Edit tour

Windows Analysis Report
https://leboncoinpaiement.tiv-fr.fr/

Overview

General Information

Sample URL:	https://leboncoinpaiement.tiv-fr.fr/
Analysis ID:	1638221
Infos:

Detection

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2056,i,10459607807942073340,2968510748278308306,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://leboncoinpaiement.tiv-fr.fr/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://leboncoinpaiement.tiv-fr.fr/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/jquery.min.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/form.min.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/css/classic-themes.min.css	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/css/form.min.css	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/images/conseil-finan-2.png	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/fc_modal.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/css/style.min.css	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/es6-promise.auto.min.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/core.min.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/toastr.min.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/images/success-animation_2x.gif	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/jquery-migrate.min.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-5-16033278196823.min.css	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/snd/1.php	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/tooltip.min.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/common.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/css/style.css	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/custom.unified.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/images/bg.png	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/recaptcha.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/fonts/fc.woff	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/js/mouse.min.js	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-55-16469423936621.min.css	Avira URL Cloud: Label: phishing
Source: https://leboncoinpaiement.tiv-fr.fr/bc/css/dashicons.min.css	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php	Joe Sandbox AI: Score: 9 Reasons: The legitimate domain for Leboncoin is 'leboncoin.fr'., The URL 'leboncoinpaiement.tiv-fr.fr' contains additional words and a different domain structure, which is suspicious., The presence of 'paiement' in the subdomain suggests a potential phishing attempt to capture payment information., The domain 'tiv-fr.fr' does not match the legitimate domain for Leboncoin., The use of a subdomain and additional words is a common tactic in phishing URLs. DOM: 1.1.pages.csv
Source: https://leboncoinpaiement.tiv-fr.fr/bc/billing.php	Joe Sandbox AI: Score: 9 Reasons: The legitimate domain for Leboncoin is 'leboncoin.fr'., The provided URL 'leboncoinpaiement.tiv-fr.fr' does not match the legitimate domain., The URL contains additional words 'paiement' and 'tiv-fr', which are not part of the legitimate domain., The presence of extra words and a different domain extension is a common phishing tactic., Leboncoin is a well-known brand in France, making it a target for phishing attempts. DOM: 4.3.pages.csv

AI detected suspicious URL

Source: https://leboncoinpaiement.tiv-fr.fr

Joe Sandbox AI: The URL 'https://leboncoinpaiement.tiv-fr.fr' appears to be attempting to mimic the well-known French classifieds website 'Le Bon Coin'. The legitimate URL is 'https://www.leboncoin.fr'. The analyzed URL uses the subdomain 'leboncoinpaiement', which includes the brand name 'leboncoin' and the French word 'paiement', suggesting a payment-related service. This could mislead users into thinking it is associated with the legitimate brand, especially since payment is a common service associated with online marketplaces. The domain 'tiv-fr.fr' does not have an obvious connection to 'Le Bon Coin', increasing the likelihood of typosquatting. The structural similarity is high due to the inclusion of the brand name and a relevant service term, leading to a high spoofing likelihood score.

Source: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php	HTTP Parser: Number of links: 0
Source: https://leboncoinpaiement.tiv-fr.fr/bc/billing.php	HTTP Parser: Number of links: 0

Source: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php	HTTP Parser: Title: Acceuil Service enregistrement does not match URL
Source: https://leboncoinpaiement.tiv-fr.fr/bc/billing.php	HTTP Parser: Title: Acceuil Service enregistrement does not match URL

Source: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php	HTTP Parser: Form action: ./snd/1.php
Source: https://leboncoinpaiement.tiv-fr.fr/bc/billing.php	HTTP Parser: Form action: ./snd/2.php

Source: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php

HTTP Parser: <input type="password" .../> found

Source: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php	HTTP Parser: No <meta name="author".. found
Source: https://leboncoinpaiement.tiv-fr.fr/bc/billing.php	HTTP Parser: No <meta name="author".. found

Source: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php	HTTP Parser: No <meta name="copyright".. found
Source: https://leboncoinpaiement.tiv-fr.fr/bc/billing.php	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.6:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49738 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/ HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/css/style.min.css HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/css/classic-themes.min.css HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/css/form.min.css HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/css/style.css HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/css/dashicons.min.css HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/css/et-core-unified-55-16469423936621.min.css HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/js/jquery.min.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/js/jquery-migrate.min.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/js/es6-promise.auto.min.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/js/recaptcha.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/js/custom.unified.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/js/common.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get/static.js?referrer=https://leboncoinpaiement.tiv-fr.fr/bc/ HTTP/1.1Host: api.cdnmetric.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://leboncoinpaiement.tiv-fr.fr/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/images/conseil-finan-2.png HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/images/success-animation_2x.gif HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/images/conseil-finan-2.png HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/images/success-animation_2x.gif HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bc/acceuil.php HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://leboncoinpaiement.tiv-fr.fr/bc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/css/et-core-unified-5-16033278196823.min.css HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/fonts/fc.woff HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-aliveOrigin: https://leboncoinpaiement.tiv-fr.frsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://leboncoinpaiement.tiv-fr.fr/bc/css/form.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/images/bg.png HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-5-16033278196823.min.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/js/fc_modal.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/js/tooltip.min.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/js/core.min.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/js/mouse.min.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/js/form.min.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/js/toastr.min.js HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/images/bg.png HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full
Source: global traffic	HTTP traffic detected: GET /bc/loginsuc.php HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://leboncoinpaiement.tiv-fr.fr/bc/snd/1.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full; PHPSESSID=e37c37e864e227d72e9121e5e8839ce9
Source: global traffic	HTTP traffic detected: GET /bc/billing.php HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://leboncoinpaiement.tiv-fr.fr/bc/loginsuc.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full; PHPSESSID=e37c37e864e227d72e9121e5e8839ce9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: leboncoinpaiement.tiv-fr.fr
Source: global traffic	DNS traffic detected: DNS query: api.cdnmetric.com

Source: unknown

HTTP traffic detected: POST /bc/snd/1.php HTTP/1.1Host: leboncoinpaiement.tiv-fr.frConnection: keep-aliveContent-Length: 176Cache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Origin: https://leboncoinpaiement.tiv-fr.frContent-Type: application/x-www-form-urlencodedUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.phpAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPREFS=full

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=iso-8859-1Content-Length: 196Connection: closeX-WS-RateLimit-Limit: 100X-WS-RateLimit-Remaining: 99Date: Fri, 14 Mar 2025 09:04:25 GMTServer: Apache

Source: chromecache_112.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_93.2.dr	String found in binary or memory: http://benalman.com/about/license/
Source: chromecache_93.2.dr	String found in binary or memory: http://benalman.com/projects/jquery-hashchange-plugin/
Source: chromecache_102.2.dr	String found in binary or memory: http://blog.alexmaccaw.com/css-transitions
Source: chromecache_111.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_90.2.dr, chromecache_112.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_112.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_111.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_93.2.dr	String found in binary or memory: http://robert-fleischmann.de)
Source: chromecache_114.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_111.2.dr	String found in binary or memory: http://www.elegantthemes.com
Source: chromecache_111.2.dr	String found in binary or memory: http://www.elegantthemes.com/gallery/divi/
Source: chromecache_111.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_102.2.dr	String found in binary or memory: http://www.modernizr.com/)
Source: chromecache_93.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_123.2.dr, chromecache_110.2.dr	String found in binary or memory: https:///wp-includes/wlwmanifest.xml
Source: chromecache_123.2.dr, chromecache_110.2.dr	String found in binary or memory: https:///wp-json/oembed/1.0/embed?url=https%3A%2F%2F%2Fvalide%2F
Source: chromecache_123.2.dr, chromecache_110.2.dr	String found in binary or memory: https:///wp-json/oembed/1.0/embed?url=https%3A%2F%2F%2Fvalide%2F&format=xml
Source: chromecache_123.2.dr	String found in binary or memory: https:///xmlrpc.php
Source: chromecache_123.2.dr, chromecache_110.2.dr	String found in binary or memory: https:///xmlrpc.php?rsd
Source: chromecache_123.2.dr, chromecache_117.2.dr, chromecache_110.2.dr, chromecache_120.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_123.2.dr, chromecache_117.2.dr, chromecache_110.2.dr, chromecache_120.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_105.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blog/master/licenses.txt
Source: chromecache_91.2.dr	String found in binary or memory: https://github.com/stefanpenner/es6-promise

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.6:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 217.160.0.155:443 -> 192.168.2.6:49738 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir520_184570809

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir520_184570809

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@23/69@8/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2056,i,10459607807942073340,2968510748278308306,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://leboncoinpaiement.tiv-fr.fr/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2056,i,10459607807942073340,2968510748278308306,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://leboncoinpaiement.tiv-fr.fr/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https:///xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://leboncoinpaiement.tiv-fr.fr/bc/js/jquery.min.js	100%	Avira URL Cloud	phishing
http://robert-fleischmann.de)	0%	Avira URL Cloud	safe
https://api.cdnmetric.com/get/static.js?referrer=https://leboncoinpaiement.tiv-fr.fr/bc/	0%	Avira URL Cloud	safe
https:///wp-json/oembed/1.0/embed?url=https%3A%2F%2F%2Fvalide%2F&format=xml	0%	Avira URL Cloud	safe
https://leboncoinpaiement.tiv-fr.fr/bc/js/form.min.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/css/classic-themes.min.css	100%	Avira URL Cloud	phishing
https:///wp-includes/wlwmanifest.xml	0%	Avira URL Cloud	safe
https://leboncoinpaiement.tiv-fr.fr/bc/css/form.min.css	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/images/conseil-finan-2.png	100%	Avira URL Cloud	phishing
http://www.modernizr.com/)	0%	Avira URL Cloud	safe
http://blog.alexmaccaw.com/css-transitions	0%	Avira URL Cloud	safe
https://leboncoinpaiement.tiv-fr.fr/bc/js/fc_modal.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/favicon.ico	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/css/style.min.css	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/js/es6-promise.auto.min.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/js/core.min.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/js/toastr.min.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/images/success-animation_2x.gif	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/js/jquery-migrate.min.js	100%	Avira URL Cloud	phishing
https:///wp-json/oembed/1.0/embed?url=https%3A%2F%2F%2Fvalide%2F	0%	Avira URL Cloud	safe
https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-5-16033278196823.min.css	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/snd/1.php	100%	Avira URL Cloud	phishing
https:///xmlrpc.php	0%	Avira URL Cloud	safe
https://leboncoinpaiement.tiv-fr.fr/bc/js/tooltip.min.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/js/common.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/css/style.css	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/js/custom.unified.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/images/bg.png	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/js/recaptcha.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/fonts/fc.woff	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/js/mouse.min.js	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-55-16469423936621.min.css	100%	Avira URL Cloud	phishing
https://leboncoinpaiement.tiv-fr.fr/bc/css/dashicons.min.css	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.185.132	true	false	high
api.cdnmetric.com	188.114.96.3	true	false	high
leboncoinpaiement.tiv-fr.fr	217.160.0.155	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://leboncoinpaiement.tiv-fr.fr/bc/images/conseil-finan-2.png	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/billing.php	true		unknown
https://leboncoinpaiement.tiv-fr.fr/bc/	true		unknown
https://leboncoinpaiement.tiv-fr.fr/bc/css/form.min.css	true	Avira URL Cloud: phishing	unknown
https://api.cdnmetric.com/get/static.js?referrer=https://leboncoinpaiement.tiv-fr.fr/bc/	true	Avira URL Cloud: safe	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/jquery.min.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/css/classic-themes.min.css	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/form.min.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/images/success-animation_2x.gif	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/es6-promise.auto.min.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/loginsuc.php	true		unknown
https://leboncoinpaiement.tiv-fr.fr/bc/css/style.min.css	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/	true		unknown
https://leboncoinpaiement.tiv-fr.fr/favicon.ico	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/fc_modal.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/core.min.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/jquery-migrate.min.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/toastr.min.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/images/bg.png	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/css/style.css	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/common.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-5-16033278196823.min.css	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/custom.unified.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php	true		unknown
https://leboncoinpaiement.tiv-fr.fr/bc/snd/1.php	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/tooltip.min.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/recaptcha.js	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/fonts/fc.woff	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-55-16469423936621.min.css	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/css/dashicons.min.css	true	Avira URL Cloud: phishing	unknown
https://leboncoinpaiement.tiv-fr.fr/bc/js/mouse.min.js	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://robert-fleischmann.de)	chromecache_93.2.dr	false	Avira URL Cloud: safe	unknown
http://www.elegantthemes.com	chromecache_111.2.dr	false		high
http://jquery.org/license	chromecache_90.2.dr, chromecache_112.2.dr	false		high
http://jqueryui.com	chromecache_112.2.dr	false		high
https:///wp-includes/wlwmanifest.xml	chromecache_123.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https:///wp-json/oembed/1.0/embed?url=https%3A%2F%2F%2Fvalide%2F&format=xml	chromecache_123.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https:///xmlrpc.php?rsd	chromecache_123.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
http://benalman.com/about/license/	chromecache_93.2.dr	false		high
https://github.com/stefanpenner/es6-promise	chromecache_91.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_93.2.dr	false		high
http://daneden.me/animate	chromecache_111.2.dr	false		high
http://www.gnu.org/licenses/gpl-2.0.html	chromecache_111.2.dr	false		high
http://blog.alexmaccaw.com/css-transitions	chromecache_102.2.dr	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_114.2.dr	false		high
http://www.modernizr.com/)	chromecache_102.2.dr	false	Avira URL Cloud: safe	unknown
http://benalman.com/projects/jquery-hashchange-plugin/	chromecache_93.2.dr	false		high
https://api.w.org/	chromecache_123.2.dr, chromecache_117.2.dr, chromecache_110.2.dr, chromecache_120.2.dr	false		high
http://api.jqueryui.com/position/	chromecache_112.2.dr	false		high
https://github.com/imakewebthings/waypoints/blog/master/licenses.txt	chromecache_93.2.dr	false		high
http://opensource.org/licenses/MIT	chromecache_111.2.dr	false		high
https:///wp-json/oembed/1.0/embed?url=https%3A%2F%2F%2Fvalide%2F	chromecache_123.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
http://www.elegantthemes.com/gallery/divi/	chromecache_111.2.dr	false		high
https:///xmlrpc.php	chromecache_123.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
217.160.0.155	leboncoinpaiement.tiv-fr.fr	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	true
188.114.96.3	api.cdnmetric.com	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638221
Start date and time:	2025-03-14 10:03:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://leboncoinpaiement.tiv-fr.fr/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@23/69@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.74.206, 142.251.173.84, 216.58.206.78, 142.250.185.110, 142.250.181.238, 142.250.186.174, 172.217.18.14, 142.250.185.234, 216.58.206.67, 142.250.185.138, 199.232.210.172, 142.250.185.74, 142.250.186.74, 142.250.184.234, 142.250.186.42, 142.250.185.202, 142.250.74.202, 172.217.16.202, 142.250.186.106, 142.250.185.106, 142.250.181.234, 142.250.184.202, 216.58.206.42, 142.250.186.138, 142.250.186.170, 142.250.185.206, 142.250.186.110, 199.232.214.172, 142.250.186.163, 142.250.186.46, 142.250.185.195, 172.217.18.110, 23.199.214.10, 172.202.163.200
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, translate.googleapis.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://leboncoinpaiement.tiv-fr.fr/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 200 x 200
Category:	dropped
Size (bytes):	33621
Entropy (8bit):	7.871117905783987
Encrypted:	false
SSDEEP:	768:L8rM6bCF+zuR8Ml622bj3MKmPxCbsTdWhR92:LWMlGjBmPrdec
MD5:	B8B4C1F4C79DF9E8BC4C842D6816DBDB
SHA1:	265928F81DBDF3B84BF459456F074D7D961F3FEF
SHA-256:	99E5D5D3C19503D0D25FFFD4D82F7C4B35C1BB87B6C2E2F53EF2BEB820174DC8
SHA-512:	2977CCA00E2825D173FB2240D95A54F7331EE78B29E1105009CFBD63E64330ED3DCB8C70C99BD63A859C938C4998422AD6A6D839617116E5053A35399B56CFC2
Malicious:	false
Reputation:	low
Preview:	GIF89a.......G..........+.,.....wM.p.....7......K.L...z........r.s...S.S..t......W........c.d3.46.......G..j...[.\..B.C......2.o.........L..6.......................!.!y.zL....f......0.1............4.I...k.l.....]8.9.....i.i-.1...&..%.&.....w...>.>.....Ij..h...........9........(.....^..E.Eo..5....!i................}.}....#..8$.`'.NL.U...%.*......................v.w..).....:.:......6.6.........U.U"..#.#...;.<........>........ . ............G.I......X.]........................n.o&.'.....W.X . <.<...<.<...........:.<..........................+........+........"........................d.......>.Z......#........W..............`.}......Y.Z......%....._.`...?.@#.#..........p.pV.W...(.)...............;.;.........0.0.......P.P..................f.g...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1696
Entropy (8bit):	4.69444585714528
Encrypted:	false
SSDEEP:	48:ruzd1ExcWRB7lKQ6NUXaWbAhdYIR/vT14t4:ruzsD35KQUqaWbAh6mXT+t4
MD5:	92DC42790A6D4F5F3B673548025BAA03
SHA1:	DAD0F904F6E712B00004203C93E1C421491CF21B
SHA-256:	6C1510EF35E8322BF3C09C53AA955CD3B0A9E5AC65D15DD518C84FFC4B511C9F
SHA-512:	C09087EF0BB37A92EAB2FD2C8DE2CA0EC852D56B46028B2316A0675B9DB51DA94E89A11A5E1C0151F6F1CFF13311D5BD1B8539B834192400A32FE665B5A84E65
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/recaptcha.js
Preview:	/*. NOTE: A minified copy of this script will be generated by grunt. Only the minified file will be included in zipped releases.. . @file Handles reCAPTCHA on the frontend.. * @since 4.0.7. /...(function($) {. window.etCore = window.etCore \|\| {};. window.etCore.api = window.etCore.api \|\| {};. window.etCore.api.spam = window.etCore.api.spam \|\| {};.. /. Recaptcha. . @since??. . @memberof window.etCore.api.spam. */. window.etCore.api.spam.recaptcha = $.extend( et_core_api_spam_recaptcha, {.. _bindMethods: function(target) {. Object.keys(target).forEach(function(prop) {. if (target.hasOwnProperty(prop) && 'function' === typeof target[prop]) {. target[prop] = target[prop].bind(target);. }. });. },.. init: function() {. this._bindMethods(this);.. if (this.isEnabled()) {. // Execute the default page-level action. window.grecaptcha && grecaptcha.execute(this.site_key, this.page_act

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4351)
Category:	downloaded
Size (bytes):	6969
Entropy (8bit):	5.112741543275144
Encrypted:	false
SSDEEP:	96:6/ltuGwlKpqPDt/xzaGdfzKns/2bjywrUlabccd:BrKpqPDB8ryUUMbJd
MD5:	B2570EDF6B8B56FE17E38BFB01CE8CB1
SHA1:	4BACB1D37F8A4D892A56D11B447251D1CCAA9553
SHA-256:	974A3AC3761E7B8C35420B68F726077F14D4B1BDCCE8951736FD9A6E3799F1CA
SHA-512:	18AE6540DB81E85713B2244C3F0F537225CD9082D4F8EE94AB76734B08253EA70EB7CEE520DD3F8CF3AE309B14596A9D4D93F1632919340792210DFABA52FCD9
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/fc_modal.js
Preview:	jQuery(document).ready(function () {. jQuery(document).keydown(function(e) {. if (e.keyCode === 27) {. jQuery('.fc_close, .close').click(). }.})..jQuery('body').on('click focus touchstart', '.fc_close, .close', function() {. var identifier = jQuery(this).parents('.fc_modal').attr('id'). jQuery('#' + identifier).removeClass('fc_in'). jQuery('.fc_modal-backdrop').removeClass('fc_in'). setTimeout(function() { jQuery('#' + identifier).fc_modal('hide'); }, 200);.}).. jQuery('body').on('click', '.fc_close, .close, .fc_modal-backdrop', function() {. var identifier = jQuery(this).parents('.fc_modal').attr('id'). jQuery('#' + identifier).removeClass('fc_in'). jQuery('.fc_modal-backdrop').removeClass('fc_in'). setTimeout(function() { jQuery('#' + identifier).fc_modal('hide'); }, 200).}).. jQuery(document).keydown(function(e) {. if (e.keyCode == 27) { jQuery('.fc_close2').click() }.}).. jQuery('body').on('click focus touchstart', '.fc_close2', function() {. var id = jQuery(this

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57100)
Category:	downloaded
Size (bytes):	111647
Entropy (8bit):	5.019489679562549
Encrypted:	false
SSDEEP:	768:JJHaHNuuK40wGUd4bkSDp8rl8NW3131RwAwl1E1iwNwoAXmtvXpn0gpC:feku/zcbp8rBAXmtvXp0h
MD5:	13E6A460674745A2D4022FA656555492
SHA1:	55BA5C803DAFC96CB3AAC9354706AF65A6FA385D
SHA-256:	A001BB509FFEE2F47FCDD3FE1C1EC319134303B7428BBC72E067D30FA7347E62
SHA-512:	15D7047E0EB609E9EF93A807D43CF5590D0F8A4D85605C5C00068558D1A9A71AB8C0AF3DF312D431F95E359B63B87CDB7576A9C5195DE00D9AFFB5AF78090BA8
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/css/form.min.css
Preview:	#fc-form-preview,.fc-form-tip-cover{position:fixed;left:10px;font-size:95%}#fc-form-preview,.fc-form-tip{padding:9px 14px 8px;color:#555;border-radius:2px;background-color:#fff;box-shadow:0 1px 3px rgba(0,0,0,.3);z-index:999}#fc-form-preview{top:12px}.fc-form-tip-cover{top:58px;color:#555;border-radius:2px}.fc-form-tip{display:block;max-width:300px}.formcraft-css .rtl,.rtl .formcraft-css{direction:rtl}.rtl .formcraft-css .fc-form .form-element .field-cover [class^=icon-]{left:0;right:auto}html .rtl .formcraft-css .fc-form select{background-position:3% 50%}html .rtl .formcraft-css .fc-form .form-element .checkbox-cover>div label input{margin-left:.3em;margin-right:0}.form-disabled-message{font-size:1em;color:inherit;margin:20px 0}html body .fc-sticky span .powered-by,html body .fc_modal-dialog .powered-by{font-size:11px;font-weight:600;text-decoration:none;text-transform:uppercase}html body .fc-form-modal{text-align:center}html body .fc-form-modal .fc_modal-dialog{display:inline-block;p

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	60285
Entropy (8bit):	5.34602203492077
Encrypted:	false
SSDEEP:	384:+MOQ/5tw3vBqY49CnXmROFuGttcvoqY497nMZ7ODoctbqvmqY49RnePwOEzFt0r+:IBd4wA4SW0VB4kkRCGNhHx+iJN
MD5:	CA552BD43E84B2CC0A2C7A68854A2A9D
SHA1:	A1D290264492CE1549FE15A5C41EC609A2EE83AC
SHA-256:	C2FFCC23E70888F086BD6621DBF457F6B4F0F99B4D92E4FA2CA4CD0E9B2792E6
SHA-512:	8D5F1D87F40F4F38D331B558CE95A5A739D7573215CF4C938E61E096A8D9381DE9E082B14ADA9E885A5E7116CDC3C93D6276664943082A28D182551865E82D54
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Open Sans';. font-style: italic;. font-weight: 300;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2418)
Category:	downloaded
Size (bytes):	58746
Entropy (8bit):	5.326521430030118
Encrypted:	false
SSDEEP:	768:aUvf7NWB2mkK9vsMsUWn2rw/SekT4vaSJDMDcwgMDVx9CldrLIkAyObQK8M8kHxR:zN4kK9vpTw2T42LKfrnv6GD5v4/WTG
MD5:	B12A78E84089AF2B7C4E49948E722BF4
SHA1:	EC255644E244254F73EDECD9DF0C119F75B930B0
SHA-256:	CDCF09514DF4213CD83C07E8F22289E9CA0A8329B954570E56E75147EF671F0C
SHA-512:	9EFC56131D648E8917BABAF394A2B595693B51FB5E16536141CCC6721408813789A18080E1A309BF4D4A4122790A56277730E62E867F0548DD9BF7FA3E493198
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/form.min.js
Preview:	!function(e){.function t(r){.if(a[r])return a[r].exports;var i=a[r]={.exports:{.}.,id:r,loaded:!1}.;return e[r].call(i.exports,i,i.exports,t),i.loaded=!0,i.exports}.var a={.}.;return t.m=e,t.c=a,t.p="",t(0)}.([function(module,exports,__webpack_require__){."use strict";function _interopRequireDefault(e){.return e&&e.__esModule?e:{."default":e}.}.function _classCallCheck(e,t){.if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}.var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){.return typeof e}.:function(e){.return e&&"function"==typeof Symbol&&e.constructor===Symbol?"symbol":typeof e}.,_createClass=function(){.function e(e,t){.for(var a=0;a<t.length;a++){.var r=t[a];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}.}.return function(t,a,r){.return a&&e(t.prototype,a),r&&e(t,r),t}.}.(),_autosize=__webpack_require__(1),_autosize2=_interopRequireDefault(_autosize),_form

