GMT Vary: Accept-Encoding Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:36 UTC	15521	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 49 63 6f 6e 20 46 6f 6e 74 20 66 6f 72 20 6a 51 75 65 72 79 20 55 49 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 0a 20 2a 20 49 43 4f 4e 20 46 4f 4e 54 20 20 20 56 65 72 73 69 6f 6e 3a 20 20 20 32 2e 31 0a 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 47 6c 79 70 68 73 3a 20 20 20 20 33 33 32 0a 20 2a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: /** * ---------------------------------------------------------------------- * Icon Font for jQuery UI * ---------------------------------------------------------------------- * * ICON FONT Version: 2.1 * Glyphs: 332 *
2025-03-11 19:34:36 UTC	11615	IN	Data Raw: 6f 77 6e 6c 6f 61 64 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 36 64 65 27 7d 2e 75 69 2d 69 63 6f 6e 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 36 64 66 27 7d 2e 75 69 2d 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 36 65 30 27 7d 2e 75 69 2d 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 73 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 36 65 31 27 7d 2e 75 69 2d 69 63 6f 6e 2d 63 6f 6e 73 6f 6c 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 36 63 30 27 7d 2e 75 69 2d 69 63 6f 6e 2d 63 6f 6e 74 61 63 74 3a 61 66 74 65 72 2c 2e 75 69 2d 69 63 6f 6e 2d 76 63 61 72 64 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 37 30 33 27 7d 2e 75 69 Data Ascii: ownload:after{content:'\e6de'}.ui-icon-cloud-upload:after{content:'\e6df'}.ui-icon-comment:after{content:'\e6e0'}.ui-icon-comments:after{content:'\e6e1'}.ui-icon-console:after{content:'\e6c0'}.ui-icon-contact:after,.ui-icon-vcard:after{content:'\e703'}.ui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:38 UTC	1063	OUT	GET /css/font/jquery-ui.woff2?juif-bac781 HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive Origin: https://start.scholarsapply.org sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://start.scholarsapply.org/css/jquery-ui-1.11.icon-font.min.css?mod=1738585068 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; _ga=GA1.1.425324139.1741721674; _ga_3R63DZRM89=GS1.1.1741721673.1.0.1741721673.0.0.0; AWSALB=2YuCdMPZBydjkImjgBYz+VtGQ8fnVDaz/O5nUlAuGlQGicRY8nU804q4vLT9iR436s9gOFfgbuuCDtihBUjyAKiC6+qfBquttqYmNZkjWJ4rfhTQOKTWj2nJFIMN; AWSALBCORS=2YuCdMPZBydjkImjgBYz+VtGQ8fnVDaz/O5nUlAuGlQGicRY8nU804q4vLT9iR436s9gOFfgbuuCDtihBUjyAKiC6+qfBquttqYmNZkjWJ4rfhTQOKTWj2nJFIMN
2025-03-11 19:34:39 UTC	842	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:38 GMT Content-Type: font/woff2 Content-Length: 21208 Connection: close Set-Cookie: AWSALB=BUbYktuFw9upoTI2a61CgoS4mpeFy+VOtleGcUt3kAJ0US3HXdKFa74qNq0IIFEne9hkOx4beGoImr6302bELGKpPM3t5aOGmcOdLwwuV+VItwzfUCmeZykIupcq; Expires=Tue, 18 Mar 2025 19:34:38 GMT; Path=/ Set-Cookie: AWSALBCORS=BUbYktuFw9upoTI2a61CgoS4mpeFy+VOtleGcUt3kAJ0US3HXdKFa74qNq0IIFEne9hkOx4beGoImr6302bELGKpPM3t5aOGmcOdLwwuV+VItwzfUCmeZykIupcq; Expires=Tue, 18 Mar 2025 19:34:38 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:38 GMT Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:39 UTC	15542	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 52 d8 00 0b 00 00 00 00 f2 1c 00 00 52 89 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 00 5c 11 08 0a 83 cc 7c 82 f1 21 01 36 02 24 03 8a 40 0b 85 22 00 04 20 05 83 1e 07 20 1b dc c0 55 07 72 b7 03 e6 df b9 fe aa 66 06 62 8c 03 30 78 6e 44 f6 ff c7 03 3a c6 38 b8 a3 9a d5 20 70 d0 d3 0b 69 d8 c7 2b a6 36 31 03 c7 89 c7 d1 09 bb 72 4b 9d d8 f9 89 33 f6 91 cb 16 ea 46 a7 3c 2d 6f be d7 a0 97 62 23 9f 12 04 ba 75 2d f9 95 31 f7 fe 10 04 24 b6 53 28 23 64 90 1d 37 d1 8a 42 4c d2 49 36 a9 7f 76 ee e5 12 9c 81 6d 63 fb 24 93 97 09 f1 f4 dd bf d5 e9 d3 73 35 37 00 26 a0 3b 30 9e 26 10 3b 59 90 01 ff d6 98 85 31 e5 96 41 bb 3b e9 c4 30 5f 38 51 f0 b8 b0 fb ee d3 8b b6 b9 ae 49 ba 37 29 23 86 cc b7 ba Data Ascii: wOF2RR`\\|!6$@" Urfb0xnD:8 pi+61rK3F<-ob#u-1$S(#d7BLI6vmc$s57&;0&;Y1A;0_8QI7)#