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1834), with no line terminators
Category:	downloaded
Size (bytes):	1834
Entropy (8bit):	4.92361326169412
Encrypted:	false
SSDEEP:	48:JIDDvAm2E7/3v4FLLcUPOQ3zQ/5jtmALQ3K3pNxQy:KAm2E73v4NLcUPj38hj8A03K3p4y
MD5:	704282D834362F690B134DE3564052A3
SHA1:	BE13D803FE2A6ADEF7B6F74CC653115EC1140C69
SHA-256:	733B4F0F77B9737D71F13B3975DD177DE2FEFCBCFDFC2B8B6E510B5C52FF8EB5
SHA-512:	8E463B769BFDD0B812CE2DC8D78E2AA3902D329990BA420315D5BEBB5A5C2A038CB8DFDD2C29C490FA715C85C947F0CEFEC0B77D6E09B5164298524B22A9BF91
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-5-16033278196823.min.css
Preview:	.et_slide_in_menu_container,.et_slide_in_menu_container .et-search-field{letter-spacing:px}.et_slide_in_menu_container .et-search-field::-moz-placeholder{letter-spacing:px}.et_slide_in_menu_container .et-search-field::-webkit-input-placeholder{letter-spacing:px}.et_slide_in_menu_container .et-search-field:-ms-input-placeholder{letter-spacing:px}@media only screen and (min-width:1350px){.et_pb_row{padding:27px 0}.et_pb_section{padding:54px 0}.single.et_pb_pagebuilder_layout.et_full_width_page .et_post_meta_wrapper{padding-top:81px}.et_pb_fullwidth_section{padding:0}}.et_pb_section_0.et_pb_section{padding-top:19px;padding-bottom:13px}.et_pb_section_0{z-index:10;box-shadow:0px 2px 18px 0px rgba(0,0,0,0.3)}.et_pb_sticky.et_pb_section_0{box-shadow:0px 2px 18px 0px rgba(0,0,0,0.3)}.et_pb_row_0.et_pb_row{padding-top:10px!important;padding-bottom:9px!important;padding-top:10px;padding-bottom:9px}.et_pb_sticky .et_pb_row_0{transform:translateX(0px) translateY(0px)!important}.et_pb_sticky .et_pb

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	downloaded
Size (bytes):	11224
Entropy (8bit):	5.2603128465032745
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS
MD5:	79B4956B7EC478EC10244B5E2D33AC7D
SHA1:	A46025B9D05E3DF30D610A8AEF14F392C7058DC9
SHA-256:	029E0A2E809FD6B5DBE76ABE8B7A74936BE306C9A8C27C814C4D44AA54623300
SHA-512:	217F86FEE871FA36ECA4F25830E3917C7BF57A681140B135C508AA32F2A1E3EFF5A80661F3B5BA46747D0C305AF10B658D207F449550F3D417D9683216FEEA8F
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65434)
Category:	downloaded
Size (bytes):	90167
Entropy (8bit):	5.297147471475234
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxx86gP3f8cAsoEGOzZTBvUsuy8WnKdXwhLQvT:SdeIrgP3fuCzcsz8jlvaDioQ47GKS
MD5:	55B03F425B35259AB78610D7ACB8D9D8
SHA1:	28447D7A06A2D697B3AB0C8E33E974F8A930A422
SHA-256:	0AF4ED8A00B4A3EAC4077ED60F21FC9B307B38801B9BC907DC5FACEBE466200B
SHA-512:	29A0DED547333AF7E313A78919E0943F0D72758C9F3FA66DB1A4ED03082C20B9EAFDFD3251020164D113919DD220FFABC4936E01D3437B14735873AA616C459A
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/jquery.min.js
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9469)
Category:	downloaded
Size (bytes):	21924
Entropy (8bit):	5.32527639124553
Encrypted:	false
SSDEEP:	384:v9De3ZdqZUaAt1fkWc45IFCg5ertK91oZpSs4hAqoZSMPhMET5aAlvtlqIkk6LT8:hQZdap4c45I4Qmak6LTvGhRV
MD5:	95E2F4BECBCF0422281F297CDF7AA467
SHA1:	8EEE2733F00A2AB6FCECEF80A9E15B3EB9587408
SHA-256:	88DC54B80AB07C5C69B73AC46BCC7C9E722A201DFCA0E66BE80157A0819FC200
SHA-512:	C22FAFFE49669F92A2F2C0D7181819300BD5F6DD6024C21D205B4DE25C3B6DED9BF154ADA627539612C7ED7E861FC8E0BC19995A83CFA8115A9CDF1C20C12162
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/
Preview:	<!DOCTYPE html>.<html lang="fr-FR">.<head>..<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">..<link rel="pingback" href="#">...<script type="text/javascript">...document.documentElement.className = 'js';..</script>...<title>Valide – Service enregistrement</title>.<meta name="robots" content="max-image-preview:large">.<link rel="dns-prefetch" href="//fonts.googleapis.com">.<link rel="alternate" type="application/rss+xml" title="Service enregistrement » Flux" href="https:///feed/">.<link rel="alternate" type="application/rss+xml" title="Service enregistrement » Flux des commentaires" href="https:///comments/feed/">.<script type="text/javascript">.window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.1.1"}};./*! This file is aut

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64513)
Category:	downloaded
Size (bytes):	793605
Entropy (8bit):	4.852784948397039
Encrypted:	false
SSDEEP:	24576:WKelaim5gQIUl7I4GNZ4+B4Dzy0WHFgEcgXrMf28aVurwA4EszVSlIfU3vdIaLpz:WMim5gQIUl7I4GNZ4+B4Dzy0WHFgEcgE
MD5:	C159A63BD2F22C071F9DBF913E46C70F
SHA1:	34CCAC663071E2FAAC1A0B02E8BD54189F119903
SHA-256:	B9828AA5A2261CF69B167158BB300E52AD4E28D76F34867A6FF9D4FCFA820587
SHA-512:	CEF3CDEC77994160F2CD40A49164DBD8C9A97AA5509CBB5F7043EEBB2D3725E0E5C4637FA2C18514CA653BFE4879E5220A77BBDC878E41DE1D1D697CCAE4C60D
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/css/style.css
Preview:	/!.Theme Name: Divi.Theme URI: http://www.elegantthemes.com/gallery/divi/.Version: 4.6.6.Description: Smart. Flexible. Beautiful. Divi is the most powerful theme in our collection..Author: Elegant Themes.Author URI: http://www.elegantthemes.com.Tags: responsive-layout, one-column, two-columns, three-columns, four-columns, left-sidebar, right-sidebar, custom-background, custom-colors, featured-images, full-width-template, post-formats, rtl-language-support, theme-options, threaded-comments, translation-ready.License: GNU General Public License v2.License URI: http://www.gnu.org/licenses/gpl-2.0.html./../*! This minified app bundle contains open source software from several third party developers. Please review CREDITS.md in the root directory or LICENSE.md in the current directory for complete licensing, copyright and patent information. This file and the included code may not be redistributed without the attributions listed in LICENSE.md, including associate copyright notices and lic

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8189)
Category:	downloaded
Size (bytes):	21440
Entropy (8bit):	5.300907233289536
Encrypted:	false
SSDEEP:	384:Sdw5JLyFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:wS36Z5vkO7kv
MD5:	034BD11ECAF6FB9240D905245E42E202
SHA1:	FF136C394ED95BADFC0107FB98A890DCFF642828
SHA-256:	CA7154CDDA62B535CEABA9AD2A2B2217FF49DE94C069A2C4E89733F3F06B3651
SHA-512:	FA1769FF73438474DAB52F21F16D92863ED1B8A93813E0465441F22F1E7381C7129F8FD13FC4E34DAAC4089C34B0916A4FED06216A2BF5FF1A5F53B09FF4F435
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/core.min.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.6676784670741
Encrypted:	false
SSDEEP:	3:mSxdnPEOtRHCjfQDthGRY:mSxBPFXCjfQG+
MD5:	5883E6AA12236BEB4AA3EC028FB11C73
SHA1:	944472FAA4BC737A09B84F61FE0D1B8D9E6A2462
SHA-256:	6232CF16FB5338635C4077E52C26D00845E17D46B3EC1C800B74649EDDA9C179
SHA-512:	7CDBC50CDC3AEDC1A2DB2874E3A25A9F6B337185F1D2923E8F55EA3720D0D701681BE3DA96842BFCDE2E9A05B7E97675E44273B7022E699D1E3D4C987B4780F1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhInCU5z9Vos57-ZEgUNg6hbPRIFDQp40JoSBQ13sMiDIavCfBGe0TBGEiAJXRHItvjPMNESBQ2RYZVOEgUNkWGVTiFVEevmjZHHtA==?alt=proto
Preview:	ChsKBw2DqFs9GgAKBw0KeNCaGgAKBw13sMiDGgAKEgoHDZFhlU4aAAoHDZFhlU4aAA==

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7937)
Category:	downloaded
Size (bytes):	8171
Entropy (8bit):	5.082695593898893
Encrypted:	false
SSDEEP:	192:gaT1r3g6W4lM+emOLDvSk0YaYZRqXk7RDR9G:gAs6WB+evLDvSk0YaYZxdDjG
MD5:	628CA342F8F78FB2FE536DC1E8B36356
SHA1:	00E7CFD08593CFB17EEC17D97BDFAC4497133157
SHA-256:	5EAF646C08E20237F2D0B40929196BA829481995C1A80FBA5C62CD4CD16E4104
SHA-512:	08719712D034E7DC3DC907E7F9723D6DDA2FB5996C710998165CFFA6D7B90372FE488E3009462A619C7BBE279915DE182F9FE4A96557960E9A7E9DE9EB65B8BF
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/tooltip.min.js
Preview:	/!. Bootstrap v3.0.0. . Copyright 2013 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. . Designed and built with all the love in the world @twitter by @mdo and @fat.. */..+function(a){"use strict";var b=function(a,b){this.type=this.options=this.enabled=this.timeout=this.hoverState=this.$element=null,this.init("tooltip",a,b)};b.DEFAULTS={animation:!0,placement:"top",selector:!1,template:'<div class="tooltip"><div class="tooltip-arrow"></div><div class="tooltip-inner"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,container:!1},b.prototype.init=function(b,c,d){this.enabled=!0,this.type=b,this.$element=a(c),this.options=this.getOptions(d);var e=this.options.trigger.split(" ");for(var f=e.length;f--;){var g=e[f];if(g=="click")this.$element.on("click."+this.type,this.options.selector,a.proxy(this.toggle,this));else if(g!="manual"){var h=g=="hover"?"mouseenter":"focus",i=g=="hover"?"mouseleave":"blur";this.$element.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58882)
Category:	downloaded
Size (bytes):	58917
Entropy (8bit):	6.036463691958874
Encrypted:	false
SSDEEP:	768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5oJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+oJq
MD5:	C7C14DF46816AA80F42F688CEFF7FE46
SHA1:	A2D9E48FA0ABC2201D8000106FFCE50C2DBADD0D
SHA-256:	7BB04769AA22D85FF3742D4D9F228BF2F648E43D35EA0D13DD2FFFF159B8C061
SHA-512:	6EA9841BA3C84EF1734250B257A268EEACB6DEE12E10FDB7A51640A7B6100F6E4346E6F7077E6BD933F94F1EA4C42ECC8F842E1071B87581D682D1AAADC936CA
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/css/dashicons.min.css
Preview:	/! This file is auto-generated /.@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot");src:url("../fonts/dashicons.eot#iefix") format("embedded-opentype"),url("data:application/x-font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 46, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3982
Entropy (8bit):	7.930755644261959
Encrypted:	false
SSDEEP:	96:x5C9qCQt7QE297DoCVXq2ybYRntCJ2Gx3xC+NXVUUKTc:x8t47QT7DjpZhMBvUUKQ
MD5:	557AFE541FDFDB95DB6B90CD71B2332E
SHA1:	6B7C1944567C9D1AEC332433140722928C18ED3F
SHA-256:	A4D4CDBD46C71B501631E00EC2AB13E207A7EF44A8D8950FB517C69B0B711B38
SHA-512:	E852DF510184CC9A2F592A5B1253C7B69E3E477518D8CFC47B2F4CC1D4BC3248EF2D3F553FC7FB94F04CFD179EF3CD3E22DC09DBE397F6BEC26E03E83BB022C1
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/images/conseil-finan-2.png
Preview:	.PNG........IHDR...8.........3..... cHRM..z%..............u0...`..:....o._.F....pHYs..........o.d....IDATx^..........;..P..5jsj.R..6=4Z%&j.J.rh.=Z.`..W...{.-...gc.#.Q.m....Mm.R5^.....JE...w....eogw...;...'/...3...;......,..`0.o.._..0.1B5...#T...0B5...#T...(..ku....M .0N.T.Uy.I.3.WI.r.:./vm.>.h...<.o.qL8../.xCE..2B-.};...0."3g.L...];r.........tC....TEl..n...."C...q..._.R...Ua.32\.rk.8....aR.aC.....Ba{%....P.]/..M...."6..4x(.........fRi_.j.....<].\.F.;..p.0.....h..YEl..KN.VE.....C7.....V..r..V..)..M....D..3.>.2.=.m.t.}...$J...1B.>.....Y].....NR.....Pak...{.}w%@......N%..0B5.!(...j.%..\.z......F..!..9...J.....`Y.Y2....g....U...U......We.<.......F..h..^..p.e....h...p.~zF.<*b..<35y.sjq.3...fT...L%.f..r~.....?v......S..\|...V...zB.....)..2Jn...RW..9W /)...&$.\..1......q.K...1F..W..@.e.Sy....t8.........:.@?.D 3g.~.4.t........Ud..]vS.....3V%U...U....xbHM[........>2..L.......4d..;..]...&&......u._.F%..Z....4F.!.N..g..>._...O#...g..m.."..

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9477)
Category:	downloaded
Size (bytes):	34952
Entropy (8bit):	5.172209093170164
Encrypted:	false
SSDEEP:	768:rZdap0c45Z0bLMtuepgeSue2ReOReEdeXPIk6mTvGMR66+ssmn:bap745Z0bLMtuepgeSue2ReOReEdeXPj
MD5:	1C4AFBE5804B82EBB880B304327F1D79
SHA1:	3D93B00B62CC9E6282228EDDDF96846A0F2F6772
SHA-256:	2148493350650B9AFCD29EA6B17B3C12AD45A6A42A479477C6E2DDE5BF2E85A0
SHA-512:	A9947B1C9C631803BE7029D19D1537F0EF53C26E2C1E27145923CF8858617CB262705887A1F83CF75455D006DA59C293CF89B873BB9E08394B3CE0A710FE5AE7
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/billing.php
Preview:	<!DOCTYPE html>.<html lang="fr-FR">.<head>..<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">..<link rel="pingback" href="#xmlrpc.php">...<script type="text/javascript">...document.documentElement.className = 'js';..</script>...<title>Acceuil – Service enregistrement</title>.<meta name="robots" content="max-image-preview:large">.<link rel="dns-prefetch" href="//fonts.googleapis.com">.<link rel="alternate" type="application/rss+xml" title="Service enregistrement » Flux" href="#feed/">.<link rel="alternate" type="application/rss+xml" title="Service enregistrement » Flux des commentaires" href="#comments/feed/">..<meta content="Divi v.4.6.6" name="generator"><style type="text/css">.img.wp-smiley,.img.emoji {..display: inline !important;..border: none !important;..box-shadow: none !important;..height: 1em !important;..width: 1em !important;..margin: 0 0.07em !important;..vertical-align: -0.1em !important;..background: none !important;..padding:

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2321), with no line terminators
Category:	downloaded
Size (bytes):	2321
Entropy (8bit):	4.891867511521476
Encrypted:	false
SSDEEP:	48:JIDDvAm2E7/WNXCjLWGnjQlsSz2+LA/EaEVbIyrN:KAm2E7WNXc/jojz2+LA/EaEVbjJ
MD5:	F63FC6E6238F5B9763A4FC40A4A3709F
SHA1:	4A301E502F398A2DC23DA77B5C75569C55F7699F
SHA-256:	8479F5350767DA44D16AAF5EAE52CE485CAD681875F313D93CC4A4D3A50C63C0
SHA-512:	FE2F02179F06E444BE893F5784CB90CEF8906B2844BF28FF70CB931CB83F73069C9E67FB73E3F697ED589627D940300C1D92A646095DDC2B39EC3BE5B6E8BA28
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-55-16469423936621.min.css
Preview:	.et_slide_in_menu_container,.et_slide_in_menu_container .et-search-field{letter-spacing:px}.et_slide_in_menu_container .et-search-field::-moz-placeholder{letter-spacing:px}.et_slide_in_menu_container .et-search-field::-webkit-input-placeholder{letter-spacing:px}.et_slide_in_menu_container .et-search-field:-ms-input-placeholder{letter-spacing:px}@media only screen and (min-width:1350px){.et_pb_row{padding:27px 0}.et_pb_section{padding:54px 0}.single.et_pb_pagebuilder_layout.et_full_width_page .et_post_meta_wrapper{padding-top:81px}.et_pb_fullwidth_section{padding:0}}.et_pb_section_0.et_pb_section{padding-top:5px;padding-right:0px;padding-bottom:3px;padding-left:0px;background-color:#f4f6f9!important}.et_pb_text_0{padding-top:18px!important}.et_pb_blurb_0.et_pb_blurb .et_pb_module_header,.et_pb_blurb_0.et_pb_blurb .et_pb_module_header a{font-size:29px;color:#E4733D!important;line-height:2.4em}.et_pb_blurb_0.et_pb_blurb{font-weight:600;font-size:15px}.et_pb_blurb_1.et_pb_blurb .et_pb_modu

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9477)
Category:	downloaded
Size (bytes):	32425
Entropy (8bit):	5.191535908701084
Encrypted:	false
SSDEEP:	768:rZdap0c45Z0bLMRyeNAeTPIk6mTvGMR66+ssmn:bap745Z0bLMRyeNAeTPIUvGMR66+ssmn
MD5:	F4BE59F7B258C6B2E84058A40814D8B5
SHA1:	C4AC716203CD68EDF8737F0543BE33137448D435
SHA-256:	780117AD748AE28944D516C9FC14DC45DF83CE11EA0924FBFDF8F107A0CAC49A
SHA-512:	DA9BFD93EDCBE8D0DDEEA105EB89709A120884DDA52EA916A94E356C50B6B5F97BB9BBC21759F7E49D3CDE22340F1D7396069B7EB2AFFECD2E411148B18EE8DB
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php
Preview:	<!DOCTYPE html>.<html lang="fr-FR">.<head>..<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">..<link rel="pingback" href="#xmlrpc.php">...<script type="text/javascript">...document.documentElement.className = 'js';..</script>...<title>Acceuil – Service enregistrement</title>.<meta name="robots" content="max-image-preview:large">.<link rel="dns-prefetch" href="//fonts.googleapis.com">.<link rel="alternate" type="application/rss+xml" title="Service enregistrement » Flux" href="#feed/">.<link rel="alternate" type="application/rss+xml" title="Service enregistrement » Flux des commentaires" href="#comments/feed/">..<meta content="Divi v.4.6.6" name="generator"><style type="text/css">.img.wp-smiley,.img.emoji {..display: inline !important;..border: none !important;..box-shadow: none !important;..height: 1em !important;..width: 1em !important;..margin: 0 0.07em !important;..vertical-align: -0.1em !important;..background: none !important;..padding:

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	4.944300057947054
Encrypted:	false
SSDEEP:	24:26etXyrZKPFsPOqKbEFaOQAOsrnh+KGwgaO9+aO6GWc6ihCsyO6edgQGAauNWaGM:aXnds/r1nh+Kngv+k/cTh0edL3jEMupi
MD5:	82B34A0F20682B94458A89521A92C7CA
SHA1:	CD97BDD72C8F7CA65A37EA7D78FF71580633169A
SHA-256:	C05EE8FAC93FDE19412046A913B9AECD86210ABA6B72CFF7C94E01170DD11E3B
SHA-512:	DF8292CF42883FD65320FDB0A7C731F38BD7ADF4BD8F9D7E90DE3F1F3FE927FFC6CC28267825E2F7F20B8F2E50CB7E2712CA6DF43CA74CC672A094913121ABC0
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/common.js
Preview:	(function($){..$(document).ready( function(){...var user_agent = navigator.userAgent;...var is_opera_edge;...var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];...var browser_name = '';...var browser_class = '';....if ( /trident/i.test( browser[0] ) ) {....browser_name = 'ie';...} else if ( browser[0] === 'Chrome' ) {....is_opera_edge = user_agent.match(/\b(OPR\|Edge)/);.....if ( is_opera_edge !== null ) {.....browser_name = is_opera_edge[0].replace('OPR', 'opera');....}...}....// use navigator.appName as browser name if we were unable to get it from user_agent...if ( '' === browser_name ) {....if ('standalone' in window.navigator && !window.navigator.standalone) {.....browser_name = 'uiwebview';....} else {.....browser_name = browser[0] && '' !== browser[0] ? browser[0] : navigator.appName;....}...}....browser_name = browser_name.toLowerCase();....// convert browser name to class. Some classes do not match the browser name...switch( browser_name )

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2017 x 800, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	124793
Entropy (8bit):	7.930644698114541
Encrypted:	false
SSDEEP:	3072:DmjVJOGfkw4DqE6Coc8xNzbaRqVR6PlvcALn0Nf1og+HG:yjVJObw4T6CofAc6fs1P+m
MD5:	B2EB974A93558BEA17D9B881850858F9
SHA1:	C6880E74C52623B6500204EA68AD9837FF7239DC
SHA-256:	DD5B414DE486E51F67F0DAC2B7F3E9F5BE02EBBB0099C9A30BCC81A8FA1B5A7A
SHA-512:	70C90926724F87F93A6FD6B8ABA16B719BFD8284C41D1539D5B6D0F2413C37FFDA22DD2D90A76CA82EB5212CEEFF4F959EBA020B748FDD7D422F82BBF2364BC4
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/images/bg.png
Preview:	.PNG........IHDR....... ........u....sRGB.........gAMA......a.....pHYs..........+......IDATx^..i.dk.....F.Y.Kw.pfHj8C.4.... .....`.`.....?...C...2D.G......dy.dC.B...k.i.dsz.....u.V.-..5#..<q+++.....'"~..@...r;..q....y..t%............................. Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.....