2025-03-11 19:34:39 UTC	5666	IN	Data Raw: 21 31 61 51 b6 2a 41 25 c3 09 08 6a e0 3e 0b 91 7a 16 e0 51 50 69 ca 78 10 07 d1 88 bb 70 78 5a 78 7c 54 aa e4 9d c5 e3 0d d3 7d 81 e1 8c 0d 6f 4e 7e 97 66 5a fe 38 02 a2 4e 5a b4 e8 b4 45 6c 7b a3 e4 35 46 42 18 3f c3 84 09 81 d8 81 bd bc 87 d3 06 f6 0e c4 02 1e 24 ae 09 a5 2c 31 59 bc 97 20 2a 74 c9 e2 5d 62 0a a5 d4 44 3f da 68 69 5f 30 22 b5 80 b6 16 7c d8 c4 f4 9b 03 15 c9 f1 11 02 7e 34 4a 98 80 ee 43 6c 51 f3 49 f7 7f e0 e0 3f 8f 8b f3 d9 7d 43 72 c3 82 89 6d 25 55 cd 45 2b 05 a5 28 58 29 dc c6 35 96 ad 13 11 1c 85 b6 e9 4c f9 7f c7 d5 8f 99 26 96 c4 04 fa e8 ad 31 5e ca 30 35 c9 18 68 a7 75 cc 2f 30 55 3d dc b4 05 b9 57 72 6e 68 c4 04 56 25 27 c8 52 fa 9a 0e ce b8 2a 12 33 13 c1 7e 54 d8 8d 50 91 a2 cf 28 95 8a b8 e1 f3 e3 2b c1 d4 1c eb 02 1e 2d Data Ascii: !1aQA%j>zQPixpxZx\|T}oN~fZ8NZEl{5FB?$,1Y t]bD?hi_0"\|~4JClQI?}Crm%UE+(X)5L&1^05hu/0U=WrnhV%'R*3~TP(+-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:42 UTC	568	OUT	GET /images/site-icons/manifest.json HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:34:42 UTC	649	IN	HTTP/1.1 403 Forbidden Date: Tue, 11 Mar 2025 19:34:42 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 199 Connection: close Set-Cookie: AWSALB=6TjyPd52NCwrff/s9EL20bgE/Fx8k8JYpG9uQ+bCDpSQgOT8D69+q6tGUT4Vjj547E5QaBXbwdUMeIK/K/arC+mVOegtkIdxoEMFI0EJCx+WePXv7xKWAcLbLZpD; Expires=Tue, 18 Mar 2025 19:34:42 GMT; Path=/ Set-Cookie: AWSALBCORS=6TjyPd52NCwrff/s9EL20bgE/Fx8k8JYpG9uQ+bCDpSQgOT8D69+q6tGUT4Vjj547E5QaBXbwdUMeIK/K/arC+mVOegtkIdxoEMFI0EJCx+WePXv7xKWAcLbLZpD; Expires=Tue, 18 Mar 2025 19:34:42 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN
2025-03-11 19:34:42 UTC	199	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:42 UTC	1035	OUT	GET /images/site-icons/favicon-32x32.png HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; _ga=GA1.1.425324139.1741721674; _ga_3R63DZRM89=GS1.1.1741721673.1.0.1741721673.0.0.0; AWSALB=BUbYktuFw9upoTI2a61CgoS4mpeFy+VOtleGcUt3kAJ0US3HXdKFa74qNq0IIFEne9hkOx4beGoImr6302bELGKpPM3t5aOGmcOdLwwuV+VItwzfUCmeZykIupcq; AWSALBCORS=BUbYktuFw9upoTI2a61CgoS4mpeFy+VOtleGcUt3kAJ0US3HXdKFa74qNq0IIFEne9hkOx4beGoImr6302bELGKpPM3t5aOGmcOdLwwuV+VItwzfUCmeZykIupcq
2025-03-11 19:34:42 UTC	839	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:42 GMT Content-Type: image/png Content-Length: 847 Connection: close Set-Cookie: AWSALB=+nwv/lSA9Ku2svg+DzvNutto/rnyNaV9KOkUdH4CcdUckyC7y1a3+0+E875YiQPEnon3MINhQxFbt59oAo1alRoE0b0zPeDPHEgtO09FifBJH5+6yaP/ZtCKw6cP; Expires=Tue, 18 Mar 2025 19:34:42 GMT; Path=/ Set-Cookie: AWSALBCORS=+nwv/lSA9Ku2svg+DzvNutto/rnyNaV9KOkUdH4CcdUckyC7y1a3+0+E875YiQPEnon3MINhQxFbt59oAo1alRoE0b0zPeDPHEgtO09FifBJH5+6yaP/ZtCKw6cP; Expires=Tue, 18 Mar 2025 19:34:42 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:42 GMT Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:42 UTC	847	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 16 49 44 41 54 58 47 c5 d5 4d 48 14 61 18 07 f0 ff 33 bb 9b ad 41 87 d2 74 3f 66 35 0f d5 c5 43 18 06 56 b0 06 e9 25 3c a8 13 81 89 11 e1 c1 b5 40 e8 54 c1 22 76 4c 3c 6c bb 10 41 5d 3a ac 8e 79 d9 4b 74 51 88 c4 b0 0e 05 19 9d c3 55 d1 15 2d cd 8f d6 79 62 d4 8d 75 9b 6f 85 e6 36 ef bc f3 fc 7f ef c7 bc 43 f8 cf 17 ed 27 bf a6 a6 d3 f3 f1 aa 6f 0b bd bd 8a d3 3a ce 01 35 9d 9e a0 7b 3d 19 0c 54 2e 4f 54 d3 6d a7 08 67 80 9a 4e 4f 40 58 4b 92 40 cd 62 b0 02 cc fc 62 a2 da e5 08 61 1f b0 1b 0e 42 33 11 41 05 00 0c 66 38 42 d8 03 e4 85 ab 6b be 03 08 fd 5d 7e 27 08 eb 80 82 70 2d 80 da 66 17 61 0d a0 11 ae 07 b0 8b 30 07 e8 84 1b 01 ec 20 8c 01 06 e1 Data Ascii: PNGIHDR szzIDATXGMHa3At?f5CV%<@T"vL<lA]:yKtQU-ybuo6C'o:5{=T.OTmgNO@XK@bbaB3Af8Bk]~'p-fa0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49761	3.17.33.17	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:34:44 UTC	824	OUT	GET /images/site-icons/favicon-32x32.png HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; _ga=GA1.1.425324139.1741721674; _ga_3R63DZRM89=GS1.1.1741721673.1.0.1741721673.0.0.0; AWSALB=+nwv/lSA9Ku2svg+DzvNutto/rnyNaV9KOkUdH4CcdUckyC7y1a3+0+E875YiQPEnon3MINhQxFbt59oAo1alRoE0b0zPeDPHEgtO09FifBJH5+6yaP/ZtCKw6cP; AWSALBCORS=+nwv/lSA9Ku2svg+DzvNutto/rnyNaV9KOkUdH4CcdUckyC7y1a3+0+E875YiQPEnon3MINhQxFbt59oAo1alRoE0b0zPeDPHEgtO09FifBJH5+6yaP/ZtCKw6cP