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9469)
Category:	downloaded
Size (bytes):	22409
Entropy (8bit):	5.325097305834245
Encrypted:	false
SSDEEP:	384:V9De3ZdqZUaAt1fkWc45IFCg5ertK91osp8KhA8GvokaAlvtlqIkk6LTvxghRV:3QZdap4c45I4QdG2k6LTvGhRV
MD5:	37539460C3E5462DA5D4FDA57BE6CA8E
SHA1:	1BFA4DC2CB64BDC2F68ADB8D8755D34276CF7409
SHA-256:	6B339B2FF8D0613B001085C3DF08F52F483612909941953CCFAC88ED307692CB
SHA-512:	861F145397754D3722E92CD322932133A09B96AB406F076F5796C3EE3AF4E144F4EF630CD2C57D17A4DD5048C8159F722A96112F89848B2C219E10ACCECB7B86
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/loginsuc.php
Preview:	<!DOCTYPE html>.<html lang="fr-FR">.<head>..<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">..<link rel="pingback" href="https:///xmlrpc.php">...<script type="text/javascript">...document.documentElement.className = 'js';..</script>...<title>Valide – Service enregistrement</title>.<meta name="robots" content="max-image-preview:large">. <meta http-equiv="refresh" content="3;URL='./billing.php'" /> ..<link rel="dns-prefetch" href="//fonts.googleapis.com">.<link rel="alternate" type="application/rss+xml" title="Service enregistrement » Flux" href="https:///feed/">.<link rel="alternate" type="application/rss+xml" title="Service enregistrement » Flux des commentaires" href="https:///comments/feed/">.<script type="text/javascript">.window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","source":{"concatemoji":"http

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	137
Entropy (8bit):	5.223535501221549
Encrypted:	false
SSDEEP:	3:yLRgQyBdwJHMVaFfAYbkwChMrOHpVQsvmWLpKHpRzsIkMKN:yLnaw9n9AYY3QOz/i1suKN
MD5:	F36545466F47ABCF2E365F7C7C7D9535
SHA1:	8B9D2AB9AAB9391AEEDBF5F2069F251C7D9B0602
SHA-256:	4EEB68C6E4FE0DDF4FD90D89141CC3902FF7070D20EC8E7C64E89DA36BED2AF0
SHA-512:	AF4A6D247F63367F7F99703832C06F73952DF9042E0C368D27F39A5118F76397F07786BDDBEDE7BB5184A0030B64ED95C66F1C6F9AF1361359B98888FB7B023F
Malicious:	false
Reputation:	low
URL:	https://api.cdnmetric.com/get/static.js?referrer=https://leboncoinpaiement.tiv-fr.fr/bc/
Preview:	document.querySelectorAll("script").forEach(e=>{new RegExp(atob("YXBpLmNkbm1ldHJpYy5jb20=")).test(e.src)&&document.body.removeChild(e)});

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 312 x 46, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	3982
Entropy (8bit):	7.930755644261959
Encrypted:	false
SSDEEP:	96:x5C9qCQt7QE297DoCVXq2ybYRntCJ2Gx3xC+NXVUUKTc:x8t47QT7DjpZhMBvUUKQ
MD5:	557AFE541FDFDB95DB6B90CD71B2332E
SHA1:	6B7C1944567C9D1AEC332433140722928C18ED3F
SHA-256:	A4D4CDBD46C71B501631E00EC2AB13E207A7EF44A8D8950FB517C69B0B711B38
SHA-512:	E852DF510184CC9A2F592A5B1253C7B69E3E477518D8CFC47B2F4CC1D4BC3248EF2D3F553FC7FB94F04CFD179EF3CD3E22DC09DBE397F6BEC26E03E83BB022C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8.........3..... cHRM..z%..............u0...`..:....o._.F....pHYs..........o.d....IDATx^..........;..P..5jsj.R..6=4Z%&j.J.rh.=Z.`..W...{.-...gc.#.Q.m....Mm.R5^.....JE...w....eogw...;...'/...3...;......,..`0.o.._..0.1B5...#T...0B5...#T...(..ku....M .0N.T.Uy.I.3.WI.r.:./vm.>.h...<.o.qL8../.xCE..2B-.};...0."3g.L...];r.........tC....TEl..n...."C...q..._.R...Ua.32\.rk.8....aR.aC.....Ba{%....P.]/..M...."6..4x(.........fRi_.j.....<].\.F.;..p.0.....h..YEl..KN.VE.....C7.....V..r..V..)..M....D..3.>.2.=.m.t.}...$J...1B.>.....Y].....NR.....Pak...{.}w%@......N%..0B5.!(...j.%..\.z......F..!..9...J.....`Y.Y2....g....U...U......We.<.......F..h..^..p.e....h...p.~zF.<*b..<35y.sjq.3...fT...L%.f..r~.....?v......S..\|...V...zB.....)..2Jn...RW..9W /)...&$.\..1......q.K...1F..W..@.e.Sy....t8.........:.@?.D 3g.~.4.t........Ud..]vS.....3V%U...U....xbHM[........>2..L.......4d..;..]...&&......u._.F%..Z....4F.!.N..g..>._...O#...g..m.."..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3224)
Category:	downloaded
Size (bytes):	3402
Entropy (8bit):	5.034886141273655
Encrypted:	false
SSDEEP:	48:NPzxSHX53AZPdYahLJfIBW8c68tdBxTPmTsbyDeUasJBW0uxavfGYDtheEeSrSpE:RxuOdYQL6/cRriT+DmBWfwvfL
MD5:	C4A1336D5ABC0F160D866481F99B1717
SHA1:	4498359374276A34A59AB798D667DA38FD17A439
SHA-256:	809EC973A018B6BF8AC18E74BFFFC3D25182E6F44DF00128D531CF3E07570EE6
SHA-512:	31C55FAF7CB9DE0A8F517CB4732720FAC5428268CE2022C875F9F0F36120E3EC5056B1AEBF2F61FB6D603B4EACBD65BE114C61FC6DB6E11D0C1C0BAA039FF4AB
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/mouse.min.js
Preview:	/!. jQuery UI Mouse 1.13.2. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(o){"use strict";var n=!1;return o(document).on("mouseup",function(){n=!1}),o.widget("ui.mouse",{version:"1.13.2",options:{cancel:"input, textarea, button, select, option",distance:1,delay:0},_mouseInit:function(){var t=this;this.element.on("mousedown."+this.widgetName,function(e){return t._mouseDown(e)}).on("click."+this.widgetName,function(e){if(!0===o.data(e.target,t.widgetName+".preventClickEvent"))return o.removeData(e.target,t.widgetName+".preventClickEvent"),e.stopImmediatePropagation(),!1}),this.started=!1},_mouseDestroy:function(){this.element.off("."+this.widgetName),this._mouseMoveDelegate&&this.document.off("mousemove."+this.widgetName,this._mouseMoveDelegate).off("mouseup."+this.widgetNa

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6498)
Category:	downloaded
Size (bytes):	6817
Entropy (8bit):	5.118603673050925
Encrypted:	false
SSDEEP:	96:t2Z0jAZG8kQrNkq5sr9KlGzbGQa5NUufRGorSqiZqW8+R7bBfj3IaJcMN5Mof:qOENx5oOAozG9V3nJ55Nf
MD5:	FE613818CD7F3C64B3EC76AFE137910F
SHA1:	18D1D3234B216D233BD27B20CBB4D4800CA0D3D9
SHA-256:	7B3A7E4265228A39BEA0D22AC1AEDB86219A7B521A831827F7F4579CA5AE4156
SHA-512:	B15D124774E234CBADC5BCF6C547B2AA9B16EE3F36DABC5321422DF968B6ABF554DA24F0AD109ACCBA1549C010CEEBF5A101D8779070886687823D8310204EF3
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/es6-promise.auto.min.js
Preview:	/** @license ES6-Promise v4.2.8. * es6-promise.auto.min.js. * https://github.com/stefanpenner/es6-promise. * . * Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):t.ES6Promise=e()}(this,function(){"use strict";function t(t){var e=typeof t;return null!==t&&("object"===e\|\|"function"===e)}function e(t){return"function"==typeof t}function n(t){W=t}function r(t){z=t}function o(){return function(){return process.nextTick(a)}}function i(){return"undefined"!=typeof U?function(){U(a)}:c()}function s(){var t=0,e=new H(a),n=document.createTextNode("");return e.observe(n,{characterData:!0}),function(){n.data=t=++t%2}}function u(){var t=new MessageChannel;return t.port1.onmessage=a,function(){return t.port2.postM

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4285)
Category:	downloaded
Size (bytes):	4321
Entropy (8bit):	5.115753166167776
Encrypted:	false
SSDEEP:	96:OeNJW3hzSH2bJMjf75fbotyu0FE7txPysXsfgVQVy8SZfrI:OqM+QMjflbxu0GF8fonrI
MD5:	6A08082285A1DAF7E077F40664E8850D
SHA1:	C48B3C7F588670286017C065BA7908E5F8E240B4
SHA-256:	C2F590F4E7466DB007F89EF513C5F3D3FDAE717CAC28C82BA1F8E565C4296840
SHA-512:	A62EF0E3F318049FFBFCD1464353822277A7B654F7082555294DAE7633515A1C48398E4ADAFC523CA6046BA10A6C466F1E4832101F12325494F04F38220F353A
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/toastr.min.js
Preview:	!function(e){e(["jquery"],function(e){return function(){function t(e,t,n){return f({type:O.error,iconClass:g().iconClasses.error,message:e,optionsOverride:n,title:t})}function n(t,n){return t\|\|(t=g()),v=e("#"+t.containerId),v.length?v:(n&&(v=c(t)),v)}function i(e,t,n){return f({type:O.info,iconClass:g().iconClasses.info,message:e,optionsOverride:n,title:t})}function o(e){w=e}function s(e,t,n){return f({type:O.success,iconClass:g().iconClasses.success,message:e,optionsOverride:n,title:t})}function a(e,t,n){return f({type:O.warning,iconClass:g().iconClasses.warning,message:e,optionsOverride:n,title:t})}function r(e){var t=g();v\|\|n(t),l(e,t)\|\|u(t)}function d(t){var i=g();return v\|\|n(i),t&&0===e(":focus",t).length?void h(t):void(v.children().length&&v.remove())}function u(t){for(var n=v.children(),i=n.length-1;i>=0;i--)l(e(n[i]),t)}function l(t,n){return t&&0===e(":focus",t).length?(t[n.hideMethod]({duration:n.hideDuration,easing:n.hideEasing,complete:function(){h(t)}}),!0):!1}function c(t

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29665)
Category:	downloaded
Size (bytes):	486035
Entropy (8bit):	5.294028446180595
Encrypted:	false
SSDEEP:	6144:jkvC7WxYKK99dqdzMG8uYQqpE2GaPxvwaPuLkM6isR4fS43eEeJS2E:IvOWaKwG8uEpwamLkM6is+fB3eEevE
MD5:	2FAB6DD64D37232FD3642B77A7455CAB
SHA1:	AD7AADE1F85C963BA661919B19C9EFC473146872
SHA-256:	16B2D580C42CBC131B68DFB53AD6550876C6AB748FE0AF9D3DFB156EE8855448
SHA-512:	B730630C906B3D42FCA0DBDF4E2606A4F5CCB6DCD011A0D90B620E4D3A0E4317F388C374B29734C393F6A77E760BB4D16DA73D00E098F355DE649C59B6F216BC
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/js/custom.unified.js
Preview:	/! This minified app bundle contains open source software from several third party developers. Please review CREDITS.md in the root directory or LICENSE.md in the current directory for complete licensing, copyright and patent information. This file and the included code may not be redistributed without the attributions listed in LICENSE.md, including associate copyright notices and licensing information. /./! For license information please see custom.unified.js.LICENSE.txt /.!function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)r

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47826)
Category:	downloaded
Size (bytes):	94889
Entropy (8bit):	4.916570159573995
Encrypted:	false
SSDEEP:	1536:ccaF0fMgkA5SOV+sQ354NThtf0J6BZ9NuZrV:ccaFckA5SOV+sQ354NThV0cBZ9NuZrV
MD5:	71D925864153F0EDF91037F3D31048E8
SHA1:	CC16A0524AC63B5CE29F703A66412224F0DD771A
SHA-256:	C324EF26B20264369E4568DC9EF1C5CB1F325F6BC4E8B7C01F7FE93FA353276A
SHA-512:	D6C41C41196DF44D606EC3C3D589A2053BB218B1AD164844C438810B3028C9F25A1E4F2D6654F2121758C9736128DFFCE55F6CE6D3A5FFACFA860F2886430238
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/css/style.min.css
Preview:	@charset "UTF-8";.wp-block-archives-dropdown label{display:block}.wp-block-avatar{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{cursor:pointer;display:inline-block;text-align:center;word-break:break-word;box-sizing:border-box}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){box-shadow:none;text-decoration:none;border-radius:9999px;padding:calc(.667em + 2px) calc(1.333em + 2px)}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.has-custom-font-size .wp-block-button__link{font-size:inherit}.w

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.843028295483072
Encrypted:	false
SSDEEP:	3:7zbzCnAnkiu3nuSovinPHnPuHCjfQDthGRY:XbzCAnkikuSciPHPgCjfQG+
MD5:	2291D84986FD03C19111570408CA0B5D
SHA1:	34AA5C6CF92513D4C3D84B756E5B2469AFE6FAE6
SHA-256:	C4B7A7074552B3AAC3D7270BF54EE1ADA4AC40C476D3E5BCD82546F996B47246
SHA-512:	E28ED7971AAB1FA77B8A800F75246A566123EA9678E24C63F8708F4AF77876D0F7D7982BFE44D23A9649C2709EC1EAEB89DF8C8263B9C7A2424FCA8506CB79FE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhJDCa2iXHY1muTwEgUNVV-ymBIFDYMf8UYSBQ2U1FseEgUNY67tIRIFDVPydWESBQ2DqFs9EgUNd7DIgyFJN8csWdZb3hIgCV0RyLb4zzDREgUNkWGVThIFDZFhlU4hYeHDG4Pibw8=?alt=proto
Preview:	Cj8KBw1VX7KYGgAKBw2DH/FGGgAKBw2U1FseGgAKBw1jru0hGgAKBw1T8nVhGgAKBw2DqFs9GgAKBw13sMiDGgAKEgoHDZFhlU4aAAoHDZFhlU4aAA==

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2017 x 800, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	124793
Entropy (8bit):	7.930644698114541
Encrypted:	false
SSDEEP:	3072:DmjVJOGfkw4DqE6Coc8xNzbaRqVR6PlvcALn0Nf1og+HG:yjVJObw4T6CofAc6fs1P+m
MD5:	B2EB974A93558BEA17D9B881850858F9
SHA1:	C6880E74C52623B6500204EA68AD9837FF7239DC
SHA-256:	DD5B414DE486E51F67F0DAC2B7F3E9F5BE02EBBB0099C9A30BCC81A8FA1B5A7A
SHA-512:	70C90926724F87F93A6FD6B8ABA16B719BFD8284C41D1539D5B6D0F2413C37FFDA22DD2D90A76CA82EB5212CEEFF4F959EBA020B748FDD7D422F82BBF2364BC4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... ........u....sRGB.........gAMA......a.....pHYs..........+......IDATx^..i.dk.....F.Y.Kw.pfHj8C.4.... .....`.`.....?...C...2D.G......dy.dC.B...k.i.dsz.....u.V.-..5#..<q+++.....'"~..@...r;..q....y..t%............................. Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.......(...........".................... Bx.....