2025-03-11 19:34:45 UTC	839	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:34:45 GMT Content-Type: image/png Content-Length: 847 Connection: close Set-Cookie: AWSALB=4rOaBR7Bb5dnBILVmfyJTOvrjB9uxAIF7S1W9TnTLHi4i65m0ImnOiNQXpR5QzEbu7oEh1lMij5dfPyO+I2l2HxzM3QMSqx75K1FYCiPFHHNjS+HcmMV9jDxc1nF; Expires=Tue, 18 Mar 2025 19:34:45 GMT; Path=/ Set-Cookie: AWSALBCORS=4rOaBR7Bb5dnBILVmfyJTOvrjB9uxAIF7S1W9TnTLHi4i65m0ImnOiNQXpR5QzEbu7oEh1lMij5dfPyO+I2l2HxzM3QMSqx75K1FYCiPFHHNjS+HcmMV9jDxc1nF; Expires=Tue, 18 Mar 2025 19:34:45 GMT; Path=/; SameSite=None; Secure Server: Apache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Last-Modified: Mon, 03 Feb 2025 12:17:48 GMT Accept-Ranges: bytes Cache-Control: max-age=1209600 Expires: Tue, 25 Mar 2025 19:34:45 GMT Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff
2025-03-11 19:34:45 UTC	847	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 16 49 44 41 54 58 47 c5 d5 4d 48 14 61 18 07 f0 ff 33 bb 9b ad 41 87 d2 74 3f 66 35 0f d5 c5 43 18 06 56 b0 06 e9 25 3c a8 13 81 89 11 e1 c1 b5 40 e8 54 c1 22 76 4c 3c 6c bb 10 41 5d 3a ac 8e 79 d9 4b 74 51 88 c4 b0 0e 05 19 9d c3 55 d1 15 2d cd 8f d6 79 62 d4 8d 75 9b 6f 85 e6 36 ef bc f3 fc 7f ef c7 bc 43 f8 cf 17 ed 27 bf a6 a6 d3 f3 f1 aa 6f 0b bd bd 8a d3 3a ce 01 35 9d 9e a0 7b 3d 19 0c 54 2e 4f 54 d3 6d a7 08 67 80 9a 4e 4f 40 58 4b 92 40 cd 62 b0 02 cc fc 62 a2 da e5 08 61 1f b0 1b 0e 42 33 11 41 05 00 0c 66 38 42 d8 03 e4 85 ab 6b be 03 08 fd 5d 7e 27 08 eb 80 82 70 2d 80 da 66 17 61 0d a0 11 ae 07 b0 8b 30 07 e8 84 1b 01 ec 20 8c 01 06 e1 Data Ascii: PNGIHDR szzIDATXGMHa3At?f5CV%<@T"vL<lA]:yKtQU-ybuo6C'o:5{=T.OTmgNO@XK@bbaB3Af8Bk]~'p-fa0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	3.140.204.200	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:01 UTC	1153	OUT	GET /oauth.php?action=new-student HTTP/1.1 Host: start.scholarsapply.org Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ok7bc3hcjjk7hea56hgbievuum; _ga=GA1.1.425324139.1741721674; _ga_3R63DZRM89=GS1.1.1741721673.1.0.1741721673.0.0.0; AWSALB=4rOaBR7Bb5dnBILVmfyJTOvrjB9uxAIF7S1W9TnTLHi4i65m0ImnOiNQXpR5QzEbu7oEh1lMij5dfPyO+I2l2HxzM3QMSqx75K1FYCiPFHHNjS+HcmMV9jDxc1nF; AWSALBCORS=4rOaBR7Bb5dnBILVmfyJTOvrjB9uxAIF7S1W9TnTLHi4i65m0ImnOiNQXpR5QzEbu7oEh1lMij5dfPyO+I2l2HxzM3QMSqx75K1FYCiPFHHNjS+HcmMV9jDxc1nF
2025-03-11 19:35:01 UTC	1160	IN	HTTP/1.1 302 Found Date: Tue, 11 Mar 2025 19:35:01 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: AWSALB=wJ7KC9PU+LESUy+BSdD05UJN2Kg3FUqshcKA4pwtuAE8IUtmrCTCW6pDjdC1s/nMYzmlNiqOUe0Ny+Kez3pJ3qq3DuW86T+ZJug2DTpbRgQeS2yMrC5kOLvz20+z; Expires=Tue, 18 Mar 2025 19:35:01 GMT; Path=/ Set-Cookie: AWSALBCORS=wJ7KC9PU+LESUy+BSdD05UJN2Kg3FUqshcKA4pwtuAE8IUtmrCTCW6pDjdC1s/nMYzmlNiqOUe0Ny+Kez3pJ3qq3DuW86T+ZJug2DTpbRgQeS2yMrC5kOLvz20+z; Expires=Tue, 18 Mar 2025 19:35:01 GMT; Path=/; SameSite=None; Secure Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Strict-Transport-Security: max-age=15768000 X-Frame-Options: SAMEORIGIN Location: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query Content-Secure-Policy: default-src 'self'; X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	20.190.160.66	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:04 UTC	1013	OUT	GET /a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query HTTP/1.1 Host: a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://start.scholarsapply.org/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:35:05 UTC	2196	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 X-Content-Type-Options: nosniff P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 5629a409-fad6-468f-a85b-6de141030400 x-ms-ests-server: 2.1.20203.6 - NCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-F34hF6dfHlfc6_L1sBCBxQ' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All X-XSS-Protection: 0 Set-Cookie: esctx-yNUkyAouo2Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQEauAVxKwixPsJYX7kXvth8-L5KsBrXtc7MjXDxhcTxma3x8tj65qvEEqlWNdFmNPgfPtBmpXxt_r_H-OT3FT7wsEVzWogZdyMHg5WIAyW5qN23Wpy59an4vJr-KjOMPwVIEEE7B2LbWcXd9N6dZEPnCAA; domain=.a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=Atht1rEn0bdEsmB9MucjNhk; expires=Thu, 10-Apr-2025 19:35:05 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEG3NF5ex76vR3Z8SadSrVPaA1XqxYpy-NQAE1UiPZ__WfswusczpvT1hCbyBCTCO-swixKh1-bXQeMVZ97SVgOA06Jv2N1yVq660LYzKc0ZgOLU6fyTFM1EcoXSxOEyovPOzgdbdMcmdexHNCe91hVyImoOS-GBm0LyI97swmoGMgAA; domain=.a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Set-Cookie: stsservicecookie=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 11 Mar 2025 19:35:05 GMT Connection: close Content-Length: 20965
2025-03-11 19:35:05 UTC	14188	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head> <title>Redirecting</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" conten
2025-03-11 19:35:05 UTC	6777	IN	Data Raw: 6e 75 6c 6c 2e 22 7d 72 28 22 5b 24 4c 6f 61 64 65 72 5d 3a 20 46 61 69 6c 65 64 22 2c 65 29 3b 76 61 72 20 75 3d 6e 65 77 20 63 3b 75 2e 66 61 69 6c 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 46 61 69 6c 65 64 22 2c 75 2e 73 75 63 63 65 73 73 4d 65 73 73 61 67 65 3d 22 52 65 6c 6f 61 64 20 53 75 63 63 65 73 73 22 2c 75 2e 41 64 64 46 6f 72 52 65 6c 6f 61 64 28 65 2c 74 29 2c 0a 75 2e 4c 6f 61 64 28 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 29 7b 74 68 72 6f 77 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 65 78 74 65 72 6e 61 6c 20 72 65 73 6f 75 72 63 65 20 5b 27 22 2b 6e 2b 22 27 5d 22 7d 73 26 26 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 2f 65 72 72 6f 72 2e 61 73 70 78 3f 65 72 72 3d 35 30 34 Data Ascii: null."}r("[$Loader]: Failed",e);var u=new c;u.failMessage="Reload Failed",u.successMessage="Reload Success",u.AddForReload(e,t),u.Load(null,function(){if(o){throw"Failed to load external resource ['"+n+"']"}s&&(document.location.href="/error.aspx?err=504

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49768	20.190.160.66	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:12 UTC	1851	OUT	GET /a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query&sso_reload=true HTTP/1.1 Host: a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: esctx-yNUkyAouo2Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQEauAVxKwixPsJYX7kXvth8-L5KsBrXtc7MjXDxhcTxma3x8tj65qvEEqlWNdFmNPgfPtBmpXxt_r_H-OT3FT7wsEVzWogZdyMHg5WIAyW5qN23Wpy59an4vJr-KjOMPwVIEEE7B2LbWcXd9N6dZEPnCAA; fpc=Atht1rEn0bdEsmB9MucjNhk; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEG3NF5ex76vR3Z8SadSrVPaA1XqxYpy-NQAE1UiPZ__WfswusczpvT1hCbyBCTCO-swixKh1-bXQeMVZ97SVgOA06Jv2N1yVq660LYzKc0ZgOLU6fyTFM1EcoXSxOEyovPOzgdbdMcmdexHNCe91hVyImoOS-GBm0LyI97swmoGMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-03-11 19:35:13 UTC	2647	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 X-Content-Type-Options: nosniff X-Frame-Options: DENY Link: <https://aadcdn.msftauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msftauth.net>; rel=dns-prefetch,<https://aadcdn.msauth.net>; rel=dns-prefetch X-DNS-Prefetch-Control: on P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 5fb6a951-c411-4107-80dd-c2df63400100 x-ms-ests-server: 2.1.20203.6 - EUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-iNn30J0TzwNcl5IaxqFNRw' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All X-XSS-Protection: 0 Set-Cookie: buid=1.Ac8A0BxppsoqXU-5VPrhKVgOZGIKByAcQn9GhOihD7nKr9DPAADPAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEuQKeK6Ma6VHwFqX3jinO4K8lhTSTjgQqqnYpHTgHOZA3eSp2dAYmACgLa1VaGZ2MEfywkwZS8lgLz4srSvvL55Qu8DLWi4y6I3x1s4q--rUgAA; expires=Thu, 