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 23380, version 1.0
Category:	downloaded
Size (bytes):	23380
Entropy (8bit):	7.980402903829021
Encrypted:	false
SSDEEP:	384:T7k3ZpyCWChVX52/5NCuY2g1MPB8xbcWV8mQQY7anbBJ2EJPtZ7JsgFY5t:P8LyCvjX52/5sSg6PB8xb1CunVgsPn2t
MD5:	F54C8756FD0AAF54605B5F0A87D3A9E2
SHA1:	5023D8B25F8C1EA5EF6E458ECBAF770ACD9734D4
SHA-256:	135DB08A67CEF6B6F4B062EA0B4346BCB23EFC42E457ECA93A39E9CA639F9E7D
SHA-512:	69ADF5CF1D7A03AC4B6F56CA8C3205BC32AB2BFB0767B8B9B757B7D13728BC104EB04CA00D24AE7CEA50DBC81F2EEF8EF1D64EDD0AB412A7A0CFA118ACCC0DC1
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/fonts/fc.woff
Preview:	wOFF......[T................................OS/2...D...D...V>I.cmap.......:...J...cvt ................fpgm...........p...Ygasp...d............glyf...l..K...y.P./6head..R....5...6...Yhhea..S,.......$.J..hmtx..SL.......`....loca..T....2...2....maxp..U8... ... .O.zname..UX...r......gUpost..V.........T.\|^prep..Z....e...{.k..x.c`d.d......T......B3>`0ddb``b`ef....\S..^0.....?.!.9.a.P..$...).Jx.c```f.`..F..p....\|... ........^L.........`....F6.......D..............x..Vis.G...a.6>...6.Y.r.vV......J.....B.]Kv.O....^.T.o......`'UT(J....L..^...^X...\|)..6id.IH7lZ..C...)SL....h...8$"...u.%.....$.C.2Z.%.jRn.Iw........Q...%5..C.-...E2.6-.._IZ..+.\|..%..$..a...g.V...v.E.M..E.D3<."..Zb.\1A@...R^.4.\|....{...q.v...%?...$.z..%..@vd.{.+."....lG...t}'.#....Q^.h.vE.'....W.X..e...j.\|.<.....Z/sb_....GL.k&..N.....c....],.!..8...J..F)a..$m.9...E..zGL..:-.-a.N..Kg.I.;1........x4..L.N....QJ:.<......$......il3c$.P..si.e'.4..<...a.k.E.<P.=zOon..;=...?k.gu...0....J\|.v.I.~z..&.C...-6.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 200 x 200
Category:	downloaded
Size (bytes):	33621
Entropy (8bit):	7.871117905783987
Encrypted:	false
SSDEEP:	768:L8rM6bCF+zuR8Ml622bj3MKmPxCbsTdWhR92:LWMlGjBmPrdec
MD5:	B8B4C1F4C79DF9E8BC4C842D6816DBDB
SHA1:	265928F81DBDF3B84BF459456F074D7D961F3FEF
SHA-256:	99E5D5D3C19503D0D25FFFD4D82F7C4B35C1BB87B6C2E2F53EF2BEB820174DC8
SHA-512:	2977CCA00E2825D173FB2240D95A54F7331EE78B29E1105009CFBD63E64330ED3DCB8C70C99BD63A859C938C4998422AD6A6D839617116E5053A35399B56CFC2
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/images/success-animation_2x.gif
Preview:	GIF89a.......G..........+.,.....wM.p.....7......K.L...z........r.s...S.S..t......W........c.d3.46.......G..j...[.\..B.C......2.o.........L..6.......................!.!y.zL....f......0.1............4.I...k.l.....]8.9.....i.i-.1...&..%.&.....w...>.>.....Ij..h...........9........(.....^..E.Eo..5....!i................}.}....#..8$.`'.NL.U...%.*......................v.w..).....:.:......6.6.........U.U"..#.#...;.<........>........ . ............G.I......X.]........................n.o&.'.....W.X . <.<...<.<...........:.<..........................+........+........"........................d.......>.Z......#........W..............`.}......Y.Z......%....._.`...?.@#.#..........p.pV.W...(.)...............;.;.........0.0.......P.P..................f.g...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c014 79.156797, 2014/08/20-09:53:02 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	217
Entropy (8bit):	5.1508709451178865
Encrypted:	false
SSDEEP:	6:UhC6j/7NKZTRYrtH3ERAT8wEggqgq/wl/q:Uz77NdG4Cqcl/q
MD5:	95E891F28E44A9B314C09545D86BE2B7
SHA1:	F9B13A8BD47273B086A0A07DF15F314E0AF0BC3E
SHA-256:	5A5F39391FBF5B06DB84B8F9716D53DE575EE97A627D2C5F12F79A991A671EB5
SHA-512:	105947A192EC19166AB0D106A357BAC3C4DF7FCF575E4BEFA3002F0F032F80056CABF3AF085DE1F27B177243F7053D624059C7389E90259B9A62D745CBC19289
Malicious:	false
Reputation:	low
URL:	https://leboncoinpaiement.tiv-fr.fr/bc/css/classic-themes.min.css
Preview:	/! This file is auto-generated /..wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:04:07.434490919 CET	49672	443	192.168.2.6	204.79.197.203
Mar 14, 2025 10:04:07.746414900 CET	49672	443	192.168.2.6	204.79.197.203
Mar 14, 2025 10:04:08.355844021 CET	49672	443	192.168.2.6	204.79.197.203
Mar 14, 2025 10:04:09.558917046 CET	49672	443	192.168.2.6	204.79.197.203
Mar 14, 2025 10:04:11.981410980 CET	49672	443	192.168.2.6	204.79.197.203
Mar 14, 2025 10:04:13.773276091 CET	49697	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:04:13.773327112 CET	443	49697	142.250.185.132	192.168.2.6
Mar 14, 2025 10:04:13.773612976 CET	49697	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:04:13.773864985 CET	49697	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:04:13.773875952 CET	443	49697	142.250.185.132	192.168.2.6
Mar 14, 2025 10:04:14.403733015 CET	443	49697	142.250.185.132	192.168.2.6
Mar 14, 2025 10:04:14.403805971 CET	49697	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:04:14.405083895 CET	49697	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:04:14.405091047 CET	443	49697	142.250.185.132	192.168.2.6
Mar 14, 2025 10:04:14.405309916 CET	443	49697	142.250.185.132	192.168.2.6
Mar 14, 2025 10:04:14.489305973 CET	49697	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:04:16.013509989 CET	49678	443	192.168.2.6	20.42.65.91
Mar 14, 2025 10:04:16.325436115 CET	49678	443	192.168.2.6	20.42.65.91
Mar 14, 2025 10:04:16.796286106 CET	49672	443	192.168.2.6	204.79.197.203
Mar 14, 2025 10:04:16.818284988 CET	49701	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:16.818298101 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:16.818330050 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:16.818332911 CET	443	49701	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:16.818403006 CET	49701	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:16.818408966 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:16.818779945 CET	49701	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:16.818784952 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:16.818793058 CET	443	49701	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:16.818793058 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:16.935530901 CET	49678	443	192.168.2.6	20.42.65.91
Mar 14, 2025 10:04:17.745619059 CET	443	49701	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:17.745687962 CET	49701	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:17.754899979 CET	49701	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:17.754914045 CET	443	49701	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:17.755258083 CET	443	49701	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:17.755616903 CET	49701	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:17.766815901 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:17.766906023 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:17.767533064 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:17.767539978 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:17.767765999 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:17.796336889 CET	443	49701	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:17.815723896 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.042773008 CET	443	49701	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.043255091 CET	49701	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.043288946 CET	443	49701	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.043337107 CET	49701	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.046166897 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.092331886 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.139770985 CET	49678	443	192.168.2.6	20.42.65.91
Mar 14, 2025 10:04:18.293649912 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.293677092 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.293684006 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.293714046 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.293726921 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.293734074 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.293739080 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.293854952 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.353596926 CET	49704	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.353646040 CET	443	49704	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.353701115 CET	49704	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.353893995 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.353939056 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.354032040 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.354402065 CET	49704	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.354413033 CET	443	49704	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.354518890 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.354533911 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.364274025 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.364336967 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.364345074 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.364355087 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.364408016 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.382314920 CET	49702	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.382340908 CET	443	49702	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.895234108 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.895273924 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.895482063 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.895767927 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.895781994 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.896980047 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.897025108 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.897236109 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.897295952 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.897327900 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.897386074 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.897665977 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.897675037 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.897727013 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.898451090 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.898467064 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.898540020 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.898576021 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:18.898607016 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:18.898618937 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.277215004 CET	443	49704	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.277261019 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.280816078 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.280858040 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.281047106 CET	49704	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.281084061 CET	443	49704	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.281470060 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.281476021 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.281536102 CET	49704	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.281541109 CET	443	49704	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.474884033 CET	443	49704	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.475507975 CET	443	49704	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.475630045 CET	49704	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.476352930 CET	49704	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.476372957 CET	443	49704	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.476911068 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.476947069 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.477034092 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.477401972 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.477411032 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.495934010 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.495954990 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.495970964 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.496011019 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.496041059 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.496058941 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.496087074 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.590199947 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.590223074 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.590327024 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.590392113 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.590451956 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.632009983 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.632040977 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.632102013 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.632138014 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.632174969 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.632195950 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.664010048 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.664033890 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.664113045 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.664132118 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.664185047 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.695127010 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.695147991 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.695220947 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.695239067 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.695291996 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.714107990 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.714152098 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.714169025 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.714174032 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.714205027 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.714207888 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.714217901 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.714251995 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.715101004 CET	49705	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.715114117 CET	443	49705	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.715626955 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.715661049 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.715747118 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.716949940 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.716962099 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.815407991 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.815635920 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.815666914 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.815778017 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.815783978 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.826210022 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.826385021 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.826400042 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.826519966 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.826524973 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.830943108 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.831110001 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.831150055 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.831206083 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.831212044 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.863059998 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.863274097 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.863362074 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:19.863401890 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:19.863415956 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.033576012 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.033600092 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.033613920 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.033679962 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.033706903 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.033766031 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.042114019 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.042135954 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.042171001 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.042218924 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.042228937 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.042289972 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.058186054 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.058212996 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.058229923 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.058316946 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.058345079 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.058403015 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.063258886 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.063283920 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.063368082 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.063390970 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.063936949 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.063988924 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.064498901 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.064516068 CET	443	49709	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.064568043 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.064590931 CET	49709	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.064920902 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.064965963 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.065176964 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.066081047 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.066097021 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.126082897 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.126106024 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.126214981 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.126245975 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.126451969 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.136349916 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.136373997 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.136442900 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.136456966 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.136535883 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.152493000 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.152513981 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.152579069 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.152607918 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.152766943 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.165416956 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.165438890 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.165503025 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.165514946 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.165559053 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.176178932 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.176209927 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.176273108 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.176281929 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.176419020 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.192439079 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.192465067 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.192522049 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.192533016 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.192583084 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.196657896 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.196686029 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.196734905 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.196743965 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.196758032 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.196784973 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.207371950 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.207390070 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.207446098 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.207456112 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.207510948 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.211220980 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.211268902 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.211306095 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.211308002 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.211358070 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.211730957 CET	49708	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.211746931 CET	443	49708	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.212155104 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.212198973 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.212255001 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.212807894 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.212822914 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.233835936 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.233851910 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.233906984 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.233927965 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.234169006 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.244426012 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.244441986 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.244501114 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.244514942 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.244710922 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.257527113 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.257560968 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.257602930 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.257627964 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.257642984 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.257663965 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.268073082 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.268093109 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.268136024 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.268145084 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.268174887 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.268188953 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.280272961 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.280322075 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.280338049 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.280344963 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.280360937 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.280373096 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.280385971 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.280427933 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.280862093 CET	49706	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.280874968 CET	443	49706	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.281387091 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.281426907 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.281482935 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.282336950 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.282350063 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.294682026 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.294699907 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.294764996 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.294773102 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.294889927 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.313786030 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.313803911 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.313853979 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.313867092 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.313899040 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.313909054 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.331067085 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.331084013 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.331121922 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.331130028 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.331161976 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.331175089 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.344297886 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.344321966 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.344358921 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.344373941 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.344403028 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.344422102 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.355135918 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.355153084 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.355227947 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.355236053 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.355664015 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.367598057 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.367613077 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.367660046 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.367667913 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.367697954 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.367711067 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.379621029 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.379636049 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.379694939 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.379703999 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.379806042 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.389168024 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.389183044 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.389259100 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.389266968 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.389420033 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.400238037 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.400252104 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.400295973 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.400309086 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.400335073 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.400346994 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.409147978 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.409166098 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.409228086 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.409234047 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.409286022 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.410043001 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.410398960 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.410433054 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.410717964 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.410723925 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.419320107 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.419337034 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.419395924 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.419404030 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.419843912 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.429141045 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.429157972 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.429219961 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.429229021 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.429275990 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.437788010 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.437804937 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.437879086 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.437897921 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.438024044 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.454309940 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.454327106 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.454405069 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.454430103 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.454567909 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.464432955 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.464451075 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.464512110 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.464538097 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.464665890 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.476073980 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.476092100 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.476166010 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.476190090 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.476243019 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.485223055 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.485236883 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.485302925 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.485321045 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.485384941 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.495980978 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.496002913 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.496079922 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.496098042 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.496135950 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.506130934 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.506145000 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.506231070 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.506248951 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.506408930 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.515911102 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.515927076 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.516016006 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.516031027 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.516177893 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.524441957 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.524456978 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.524523973 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.524532080 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.524565935 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.541181087 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.541196108 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.541255951 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.541265965 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.541296959 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.543448925 CET	49678	443	192.168.2.6	20.42.65.91
Mar 14, 2025 10:04:20.551162004 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.551177025 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.551219940 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.551234961 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.551280022 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.551297903 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.562832117 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.562846899 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.562905073 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.562913895 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.563179970 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.572155952 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.572171926 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.572240114 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.572267056 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.572325945 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.582700968 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.582745075 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.582787037 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.582796097 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.582856894 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.593000889 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.593017101 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.593080997 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.593090057 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.593142986 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.602803946 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.602818966 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.602855921 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.602863073 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.602906942 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.602937937 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.611319065 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.611335993 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.611412048 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.611438990 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.611491919 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.628027916 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.628042936 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.628123999 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.628132105 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.628189087 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.632891893 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.632917881 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.632932901 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.632996082 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.633023977 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.633074045 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.638014078 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.638030052 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.638118982 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.638128042 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.638251066 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.649748087 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.649802923 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.649817944 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.649826050 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.649874926 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.658775091 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.658791065 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.658857107 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.658864975 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.658993006 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.668401003 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.668611050 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.668643951 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.668767929 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.668773890 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.669691086 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.669706106 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.669781923 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.669790983 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.669858932 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.679866076 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.679883003 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.679959059 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.679968119 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.680016041 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.689512014 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.689527988 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.689583063 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.689590931 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.689779997 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.698120117 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.698136091 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.698196888 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.698209047 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.698262930 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.714855909 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.714874029 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.714926004 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.714937925 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.714965105 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.714981079 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.724869967 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.724885941 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.724948883 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.724955082 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.725063086 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.727376938 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.727401972 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.727442026 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.727456093 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.727474928 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.727497101 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.736427069 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.736443043 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.736501932 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.736510038 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.736766100 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.745655060 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.745670080 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.745729923 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.745738029 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.745851994 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.756448030 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.756468058 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.756510973 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.756519079 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.756556034 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.756567001 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.761625051 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.761687994 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.761692047 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.761738062 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.762134075 CET	49710	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.762145996 CET	443	49710	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.762847900 CET	49718	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.762876034 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.762948990 CET	49718	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.763988018 CET	49718	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.763997078 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.767121077 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.767151117 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.767190933 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.767209053 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.767230988 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.767254114 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.799474955 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.799513102 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.799576044 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.799597979 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.799632072 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.799659014 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.835513115 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.835541010 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.835602045 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.835623026 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.835653067 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.835684061 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.849706888 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.849782944 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.849787951 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.849802971 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.849853992 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.850183964 CET	49712	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.850198030 CET	443	49712	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.872833014 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.872860909 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.872920036 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.872984886 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.873019934 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.873039961 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.877760887 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.877815008 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.878012896 CET	443	49713	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:20.878029108 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:20.878061056 CET	49713	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.027466059 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.027652025 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.037523031 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.037550926 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.037760019 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.038167000 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.084346056 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.146883011 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.146972895 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.172981977 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.173028946 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.173338890 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.173779011 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.202126980 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.202225924 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.205307961 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.205318928 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.205596924 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.205842972 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.216339111 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.239923000 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.239952087 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.240067959 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.240087986 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.240151882 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.242485046 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.242546082 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.242604971 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.248332024 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.346700907 CET	49715	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.346741915 CET	443	49715	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.370846987 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.370872974 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.370929956 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.370959997 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.371530056 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.371577024 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.372323036 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.372335911 CET	443	49716	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.372355938 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.372375011 CET	49716	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.418957949 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.418988943 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.419004917 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.419054031 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.419083118 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.419102907 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.419147968 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.460861921 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.460923910 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.461011887 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.461261034 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.461276054 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.461745977 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.461838007 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.461905003 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.462409973 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.462445974 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.513339043 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.513361931 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.513422966 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.513449907 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.513467073 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.513530016 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.553323030 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.553347111 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.553399086 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.553432941 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.553452969 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.553483963 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.584595919 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.584619999 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.584753036 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.584775925 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.584830999 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.621690035 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.621716976 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.621795893 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.621823072 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.622068882 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.645342112 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.645368099 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.645427942 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.645437002 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.645600080 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.645679951 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.672020912 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.672049046 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.672118902 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.672127962 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.672185898 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.691095114 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.691112041 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.691179037 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.691191912 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.691241026 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.696649075 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.696724892 CET	49718	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.697149992 CET	49718	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.697155952 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.697401047 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.697633982 CET	49718	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.708548069 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.708568096 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.708625078 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.708632946 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.708661079 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.708684921 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.721673965 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.721692085 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.721765041 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.721772909 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.721815109 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.732577085 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.732600927 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.732651949 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.732660055 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.732697964 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.732712984 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.744330883 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.744926929 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.744942904 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.745007992 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.745016098 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.745054960 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.756964922 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.756983995 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.757062912 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.757076025 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.757113934 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.766678095 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.766695976 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.766767025 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.766777039 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.766819000 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.777723074 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.777740002 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.777833939 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.777844906 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.777887106 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.786575079 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.786591053 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.786686897 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.786696911 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.786740065 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.796859026 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.796878099 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.796931982 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.796940088 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.796991110 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.808028936 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.808044910 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.808116913 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.808125019 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.808171988 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.816612005 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.816627979 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.816689014 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.816696882 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.816731930 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.827321053 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.827339888 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.827402115 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.827409983 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.827446938 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.839493036 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.839512110 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.839577913 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.839585066 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.839624882 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.839644909 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.851246119 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.851264000 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.851310015 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.851316929 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.851382971 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.863472939 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.863492012 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.863533974 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.863547087 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.863599062 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.873581886 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.873603106 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.873662949 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.873671055 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.873708963 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.873727083 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.879947901 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.879966021 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.880027056 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.880038023 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.880089045 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.888079882 CET	49721	443	192.168.2.6	188.114.96.3
Mar 14, 2025 10:04:21.888120890 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:21.888254881 CET	49721	443	192.168.2.6	188.114.96.3
Mar 14, 2025 10:04:21.888411045 CET	49721	443	192.168.2.6	188.114.96.3
Mar 14, 2025 10:04:21.888425112 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:21.890240908 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.890259027 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.890306950 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.890312910 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.890352964 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.890372038 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.894622087 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.895369053 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.895426035 CET	49718	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.895801067 CET	49718	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.895814896 CET	443	49718	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.899312019 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.899329901 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.899379969 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.899386883 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.899430037 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.913659096 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.913681030 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.913733959 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.913741112 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.913774014 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.913794041 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.925740004 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.925757885 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.925812960 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.925820112 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.925857067 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.925885916 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.931976080 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.932013035 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.932039976 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.932045937 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.932060003 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:21.932075977 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.932126045 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.932301998 CET	49717	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:21.932317019 CET	443	49717	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.346966982 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:22.347063065 CET	49721	443	192.168.2.6	188.114.96.3
Mar 14, 2025 10:04:22.348237991 CET	49721	443	192.168.2.6	188.114.96.3
Mar 14, 2025 10:04:22.348248005 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:22.348459005 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:22.348747969 CET	49721	443	192.168.2.6	188.114.96.3
Mar 14, 2025 10:04:22.381936073 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.382236004 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.382246971 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.382416964 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.382422924 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.382617950 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.382774115 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.382847071 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.382886887 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.382901907 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.392329931 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:22.583481073 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.583540916 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.583612919 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.583626986 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.583645105 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.583688974 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.583720922 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.585211992 CET	49719	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.585231066 CET	443	49719	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.596894979 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.596925020 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.596940994 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.597002029 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.597055912 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.597094059 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.597115040 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.615092993 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.615148067 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.615231037 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.615426064 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.615459919 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.676939964 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:22.677016973 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:22.677082062 CET	49721	443	192.168.2.6	188.114.96.3
Mar 14, 2025 10:04:22.678713083 CET	49721	443	192.168.2.6	188.114.96.3
Mar 14, 2025 10:04:22.678733110 CET	443	49721	188.114.96.3	192.168.2.6
Mar 14, 2025 10:04:22.691346884 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.691369057 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.691445112 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.691469908 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.691529036 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.698117971 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.698187113 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.698272943 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.698448896 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.698450089 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.698478937 CET	443	49720	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.698540926 CET	49720	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.702992916 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.703039885 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:22.703129053 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.703258038 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:22.703272104 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.568788052 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.568955898 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.569580078 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.569591045 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.569834948 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.570174932 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.616327047 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.637408018 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.637542963 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.697108030 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.697161913 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.697549105 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.758322954 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.776577950 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.776604891 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.776707888 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.776772976 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.776830912 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.777264118 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.777333975 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.777678013 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.960221052 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.980737925 CET	49726	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.980793953 CET	443	49726	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.980854034 CET	49726	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.981228113 CET	49726	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.981237888 CET	443	49726	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:23.988141060 CET	49724	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:23.988214970 CET	443	49724	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.000322104 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.178347111 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.178375006 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.178385973 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.178415060 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.178435087 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.178451061 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.178459883 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.178486109 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.178505898 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.178525925 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.178544998 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.272962093 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.272989035 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.273216009 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.273253918 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.273296118 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.279553890 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.279639006 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.279750109 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.281205893 CET	49725	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.281228065 CET	443	49725	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.304234028 CET	443	49697	142.250.185.132	192.168.2.6
Mar 14, 2025 10:04:24.304290056 CET	443	49697	142.250.185.132	192.168.2.6
Mar 14, 2025 10:04:24.304335117 CET	49697	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:04:24.904972076 CET	443	49726	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.905481100 CET	49726	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.905517101 CET	443	49726	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:24.905658960 CET	49726	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:24.905663967 CET	443	49726	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:25.099386930 CET	443	49726	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:25.100630045 CET	443	49726	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:25.100718021 CET	49726	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:25.102117062 CET	49726	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:25.102142096 CET	443	49726	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:25.358699083 CET	49678	443	192.168.2.6	20.42.65.91
Mar 14, 2025 10:04:25.971553087 CET	49697	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:04:25.971609116 CET	443	49697	142.250.185.132	192.168.2.6
Mar 14, 2025 10:04:26.410430908 CET	49672	443	192.168.2.6	204.79.197.203
Mar 14, 2025 10:04:34.965852022 CET	49678	443	192.168.2.6	20.42.65.91
Mar 14, 2025 10:04:36.282075882 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:36.282140970 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:36.282216072 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:36.282485008 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:36.282500029 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:36.293364048 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:36.293406963 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:36.293493986 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:36.293626070 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:36.293642998 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.214211941 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.228126049 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.228173971 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.231722116 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.231724977 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.231734037 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.231936932 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.231966972 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.490725040 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.490750074 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.490765095 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.490824938 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.490858078 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.490906954 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.549437046 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.549463987 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.585114002 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.585160017 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.585230112 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.585249901 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.585411072 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.585709095 CET	49730	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.585726023 CET	443	49730	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.598135948 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.598237038 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.598325014 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.598572016 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.598608017 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.598656893 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.598928928 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.598953962 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.599003077 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.599270105 CET	49735	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.599380016 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.599442005 CET	49735	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.599698067 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.599716902 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.599723101 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.599744081 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.599772930 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.599865913 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.599884033 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.599973917 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.599986076 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.600049019 CET	49735	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.600080013 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.600157976 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.600168943 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.756458044 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.756483078 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.756534100 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.756556988 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.757461071 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.757499933 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.758167982 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.758182049 CET	443	49729	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.758193016 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.758225918 CET	49729	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.762737989 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.762774944 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:37.762847900 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.763592005 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:37.763602018 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.520970106 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.521264076 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.521300077 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.521430016 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.521436930 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.526324987 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.526573896 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.526597023 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.526724100 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.526729107 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.530299902 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.530498028 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.530515909 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.530644894 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.530653954 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.534312010 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.534552097 CET	49735	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.534632921 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.534698009 CET	49735	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.534718037 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.548970938 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.549204111 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.549232006 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.549350977 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.549355984 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.713907003 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.714382887 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.714406013 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.714570999 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.714576006 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.723815918 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.723841906 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.723915100 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.723927975 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.723979950 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.726052046 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.726099968 CET	443	49736	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.726155996 CET	49736	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.726519108 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.726567984 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.726623058 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.727507114 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.727518082 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.735753059 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.735774994 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.735794067 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.735853910 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.735878944 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.735904932 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.735924006 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.736507893 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.736537933 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.736589909 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.736609936 CET	49735	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.736640930 CET	49735	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.738297939 CET	49735	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.738316059 CET	443	49735	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.738656044 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.738697052 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.738769054 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.739444017 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.739455938 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.740221024 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.740247965 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.740264893 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.740300894 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.740323067 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.740350008 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.740377903 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.774955988 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.774982929 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.775001049 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.775039911 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.775069952 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.775091887 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.775110006 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.813992023 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.814071894 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.814095020 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.814147949 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.814925909 CET	49733	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.814944029 CET	443	49733	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.835122108 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.835149050 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.835269928 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.835269928 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.835299969 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.835342884 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.845000029 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.845092058 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.845093012 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.845134974 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.845894098 CET	49732	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.845918894 CET	443	49732	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.875760078 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.875790119 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.875860929 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.875875950 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.875909090 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.875932932 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.905832052 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.905858040 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.905932903 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.905950069 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.905988932 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.915533066 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.915556908 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.915608883 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.915626049 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.915669918 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.916261911 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.916343927 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.916387081 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.916413069 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.916434050 CET	443	49737	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.916445017 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.916474104 CET	49737	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.942962885 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.942986965 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.943058014 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.943080902 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.943134069 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.966634989 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.966664076 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.966741085 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.966764927 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.966806889 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.993364096 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.993395090 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.993470907 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:38.993490934 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:38.993546963 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.004905939 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.004945040 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.004978895 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.004987001 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.005000114 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.005017042 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.005050898 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.005362034 CET	49734	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.005374908 CET	443	49734	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.010389090 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.010432959 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.010509968 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.010621071 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.010629892 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.674375057 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.674551010 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.676878929 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.676968098 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.692168951 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.692198992 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.692456961 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.728655100 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.728679895 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.729053020 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.732000113 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.732187033 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.772331953 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.776336908 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.928697109 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.928718090 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.928777933 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.928806067 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.928854942 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.929136038 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.929192066 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.929250002 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.930943012 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.930954933 CET	443	49739	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.930963993 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.931006908 CET	49739	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.936640024 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.936845064 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.936880112 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.936985016 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.936990023 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.950366974 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.950395107 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.950402021 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.950412989 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.950439930 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.950474977 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.950511932 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:39.950532913 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:39.950558901 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.045217037 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.045243979 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.045330048 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.045362949 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.045402050 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.085114956 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.085139990 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.085210085 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.085241079 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.085283041 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.123451948 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.123513937 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.123533964 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.123549938 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.123604059 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.123897076 CET	49738	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.123914957 CET	443	49738	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.167434931 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.167463064 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.167484999 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.167625904 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.167656898 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.167716980 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.261998892 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.262026072 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.262166977 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.262197018 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.262248039 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.301811934 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.301836967 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.301939011 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.301966906 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.302021027 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.333239079 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.333264112 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.333385944 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.333395004 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.333442926 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.370821953 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.370857000 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.370985985 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.371001005 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.371049881 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.394488096 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.394515038 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.394613981 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.394639969 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.394700050 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.420636892 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.420661926 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.420778990 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.420797110 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.420882940 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.432285070 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.432329893 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.432359934 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.432368040 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.432401896 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:40.432408094 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.432456970 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.432600021 CET	49740	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:40.432615042 CET	443	49740	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:57.174361944 CET	49742	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:57.174422026 CET	443	49742	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:57.174515009 CET	49742	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:57.174557924 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:57.174606085 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:57.174649954 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:57.175765991 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:57.175777912 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:57.175865889 CET	49742	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:57.175885916 CET	443	49742	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.128668070 CET	443	49742	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.141359091 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.171705961 CET	49742	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.185904980 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.197616100 CET	49742	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.197644949 CET	443	49742	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.198060989 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.198074102 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.198368073 CET	49742	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.198375940 CET	443	49742	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.745151997 CET	443	49742	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.745229006 CET	443	49742	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.745327950 CET	49742	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.746226072 CET	49742	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.746253967 CET	443	49742	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.775859118 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.775922060 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.776005983 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.776272058 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.776287079 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:58.776572943 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:58.776608944 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.022133112 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.022162914 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.022171021 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.022183895 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.022212982 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.022315979 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:59.022351980 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.022406101 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:59.094177961 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.094265938 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.094295979 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:59.094338894 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:59.096025944 CET	49743	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:59.096055984 CET	443	49743	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.714584112 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:04:59.715007067 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:04:59.715054989 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:00.629280090 CET	49685	80	192.168.2.6	142.250.185.67
Mar 14, 2025 10:05:00.629357100 CET	49687	80	192.168.2.6	2.16.100.168
Mar 14, 2025 10:05:00.634311914 CET	80	49685	142.250.185.67	192.168.2.6
Mar 14, 2025 10:05:00.634419918 CET	49685	80	192.168.2.6	142.250.185.67
Mar 14, 2025 10:05:00.634547949 CET	80	49687	2.16.100.168	192.168.2.6
Mar 14, 2025 10:05:00.634591103 CET	49687	80	192.168.2.6	2.16.100.168
Mar 14, 2025 10:05:02.018939018 CET	49686	443	192.168.2.6	2.23.227.215
Mar 14, 2025 10:05:02.019191027 CET	49688	80	192.168.2.6	2.16.100.168
Mar 14, 2025 10:05:02.019290924 CET	49689	80	192.168.2.6	2.23.77.188
Mar 14, 2025 10:05:04.378550053 CET	49749	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.378602982 CET	443	49749	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.378675938 CET	49749	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.378961086 CET	49749	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.378973007 CET	443	49749	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.379317045 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.379364014 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.620537043 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.620562077 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.620577097 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.620702028 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.620738029 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.620805979 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.714848995 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.714879036 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.715013027 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.715049028 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.717645884 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.722445965 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.722531080 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:04.722573042 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.722616911 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.723403931 CET	49746	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:04.723440886 CET	443	49746	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:05.319591045 CET	443	49749	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:05.320609093 CET	49749	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:05.320647001 CET	443	49749	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:13.826240063 CET	49754	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:05:13.826304913 CET	443	49754	142.250.185.132	192.168.2.6
Mar 14, 2025 10:05:13.826426983 CET	49754	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:05:13.826586962 CET	49754	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:05:13.826603889 CET	443	49754	142.250.185.132	192.168.2.6
Mar 14, 2025 10:05:14.456130981 CET	443	49754	142.250.185.132	192.168.2.6
Mar 14, 2025 10:05:14.456480980 CET	49754	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:05:14.456530094 CET	443	49754	142.250.185.132	192.168.2.6
Mar 14, 2025 10:05:14.951659918 CET	443	49749	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:14.951749086 CET	443	49749	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:14.951994896 CET	49749	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:15.967649937 CET	49749	443	192.168.2.6	217.160.0.155
Mar 14, 2025 10:05:15.967693090 CET	443	49749	217.160.0.155	192.168.2.6
Mar 14, 2025 10:05:24.363049030 CET	443	49754	142.250.185.132	192.168.2.6
Mar 14, 2025 10:05:24.363114119 CET	443	49754	142.250.185.132	192.168.2.6
Mar 14, 2025 10:05:24.363205910 CET	49754	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:05:25.967768908 CET	49754	443	192.168.2.6	142.250.185.132
Mar 14, 2025 10:05:25.967793941 CET	443	49754	142.250.185.132	192.168.2.6
Mar 14, 2025 10:05:26.217401028 CET	443	49681	2.23.227.215	192.168.2.6
Mar 14, 2025 10:05:26.217598915 CET	443	49681	2.23.227.215	192.168.2.6
Mar 14, 2025 10:05:26.217763901 CET	49681	443	192.168.2.6	2.23.227.215

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:04:10.909909964 CET	53	57141	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:10.912960052 CET	53	53534	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:11.908708096 CET	53	53263	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:12.053406000 CET	53	53322	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:13.764377117 CET	65364	53	192.168.2.6	1.1.1.1
Mar 14, 2025 10:04:13.764873981 CET	65457	53	192.168.2.6	1.1.1.1
Mar 14, 2025 10:04:13.771285057 CET	53	65364	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:13.771533012 CET	53	65457	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:16.745676994 CET	63818	53	192.168.2.6	1.1.1.1
Mar 14, 2025 10:04:16.745898008 CET	63727	53	192.168.2.6	1.1.1.1
Mar 14, 2025 10:04:16.770114899 CET	53	63727	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:16.814393044 CET	53	63818	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:18.385420084 CET	53	56584	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:21.385369062 CET	137	137	192.168.2.6	192.168.2.255
Mar 14, 2025 10:04:21.863398075 CET	63874	53	192.168.2.6	1.1.1.1
Mar 14, 2025 10:04:21.863696098 CET	50537	53	192.168.2.6	1.1.1.1
Mar 14, 2025 10:04:21.876326084 CET	53	63874	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:21.887146950 CET	53	50537	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:22.063386917 CET	53	60738	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:22.141844988 CET	137	137	192.168.2.6	192.168.2.255
Mar 14, 2025 10:04:22.588236094 CET	56984	53	192.168.2.6	1.1.1.1
Mar 14, 2025 10:04:22.588452101 CET	62872	53	192.168.2.6	1.1.1.1
Mar 14, 2025 10:04:22.612652063 CET	53	62872	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:22.613956928 CET	53	56984	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:22.904547930 CET	137	137	192.168.2.6	192.168.2.255
Mar 14, 2025 10:04:29.067778111 CET	53	55128	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:40.143553019 CET	53	63514	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:47.758604050 CET	53	53320	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:51.521080971 CET	53	60910	1.1.1.1	192.168.2.6
Mar 14, 2025 10:04:59.088078976 CET	137	137	192.168.2.6	192.168.2.255
Mar 14, 2025 10:04:59.841620922 CET	137	137	192.168.2.6	192.168.2.255
Mar 14, 2025 10:05:00.594794989 CET	137	137	192.168.2.6	192.168.2.255
Mar 14, 2025 10:05:09.727752924 CET	53	58312	1.1.1.1	192.168.2.6
Mar 14, 2025 10:05:11.208450079 CET	53	64156	1.1.1.1	192.168.2.6
Mar 14, 2025 10:05:12.429775953 CET	53	49918	1.1.1.1	192.168.2.6
Mar 14, 2025 10:05:14.096926928 CET	138	138	192.168.2.6	192.168.2.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 10:04:13.764377117 CET	192.168.2.6	1.1.1.1	0x77b5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:04:13.764873981 CET	192.168.2.6	1.1.1.1	0xf7ea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:04:16.745676994 CET	192.168.2.6	1.1.1.1	0xbc11	Standard query (0)	leboncoinpaiement.tiv-fr.fr	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:04:16.745898008 CET	192.168.2.6	1.1.1.1	0xe9e	Standard query (0)	leboncoinpaiement.tiv-fr.fr	65	IN (0x0001)	false
Mar 14, 2025 10:04:21.863398075 CET	192.168.2.6	1.1.1.1	0x3869	Standard query (0)	api.cdnmetric.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:04:21.863696098 CET	192.168.2.6	1.1.1.1	0x6b8d	Standard query (0)	api.cdnmetric.com	65	IN (0x0001)	false
Mar 14, 2025 10:04:22.588236094 CET	192.168.2.6	1.1.1.1	0x91c6	Standard query (0)	leboncoinpaiement.tiv-fr.fr	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:04:22.588452101 CET	192.168.2.6	1.1.1.1	0x1b94	Standard query (0)	leboncoinpaiement.tiv-fr.fr	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 10:04:13.771285057 CET	1.1.1.1	192.168.2.6	0x77b5	No error (0)	www.google.com	142.250.185.132	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:04:13.771533012 CET	1.1.1.1	192.168.2.6	0xf7ea	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 14, 2025 10:04:16.814393044 CET	1.1.1.1	192.168.2.6	0xbc11	No error (0)	leboncoinpaiement.tiv-fr.fr	217.160.0.155	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:04:21.876326084 CET	1.1.1.1	192.168.2.6	0x3869	No error (0)	api.cdnmetric.com	188.114.96.3	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:04:21.876326084 CET	1.1.1.1	192.168.2.6	0x3869	No error (0)	api.cdnmetric.com	188.114.97.3	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:04:21.887146950 CET	1.1.1.1	192.168.2.6	0x6b8d	No error (0)	api.cdnmetric.com		65	IN (0x0001)	false
Mar 14, 2025 10:04:22.613956928 CET	1.1.1.1	192.168.2.6	0x91c6	No error (0)	leboncoinpaiement.tiv-fr.fr	217.160.0.155	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

leboncoinpaiement.tiv-fr.fr

api.cdnmetric.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49701	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:17 UTC	677	OUT	GET / HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:18 UTC	234	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:17 GMT Server: Apache Location: bc/
2025-03-14 09:04:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49702	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:18 UTC	680	OUT	GET /bc/ HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:18 UTC	216	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:18 GMT Server: Apache
2025-03-14 09:04:18 UTC	16168	IN	Data Raw: 35 35 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 23 22 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 Data Ascii: 55a4<!DOCTYPE html><html lang="fr-FR"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="#"><script type="text/javascript">document.documentElement.className = 'js';</script><tit
2025-03-14 09:04:18 UTC	5769	IN	Data Raw: 5f 70 62 5f 63 73 73 5f 6d 69 78 5f 62 6c 65 6e 64 5f 6d 6f 64 65 5f 70 61 73 73 74 68 72 6f 75 67 68 20 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 65 6d 70 74 79 22 3e 0a 09 09 09 09 0a 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 20 3c 21 2d 2d 20 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 2d 2d 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 32 20 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 20 20 65 74 5f 70 62 5f 63 73 73 5f 6d 69 78 5f 62 6c 65 6e 64 5f 6d 6f 64 65 5f 70 61 73 73 74 68 72 6f 75 67 68 22 3e 0a 09 09 09 09 0a 09 09 09 09 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 20 65 74 5f 70 62 5f 74 65 78 74 20 65 74 5f 70 62 Data Ascii: _pb_css_mix_blend_mode_passthrough et_pb_column_empty"></div> ... .et_pb_column --><div class="et_pb_column et_pb_column_1_2 et_pb_column_1 et_pb_css_mix_blend_mode_passthrough"><div class="et_pb_module et_pb_text et_pb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49705	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:19 UTC	583	OUT	GET /bc/css/style.min.css HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:19 UTC	292	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 94889 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:19 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:48 GMT ETag: "172a9-5f651d280e600" Accept-Ranges: bytes
2025-03-14 09:04:19 UTC	16092	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 2e 77 70 2d 62 Data Ascii: @charset "UTF-8";.wp-block-archives-dropdown label{display:block}.wp-block-avatar{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-b
2025-03-14 09:04:19 UTC	16384	IN	Data Raw: 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e Data Ascii: nd-dim.has-background-dim-100 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-100:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-100 .wp-block-cover__background,.
2025-03-14 09:04:19 UTC	16384	IN	Data Raw: 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 7b 77 69 64 74 68 3a 63 61 6c 63 28 32 35 25 20 2d 20 2e 37 35 65 6d 29 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a Data Ascii: ks-gallery-grid:not(.has-nested-images).columns-4 .blocks-gallery-item,.wp-block-gallery:not(.has-nested-images).columns-4 .blocks-gallery-image,.wp-block-gallery:not(.has-nested-images).columns-4 .blocks-gallery-item{width:calc(25% - .75em);margin-right:
2025-03-14 09:04:19 UTC	16384	IN	Data Raw: 3b 0a 20 20 2f 2a 21 72 74 6c 3a 62 65 67 69 6e 3a 69 67 6e 6f 72 65 2a 2f 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 67 72 69 64 2d 72 6f 77 3a 31 3b 0a 20 20 2f 2a 21 72 74 6c 3a 65 6e 64 3a 69 67 6e 6f 72 65 2a 2f 70 61 64 64 69 6e 67 3a 30 20 38 25 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 2e 68 61 73 2d 6d 65 64 69 61 2d 6f 6e 2d 74 68 65 2d 72 69 67 68 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 5f 5f 6d 65 64 69 61 7b 0a 20 20 2f 2a 21 72 74 6c 3a 62 65 67 69 6e 3a 69 67 6e 6f 72 65 2a 2f 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 67 72 69 64 2d 72 6f 77 3a 31 0a 20 20 2f 2a 21 72 74 6c 3a 65 6e 64 3a 69 67 6e 6f 72 65 2a 2f 7d 2e 77 70 2d 62 Data Ascii: ; /!rtl:begin:ignore/grid-column:2;grid-row:1; /!rtl:end:ignore/padding:0 8%;word-break:break-word}.wp-block-media-text.has-media-on-the-right .wp-block-media-text__media{ /!rtl:begin:ignore/grid-column:2;grid-row:1 /!rtl:end:ignore/}.wp-b
2025-03-14 09:04:19 UTC	16384	IN	Data Raw: 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 32 70 78 29 7b 2e 68 61 73 2d 6d 6f 64 61 6c 2d 6f 70 65 6e 20 2e 61 64 6d 69 6e 2d 62 61 72 20 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 64 69 61 6c 6f 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 32 70 78 7d 7d 68 74 6d 6c 2e 68 61 73 2d 6d 6f 64 61 6c 2d 6f 70 65 6e 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 5f 5f 6c 61 62 65 6c 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 77 70 2d Data Ascii: a (min-width:782px){.has-modal-open .admin-bar .is-menu-open .wp-block-navigation__responsive-dialog{margin-top:32px}}html.has-modal-open{overflow:hidden}.wp-block-navigation .wp-block-navigation-item__label{word-break:normal;overflow-wrap:break-word}.wp-
2025-03-14 09:04:19 UTC	13261	IN	Data Raw: 6f 6c 6f 72 3a 23 65 66 34 31 35 35 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 72 65 64 64 69 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 34 35 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 73 6b 79 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 34 37 38 64 37 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c Data Ascii: olor:#ef4155;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-link-reddit{background-color:#ff4500;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-link-skype{background-color:#0478d7;color:#fff}.wp-block-social

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49704	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:19 UTC	592	OUT	GET /bc/css/classic-themes.min.css HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:19 UTC	287	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 217 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:19 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:48 GMT ETag: "d9-5f651d280e600" Accept-Ranges: bytes
2025-03-14 09:04:19 UTC	217	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d Data Ascii: /! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49706	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:19 UTC	582	OUT	GET /bc/css/form.min.css HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:20 UTC	293	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 111647 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 97 Date: Fri, 14 Mar 2025 09:04:19 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:48 GMT ETag: "1b41f-5f651d280e600" Accept-Ranges: bytes
2025-03-14 09:04:20 UTC	16091	IN	Data Raw: 23 66 63 2d 66 6f 72 6d 2d 70 72 65 76 69 65 77 2c 2e 66 63 2d 66 6f 72 6d 2d 74 69 70 2d 63 6f 76 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 35 25 7d 23 66 63 2d 66 6f 72 6d 2d 70 72 65 76 69 65 77 2c 2e 66 63 2d 66 6f 72 6d 2d 74 69 70 7b 70 61 64 64 69 6e 67 3a 39 70 78 20 31 34 70 78 20 38 70 78 3b 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 29 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 7d 23 66 63 2d 66 6f 72 6d 2d 70 72 65 76 69 65 77 7b 74 6f 70 3a 31 32 70 78 7d 2e 66 63 2d Data Ascii: #fc-form-preview,.fc-form-tip-cover{position:fixed;left:10px;font-size:95%}#fc-form-preview,.fc-form-tip{padding:9px 14px 8px;color:#555;border-radius:2px;background-color:#fff;box-shadow:0 1px 3px rgba(0,0,0,.3);z-index:999}#fc-form-preview{top:12px}.fc-
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 68 32 2c 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 68 33 7b 6d 61 72 67 69 6e 3a 2e 34 65 6d 20 30 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 68 31 2c 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 68 32 2c 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 68 33 2c 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 68 34 2c 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 68 35 2c 68 74 6d Data Ascii: nt-size:1.5em}html .formcraft-css .fc-form h2,html .formcraft-css .fc-form h3{margin:.4em 0}html .formcraft-css .fc-form h1,html .formcraft-css .fc-form h2,html .formcraft-css .fc-form h3,html .formcraft-css .fc-form h4,html .formcraft-css .fc-form h5,htm
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 30 20 2d 31 2e 35 65 6d 20 2d 31 2e 35 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 37 35 65 6d 20 31 2e 35 65 6d 20 31 2e 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 65 6d 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 65 6c 65 6d 65 6e 74 20 2e 66 69 65 6c 64 2d 63 6f 76 65 72 2e 63 75 73 74 6f 6d 54 65 78 74 2d 63 6f 76 65 72 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 30 20 2d 31 2e 35 65 6d 20 2d 31 2e 35 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 37 35 65 6d Data Ascii: {white-space:pre-wrap;position:relative;margin:0 -1.5em -1.5em;padding:.75em 1.5em 1.5em;line-height:1.5em}html .formcraft-css .fc-form .form-element .field-cover.customText-cover{white-space:pre-wrap;position:relative;margin:0 -1.5em -1.5em;padding:.75em
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 30 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 65 6c 65 6d 65 6e 74 20 2e 74 68 75 6d 62 2d 63 6f 76 65 72 20 2e 74 68 75 6d 62 2d 6c 61 62 65 6c 2d 63 6f 76 65 72 20 6c 61 62 65 6c 20 5b 63 6c 61 73 73 5e 3d 69 63 6f 6e 2d 5d 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 65 6c 65 6d 65 6e 74 20 Data Ascii: isplay:inline-block;cursor:pointer;letter-spacing:0;padding:7px 0}html .formcraft-css .fc-form .form-element .thumb-cover .thumb-label-cover label [class^=icon-]{position:static;cursor:pointer;margin:0;padding:0}html .formcraft-css .fc-form .form-element
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 20 73 63 61 6c 65 58 28 31 29 20 73 63 61 6c 65 59 28 31 29 20 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 20 73 63 61 6c 65 58 28 31 29 20 73 63 61 6c 65 59 28 31 29 20 72 6f 74 61 74 65 58 28 30 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 20 73 63 61 6c 65 58 28 31 29 20 73 63 61 6c 65 59 28 31 29 20 72 6f 74 61 74 65 58 28 30 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 69 65 6c 64 48 69 64 65 45 76 65 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 Data Ascii: kit-transform:translate3d(0,0,0) scaleX(1) scaleY(1) rotateX(90deg)}100%{transform:translate3d(0,0,0) scaleX(1) scaleY(1) rotateX(0);-webkit-transform:translate3d(0,0,0) scaleX(1) scaleY(1) rotateX(0)}}@-webkit-keyframes fieldHideEven{0%{transform:transla
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 61 63 2d 69 6e 6e 65 72 2c 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 61 63 2d 74 6f 67 67 6c 65 20 2e 69 63 6f 6e 2d 61 6e 67 6c 65 2d 75 70 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 61 63 2d 74 6f 67 67 6c 65 20 2e 69 63 6f 6e 2d 61 6e 67 6c 65 2d 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 61 63 2d 74 6f 67 67 6c 65 2e 61 63 74 69 76 65 20 2e 69 63 6f 6e 2d 61 6e 67 6c 65 2d 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a Data Ascii: ntent-box;-moz-box-sizing:content-box;box-sizing:content-box}.formcraft-css .ac-inner,.formcraft-css .ac-toggle .icon-angle-up{display:none}.formcraft-css .ac-toggle .icon-angle-down{display:block}.formcraft-css .ac-toggle.active .icon-angle-down{display:
2025-03-14 09:04:20 UTC	13636	IN	Data Raw: 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 35 27 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 69 63 6f 6e 2d 63 6f 67 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 36 27 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 37 27 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 69 63 6f 6e 2d 61 6e 67 6c 65 2d 63 69 72 63 6c 65 64 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 38 27 7d 68 74 6d 6c 20 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 69 63 6f 6e 2d 61 6e 67 6c 65 2d 63 69 72 63 6c 65 64 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 Data Ascii: ontent:'\e805'}html .formcraft-css .icon-cog-alt:before{content:'\e806'}html .formcraft-css .icon-cog:before{content:'\e807'}html .formcraft-css .icon-angle-circled-down:before{content:'\e808'}html .formcraft-css .icon-angle-circled-up:before{content:'\e8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49710	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:19 UTC	579	OUT	GET /bc/css/style.css HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:20 UTC	293	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 793605 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 96 Date: Fri, 14 Mar 2025 09:04:19 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:50 GMT ETag: "c1c05-5f651d29f6a80" Accept-Ranges: bytes
2025-03-14 09:04:20 UTC	16091	IN	Data Raw: 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 44 69 76 69 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 65 6c 65 67 61 6e 74 74 68 65 6d 65 73 2e 63 6f 6d 2f 67 61 6c 6c 65 72 79 2f 64 69 76 69 2f 0a 56 65 72 73 69 6f 6e 3a 20 34 2e 36 2e 36 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 53 6d 61 72 74 2e 20 46 6c 65 78 69 62 6c 65 2e 20 42 65 61 75 74 69 66 75 6c 2e 20 44 69 76 69 20 69 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 77 65 72 66 75 6c 20 74 68 65 6d 65 20 69 6e 20 6f 75 72 20 63 6f 6c 6c 65 63 74 69 6f 6e 2e 0a 41 75 74 68 6f 72 3a 20 45 6c 65 67 61 6e 74 20 54 68 65 6d 65 73 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 65 6c 65 67 61 6e 74 74 68 65 6d 65 73 2e 63 6f 6d 0a 54 61 67 73 3a 20 72 65 73 Data Ascii: /*!Theme Name: DiviTheme URI: http://www.elegantthemes.com/gallery/divi/Version: 4.6.6Description: Smart. Flexible. Beautiful. Divi is the most powerful theme in our collection.Author: Elegant ThemesAuthor URI: http://www.elegantthemes.comTags: res
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 61 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 61 66 74 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 61 2e 62 75 74 74 6f 6e 3a 61 66 74 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 61 66 74 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 3a 61 66 74 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 69 6e 70 75 74 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 61 66 74 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e Data Ascii: a.button.alt:after,.et_button_icon_visible.woocommerce a.button:after,.et_button_icon_visible.woocommerce button.button.alt:after,.et_button_icon_visible.woocommerce button.button:after,.et_button_icon_visible.woocommerce input.button.alt:after,.et_button
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 6e 6f 5f 69 63 6f 6e 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6e 6f 5f 69 63 6f 6e 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6e 6f 5f 69 63 6f 6e 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 2e 64 69 73 61 62 6c 65 64 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6e 6f 5f 69 63 6f 6e 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6e 6f 5f 69 63 6f 6e 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 Data Ascii: no_icon.woocommerce-page button.button,.et_button_no_icon.woocommerce-page button.button.alt,.et_button_no_icon.woocommerce-page button.button.alt.disabled,.et_button_no_icon.woocommerce-page button.button.alt.disabled:hover,.et_button_no_icon.woocommerce
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 20 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 74 6f 70 2d 6d 65 6e 75 2c 23 74 6f 70 2d 6d 65 6e 75 2d 6e 61 76 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 23 65 74 2d 74 6f 70 2d 6e 61 76 69 67 61 74 69 6f 6e 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 65 74 5f 66 69 78 65 64 5f 6e 61 76 20 23 65 74 2d 74 6f 70 2d 6e 61 76 69 67 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 23 65 74 2d 73 65 63 6f 6e 64 61 72 79 2d 6d 65 6e 75 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 23 65 74 2d 69 6e 66 6f 2c 23 65 74 2d 73 65 63 6f 6e Data Ascii: -social-icon a{font-size:14px}#top-menu,#top-menu-nav{line-height:0}#et-top-navigation{font-weight:600}.et_fixed_nav #et-top-navigation{-webkit-transition:all .4s ease-in-out;transition:all .4s ease-in-out}#et-secondary-menu{float:right}#et-info,#et-secon
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 68 75 6d 62 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 2e 36 36 36 36 25 7d 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 64 69 76 2e 69 6d 61 67 65 73 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 74 68 75 6d 62 73 20 6c 69 7b 77 69 64 74 68 3a 32 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 2e 36 36 36 36 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 2e 36 36 36 36 25 7d 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 64 69 76 2e 69 6d 61 67 65 73 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 74 68 75 6d 62 73 20 6c 69 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 34 6e 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 64 Data Ascii: humbs{margin-top:6.6666%}.woocommerce div.product div.images .flex-control-thumbs li{width:20%;margin-right:6.6666%;margin-bottom:6.6666%}.woocommerce div.product div.images .flex-control-thumbs li:nth-of-type(4n){margin-right:0}.woocommerce div.product d
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 70 2e 70 72 69 63 65 2c 2e 65 74 5f 63 6f 6c 6f 72 5f 73 63 68 65 6d 65 5f 70 69 6e 6b 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 73 70 61 6e 2e 70 72 69 63 65 2c 2e 65 74 5f 63 6f 6c 6f 72 5f 73 63 68 65 6d 65 5f 70 69 6e 6b 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 70 2e 70 72 69 63 65 2c 2e 65 74 5f 63 6f 6c 6f 72 5f 73 63 68 65 6d 65 5f 70 69 6e 6b 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 73 70 61 6e 2e 70 72 69 63 65 7b 63 6f 6c 6f 72 3a 23 63 33 37 63 63 36 7d 2e 65 74 5f 63 6f 6c 6f 72 5f 73 63 68 65 6d 65 5f 70 69 6e 6b 2e 77 6f 6f 63 6f 6d 6d 65 Data Ascii: .woocommerce-page div.product p.price,.et_color_scheme_pink.woocommerce-page div.product span.price,.et_color_scheme_pink.woocommerce div.product p.price,.et_color_scheme_pink.woocommerce div.product span.price{color:#c37cc6}.et_color_scheme_pink.woocomme
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 32 38 70 78 20 34 30 70 78 7d 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 20 23 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 73 6c 69 64 65 20 6c 69 2e 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 61 2c 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 20 23 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 73 6c 69 64 65 20 6c 69 20 61 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 65 74 5f 73 6c 69 64 Data Ascii: ;background:none;border:none;-webkit-box-shadow:none;box-shadow:none;padding:28px 40px}.et_slide_in_menu_container #mobile_menu_slide li.current-menu-item a,.et_slide_in_menu_container #mobile_menu_slide li a{padding:10px 0;color:#fff;border:none}.et_slid
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 65 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 65 74 5f 76 65 72 74 69 63 61 6c 5f 6e 61 76 20 2e 65 74 5f 70 62 5f 70 72 69 63 69 6e 67 5f 31 20 2e 65 74 5f 70 62 5f 70 72 69 63 69 6e 67 5f 74 61 62 6c 65 2e 65 74 2d 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 65 74 5f 76 65 72 74 69 63 61 6c 5f 6e 61 76 20 2e 65 74 5f 70 62 5f 70 72 69 63 69 6e 67 5f 31 20 2e 65 74 5f 70 62 5f 70 72 69 63 69 6e 67 5f 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 65 74 5f 76 65 72 74 69 63 61 6c 5f 6e 61 76 20 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 33 5f 34 20 2e 65 74 5f 70 62 5f 70 72 69 63 69 6e 67 5f 74 61 62 6c 65 3a 6e 74 68 2d 63 68 69 6c 64 28 33 6e 2b 31 29 2c 2e 65 74 5f 76 65 72 74 69 63 61 6c 5f 6e 61 76 20 2e 65 Data Ascii: e:last-child,.et_vertical_nav .et_pb_pricing_1 .et_pb_pricing_table.et-last-child,.et_vertical_nav .et_pb_pricing_1 .et_pb_pricing_table:last-child{margin-bottom:0}.et_vertical_nav .et_pb_column_3_4 .et_pb_pricing_table:nth-child(3n+1),.et_vertical_nav .e
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 6f 64 75 63 74 73 2e 63 6f 6c 75 6d 6e 73 2d 34 20 6c 69 2e 70 72 6f 64 75 63 74 3a 6e 74 68 2d 63 68 69 6c 64 28 33 6e 29 2c 2e 73 69 6e 67 6c 65 2e 65 74 5f 6c 65 66 74 5f 73 69 64 65 62 61 72 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 65 74 5f 70 62 5f 77 63 5f 75 70 73 65 6c 6c 73 20 75 6c 2e 70 72 6f 64 75 63 74 73 2e 63 6f 6c 75 6d 6e 73 2d 35 20 6c 69 2e 70 72 6f 64 75 63 74 3a 6e 74 68 2d 63 68 69 6c 64 28 33 6e 29 2c 2e 73 69 6e 67 6c 65 2e 65 74 5f 6c 65 66 74 5f 73 69 64 65 62 61 72 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 65 74 5f 70 62 5f 77 63 5f 75 70 73 65 6c 6c 73 20 75 6c 2e 70 72 6f 64 75 63 74 73 2e 63 6f 6c 75 6d 6e 73 2d Data Ascii: oducts.columns-4 li.product:nth-child(3n),.single.et_left_sidebar.woocommerce-page #main-content .et_pb_wc_upsells ul.products.columns-5 li.product:nth-child(3n),.single.et_left_sidebar.woocommerce-page #main-content .et_pb_wc_upsells ul.products.columns-
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 2e 65 74 5f 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 73 6c 69 64 65 20 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 7b 74 6f 70 3a 34 36 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 74 61 62 6c 65 2e 63 61 72 74 20 74 64 2c 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 74 61 62 6c 65 2e 63 61 72 74 20 74 68 2c 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 74 61 62 6c 65 2e 63 61 72 74 20 74 72 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 61 72 74 20 23 63 6f 6e 74 65 6e 74 2d 61 72 65 61 20 74 61 62 6c 65 20 74 64 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 61 72 74 20 23 63 6f 6e 74 65 6e 74 2d 61 72 65 61 20 74 61 62 6c 65 20 74 68 2c 2e 77 6f Data Ascii: .et_header_style_slide .et_slide_in_menu_container{top:46px}}@media (max-width:768px){#main-content table.cart td,#main-content table.cart th,#main-content table.cart tr,.woocommerce-cart #content-area table td,.woocommerce-cart #content-area table th,.wo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49708	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:19 UTC	587	OUT	GET /bc/css/dashicons.min.css HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:20 UTC	291	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 58917 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 95 Date: Fri, 14 Mar 2025 09:04:19 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:50 GMT ETag: "e625-5f651d29f6a80" Accept-Ranges: bytes
2025-03-14 09:04:20 UTC	16093	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 77 6f 66 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 64 30 39 47 52 67 41 42 41 41 41 41 41 48 76 77 41 41 73 41 41 41 41 41 33 45 67 41 41 51 Data Ascii: /! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot");src:url("../fonts/dashicons.eot#iefix") format("embedded-opentype"),url("data:application/x-font-woff;charset=utf-8;base64,d09GRgABAAAAAHvwAAsAAAAA3EgAAQ
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 36 4b 37 67 32 68 35 62 32 6a 45 6c 4b 54 4f 7a 46 2f 34 39 39 41 63 55 45 39 71 77 32 76 72 64 64 52 62 37 74 75 38 4a 42 6b 76 33 73 58 36 6b 38 73 6d 71 55 66 6c 6b 2f 63 73 50 4b 45 6a 2b 66 7a 39 5a 2f 33 4e 54 72 58 78 66 35 52 4f 51 39 6f 6b 36 57 6e 35 41 4b 63 72 6a 2b 69 66 2f 70 79 4b 6c 5a 6a 6a 2b 74 39 46 76 41 37 35 4b 41 31 31 68 37 4a 70 56 61 64 66 49 72 44 49 51 41 4c 31 32 74 39 4d 30 30 42 6e 6b 39 77 48 42 6a 74 42 54 46 54 45 6a 51 63 2f 75 59 58 61 34 34 37 39 31 45 51 33 47 42 78 47 36 72 53 4b 79 4f 42 69 50 68 6e 30 70 38 7a 33 2b 7a 6c 73 58 4a 2b 2f 39 43 58 51 41 38 7a 76 5a 51 30 6f 4b 43 4a 6a 64 49 38 77 38 30 65 71 69 70 38 35 4c 43 49 2f 65 57 78 7a 68 33 4f 6e 33 35 74 2b 7a 39 39 37 38 65 39 45 50 6e 35 65 79 34 75 63 Data Ascii: 6K7g2h5b2jElKTOzF/499AcUE9qw2vrddRb7tu8JBkv3sX6k8smqUflk/csPKEj+fz9Z/3NTrXxf5ROQ9ok6Wn5AKcrj+if/pyKlZjj+t9FvA75KA11h7JpVadfIrDIQAL12t9M00Bnk9wHBjtBTFTEjQc/uYXa44791EQ3GBxG6rSKyOBiPhn0p8z3+zlsXJ+/9CXQA8zvZQ0oKCJjdI8w80eqip85LCI/eWxzh3On35t+z9978e9EPn5ey4uc
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 65 6e 78 41 4f 48 68 51 54 71 53 73 65 4e 78 4b 4a 65 53 44 42 34 55 42 38 71 48 62 6e 5a 38 70 78 6a 67 44 79 48 61 54 55 70 4f 30 47 55 71 32 72 66 59 6a 4e 30 76 55 50 4e 75 50 4f 76 44 48 77 41 69 6d 6e 57 7a 48 42 6e 59 43 70 59 43 7a 59 31 46 76 45 52 32 6e 32 57 6a 71 57 6f 44 48 6d 4f 38 62 54 66 57 73 45 6a 70 69 56 4e 58 4d 5a 4d 79 64 53 38 68 2f 6e 76 6e 76 5a 6e 4f 56 6c 52 56 52 44 68 43 56 78 72 4b 36 61 38 55 67 61 35 50 74 7a 6e 50 41 4c 41 58 63 71 46 6b 4d 2b 62 2f 4a 49 35 71 47 43 6f 66 38 56 50 58 31 39 59 38 55 69 31 4c 2f 6d 47 32 50 39 52 4e 42 64 6e 33 39 50 47 78 4a 77 79 55 70 32 2b 75 66 42 44 34 71 30 47 68 72 67 6f 63 4c 4f 44 38 4e 69 6c 62 45 72 6e 6b 42 4d 68 64 4d 73 57 37 46 52 63 6d 2f 62 47 31 34 71 38 68 35 35 74 6a Data Ascii: enxAOHhQTqSseNxKJeSDB4UB8qHbnZ8pxjgDyHaTUpO0GUq2rfYjN0vUPNuPOvDHwAimnWzHBnYCpYCzY1FvER2n2WjqWoDHmO8bTfWsEjpiVNXMZMydS8h/nvnvZnOVlRVRDhCVxrK6a8Uga5PtznPALAXcqFkM+b/JI5qGCof8VPX19Y8Ui1L/mG2P9RNBdn39PGxJwyUp2+ufBD4q0GhrgocLOD8NilbErnkBMhdMsW7FRcm/bG14q8h55tj
2025-03-14 09:04:20 UTC	10056	IN	Data Raw: 72 2d 63 75 73 74 6f 6d 63 68 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 30 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 31 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 68 65 6c 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 33 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 69 6e 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 32 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 69 6e 73 65 72 74 6d 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 39 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 69 74 61 6c 69 63 3a Data Ascii: r-customchar:before{content:"\f220"}.dashicons-editor-expand:before{content:"\f211"}.dashicons-editor-help:before{content:"\f223"}.dashicons-editor-indent:before{content:"\f222"}.dashicons-editor-insertmore:before{content:"\f209"}.dashicons-editor-italic:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49709	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:19 UTC	611	OUT	GET /bc/css/et-core-unified-55-16469423936621.min.css HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:20 UTC	289	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2321 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 94 Date: Fri, 14 Mar 2025 09:04:19 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:17:06 GMT ETag: "911-5f651be1e6480" Accept-Ranges: bytes
2025-03-14 09:04:20 UTC	2321	IN	Data Raw: 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 2d 73 65 61 72 63 68 2d 66 69 65 6c 64 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 70 78 7d 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 2d 73 65 61 72 63 68 2d 66 69 65 6c 64 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 70 78 7d 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 2d 73 65 61 72 63 68 2d 66 69 65 6c 64 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 6c 65 74 74 65 72 2d 73 70 61 63 Data Ascii: .et_slide_in_menu_container,.et_slide_in_menu_container .et-search-field{letter-spacing:px}.et_slide_in_menu_container .et-search-field::-moz-placeholder{letter-spacing:px}.et_slide_in_menu_container .et-search-field::-webkit-input-placeholder{letter-spac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49712	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:20 UTC	568	OUT	GET /bc/js/jquery.min.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:20 UTC	299	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 90167 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:20 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:50 GMT ETag: "16037-5f651d29f6a80" Accept-Ranges: bytes
2025-03-14 09:04:20 UTC	16085	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f Data Ascii: a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.po
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 21 30 3d 3d 3d 65 3f 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 3a 53 2e 69 73 52 65 61 64 79 29 7c 7c 28 53 2e 69 73 52 65 61 64 79 3d 21 30 29 21 3d 3d 65 26 26 30 3c 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 7c 7c 46 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 45 2c 5b 53 5d 29 7d 7d 29 2c 53 2e 72 65 61 64 79 2e 74 68 65 6e 3d 46 2e 74 68 65 6e 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 Data Ascii: end({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)\|\|(S.isReady=!0)!==e&&0<--S.readyWait\|\|F.resolveWith(E,[S])}}),S.ready.then=F.then,"complete"===E.readyState\|\|"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 43 61 73 65 28 29 3f 53 2e 5f 65 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 4e 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 79 65 28 72 29 29 2c 72 2e 70 61 72 65 Data Ascii: Case()?S._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(Ne,""),u,l))}return n}function Oe(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ye(r)),r.pare
2025-03-14 09:04:20 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 30 2c 6e 3d 53 2e 74 69 6d 65 72 73 3b 66 6f 72 28 74 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 28 65 3d 6e 5b 74 5d 29 28 29 7c 7c 6e 5b 74 5d 21 3d 3d 65 7c 7c 6e 2e 73 70 6c 69 63 65 28 74 2d 2d 2c 31 29 3b 6e 2e 6c 65 6e 67 74 68 7c 7c 53 2e 66 78 2e 73 74 6f 70 28 29 2c 74 74 3d 76 6f 69 64 20 30 7d 2c 53 2e 66 78 2e 74 69 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 74 69 6d 65 72 73 2e 70 75 73 68 28 65 29 2c 53 2e 66 78 2e 73 74 61 72 74 28 29 7d 2c 53 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 7c 7c 28 6e 74 3d 21 30 2c 73 74 28 29 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 Data Ascii: unction(){var e,t=0,n=S.timers;for(tt=Date.now();t<n.length;t++)(e=n[t])()\|\|n[t]!==e\|\|n.splice(t--,1);n.length\|\|S.fx.stop(),tt=void 0},S.fx.timer=function(e){S.timers.push(e),S.fx.start()},S.fx.interval=13,S.fx.start=function(){nt\|\|(nt=!0,st())},S.fx.stop
2025-03-14 09:04:20 UTC	8546	IN	Data Raw: 73 5b 30 5d 29 2c 74 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 77 68 69 6c 65 28 65 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 29 65 3d 65 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 65 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 7d 2c 77 72 61 70 49 6e 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6d 28 6e 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 28 74 68 69 73 29 2c 74 3d 65 2e 63 6f 6e 74 65 6e 74 73 28 29 3b Data Ascii: s[0]),t.map(function(){var e=this;while(e.firstElementChild)e=e.firstElementChild;return e}).append(this)),this},wrapInner:function(n){return m(n)?this.each(function(e){S(this).wrapInner(n.call(this,e))}):this.each(function(){var e=S(this),t=e.contents();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49713	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:20 UTC	576	OUT	GET /bc/js/jquery-migrate.min.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:20 UTC	298	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 11224 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:20 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:48 GMT ETag: "2bd8-5f651d280e600" Accept-Ranges: bytes
2025-03-14 09:04:20 UTC	11224	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49715	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:21 UTC	578	OUT	GET /bc/js/es6-promise.auto.min.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:21 UTC	297	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 6817 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 97 Date: Fri, 14 Mar 2025 09:04:21 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:48 GMT ETag: "1aa1-5f651d280e600" Accept-Ranges: bytes
2025-03-14 09:04:21 UTC	6817	IN	Data Raw: 2f 2a 2a 20 40 6c 69 63 65 6e 73 65 20 45 53 36 2d 50 72 6f 6d 69 73 65 20 76 34 2e 32 2e 38 0a 20 2a 20 65 73 36 2d 70 72 6f 6d 69 73 65 2e 61 75 74 6f 2e 6d 69 6e 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 74 65 66 61 6e 70 65 6e 6e 65 72 2f 65 73 36 2d 70 72 6f 6d 69 73 65 0a 20 2a 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 59 65 68 75 64 61 20 4b 61 74 7a 2c 20 54 6f 6d 20 44 61 6c 65 2c 20 53 74 65 66 61 6e 20 50 65 6e 6e 65 72 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 Data Ascii: /** @license ES6-Promise v4.2.8 * es6-promise.auto.min.js * https://github.com/stefanpenner/es6-promise * * Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors * * This source code is licensed under the MIT license found in the