10-Apr-2025 19:35:13 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEJ-QYlKNpsoI7wDuAbgMPfezwI9sDccgeO0H9uzz6F3kjoJ4hoKz4EWiXyvnBuMHGejKqA70yA7K2r13fA3Z7_oRfka_2-FlQfUZez7X1aLdSLl8GPtnvDF8pOrk8-B3VZ3zIcZRy3g0-lxgMBDxCIs31eySwByqUrO5Ex_5TuFogAA; domain=.a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: esctx-IeK347jZrV8=AQABCQEAAABVrSpeuWamRam2jAF1XRQEIoA_xNdJIOFIJ3RO59TAzgrRDmtjSGeq6O0h8amhYpSebmVSgAaC_ipm0dlLmVPUVODklsapJkD664C-H1YMUPnJJobXtcmTRcNQSqLDblNCZikTV15RYfJQ6H0yvP-9e1YUZJ604xHh0qJPuh0CryAA; domain=.a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com; path=/; secure; HttpOnly; SameSite=None Set-Cookie: fpc=Atht1rEn0bdEsmB9MucjNhneTKV2AQAAAHCHYt8OAAAA; expires=Thu, 10-Apr-2025 19:35:13 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Date: Tue, 11 Mar 2025 19:35:12 GMT Connection: close Content-Length: 35857
2025-03-11 19:35:13 UTC	13737	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html dir="ltr" class="" lang="en"><head> <title>Sign in to your account</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
2025-03-11 19:35:13 UTC	16384	IN	Data Raw: 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 69 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 45 6e 61 62 6c 65 64 50 65 72 63 65 6e 74 61 67 65 22 3a 30 2c 22 75 72 6c 53 65 74 44 65 62 75 67 4d 6f 64 65 22 3a 22 68 74 74 70 73 3a 2f 2f 61 36 36 39 31 63 64 30 2d 32 61 63 61 2d 34 66 35 64 2d 62 39 35 34 2d 66 61 65 31 32 39 35 38 30 65 36 34 2e 63 69 61 6d 6c 6f 67 69 6e 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 64 65 62 75 67 6d 6f 64 65 22 2c 22 66 45 6e 61 62 6c 65 43 73 73 41 6e 69 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 66 41 6c 6c 6f 77 47 72 61 79 4f 75 74 4c 69 67 68 74 42 6f 78 22 3a 74 72 75 65 2c 22 66 55 73 65 4d 73 61 53 65 73 73 69 6f 6e 53 74 61 74 65 22 3a 74 72 75 65 2c 22 66 49 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 Data Ascii: Enabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSuppor
2025-03-11 19:35:13 UTC	5736	IN	Data Raw: 28 74 7c 7c 22 3f 3f 22 29 29 2c 24 2e 73 75 62 6d 69 74 28 65 2c 72 2c 74 2c 6e 2c 6f 7c 7c 73 2c 69 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 72 29 7b 72 65 74 75 72 6e 7b 22 73 69 67 6e 61 74 75 72 65 22 3a 65 2c 22 61 72 67 73 22 3a 72 2c 22 74 6f 53 74 72 69 6e 67 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 6e 61 74 75 72 65 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 74 3d 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 72 2e 70 75 73 68 28 73 28 74 5b 6e 5d 2c 5b 5d 29 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 74 3d 65 2e 73 70 6c Data Ascii: (t\|\|"??")),$.submit(e,r,t,n,o\|\|s,i,a)}function s(e,r){return{"signature":e,"args":r,"toString":function(){return this.signature}}}function u(e){for(var r=[],t=e.split("\n"),n=0;n<t.length;n++){r.push(s(t[n],[]))}return r}function c(e){for(var r=[],t=e.spl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49767	20.190.160.66	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:12 UTC	1477	OUT	GET /favicon.ico HTTP/1.1 Host: a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f-84e8-a10fb9caafd0&response_type=code&redirect_uri=https%3A%2F%2Fstart.scholarsapply.org%2Foauth.php%3Faction%3Dnew-student-result&scope=openid+profile+email&response_mode=query Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: esctx-yNUkyAouo2Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQEauAVxKwixPsJYX7kXvth8-L5KsBrXtc7MjXDxhcTxma3x8tj65qvEEqlWNdFmNPgfPtBmpXxt_r_H-OT3FT7wsEVzWogZdyMHg5WIAyW5qN23Wpy59an4vJr-KjOMPwVIEEE7B2LbWcXd9N6dZEPnCAA; fpc=Atht1rEn0bdEsmB9MucjNhk; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEG3NF5ex76vR3Z8SadSrVPaA1XqxYpy-NQAE1UiPZ__WfswusczpvT1hCbyBCTCO-swixKh1-bXQeMVZ97SVgOA06Jv2N1yVq660LYzKc0ZgOLU6fyTFM1EcoXSxOEyovPOzgdbdMcmdexHNCe91hVyImoOS-GBm0LyI97swmoGMgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2025-03-11 19:35:13 UTC	1272	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly X-Content-Type-Options: nosniff P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 5b7eb084-a288-43f7-a618-e99892840000 x-ms-ests-server: 2.1.20203.6 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+ams2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-KiJruKLgu59XSN6wFFJjTQ' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All X-XSS-Protection: 0 Date: Tue, 11 Mar 2025 19:35:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49774	72.247.154.153	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:15 UTC	467	OUT	OPTIONS /api/report?catId=GW+estsfd+ams2 HTTP/1.1 Host: identity.nel.measure.office.net Connection: keep-alive Origin: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:35:15 UTC	319	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Tue, 11 Mar 2025 19:35:15 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-03-11 19:35:15 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49780	72.247.154.153	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:17 UTC	442	OUT	POST /api/report?catId=GW+estsfd+ams2 HTTP/1.1 Host: identity.nel.measure.office.net Connection: keep-alive Content-Length: 755 Content-Type: application/reports+json Origin: https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:35:17 UTC	755	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 35 34 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 36 36 39 31 63 64 30 2d 32 61 63 61 2d 34 66 35 64 2d 62 39 35 34 2d 66 61 65 31 32 39 35 38 30 65 36 34 2e 63 69 61 6d 6c 6f 67 69 6e 2e 63 6f 6d 2f 61 36 36 39 31 63 64 30 2d 32 61 63 61 2d 34 66 35 64 2d 62 39 35 34 2d 66 61 65 31 32 39 35 38 30 65 36 34 2f 6f 61 75 74 68 32 2f 76 32 2e 30 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 32 30 30 37 30 61 36 32 2d 34 32 31 63 2d 34 36 37 66 Data Ascii: [{"age":0,"body":{"elapsed_time":3541,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://a6691cd0-2aca-4f5d-b954-fae129580e64.ciamlogin.com/a6691cd0-2aca-4f5d-b954-fae129580e64/oauth2/v2.0/authorize?client_id=20070a62-421c-467f
2025-03-11 19:35:18 UTC	399	IN	HTTP/1.1 429 Too Many Requests Content-Length: 0 x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000 Request-Context: appId=cid-v1:c242839f-7b23-4fcd-8b70-f19e1d322576 Date: Tue, 11 Mar 2025 19:35:18 GMT Connection: close Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49790	13.107.253.42	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:33 UTC	505	OUT	GET /dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/attributecollection?ts=638762546964342077 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:35:34 UTC	798	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:35:34 GMT Content-Type: application/json Content-Length: 448 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Thu, 27 Feb 2025 12:04:56 GMT ETag: 0x8DD5726F3F07B77 x-ms-request-id: 36acc888-601e-006e-67bc-92527c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250311T193534Z-15674c9f784lxp99hC1SN1m49n00000003f0000000000b84 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT X-Content-Type-Options: nosniff Accept-Ranges: bytes
2025-03-11 19:35:34 UTC	448	IN	Data Raw: 5b 0d 0a 20 20 7b 0d 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 41 74 74 72 69 62 75 74 65 5f 47 69 76 65 6e 4e 61 6d 65 22 2c 0d 0a 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 46 69 72 73 74 20 4e 61 6d 65 22 0d 0a 20 20 7d 2c 0d 0a 20 20 7b 0d 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 41 74 74 72 69 62 75 74 65 5f 53 75 72 6e 61 6d 65 22 2c 0d 0a 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 4c 61 73 74 20 4e 61 6d 65 22 0d 0a 20 20 7d 2c 0d 0a 20 20 7b 0d 0a 20 20 20 20 22 6b 65 79 22 3a 20 22 53 69 67 6e 49 6e 5f 44 65 73 63 72 69 70 74 69 6f 6e 22 2c 0d 0a 20 20 20 20 22 76 61 6c 75 65 22 3a 20 22 57 65 20 6d 61 64 65 20 6e 65 77 20 73 65 63 75 72 69 74 