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49716	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:21 UTC	567	OUT	GET /bc/js/recaptcha.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:21 UTC	296	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1696 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 96 Date: Fri, 14 Mar 2025 09:04:21 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:48 GMT ETag: "6a0-5f651d280e600" Accept-Ranges: bytes
2025-03-14 09:04:21 UTC	1696	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4e 4f 54 45 3a 20 41 20 6d 69 6e 69 66 69 65 64 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 73 63 72 69 70 74 20 77 69 6c 6c 20 62 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 67 72 75 6e 74 2e 20 4f 6e 6c 79 20 74 68 65 20 6d 69 6e 69 66 69 65 64 20 66 69 6c 65 20 77 69 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 7a 69 70 70 65 64 20 72 65 6c 65 61 73 65 73 2e 0a 20 2a 0a 20 2a 20 40 66 69 6c 65 20 48 61 6e 64 6c 65 73 20 72 65 43 41 50 54 43 48 41 20 6f 6e 20 74 68 65 20 66 72 6f 6e 74 65 6e 64 2e 0a 20 2a 20 40 73 69 6e 63 65 20 34 2e 30 2e 37 0a 20 2a 2f 0a 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 77 69 6e 64 6f 77 2e 65 74 43 6f 72 65 20 20 20 20 20 20 20 20 20 20 3d 20 77 69 6e 64 6f 77 2e 65 74 43 6f 72 Data Ascii: /** * NOTE: A minified copy of this script will be generated by grunt. Only the minified file will be included in zipped releases. * * @file Handles reCAPTCHA on the frontend. * @since 4.0.7 */(function($) { window.etCore = window.etCor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49717	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:21 UTC	572	OUT	GET /bc/js/custom.unified.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:21 UTC	300	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 486035 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 95 Date: Fri, 14 Mar 2025 09:04:21 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:48 GMT ETag: "76a93-5f651d280e600" Accept-Ranges: bytes
2025-03-14 09:04:21 UTC	16084	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 6d 69 6e 69 66 69 65 64 20 61 70 70 20 62 75 6e 64 6c 65 20 63 6f 6e 74 61 69 6e 73 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 66 72 6f 6d 20 73 65 76 65 72 61 6c 20 74 68 69 72 64 20 70 61 72 74 79 20 64 65 76 65 6c 6f 70 65 72 73 2e 20 50 6c 65 61 73 65 20 72 65 76 69 65 77 20 43 52 45 44 49 54 53 2e 6d 64 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 72 20 4c 49 43 45 4e 53 45 2e 6d 64 20 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 69 72 65 63 74 6f 72 79 20 66 6f 72 20 63 6f 6d 70 6c 65 74 65 20 6c 69 63 65 6e 73 69 6e 67 2c 20 63 6f 70 79 72 69 67 68 74 20 61 6e 64 20 70 61 74 65 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 54 68 69 73 20 66 69 6c 65 20 61 6e 64 20 74 Data Ascii: /*! This minified app bundle contains open source software from several third party developers. Please review CREDITS.md in the root directory or LICENSE.md in the current directory for complete licensing, copyright and patent information. This file and t
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 73 2f 77 61 79 70 6f 69 6e 74 73 2f 62 6c 6f 67 2f 6d 61 73 74 65 72 2f 6c 69 63 65 6e 73 65 73 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 69 66 28 21 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 72 2e 65 6c 65 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 65 6c 65 6d 65 6e 74 20 6f 70 74 69 6f 6e 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 72 2e 68 61 6e 64 6c 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 Data Ascii: s/waypoints/blog/master/licenses.txt*/!function(){"use strict";function t(r){if(!r)throw new Error("No options passed to Waypoint constructor");if(!r.element)throw new Error("No element option passed to Waypoint constructor");if(!r.handler)throw new Err
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 29 7d 2c 5f 68 61 73 53 63 72 6f 6c 6c 42 61 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 65 2e 69 73 49 45 37 3f 72 2e 68 65 69 67 68 74 28 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 3e 28 74 7c 7c 62 2e 68 65 69 67 68 74 28 29 29 7d 2c 5f 73 65 74 46 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 28 65 2e 73 74 2e 66 6f 63 75 73 3f 65 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 65 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 3a 65 2e 77 72 61 70 29 2e 66 6f 63 75 73 28 29 7d 2c 5f 6f 6e 46 6f 63 75 73 49 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 74 61 72 67 65 74 3d 3d 3d 65 2e 77 72 61 70 5b 30 5d 7c 7c 74 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 77 72 61 70 5b 30 5d Data Ascii: )},_hasScrollBar:function(t){return(e.isIE7?r.height():document.body.scrollHeight)>(t\|\|b.height())},_setFocus:function(){(e.st.focus?e.content.find(e.st.focus).eq(0):e.wrap).focus()},_onFocusIn:function(n){return n.target===e.wrap[0]\|\|t.contains(e.wrap[0]
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 5c 6e 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 48 45 20 57 41 52 52 41 4e 54 49 45 53 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 4e 45 53 53 5c 6e 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 20 41 55 54 48 4f 52 53 20 4f 52 5c 6e 43 4f 50 59 52 49 47 48 54 20 48 4f 4c 44 45 52 53 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 Data Ascii: Y KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS\nFOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR\nCOPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WH
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 2e 68 61 73 43 6c 61 73 73 28 22 65 74 5f 66 69 78 65 64 5f 6e 61 76 22 29 26 26 6c 3e 39 38 30 3f 6e 28 22 23 74 6f 70 2d 68 65 61 64 65 72 22 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2b 6e 28 22 23 6d 61 69 6e 2d 68 65 61 64 65 72 22 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2d 31 3a 2d 31 2c 6e 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 2e 6c 65 6e 67 74 68 26 26 6c 3e 36 30 30 26 26 28 64 2b 3d 6e 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 29 2c 61 2e 6c 65 6e 67 74 68 26 26 28 64 2b 3d 73 29 3b 76 61 72 20 66 3d 4f 62 6a 65 63 74 28 69 2e 62 29 28 74 29 3b 66 26 26 28 64 2b 3d 66 2b 34 30 29 2c 63 3d 65 3f 30 3a 75 2d 64 2c 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 22 73 77 69 6e 67 22 29 2c 6e Data Ascii: .hasClass("et_fixed_nav")&&l>980?n("#top-header").outerHeight()+n("#main-header").outerHeight()-1:-1,n("#wpadminbar").length&&l>600&&(d+=n("#wpadminbar").outerHeight()),a.length&&(d+=s);var f=Object(i.b)(t);f&&(d+=f+40),c=e?0:u-d,void 0===o&&(o="swing"),n
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 21 73 28 67 2c 6d 2c 6e 2c 61 2c 63 29 29 7b 68 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 63 2e 64 65 6c 65 74 65 28 74 29 2c 63 2e 64 65 6c 65 74 65 28 65 29 2c 68 7d 7d 2c 33 32 35 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 74 26 26 21 72 28 74 29 7d 7d 2c 33 32 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6e 26 26 6e 5b 74 5d 3d 3d 3d 65 26 26 28 76 6f 69 64 20 30 21 3d 3d 65 7c 7c 74 20 69 6e 20 4f 62 6a 65 63 74 28 6e 29 29 7d 7d 7d Data Ascii: !s(g,m,n,a,c)){h=!1;break}}return c.delete(t),c.delete(e),h}},325:function(t,e,n){var r=n(34);t.exports=function(t){return t==t&&!r(t)}},326:function(t,e){t.exports=function(t,e){return function(n){return null!=n&&n[t]===e&&(void 0!==e\|\|t in Object(n))}}}
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 6e 67 54 61 67 3a 76 6f 69 64 20 30 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 5b 6f 62 6a 65 63 74 20 55 6e 64 65 66 69 6e 65 64 5d 22 3a 22 5b 6f 62 6a 65 63 74 20 4e 75 6c 6c 5d 22 3a 61 26 26 61 20 69 6e 20 4f 62 6a 65 63 74 28 74 29 3f 69 28 74 29 3a 6f 28 74 29 7d 7d 2c 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 32 30 36 29 2c 69 3d 6e 28 31 32 31 29 2c 6f 3d 6e 28 31 32 35 29 2c 61 3d 6e 28 31 37 29 2c 73 3d 6e 28 37 35 29 2c 63 3d 6e 28 31 31 37 29 2c 75 3d 6e 28 31 37 30 29 2c 6c 3d 6e 28 31 32 36 29 2c 64 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 74 Data Ascii: ngTag:void 0;t.exports=function(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":a&&a in Object(t)?i(t):o(t)}},8:function(t,e,n){var r=n(206),i=n(121),o=n(125),a=n(17),s=n(75),c=n(117),u=n(170),l=n(126),d=Object.prototype.hasOwnProperty;t
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 72 61 29 2c 6f 61 3d 6e 28 32 39 37 29 2c 61 61 3d 6e 2e 6e 28 6f 61 29 2c 73 61 3d 6e 28 34 37 37 29 2c 63 61 3d 6e 2e 6e 28 73 61 29 2c 75 61 3d 6e 28 34 37 38 29 2c 6c 61 3d 6e 2e 6e 28 75 61 29 2c 64 61 3d 6e 28 34 37 39 29 2c 66 61 3d 6e 2e 6e 28 64 61 29 2c 70 61 3d 6e 28 31 36 33 29 2c 5f 61 3d 6e 2e 6e 28 70 61 29 2c 68 61 3d 6e 28 34 38 30 29 2c 76 61 3d 6e 2e 6e 28 68 61 29 2c 67 61 3d 6e 28 32 31 33 29 2c 6d 61 3d 6e 2e 6e 28 67 61 29 2c 62 61 3d 6e 28 34 38 31 29 2c 79 61 3d 6e 2e 6e 28 62 61 29 2c 77 61 3d 6e 28 34 38 32 29 2c 78 61 3d 6e 2e 6e 28 77 61 29 2c 43 61 3d 6e 28 34 38 33 29 2c 6b 61 3d 6e 2e 6e 28 43 61 29 2c 6a 61 3d 6e 28 33 31 31 29 2c 4f 61 3d 6e 2e 6e 28 6a 61 29 2c 53 61 3d 6e 28 34 38 34 29 2c 50 61 3d 6e 2e 6e 28 53 61 29 Data Ascii: ra),oa=n(297),aa=n.n(oa),sa=n(477),ca=n.n(sa),ua=n(478),la=n.n(ua),da=n(479),fa=n.n(da),pa=n(163),_a=n.n(pa),ha=n(480),va=n.n(ha),ga=n(213),ma=n.n(ga),ba=n(481),ya=n.n(ba),wa=n(482),xa=n.n(wa),Ca=n(483),ka=n.n(Ca),ja=n(311),Oa=n.n(ja),Sa=n(484),Pa=n.n(Sa)
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 72 74 73 3d 73 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 7d 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 3d 3d 74 3f 30 3a 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 65 3f 74 5b 65 2d 31 5d 3a 76 6f 69 64 20 30 7d 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 78 Data Ascii: rts=s},function(t,e){t.exports=function(t){return null===t}},,function(t,e){t.exports=function(t){var e=null==t?0:t.length;return e?t[e-1]:void 0}},,function(t,e){t.exports=function(t){return t}},function(t,e,n){"use strict";n.d(e,"a",(function(){return x
2025-03-14 09:04:21 UTC	16384	IN	Data Raw: 63 74 20 4f 62 6a 65 63 74 5d 22 2c 50 3d 7b 7d 3b 50 5b 6a 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 44 61 74 61 56 69 65 77 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 46 6c 6f 61 74 33 32 41 72 72 61 79 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 46 6c 6f 61 74 36 34 41 72 72 61 79 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 49 6e 74 38 41 72 72 61 79 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 49 6e 74 31 36 41 72 72 61 79 5d 22 5d 3d 50 5b 22 5b 6f 62 6a 65 63 74 20 49 6e 74 33 32 41 72 72 61 Data Ascii: ct Object]",P={};P[j]=P["[object Array]"]=P["[object ArrayBuffer]"]=P["[object DataView]"]=P["[object Boolean]"]=P["[object Date]"]=P["[object Float32Array]"]=P["[object Float64Array]"]=P["[object Int8Array]"]=P["[object Int16Array]"]=P["[object Int32Arra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49718	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:21 UTC	564	OUT	GET /bc/js/common.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:21 UTC	296	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1360 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:21 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:22:48 GMT ETag: "550-5f651d280e600" Accept-Ranges: bytes
2025-03-14 09:04:21 UTC	1360	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 75 73 65 72 5f 61 67 65 6e 74 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 0a 09 09 76 61 72 20 69 73 5f 6f 70 65 72 61 5f 65 64 67 65 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 20 3d 20 75 73 65 72 5f 61 67 65 6e 74 2e 6d 61 74 63 68 28 2f 28 6f 70 65 72 61 7c 63 68 72 6f 6d 65 7c 73 61 66 61 72 69 7c 66 69 72 65 66 6f 78 7c 6d 73 69 65 7c 74 72 69 64 65 6e 74 28 3f 3d 5c 2f 29 29 2f 69 29 20 7c 7c 20 5b 5d 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 5f 6e 61 6d 65 20 3d 20 27 27 3b 0a 09 09 76 61 72 20 62 72 6f 77 73 65 72 5f 63 6c 61 73 73 20 3d 20 27 27 3b 0a 0a 09 09 69 Data Ascii: (function($){$(document).ready( function(){var user_agent = navigator.userAgent;var is_opera_edge;var browser = user_agent.match(/(opera\|chrome\|safari\|firefox\|msie\|trident(?=\/))/i) \|\| [];var browser_name = '';var browser_class = '';i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49721	188.114.96.3	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:22 UTC	631	OUT	GET /get/static.js?referrer=https://leboncoinpaiement.tiv-fr.fr/bc/ HTTP/1.1 Host: api.cdnmetric.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://leboncoinpaiement.tiv-fr.fr/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:22 UTC	1034	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:04:22 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 137 Connection: close X-Powered-By: PHP/8.2.1 Access-Control-Allow-Origin: https://leboncoinpaiement.tiv-fr.fr Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: X-Requested-With,content-type Access-Control-Allow-Credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=80kqAYRXZaGMp%2F5c0K7BtPmLOruBzt8gWAZWKQ1RSM696n5Q%2BwId%2BJv2M2WSimXczyaoDimSyA%2B2vbq18VncNkZ8LX5VY88x86a%2BG7%2F0mlJICtfQ5Vvg%2B02zr1qXKxiiX6mHiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92029a6c2951fd86-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1632&min_rtt=1624&rtt_var=626&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1203&delivery_rate=1722713&cwnd=102&unsent_bytes=0&cid=bf90e6f7655be33b&ts=339&x=0"
2025-03-14 09:04:22 UTC	137	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 7b 6e 65 77 20 52 65 67 45 78 70 28 61 74 6f 62 28 22 59 58 42 70 4c 6d 4e 6b 62 6d 31 6c 64 48 4a 70 59 79 35 6a 62 32 30 3d 22 29 29 2e 74 65 73 74 28 65 2e 73 72 63 29 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 7d 29 3b Data Ascii: document.querySelectorAll("script").forEach(e=>{new RegExp(atob("YXBpLmNkbm1ldHJpYy5jb20=")).test(e.src)&&document.body.removeChild(e)});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49719	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:22 UTC	660	OUT	GET /bc/images/conseil-finan-2.png HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:22 UTC	290	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3982 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 97 Date: Fri, 14 Mar 2025 09:04:22 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:20:02 GMT ETag: "f8e-5f651c89bf080" Accept-Ranges: bytes
2025-03-14 09:04:22 UTC	3982	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 2e 08 02 00 00 00 33 e5 92 0f 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0f 14 49 44 41 54 78 5e ed 9c 0f 8c 15 c5 1d c7 ef fd bf 3b 15 13 50 9b 88 35 6a 73 6a db 88 52 c3 9f a6 36 3d 34 5a 25 26 6a 8e 4a 93 72 68 b4 3d 5a a8 60 0c 0a 57 ac 0a 16 7b 8a 2d 95 7f ad 67 63 91 23 8d 51 0f 6d a3 10 a1 08 4d 6d 02 52 35 5e fd 87 d0 2a 16 da 8a 4a 45 90 bb f7 77 fb 99 9d b9 65 6f 67 77 df de dd 3b b8 d7 ce 27 2f 8f f9 b7 33 b3 fb e6 3b f3 fb cd ce 11 b3 2c ab c6 60 30 0c 6f e2 ea 5f 83 c1 30 8c 31 42 35 18 aa 00 23 54 83 a1 0a 30 42 35 18 Data Ascii: PNGIHDR8.3 cHRMz%u0`:o_FpHYsodIDATx^;P5jsjR6=4Z%&jJrh=Z`W{-gc#QmMmR5^*JEweogw;'/3;,`0o_01B5#T0B5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49720	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:22 UTC	665	OUT	GET /bc/images/success-animation_2x.gif HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:22 UTC	292	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 33621 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:22 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:17:04 GMT ETag: "8355-5f651bdffe000" Accept-Ranges: bytes
2025-03-14 09:04:22 UTC	16092	IN	Data Raw: 47 49 46 38 39 61 c8 00 c8 00 f7 00 00 47 b2 db 06 9c 98 9a d4 9b 1a 9d 1b 2b a5 2c b9 e1 b9 8a cd ad 0d 9d 77 4d b2 70 05 9c a8 16 9d 37 06 95 06 8e cf e8 4b b2 4c ea f6 eb 7a c7 d2 fd fe fd cb e9 cc 72 c3 73 90 cf c9 53 b5 53 b2 de b4 74 c3 8b d7 ed e9 12 9d 57 ac dc ad 83 ca 83 ad dc ee 92 d1 92 63 bc 64 33 a8 34 36 ab 88 bc e2 d8 15 9e 47 0d 9d 6a f1 f9 f1 5b b9 5c 8a cd 8a 42 ae 43 0a 97 0a 0e 98 0e 32 a8 6f dc f0 dd 08 96 08 f5 fb f5 4c b3 b4 36 ac d7 0c 98 0c d8 ef d9 e5 f4 e5 1c 9f 1d e1 f2 e2 c1 e4 c1 15 9c 16 21 a0 21 79 c6 7a 4c b3 90 10 9d 66 15 a1 d4 f9 fc f9 30 a7 31 ca e8 d8 9f d6 c4 12 9a 12 c8 e7 e8 a5 d8 a5 34 a8 49 f8 fc f8 6b c0 6c c5 e6 c6 02 9b 5d 38 aa 39 c8 e8 f4 a1 d6 a1 69 bf 69 2d a5 31 0e 9a 12 26 a6 c6 25 a2 26 db f0 f6 1a a1 Data Ascii: GIF89aG+,wMp7KLzrsSStWcd346Gj[\BC2oL6!!yzLf014Ikl]89ii-1&%&
2025-03-14 09:04:22 UTC	16384	IN	Data Raw: 23 4a 9c 48 b1 a2 c5 8b 18 33 6a dc c8 b1 a3 c7 8f 20 43 8a 1c 49 b2 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 97 30 63 ca 9c 49 b3 a6 cd 9b 38 73 ea dc c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 93 2a 5d ca b4 a9 d3 a7 50 33 76 5a 93 a9 03 9d a8 58 3d 3a d8 a3 68 80 23 75 1e 0a 64 1d 7b 71 50 07 02 03 d4 0d 58 eb 28 93 03 b2 70 21 0e a2 30 66 ad dd b5 71 08 a8 88 cb 57 a1 0a 22 77 03 a7 35 31 a8 af 61 82 2a 56 a9 53 2b 78 ad ba 38 6b 3a 1d 36 dc 29 03 01 26 8d 1d ab 5b d2 e7 ed 64 be 74 3a 3c ce cc 44 9d 22 09 62 3f c7 cd d2 21 2d 1b 36 03 60 db 8d 13 a7 43 86 c2 aa e3 56 30 41 bb 71 1c 26 99 2a 64 c9 1d b7 93 04 39 71 5e 2b 57 ae 0e 4c 05 cf c4 c9 aa 30 c1 26 f9 f2 d7 71 96 ac e1 15 3d 6e 06 39 be ae bf ff f6 25 87 08 ee ee 63 3b ed 11 3f 1e 17 98 d4 e8 c7 aa Data Ascii: #JH3j CI(S\0cI8s@JH]P3vZX=:h#ud{qPX(p!0fqW"w51aVS+x8k:6)&[dt:<D"b?!-6`CV0Aq&*d9q^+WL0&q=n9%c;?
2025-03-14 09:04:22 UTC	1145	IN	Data Raw: 28 9c 48 b1 e2 3f 86 84 2e 2d 62 b7 42 a2 c5 8f 20 31 aa 2b b4 e9 c4 09 4c 20 53 52 d4 c7 83 d0 8f 2d a1 18 9d 50 a7 4a a5 cd 83 9f 8e 0c 00 b5 68 13 a5 05 ad fe d4 bb 49 54 20 8d 23 32 7e 6c 3c b1 e2 85 a0 7a c5 8a de a4 21 48 86 ba 45 8e 4e 78 b9 f4 34 aa 54 95 39 65 60 5a f4 82 a9 3a 54 50 bf 82 45 ea 67 91 24 93 34 05 78 55 fb 31 6c db 92 27 55 a5 a5 fb 91 aa 4b b2 8c 1c d5 50 25 97 6f 5d 41 84 ae 86 3a c1 68 ca 91 c2 86 2b 1e 95 c1 93 9d c9 1a 52 f6 46 9e c8 50 46 db 50 79 36 61 86 bc 59 21 8d 86 77 19 35 56 b5 66 6e 69 84 0c 07 b4 22 bb 82 11 96 23 9a 5f 1f c4 a8 f4 ed 0a 2c 1e 5a eb 4e 88 f1 e1 0b 99 7e 8e 08 1f 7e f0 f4 80 1f 90 36 31 5a e1 e9 cf 72 e6 05 27 f7 f6 72 e2 f6 75 ec 03 fd 7e ff 36 d9 aa 2b f8 82 9f 10 f3 0c d5 91 eb f7 f3 47 09 81 6a Data Ascii: (H?.-bB 1+L SR-PJhIT #2~l<z!HENx4T9e`Z:TPEg$4xU1l'UKP%o]A:h+RFPFPy6aY!w5Vfni"#_,ZN~~61Zr'ru~6+Gj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49724	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:23 UTC	442	OUT	GET /bc/images/conseil-finan-2.png HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:23 UTC	290	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3982 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:23 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:20:02 GMT ETag: "f8e-5f651c89bf080" Accept-Ranges: bytes
2025-03-14 09:04:23 UTC	3982	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 38 00 00 00 2e 08 02 00 00 00 33 e5 92 0f 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0f 14 49 44 41 54 78 5e ed 9c 0f 8c 15 c5 1d c7 ef fd bf 3b 15 13 50 9b 88 35 6a 73 6a db 88 52 c3 9f a6 36 3d 34 5a 25 26 6a 8e 4a 93 72 68 b4 3d 5a a8 60 0c 0a 57 ac 0a 16 7b 8a 2d 95 7f ad 67 63 91 23 8d 51 0f 6d a3 10 a1 08 4d 6d 02 52 35 5e fd 87 d0 2a 16 da 8a 4a 45 90 bb f7 77 fb 99 9d b9 65 6f 67 77 df de dd 3b b8 d7 ce 27 2f 8f f9 b7 33 b3 fb e6 3b f3 fb cd ce 11 b3 2c ab c6 60 30 0c 6f e2 ea 5f 83 c1 30 8c 31 42 35 18 aa 00 23 54 83 a1 0a 30 42 35 18 Data Ascii: PNGIHDR8.3 cHRMz%u0`:o_FpHYsodIDATx^;P5jsjR6=4Z%&jJrh=Z`W{-gc#QmMmR5^*JEweogw;'/3;,`0o_01B5#T0B5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49725	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:23 UTC	447	OUT	GET /bc/images/success-animation_2x.gif HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:24 UTC	292	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 33621 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:24 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:17:04 GMT ETag: "8355-5f651bdffe000" Accept-Ranges: bytes
2025-03-14 09:04:24 UTC	16092	IN	Data Raw: 47 49 46 38 39 61 c8 00 c8 00 f7 00 00 47 b2 db 06 9c 98 9a d4 9b 1a 9d 1b 2b a5 2c b9 e1 b9 8a cd ad 0d 9d 77 4d b2 70 05 9c a8 16 9d 37 06 95 06 8e cf e8 4b b2 4c ea f6 eb 7a c7 d2 fd fe fd cb e9 cc 72 c3 73 90 cf c9 53 b5 53 b2 de b4 74 c3 8b d7 ed e9 12 9d 57 ac dc ad 83 ca 83 ad dc ee 92 d1 92 63 bc 64 33 a8 34 36 ab 88 bc e2 d8 15 9e 47 0d 9d 6a f1 f9 f1 5b b9 5c 8a cd 8a 42 ae 43 0a 97 0a 0e 98 0e 32 a8 6f dc f0 dd 08 96 08 f5 fb f5 4c b3 b4 36 ac d7 0c 98 0c d8 ef d9 e5 f4 e5 1c 9f 1d e1 f2 e2 c1 e4 c1 15 9c 16 21 a0 21 79 c6 7a 4c b3 90 10 9d 66 15 a1 d4 f9 fc f9 30 a7 31 ca e8 d8 9f d6 c4 12 9a 12 c8 e7 e8 a5 d8 a5 34 a8 49 f8 fc f8 6b c0 6c c5 e6 c6 02 9b 5d 38 aa 39 c8 e8 f4 a1 d6 a1 69 bf 69 2d a5 31 0e 9a 12 26 a6 c6 25 a2 26 db f0 f6 1a a1 Data Ascii: GIF89aG+,wMp7KLzrsSStWcd346Gj[\BC2oL6!!yzLf014Ikl]89ii-1&%&
2025-03-14 09:04:24 UTC	16384	IN	Data Raw: 23 4a 9c 48 b1 a2 c5 8b 18 33 6a dc c8 b1 a3 c7 8f 20 43 8a 1c 49 b2 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 97 30 63 ca 9c 49 b3 a6 cd 9b 38 73 ea dc c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 93 2a 5d ca b4 a9 d3 a7 50 33 76 5a 93 a9 03 9d a8 58 3d 3a d8 a3 68 80 23 75 1e 0a 64 1d 7b 71 50 07 02 03 d4 0d 58 eb 28 93 03 b2 70 21 0e a2 30 66 ad dd b5 71 08 a8 88 cb 57 a1 0a 22 77 03 a7 35 31 a8 af 61 82 2a 56 a9 53 2b 78 ad ba 38 6b 3a 1d 36 dc 29 03 01 26 8d 1d ab 5b d2 e7 ed 64 be 74 3a 3c ce cc 44 9d 22 09 62 3f c7 cd d2 21 2d 1b 36 03 60 db 8d 13 a7 43 86 c2 aa e3 56 30 41 bb 71 1c 26 99 2a 64 c9 1d b7 93 04 39 71 5e 2b 57 ae 0e 4c 05 cf c4 c9 aa 30 c1 26 f9 f2 d7 71 96 ac e1 15 3d 6e 06 39 be ae bf ff f6 25 87 08 ee ee 63 3b ed 11 3f 1e 17 98 d4 e8 c7 aa Data Ascii: #JH3j CI(S\0cI8s@JH]P3vZX=:h#ud{qPX(p!0fqW"w51aVS+x8k:6)&[dt:<D"b?!-6`CV0Aq&*d9q^+WL0&q=n9%c;?
2025-03-14 09:04:24 UTC	1145	IN	Data Raw: 28 9c 48 b1 e2 3f 86 84 2e 2d 62 b7 42 a2 c5 8f 20 31 aa 2b b4 e9 c4 09 4c 20 53 52 d4 c7 83 d0 8f 2d a1 18 9d 50 a7 4a a5 cd 83 9f 8e 0c 00 b5 68 13 a5 05 ad fe d4 bb 49 54 20 8d 23 32 7e 6c 3c b1 e2 85 a0 7a c5 8a de a4 21 48 86 ba 45 8e 4e 78 b9 f4 34 aa 54 95 39 65 60 5a f4 82 a9 3a 54 50 bf 82 45 ea 67 91 24 93 34 05 78 55 fb 31 6c db 92 27 55 a5 a5 fb 91 aa 4b b2 8c 1c d5 50 25 97 6f 5d 41 84 ae 86 3a c1 68 ca 91 c2 86 2b 1e 95 c1 93 9d c9 1a 52 f6 46 9e c8 50 46 db 50 79 36 61 86 bc 59 21 8d 86 77 19 35 56 b5 66 6e 69 84 0c 07 b4 22 bb 82 11 96 23 9a 5f 1f c4 a8 f4 ed 0a 2c 1e 5a eb 4e 88 f1 e1 0b 99 7e 8e 08 1f 7e f0 f4 80 1f 90 36 31 5a e1 e9 cf 72 e6 05 27 f7 f6 72 e2 f6 75 ec 03 fd 7e ff 36 d9 aa 2b f8 82 9f 10 f3 0c d5 91 eb f7 f3 47 09 81 6a Data Ascii: (H?.-bB 1+L SR-PJhIT #2~l<z!HENx4T9e`Z:TPEg$4xU1l'UKP%o]A:h+RFPFPy6aY!w5Vfni"#_,ZN~~61Zr'ru~6+Gj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49726	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:24 UTC	620	OUT	GET /favicon.ico HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:04:25 UTC	221	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=iso-8859-1 Content-Length: 196 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:25 GMT Server: Apache
2025-03-14 09:04:25 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49730	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:37 UTC	770	OUT	GET /bc/acceuil.php HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://leboncoinpaiement.tiv-fr.fr/bc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:37 UTC	216	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:37 GMT Server: Apache
2025-03-14 09:04:37 UTC	16168	IN	Data Raw: 37 65 61 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 23 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 Data Ascii: 7ea9<!DOCTYPE html><html lang="fr-FR"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="#xmlrpc.php"><script type="text/javascript">document.documentElement.className = 'js';</scri
2025-03-14 09:04:37 UTC	16270	IN	Data Raw: 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 76 2e 66 63 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 2c 0a 09 09 09 09 09 09 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 2e 66 69 65 6c 64 2d 63 6f 76 65 72 3e 64 69 76 2e 66 75 6c 6c 20 68 72 0a 09 09 09 09 09 09 7b 0a 09 09 09 09 09 09 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 62 37 37 64 31 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 23 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 76 2e 66 63 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 3a 68 6f 76 65 72 2c 0a 09 09 09 09 09 09 23 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 76 2e 66 63 2d 64 61 74 65 70 Data Ascii: ui-datepicker-div.fc-datepicker .ui-datepicker-header,.formcraft-css .fc-form .field-cover>div.full hr{border-color: #3b77d1;}#ui-datepicker-div.fc-datepicker .ui-datepicker-prev:hover,#ui-datepicker-div.fc-datep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49729	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:37 UTC	643	OUT	GET /bc/css/et-core-unified-5-16033278196823.min.css HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:37 UTC	289	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1834 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:37 GMT Server: Apache Last-Modified: Wed, 08 Mar 2023 13:59:46 GMT ETag: "72a-5f663f0d15880" Accept-Ranges: bytes
2025-03-14 09:04:37 UTC	1834	IN	Data Raw: 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 2d 73 65 61 72 63 68 2d 66 69 65 6c 64 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 70 78 7d 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 2d 73 65 61 72 63 68 2d 66 69 65 6c 64 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 70 78 7d 2e 65 74 5f 73 6c 69 64 65 5f 69 6e 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 2d 73 65 61 72 63 68 2d 66 69 65 6c 64 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 6c 65 74 74 65 72 2d 73 70 61 63 Data Ascii: .et_slide_in_menu_container,.et_slide_in_menu_container .et-search-field{letter-spacing:px}.et_slide_in_menu_container .et-search-field::-moz-placeholder{letter-spacing:px}.et_slide_in_menu_container .et-search-field::-webkit-input-placeholder{letter-spac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49733	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:38 UTC	643	OUT	GET /bc/fonts/fc.woff HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive Origin: https://leboncoinpaiement.tiv-fr.fr sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://leboncoinpaiement.tiv-fr.fr/bc/css/form.min.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:38 UTC	304	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 23380 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:38 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:18:22 GMT ETag: "5b54-5f651c2a60f80" Accept-Ranges: bytes
2025-03-14 09:04:38 UTC	16080	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 5b 54 00 0e 00 00 00 00 95 fc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 44 00 00 00 44 00 00 00 56 3e 2a 49 a2 63 6d 61 70 00 00 01 88 00 00 00 3a 00 00 01 4a d0 a7 19 b7 63 76 74 20 00 00 01 c4 00 00 00 0a 00 00 00 0a 00 00 00 00 66 70 67 6d 00 00 01 d0 00 00 05 94 00 00 0b 70 88 90 90 59 67 61 73 70 00 00 07 64 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 07 6c 00 00 4b 85 00 00 79 ee 50 be 2f 36 68 65 61 64 00 00 52 f4 00 00 00 35 00 00 00 36 06 8e da 59 68 68 65 61 00 00 53 2c 00 00 00 1e 00 00 00 24 08 4a 04 87 68 6d 74 78 00 00 53 4c 00 00 00 b6 00 00 02 60 0f 9d 00 00 6c 6f 63 61 00 00 54 04 00 00 01 32 00 00 01 32 ad 8d 8c e8 6d 61 78 70 00 00 55 38 00 00 00 Data Ascii: wOFF[TOS/2DDV>*Icmap:Jcvt fpgmpYgaspdglyflKyP/6headR56YhheaS,$JhmtxSL`locaT22maxpU8
2025-03-14 09:04:38 UTC	7300	IN	Data Raw: e1 ce 97 e3 72 57 77 c2 fe 49 61 a8 40 0a c3 79 a1 f7 52 f2 52 b2 40 56 2d 23 64 b7 24 86 ad 25 9b bd 82 61 f9 4d 4d 31 cc ee d6 2f 69 f1 81 f6 8d 6d 9c d9 3d df c7 79 a7 3a 57 6c 23 11 bb ab a9 87 ac a9 06 83 65 fb 4b 3d ef df 65 86 63 7d 85 d4 31 50 20 76 e4 63 86 b5 78 07 7d 66 29 4d c6 4b a4 7b b8 9b 94 5c 33 7b c5 1d 06 9c a5 ba 9a 5c 65 d0 57 61 3e 5a 36 50 88 5a ba 82 eb 83 70 41 49 91 1b 04 be 14 66 cf ac 0a c3 48 09 16 77 2d 19 31 0e 77 da e2 ea 86 a4 f1 52 a2 c8 3b bb cc c2 c7 d9 24 06 03 eb 98 a7 99 6c d1 12 c5 94 4a f5 78 29 16 20 ef 9f 93 58 b7 62 a1 b5 36 b7 29 7b 76 78 78 82 a4 6a 93 e3 c5 a9 e2 f8 64 6f e2 aa 84 39 be 66 c7 da 52 c7 d8 c6 15 13 7d c1 e4 84 2f 3a 7f c3 fc c9 0d ab 97 f6 6f ec 6f f1 4d 7c d9 2c e6 68 aa 94 ab 24 f8 7c 21 7c Data Ascii: rWwIa@yRR@V-#d$%aMM1/im=y:Wl#eK=ec}1P vcx}f)MK{\3{\eWa>Z6PZpAIfHw-1wR;$lJx) Xb6){vxxjdo9fR}/:ooM\|,h$\|!\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49734	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:38 UTC	691	OUT	GET /bc/images/bg.png HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://leboncoinpaiement.tiv-fr.fr/bc/css/et-core-unified-5-16033278196823.min.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:38 UTC	294	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 124793 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:38 GMT Server: Apache Last-Modified: Wed, 08 Mar 2023 13:57:02 GMT ETag: "1e779-5f663e70ae780" Accept-Ranges: bytes
2025-03-14 09:04:38 UTC	16090	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 e1 00 00 03 20 08 06 00 00 00 fc d4 10 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 ff a5 49 44 41 54 78 5e ec fd 69 8c 64 6b 9a 1f f6 bd b9 46 e4 9e 59 eb ad be 4b 77 cf 70 66 48 6a 38 43 d2 86 34 94 05 91 b0 20 ca 16 01 01 fa 60 c2 90 60 8b 00 0d 89 b2 3f 08 b2 04 43 82 16 c0 32 44 c9 b2 47 a2 05 98 b6 01 ed a2 64 79 a3 64 43 d4 42 c9 12 09 6b a1 69 8a 64 73 7a ba a7 bb ef d2 75 eb 56 d7 ad 2d f7 8c 35 23 cb f1 9c 3c 71 2b 2b 2b 97 c8 cc 13 91 27 22 7e bf 8b 40 9e 13 b7 72 3b 19 99 71 e2 fc df e7 79 a6 de 74 25 00 00 00 00 00 00 00 e0 c6 a6 f3 b7 00 00 00 00 00 00 00 c0 0d 09 e1 01 00 Data Ascii: PNGIHDR usRGBgAMAapHYs+IDATx^idkFYKwpfHj8C4 ``?C2DGdydCBkidszuV-5#<q+++'"~@r;qyt%
2025-03-14 09:04:38 UTC	16384	IN	Data Raw: bb b5 da d9 f3 4f cf d1 d1 e0 5e f3 9e 5c 7c 7c d3 85 c8 71 4e 3e d3 bd c5 4c ef 61 07 9a 27 8f 5d 11 d7 08 ce 3b 16 57 bd bc 79 fc 61 2e ff 58 b1 7d 9d e3 3f 37 37 9b 1d f3 f8 3b 74 d3 9f df 75 44 35 fc 61 a7 d3 3d ee 37 9f c9 7f fa 78 0c 52 1c ab b8 cd 75 5f f3 cf 76 9f a3 87 bd 68 a4 5f 42 78 00 a0 1f 42 78 a0 50 02 78 86 21 5a d3 2f 2e de ce c5 0c ae 27 2e fc 45 9b d8 b8 f0 07 d0 73 3a 60 ef 1c 1d a5 cd ad bd b8 c2 9b 6a f5 86 59 ec 0c 84 f6 f3 93 49 bb fa f2 2b 73 08 df b3 bb b3 9f 05 ca a3 66 61 b1 da 7d fd 74 bb 8b 62 47 f5 d8 5d 57 19 8e 79 1c ef 38 ee a3 68 b5 fb f7 3a 16 32 94 95 10 1e 00 e8 87 10 1e 28 8c 00 9e 61 8a 50 37 66 c5 c7 5b 46 47 b5 32 97 36 36 56 d2 7c 89 2f a8 00 c5 38 1d b0 1f 75 5f 76 bc de 3c 6e 8d 5a ab 45 e0 ee 65 08 c3 b7 b4 Data Ascii: O^\\|\|qN>La'];Wya.X}?77;tuD5a=7xRu_vh_BxBxPx!Z/.'.Es:`jYI+sfa}tbG]Wy8h:2(aP7f[FG266V\|/8u_v<nZEe
2025-03-14 09:04:38 UTC	16384	IN	Data Raw: 9d 9d 03 b3 f4 18 6b ff d4 3f f6 ef a4 ff fa bf f8 51 be 77 b1 ff f5 ff ee ef 49 bf f2 bb bf 93 ef 8d be 38 51 b1 62 7f 7c dd 7f b0 91 6f 1d ab 1d 34 d2 c1 41 3d df a3 1f b1 92 76 7d 63 25 df 3b b6 bd b5 97 bd a8 a0 5c ee dc 5d cb b7 6e 4f 5c 7c 9d 9e b9 fd b5 bd af 5f 6d e7 5b 29 ad ad 2e a5 f5 b5 a5 7c ef 62 8f 9f bc c8 de f6 fb 3e cf 5f 6c 75 5f 7c 1e b7 df 8e df 95 d5 b5 e5 6c fb a6 e2 f7 2b 2a 8b 7b 1e 3e 58 ef eb c2 76 bc 10 7e fe e2 f8 7b ef f7 7d 7a df 73 58 58 ac 76 5f bc 57 f3 bd 9b a9 d5 1a a9 de bd f5 7c fb e3 07 f9 d6 c5 b6 bb e7 dd 3b bb 07 d9 76 3f ef 73 f2 7b 0e f1 33 d0 0e 77 38 e2 f5 91 0a f8 d1 b3 d2 fd fb 36 3f ef dc b7 08 f1 f8 2f fa 7c e8 2a cf 59 57 31 a8 bf f5 d7 75 d3 63 17 8b 15 1e 9e 3a cf 1f 94 68 bd fa e4 e9 cb 7c ef 7a ca 70 Data Ascii: k?QwI8Qb\|o4A=v}c%;\]nO\\|_m[).\|b>_lu_\|l+{>Xv~{}zsXXv_W\|;v?s{3w86?/\|YW1uc:h\|zp
2025-03-14 09:04:38 UTC	16384	IN	Data Raw: 6e 7c ef fe a6 fc f3 27 87 8b 0f 56 cc e5 64 f3 f4 83 92 df d9 91 6a b9 2c ef 7a f7 e3 f5 77 5a 6c ac 6f eb b9 ee 5c 78 64 45 cf d9 4f 36 27 b2 93 83 1b 7a 91 a5 f9 80 dc 7b bc 29 85 92 4a 45 f5 66 33 28 fb 96 9a 72 c5 05 6b ad 0f bb 98 48 24 2c b3 73 69 bd 74 9e 7e e7 74 14 ea 8d 86 14 cb 35 09 05 03 92 88 45 f4 ad ee a4 52 ad 4b 45 dd ab d1 70 48 a2 ea be b3 12 1c 03 1c 8b 76 8a 85 92 14 3a 56 d2 f5 3a 2f 76 33 e8 1e 23 84 f8 97 a5 e5 79 3d 67 3f 65 35 10 cc e5 b8 50 8d 10 42 88 b7 88 27 62 92 4a 25 f4 12 e9 45 ad 52 95 78 dc da f1 24 71 3f 05 d5 bf 8b 46 dd 3d d6 27 84 10 42 c6 e1 ee bb 8e e9 39 ef 00 4d 29 9d 4e 48 10 16 8f 64 6c e2 b1 88 ac ae 2c e8 25 f7 e1 6b 11 3e 93 2d c8 d6 76 4e 2f 91 7e f8 5d 84 87 d0 8e 04 e1 bd 56 6b 48 a3 43 70 b3 82 50 28 Data Ascii: n\|'Vdj,zwZlo\xdEO6'z{)JEf3(rkH$,sit~t5ERKEpHv:V:/v3#y=g?e5PB'bJ%ERx$q?F='B9M)NHdl,%k>-vN/~]VkHCpP(
2025-03-14 09:04:38 UTC	16384	IN	Data Raw: f2 85 a2 66 39 6f 26 61 82 a2 52 a9 6a 09 16 0c dd 3e 33 4c 2a 14 4b 52 ad d5 ba d6 ad 5b c2 e4 48 b7 ef 19 37 e1 7b bb ed 6f e8 a4 8e 3d ce 1b 85 78 42 08 21 84 10 77 10 0e 7b 7b f2 d4 8d 68 56 be 3e 19 37 1b 42 0e 71 86 6e de 68 31 96 9d 24 9d 5e d0 8c 18 ef c3 00 21 1e e1 7e da 31 44 42 33 96 87 c4 59 d2 c9 86 5c 7b e5 f0 a2 94 1d dc 71 4f 40 32 59 bd 40 4c d1 29 c4 0f 0b 16 c9 90 c1 f8 cd db cd b8 f8 a1 bf 83 b9 e3 61 35 65 4b 7b cd 5e 72 43 df 09 dc d2 13 f3 70 f5 f3 5e 0c 01 3e 9f 6f 75 2e ff f8 ad 1f 77 ad 10 df 19 e3 78 1c 9a da 2a 39 bd 33 8c f6 a7 a8 ca 39 d5 a0 22 26 7c c1 ba fd 34 e2 b3 7a ae c5 99 df fa 1b 69 c6 f4 eb 10 96 f8 d8 b7 61 91 9f c6 ab aa 03 dc d0 ef 53 03 00 8b dc e1 07 eb c5 a9 77 49 4f 88 5b c1 a0 1c 96 00 10 d6 4f 9d de 94 e3 Data Ascii: f9o&aRj>3LKR[H7{o=xB!w{{hV>7Bqnh1$^!~1DB3Y\{qO@2Y@L)a5eK{^rCp^>ou.wx939"&\|4ziaSwIO[O
2025-03-14 09:04:38 UTC	16384	IN	Data Raw: 8c cd d6 7f 7d 49 2b 03 11 1b 3a 36 b4 f6 0d d5 bc 14 55 2a ab 02 b6 6d a8 81 ca 08 22 77 65 e5 4a 3d 37 1e cd 18 26 57 54 5d 10 a7 3e a0 ea b5 ad 52 4d e5 e1 8e 1e ae e9 f3 ea fd 22 ca 2a a1 ae 84 10 42 08 19 9a 96 b5 51 44 d2 33 49 59 58 9c d5 04 de 54 6a f8 89 4a b8 4b 87 90 0c 2b 79 88 ca 10 98 87 15 95 a7 01 63 d1 82 11 6b ff cc d9 2d c9 64 0b 43 5b bb 63 71 44 3a 9d d4 44 77 9c 1b 4c 42 53 78 22 84 10 42 08 21 c4 7e ee b9 67 47 9e f3 dc cf cb 37 bf 39 9a 8b f8 71 31 23 c6 5f 70 c0 9e 30 56 67 8f 17 f4 5c 07 87 af d6 33 26 d9 f0 a6 98 1d 28 d2 1d 3d 21 d3 46 50 7f 25 84 90 91 a9 5d 7e 5d 2b 03 8d 1d ad 4a 40 65 f0 9a 68 88 c4 54 1e c2 f7 d2 64 2d db 1a c9 84 aa 97 5e 40 7f 12 d6 f0 58 14 00 0b 7d 88 f0 a8 3c e6 a2 a3 ea 75 c2 75 25 84 10 42 bc 0e 04 Data Ascii: }I+:6Um"weJ=7&WT]>RM"BQD3IYXTjJK+yck-dC[cqD:DwLBSx"B!~gG79q1#_p0Vg\3&(=!FP%]~]+J@ehTd-^@X}<uu%B
2025-03-14 09:04:38 UTC	16384	IN	Data Raw: 67 9f f0 32 7e ec 31 6b c4 5f 77 a5 7f ae aa 0e 9e 60 10 d2 f9 64 2f f6 95 65 b6 69 9d 35 79 b1 8b 0b 49 ac 15 3f 5c b4 72 fd 41 b3 a2 1f 42 fc 2f 7d e3 83 76 d5 57 3e 5c a5 b8 c8 f8 87 6f 37 bb f5 db ab 03 21 c4 6e 41 22 bc 10 db 10 84 f0 bc 3e 3a a2 31 42 33 82 32 82 f4 de 3d 69 dd 73 84 f7 56 b3 19 62 33 21 eb 11 ca 11 ad 11 cd c9 4f f8 76 f2 f1 0d 90 c4 f0 24 c0 e3 c5 8e c0 8f a8 8d 47 3d 74 3d 0f 1e f7 08 fe 08 de b9 3c 84 f2 5a c1 7a e9 65 08 ef 69 dd f6 b4 36 3c e5 65 11 3e 0b e9 bd 6a ed 79 3c e1 db 9e 9f 36 20 e4 23 fe b7 dc 86 55 af 87 f5 e5 b1 91 f6 24 0f fb 51 cc 3e 40 44 c7 63 9d 63 ca 46 3c 27 cd ca 4a d7 a6 7c 0b 5c c3 13 1f 3b 69 2b 13 01 68 0f fb d1 3e b7 35 cc 75 f0 c2 c7 e3 9d d0 f8 88 f4 7c d8 a7 4e 42 e8 33 b1 81 7e c1 3b 9e 7a b0 5b Data Ascii: g2~1k_w`d/ei5yI?\rAB/}vW>\o7!nA">:1B32=isVb3!Ov$G=t=<Zzei6<e>jy<6 #U$Q>@DccF<'J\|\;i+h>5u\|NB3~;z[
2025-03-14 09:04:39 UTC	10399	IN	Data Raw: 9a 64 4f fb ea b5 e4 21 8d 2d 4c 0a c8 93 07 c8 b3 f1 9e a0 1a f2 52 37 f5 92 96 f3 88 f1 31 1e f6 ff 52 58 fb 24 c0 e7 31 72 16 4d 38 a6 3c fa 82 7b 92 fb 00 3b 68 53 f2 ac 1e 44 19 31 7d c1 b3 13 c2 1c 71 3d d6 65 8f f6 b2 7e 7a 3f de 43 90 8f 3c 44 a5 0b 7b bc 9f b8 6f 21 f8 7b a5 c9 43 3e 2d 47 80 3d 4c 66 e0 9e 61 33 63 7b ca 8a b1 bd a7 a5 ae 7c af ba a4 f1 fe 89 fb e4 f9 38 9f 3d cf 29 9f 3c 08 ec ec 33 91 83 67 95 7c f4 29 cf 25 ef 0c 62 49 05 bf 0e e4 af bb 0d f4 06 69 e8 73 da 84 90 cf 3d 44 a0 c7 2b 9e 07 20 a7 8b fb e0 fb 7c 10 cc 79 a6 b8 0f 3c 0f 5c a7 0d 84 7a 67 1f 31 3c fa d5 db 43 df d2 2e da 3d d1 4e 13 34 38 1f 78 e2 f4 bc 56 13 20 ca e4 e9 8e c7 7d 44 5b f0 fb ce fd 60 c9 01 da 88 4d d4 9f fb 9b be 26 22 04 4b 3d 2c 57 91 00 a9 9b 67 Data Ascii: dO!-LR71RX$1rM8<{;hSD1}q=e~z?C<D{o!{C>-G=Lfa3c{\|8=)<3g\|)%bIis=D+ \|y<\zg1<C.=N48xV }D[`M&"K=,Wg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49736	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:38 UTC	599	OUT	GET /bc/js/fc_modal.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:38 UTC	297	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 6969 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 97 Date: Fri, 14 Mar 2025 09:04:38 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:18:20 GMT ETag: "1b39-5f651c2878b00" Accept-Ranges: bytes
2025-03-14 09:04:38 UTC	6969	IN	Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 6b 65 79 64 6f 77 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 69 66 20 28 65 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 32 37 29 20 7b 0a 20 20 20 20 6a 51 75 65 72 79 28 27 2e 66 63 5f 63 6c 6f 73 65 2c 20 2e 63 6c 6f 73 65 27 29 2e 63 6c 69 63 6b 28 29 0a 20 20 7d 0a 7d 29 0a 0a 6a 51 75 65 72 79 28 27 62 6f 64 79 27 29 2e 6f 6e 28 27 63 6c 69 63 6b 20 66 6f 63 75 73 20 74 6f 75 63 68 73 74 61 72 74 27 2c 20 27 2e 66 63 5f 63 6c 6f 73 65 2c 20 2e 63 6c 6f 73 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 76 61 72 20 69 64 65 6e 74 69 66 69 65 72 20 3d 20 6a 51 75 65 72 79 Data Ascii: jQuery(document).ready(function () { jQuery(document).keydown(function(e) { if (e.keyCode === 27) { jQuery('.fc_close, .close').click() }})jQuery('body').on('click focus touchstart', '.fc_close, .close', function() { var identifier = jQuery