79 20 65 6e 68 61 6e 63 65 6d 65 6e 74 73 20 74 6f 20 6f 75 72 20 70 6c 61 74 66 6f 72 6d 2e 20 49 66 20 79 6f Data Ascii: [ { "key": "Attribute_GivenName", "value": "First Name" }, { "key": "Attribute_Surname", "value": "Last Name" }, { "key": "SignIn_Description", "value": "We made new security enhancements to our platform. If yo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49794	13.107.253.42	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:34 UTC	495	OUT	GET /dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/customcss?ts=638720724634855146 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:35:35 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:35:34 GMT Content-Type: text/css Content-Length: 881 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Fri, 10 Jan 2025 02:21:03 GMT ETag: 0x8DD311D6E900720 x-ms-request-id: ca582f5f-f01e-0053-32bc-922467000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250311T193534Z-17b68d56b4fw28l2hC1SN1m58400000005s0000000006h0f x-fd-int-roxy-purgeid: 50755578 X-Cache: TCP_REMOTE_HIT X-Cache-Info: L2_T1 X-Content-Type-Options: nosniff Accept-Ranges: bytes
2025-03-11 19:35:35 UTC	881	IN	Data Raw: 0a 2f 2a 20 4d 49 44 44 4c 45 20 2a 2f 0a 2e 65 78 74 2d 6d 69 64 64 6c 65 20 7b 20 2f 2a 20 53 74 79 6c 65 20 66 6f 72 20 74 68 65 20 66 75 6c 6c 2d 73 63 72 65 65 6e 20 62 61 63 6b 67 72 6f 75 6e 64 20 74 68 61 74 20 61 6c 69 67 6e 73 20 74 68 65 20 73 69 67 6e 2d 69 6e 20 62 6f 78 20 76 65 72 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 6d 69 64 64 6c 65 20 61 6e 64 20 68 6f 72 69 7a 6f 6e 74 61 6c 6c 79 20 74 6f 20 74 68 65 20 63 65 6e 74 65 72 20 2a 2f 0a 0a 7d 0a 0a 2e 65 78 74 2d 76 65 72 74 69 63 61 6c 2d 73 70 6c 69 74 2d 6d 61 69 6e 2d 73 65 63 74 69 6f 6e 20 7b 20 2f 2a 20 53 74 79 6c 65 20 66 6f 72 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 6f 66 20 74 68 65 20 70 61 72 74 69 61 6c 2d 73 63 72 65 65 6e 20 62 61 63 6b 67 72 6f 75 6e 64 20 69 Data Ascii: /* MIDDLE /.ext-middle { / Style for the full-screen background that aligns the sign-in box vertically to the middle and horizontally to the center /}.ext-vertical-split-main-section { / Style for the container of the partial-screen background i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49796	13.107.253.42	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:36 UTC	496	OUT	GET /dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/headerlogo?ts=638719783880500358 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:35:37 UTC	790	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:35:37 GMT Content-Type: image/* Content-Length: 1028 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Thu, 09 Jan 2025 00:13:08 GMT ETag: 0x8DD30426542FFE8 x-ms-request-id: c29223a9-a01e-004e-5cbc-9229db000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250311T193537Z-17b68d56b4fn5fdmhC1SN1f1f000000004e00000000018m2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT X-Content-Type-Options: nosniff Accept-Ranges: bytes
2025-03-11 19:35:37 UTC	1028	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 01 0e 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 18 95 63 60 60 7c 92 58 50 90 c3 e4 c0 c0 90 9b 57 52 14 e4 ee a4 10 11 19 a5 c0 fe 82 81 87 81 9b 41 94 41 8a 81 29 31 b9 b8 c0 31 20 c0 87 01 08 60 34 2a f8 76 8d 81 11 44 5f d6 05 99 85 29 8f 17 70 a6 a4 16 27 03 e9 0f 40 1c 9f 5c 50 54 c2 c0 c0 18 00 64 2b 97 97 14 80 d8 40 cc 20 52 04 74 14 90 dd 01 62 a7 43 d8 73 40 ec 24 08 7b 03 58 4d 48 90 33 90 7d 04 c8 56 48 42 62 a7 23 b1 a1 76 81 00 6b 31 d0 b3 24 ba 95 20 28 49 ad 00 b9 97 c1 39 bf a0 b2 28 33 3d a3 44 c1 11 18 22 a9 0a 9e 79 c9 7a 3a 0a 46 06 46 26 0c 0c a0 f0 85 a8 fe ec 0f 0e 37 46 b1 43 08 b1 fc f9 0c 0c 16 5f 18 18 98 27 22 c4 Data Ascii: PNGIHDRiCCPICC Profilec``\|XPWRAA)11 `4*vD_)p'@\PTd+@ RtbCs@${XMH3}VHBb#vk1$ (I9(3=D"yz:FF&7FC_'"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49797	13.107.253.42	