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49735	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:38 UTC	602	OUT	GET /bc/js/tooltip.min.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:38 UTC	297	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 8171 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 96 Date: Fri, 14 Mar 2025 09:04:38 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:18:20 GMT ETag: "1feb-5f651c2878b00" Accept-Ranges: bytes
2025-03-14 09:04:38 UTC	8171	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 0a 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 Data Ascii: /! Bootstrap v3.0.0 * * Copyright 2013 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. */+function(a){"use str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49732	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:38 UTC	599	OUT	GET /bc/js/core.min.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:38 UTC	298	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 21440 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 95 Date: Fri, 14 Mar 2025 09:04:38 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:18:20 GMT ETag: "53c0-5f651c2878b00" Accept-Ranges: bytes
2025-03-14 09:04:38 UTC	16086	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2025-03-14 09:04:38 UTC	5354	IN	Data Raw: 6e 28 74 29 7b 74 2e 74 61 72 67 65 74 3d 3d 3d 65 26 26 74 68 69 73 2e 64 65 73 74 72 6f 79 28 29 7d 7d 29 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 78 28 65 2e 73 74 79 6c 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 75 6d 65 6e 74 7c 7c 65 29 2c 74 68 69 73 2e 77 69 6e 64 6f 77 3d 78 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 78 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 74 68 69 73 2e 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 29 2c 74 29 2c 74 68 69 73 2e 5f 63 72 65 61 74 65 28 29 Data Ascii: n(t){t.target===e&&this.destroy()}}),this.document=x(e.style?e.ownerDocument:e.document\|\|e),this.window=x(this.document[0].defaultView\|\|this.document[0].parentWindow)),this.options=x.widget.extend({},this.options,this._getCreateOptions(),t),this._create()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49737	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:38 UTC	600	OUT	GET /bc/js/mouse.min.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:38 UTC	296	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3402 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 94 Date: Fri, 14 Mar 2025 09:04:38 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:18:20 GMT ETag: "d4a-5f651c2878b00" Accept-Ranges: bytes
2025-03-14 09:04:38 UTC	3402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 4d 6f 75 73 65 20 31 2e 31 33 2e 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 Data Ascii: /! jQuery UI Mouse 1.13.2 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"use strict";"function"==typeof define&&define.amd?define(["jque