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-11 19:35:37 UTC	496	OUT	GET /dbd5a2dd-z2bvu3j2jtu-yo3cruja6h61j7-b7othtnha20t-duq/logintenantbranding/0/bannerlogo?ts=638720724440186192 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 19:35:38 UTC	791	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 19:35:37 GMT Content-Type: image/* Content-Length: 44494 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Fri, 10 Jan 2025 02:20:44 GMT ETag: 0x8DD311D63242944 x-ms-request-id: c2922372-a01e-004e-29bc-9229db000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20250311T193537Z-15674c9f784wxt8mhC1SN17t3g000000062g000000005p8m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT X-Content-Type-Options: nosniff Accept-Ranges: bytes
2025-03-11 19:35:38 UTC	15593	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0f 55 00 00 05 08 08 03 00 00 00 7e fb 98 20 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 63 50 4c 54 45 47 70 4c 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d 1b 36 5d c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c c3 54 3c 1b 36 5d c3 54 3c b3 bc 49 34 00 00 00 1f 74 52 4e 53 00 60 d0 20 10 f0 a0 40 80 c0 e0 30 90 50 b0 70 f0 10 30 d0 40 80 c0 60 a0 b0 20 e0 70 90 50 ac 0b 95 7a 00 00 ac e6 49 44 41 54 78 da ec c1 01 01 00 00 00 80 90 fe af ee 08 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRU~ pHYs.#.#x?vcPLTEGpL6]6]6]6]6]6]6]6]6]6]6]6]6]6]6]T<T<T<T<T<T<T<T<T<T<T<T<T<T<T<6]T<I4tRNS` @0Pp0@` pPzIDATx
2025-03-11 19:35:38 UTC	16384	IN	Data Raw: 89 74 54 9d 05 aa b1 b0 da e6 b0 3a 94 b4 9e 16 a7 73 a6 c3 32 96 8c 7d 9d 8e b4 5d f0 2a cf 64 b6 ab 07 92 a7 92 fd e2 b2 0d 9a ec 54 3d 20 66 c7 29 a2 36 94 3f 5b 5d 69 37 f3 38 a2 ac d8 95 f2 4e aa 26 55 33 22 c5 9a 9e 6e 5a 81 6a 2c ac 36 d9 cd 89 74 cd ac 33 29 7a b5 5d 8e 25 3f ca 54 63 f0 17 c3 93 1b da ae bf 6c 62 c4 de 77 79 d4 9b cb d9 a9 7a 6d 3e 3b aa 69 43 87 99 f4 8f c9 e2 5d 2f 52 35 a9 9a 54 cd c0 8f d3 20 7f 01 1d 55 67 82 6a 28 ac 36 39 ef 08 f4 fd 96 af 26 ef 09 d9 a6 da 92 0a df 1a 37 67 7f ab a0 d4 fc 1f 68 bb 3e 88 92 92 55 d7 7d 97 22 5c 29 dc 9d c9 4e d5 13 64 72 d4 54 63 3d 6d 28 7e b6 ba 06 4f fc a7 bb 06 ab 99 54 4d aa 26 55 33 f0 c3 a2 f1 08 ce 0c cf 05 d5 50 58 6d 70 58 1d 68 37 e7 1b ef e9 df 7a 33 5e 8f 1b d4 f0 7f 70 2d 51 Data Ascii: tT:s2}]*dT= f)6?[]i78N&U3"nZj,6t3)z]%?Tclbwyzm>;iC]/R5T Ugj(69&7gh>U}"\)NdrTc=m(~OTM&U3PXmpXh7z3^p-Q
2025-03-11 19:35:38 UTC	12517	IN	Data Raw: 02 1f d4 ac 3a 2c 5e 4b 56 a8 3c 53 c3 ca d3 aa 15 62 b5 e4 df 29 aa dc af f9 7f 6c 24 bb b4 c0 aa fb 6e d5 d5 ca 53 9b 92 e0 b0 65 f5 f7 56 a5 77 71 e2 63 b5 c4 76 4e b8 16 00 00 56 dd 47 09 0a 2b fe 2d 77 d5 f7 af b6 25 db 54 58 bc 96 d3 52 e0 d5 02 ab fe 89 42 ac 96 bc 37 9d f4 94 cd dc 69 e0 b0 c1 aa 7b 6e d5 b3 b8 96 46 db 77 12 1c b6 ec 86 d9 16 de c3 29 a7 19 06 00 80 3e 5a b5 c3 39 e0 2f a1 52 bd 17 fe c0 b3 9e 55 07 c6 6b f9 2c 05 be 6a b0 ea 9f 2c d4 7a c0 1b ad 8e 61 9e 56 dd de ba aa 09 56 dd 6f ab 9e d5 a9 ef a9 5c ad ba f4 b5 bd 23 b5 f7 0d e1 5a 00 00 d0 81 55 bb 9b 03 fe 16 ea a9 3b 69 6d ed bf f4 26 93 87 c6 6b c5 ec 6e 5e 7e 95 a5 55 ab c4 6a c9 cf ea 30 fb ab 1e 71 2c f3 06 ab ee b3 55 cf ea e4 b7 94 03 ab 96 dd d5 85 77 70 24 77 64 a6 Data Ascii: :,^KV<Sb)l$nSeVwqcvNVG+-w%TXRB7i{nFw)>Z9/RUk,j,zaVVo\#ZU;im&kn^~Uj0q,Uwp$wd

Target ID:	1
Start time:	15:34:18
Start date:	11/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:34:20
Start date:	11/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2304,i,12025000276065122419,6215012790100505028,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2336 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	15:34:26
Start date:	11/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://start.scholarsapply.org/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://start.scholarsapply.org/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Windows Analysis Report
https://start.scholarsapply.org/