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49738	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:39 UTC	599	OUT	GET /bc/js/form.min.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:39 UTC	298	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 58746 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:39 GMT Server: Apache Last-Modified: Thu, 09 Mar 2023 10:43:12 GMT ETag: "e57a-5f6754fae9000" Accept-Ranges: bytes
2025-03-14 09:04:39 UTC	16086	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 0a 69 66 28 61 5b 72 5d 29 72 65 74 75 72 6e 20 61 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 61 5b 72 5d 3d 7b 0a 65 78 70 6f 72 74 73 3a 7b 0a 7d 0a 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 0a 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 0a 76 61 72 20 61 3d 7b 0a 7d 0a 3b 72 65 74 75 72 6e 20 74 2e 6d 3d 65 2c 74 2e 63 3d 61 2c 74 2e 70 3d 22 22 2c 74 28 30 29 7d 0a 28 5b 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b Data Ascii: !function(e){function t(r){if(a[r])return a[r].exports;var i=a[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,t),i.loaded=!0,i.exports}var a={};return t.m=e,t.c=a,t.p="",t(0)}([function(module,exports,__webpack_require__){
2025-03-14 09:04:40 UTC	16384	IN	Data Raw: 68 69 64 64 65 6e 22 3d 3d 3d 6a 51 75 65 72 79 28 22 23 62 69 6e 64 2d 6d 61 74 68 2d 22 2b 66 6f 72 6d 75 6c 61 2e 69 64 65 6e 74 69 66 69 65 72 29 2e 70 72 6f 70 28 22 74 79 70 65 22 29 3f 6a 51 75 65 72 79 28 22 23 62 69 6e 64 2d 6d 61 74 68 2d 22 2b 66 6f 72 6d 75 6c 61 2e 69 64 65 6e 74 69 66 69 65 72 29 2e 76 61 6c 28 6d 61 74 68 52 65 73 75 6c 74 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 3a 6a 51 75 65 72 79 28 22 2e 66 63 2d 66 6f 72 6d 2e 73 70 69 6e 2d 74 72 75 65 22 29 2e 6c 65 6e 67 74 68 3f 5f 68 65 6c 70 65 72 73 32 5b 22 64 65 66 61 75 6c 74 22 5d 2e 73 70 69 6e 54 6f 28 22 23 62 69 6e 64 2d 6d 61 74 68 2d 22 2b 66 6f 72 6d 75 6c 61 2e 69 64 65 6e 74 69 66 69 65 72 2c 6d 61 74 68 52 65 73 75 6c 74 2c 74 68 6f 75 73 61 6e 64 Data Ascii: hidden"===jQuery("#bind-math-"+formula.identifier).prop("type")?jQuery("#bind-math-"+formula.identifier).val(mathResult).trigger("change"):jQuery(".fc-form.spin-true").length?_helpers2["default"].spinTo("#bind-math-"+formula.identifier,mathResult,thousand
2025-03-14 09:04:40 UTC	16384	IN	Data Raw: 6c 61 73 73 28 22 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 22 29 2c 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 66 63 2d 74 72 69 67 67 65 72 2d 63 6c 6f 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 6a 51 75 65 72 79 28 22 2e 66 63 2d 73 74 69 63 6b 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 6a 51 75 65 72 79 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 73 68 6f 77 22 29 26 26 6a 51 75 65 72 79 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 66 63 2d 73 74 69 63 6b 79 22 5d 27 29 2e 74 72 69 67 67 65 72 28 22 63 6c 69 63 6b 22 29 7d 0a 29 7d 0a 29 2c 6a 51 75 65 72 79 28 22 2e 66 6f 72 6d 2d 65 6c 65 6d 65 6e 74 2e 64 65 66 61 75 Data Ascii: lass("formcraft-css"),jQuery("body").on("click",".fc-trigger-close",function(){jQuery(".fc-sticky").each(function(){jQuery(this).hasClass("show")&&jQuery(this).parent().find('[data-toggle="fc-sticky"]').trigger("click")})}),jQuery(".form-element.defau
2025-03-14 09:04:40 UTC	9892	IN	Data Raw: 70 7c 73 7c 74 29 7c 74 70 29 7c 68 75 28 61 77 7c 74 63 29 7c 69 5c 2d 28 32 30 7c 67 6f 7c 6d 61 29 7c 69 32 33 30 7c 69 61 63 28 20 7c 5c 2d 7c 5c 2f 29 7c 69 62 72 6f 7c 69 64 65 61 7c 69 67 30 31 7c 69 6b 6f 6d 7c 69 6d 31 6b 7c 69 6e 6e 6f 7c 69 70 61 71 7c 69 72 69 73 7c 6a 61 28 74 7c 76 29 61 7c 6a 62 72 6f 7c 6a 65 6d 75 7c 6a 69 67 73 7c 6b 64 64 69 7c 6b 65 6a 69 7c 6b 67 74 28 20 7c 5c 2f 29 7c 6b 6c 6f 6e 7c 6b 70 74 20 7c 6b 77 63 5c 2d 7c 6b 79 6f 28 63 7c 6b 29 7c 6c 65 28 6e 6f 7c 78 69 29 7c 6c 67 28 20 67 7c 5c 2f 28 6b 7c 6c 7c 75 29 7c 35 30 7c 35 34 7c 5c 2d 5b 61 2d 77 5d 29 7c 6c 69 62 77 7c 6c 79 6e 78 7c 6d 31 5c 2d 77 7c 6d 33 67 61 7c 6d 35 30 5c 2f 7c 6d 61 28 74 65 7c 75 69 7c 78 6f 29 7c 6d 63 28 30 31 7c 32 31 7c 63 61 29 Data Ascii: p\|s\|t)\|tp)\|hu(aw\|tc)\|i\-(20\|go\|ma)\|i230\|iac( \|\-\|\/)\|ibro\|idea\|ig01\|ikom\|im1k\|inno\|ipaq\|iris\|ja(t\|v)a\|jbro\|jemu\|jigs\|kddi\|keji\|kgt( \|\/)\|klon\|kpt \|kwc\-\|kyo(c\|k)\|le(no\|xi)\|lg( g\|\/(k\|l\|u)\|50\|54\|\-[a-w])\|libw\|lynx\|m1\-w\|m3ga\|m50\/\|ma(te\|ui\|xo)\|mc(01\|21\|ca)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49739	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:39 UTC	601	OUT	GET /bc/js/toastr.min.js HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:39 UTC	297	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 4321 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:39 GMT Server: Apache Last-Modified: Tue, 07 Mar 2023 16:18:20 GMT ETag: "10e1-5f651c2878b00" Accept-Ranges: bytes
2025-03-14 09:04:39 UTC	4321	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 28 7b 74 79 70 65 3a 4f 2e 65 72 72 6f 72 2c 69 63 6f 6e 43 6c 61 73 73 3a 67 28 29 2e 69 63 6f 6e 43 6c 61 73 73 65 73 2e 65 72 72 6f 72 2c 6d 65 73 73 61 67 65 3a 65 2c 6f 70 74 69 6f 6e 73 4f 76 65 72 72 69 64 65 3a 6e 2c 74 69 74 6c 65 3a 74 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 67 28 29 29 2c 76 3d 65 28 22 23 22 2b 74 2e 63 6f 6e 74 61 69 6e 65 72 49 64 29 2c 76 2e 6c 65 6e 67 74 68 3f 76 3a 28 6e 26 26 28 76 3d 63 28 74 29 29 2c 76 29 7d 66 75 6e 63 Data Ascii: !function(e){e(["jquery"],function(e){return function(){function t(e,t,n){return f({type:O.error,iconClass:g().iconClasses.error,message:e,optionsOverride:n,title:t})}function n(t,n){return t\|\|(t=g()),v=e("#"+t.containerId),v.length?v:(n&&(v=c(t)),v)}func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49740	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:39 UTC	429	OUT	GET /bc/images/bg.png HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:40 UTC	294	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 124793 Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 97 Date: Fri, 14 Mar 2025 09:04:40 GMT Server: Apache Last-Modified: Wed, 08 Mar 2023 13:57:02 GMT ETag: "1e779-5f663e70ae780" Accept-Ranges: bytes
2025-03-14 09:04:40 UTC	16090	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 e1 00 00 03 20 08 06 00 00 00 fc d4 10 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 ff a5 49 44 41 54 78 5e ec fd 69 8c 64 6b 9a 1f f6 bd b9 46 e4 9e 59 eb ad be 4b 77 cf 70 66 48 6a 38 43 d2 86 34 94 05 91 b0 20 ca 16 01 01 fa 60 c2 90 60 8b 00 0d 89 b2 3f 08 b2 04 43 82 16 c0 32 44 c9 b2 47 a2 05 98 b6 01 ed a2 64 79 a3 64 43 d4 42 c9 12 09 6b a1 69 8a 64 73 7a ba a7 bb ef d2 75 eb 56 d7 ad 2d f7 8c 35 23 cb f1 9c 3c 71 2b 2b 2b 97 c8 cc 13 91 27 22 7e bf 8b 40 9e 13 b7 72 3b 19 99 71 e2 fc df e7 79 a6 de 74 25 00 00 00 00 00 00 00 e0 c6 a6 f3 b7 00 00 00 00 00 00 00 c0 0d 09 e1 01 00 Data Ascii: PNGIHDR usRGBgAMAapHYs+IDATx^idkFYKwpfHj8C4 ``?C2DGdydCBkidszuV-5#<q+++'"~@r;qyt%
2025-03-14 09:04:40 UTC	16384	IN	Data Raw: bb b5 da d9 f3 4f cf d1 d1 e0 5e f3 9e 5c 7c 7c d3 85 c8 71 4e 3e d3 bd c5 4c ef 61 07 9a 27 8f 5d 11 d7 08 ce 3b 16 57 bd bc 79 fc 61 2e ff 58 b1 7d 9d e3 3f 37 37 9b 1d f3 f8 3b 74 d3 9f df 75 44 35 fc 61 a7 d3 3d ee 37 9f c9 7f fa 78 0c 52 1c ab b8 cd 75 5f f3 cf 76 9f a3 87 bd 68 a4 5f 42 78 00 a0 1f 42 78 a0 50 02 78 86 21 5a d3 2f 2e de ce c5 0c ae 27 2e fc 45 9b d8 b8 f0 07 d0 73 3a 60 ef 1c 1d a5 cd ad bd b8 c2 9b 6a f5 86 59 ec 0c 84 f6 f3 93 49 bb fa f2 2b 73 08 df b3 bb b3 9f 05 ca a3 66 61 b1 da 7d fd 74 bb 8b 62 47 f5 d8 5d 57 19 8e 79 1c ef 38 ee a3 68 b5 fb f7 3a 16 32 94 95 10 1e 00 e8 87 10 1e 28 8c 00 9e 61 8a 50 37 66 c5 c7 5b 46 47 b5 32 97 36 36 56 d2 7c 89 2f a8 00 c5 38 1d b0 1f 75 5f 76 bc de 3c 6e 8d 5a ab 45 e0 ee 65 08 c3 b7 b4 Data Ascii: O^\\|\|qN>La'];Wya.X}?77;tuD5a=7xRu_vh_BxBxPx!Z/.'.Es:`jYI+sfa}tbG]Wy8h:2(aP7f[FG266V\|/8u_v<nZEe
2025-03-14 09:04:40 UTC	16384	IN	Data Raw: 9d 9d 03 b3 f4 18 6b ff d4 3f f6 ef a4 ff fa bf f8 51 be 77 b1 ff f5 ff ee ef 49 bf f2 bb bf 93 ef 8d be 38 51 b1 62 7f 7c dd 7f b0 91 6f 1d ab 1d 34 d2 c1 41 3d df a3 1f b1 92 76 7d 63 25 df 3b b6 bd b5 97 bd a8 a0 5c ee dc 5d cb b7 6e 4f 5c 7c 9d 9e b9 fd b5 bd af 5f 6d e7 5b 29 ad ad 2e a5 f5 b5 a5 7c ef 62 8f 9f bc c8 de f6 fb 3e cf 5f 6c 75 5f 7c 1e b7 df 8e df 95 d5 b5 e5 6c fb a6 e2 f7 2b 2a 8b 7b 1e 3e 58 ef eb c2 76 bc 10 7e fe e2 f8 7b ef f7 7d 7a df 73 58 58 ac 76 5f bc 57 f3 bd 9b a9 d5 1a a9 de bd f5 7c fb e3 07 f9 d6 c5 b6 bb e7 dd 3b bb 07 d9 76 3f ef 73 f2 7b 0e f1 33 d0 0e 77 38 e2 f5 91 0a f8 d1 b3 d2 fd fb 36 3f ef dc b7 08 f1 f8 2f fa 7c e8 2a cf 59 57 31 a8 bf f5 d7 75 d3 63 17 8b 15 1e 9e 3a cf 1f 94 68 bd fa e4 e9 cb 7c ef 7a ca 70 Data Ascii: k?QwI8Qb\|o4A=v}c%;\]nO\\|_m[).\|b>_lu_\|l+{>Xv~{}zsXXv_W\|;v?s{3w86?/\|YW1uc:h\|zp
2025-03-14 09:04:40 UTC	16384	IN	Data Raw: 6e 7c ef fe a6 fc f3 27 87 8b 0f 56 cc e5 64 f3 f4 83 92 df d9 91 6a b9 2c ef 7a f7 e3 f5 77 5a 6c ac 6f eb b9 ee 5c 78 64 45 cf d9 4f 36 27 b2 93 83 1b 7a 91 a5 f9 80 dc 7b bc 29 85 92 4a 45 f5 66 33 28 fb 96 9a 72 c5 05 6b ad 0f bb 98 48 24 2c b3 73 69 bd 74 9e 7e e7 74 14 ea 8d 86 14 cb 35 09 05 03 92 88 45 f4 ad ee a4 52 ad 4b 45 dd ab d1 70 48 a2 ea be b3 12 1c 03 1c 8b 76 8a 85 92 14 3a 56 d2 f5 3a 2f 76 33 e8 1e 23 84 f8 97 a5 e5 79 3d 67 3f 65 35 10 cc e5 b8 50 8d 10 42 88 b7 88 27 62 92 4a 25 f4 12 e9 45 ad 52 95 78 dc da f1 24 71 3f 05 d5 bf 8b 46 dd 3d d6 27 84 10 42 c6 e1 ee bb 8e e9 39 ef 00 4d 29 9d 4e 48 10 16 8f 64 6c e2 b1 88 ac ae 2c e8 25 f7 e1 6b 11 3e 93 2d c8 d6 76 4e 2f 91 7e f8 5d 84 87 d0 8e 04 e1 bd 56 6b 48 a3 43 70 b3 82 50 28 Data Ascii: n\|'Vdj,zwZlo\xdEO6'z{)JEf3(rkH$,sit~t5ERKEpHv:V:/v3#y=g?e5PB'bJ%ERx$q?F='B9M)NHdl,%k>-vN/~]VkHCpP(
2025-03-14 09:04:40 UTC	16384	IN	Data Raw: f2 85 a2 66 39 6f 26 61 82 a2 52 a9 6a 09 16 0c dd 3e 33 4c 2a 14 4b 52 ad d5 ba d6 ad 5b c2 e4 48 b7 ef 19 37 e1 7b bb ed 6f e8 a4 8e 3d ce 1b 85 78 42 08 21 84 10 77 10 0e 7b 7b f2 d4 8d 68 56 be 3e 19 37 1b 42 0e 71 86 6e de 68 31 96 9d 24 9d 5e d0 8c 18 ef c3 00 21 1e e1 7e da 31 44 42 33 96 87 c4 59 d2 c9 86 5c 7b e5 f0 a2 94 1d dc 71 4f 40 32 59 bd 40 4c d1 29 c4 0f 0b 16 c9 90 c1 f8 cd db cd b8 f8 a1 bf 83 b9 e3 61 35 65 4b 7b cd 5e 72 43 df 09 dc d2 13 f3 70 f5 f3 5e 0c 01 3e 9f 6f 75 2e ff f8 ad 1f 77 ad 10 df 19 e3 78 1c 9a da 2a 39 bd 33 8c f6 a7 a8 ca 39 d5 a0 22 26 7c c1 ba fd 34 e2 b3 7a ae c5 99 df fa 1b 69 c6 f4 eb 10 96 f8 d8 b7 61 91 9f c6 ab aa 03 dc d0 ef 53 03 00 8b dc e1 07 eb c5 a9 77 49 4f 88 5b c1 a0 1c 96 00 10 d6 4f 9d de 94 e3 Data Ascii: f9o&aRj>3LKR[H7{o=xB!w{{hV>7Bqnh1$^!~1DB3Y\{qO@2Y@L)a5eK{^rCp^>ou.wx939"&\|4ziaSwIO[O
2025-03-14 09:04:40 UTC	16384	IN	Data Raw: 8c cd d6 7f 7d 49 2b 03 11 1b 3a 36 b4 f6 0d d5 bc 14 55 2a ab 02 b6 6d a8 81 ca 08 22 77 65 e5 4a 3d 37 1e cd 18 26 57 54 5d 10 a7 3e a0 ea b5 ad 52 4d e5 e1 8e 1e ae e9 f3 ea fd 22 ca 2a a1 ae 84 10 42 08 19 9a 96 b5 51 44 d2 33 49 59 58 9c d5 04 de 54 6a f8 89 4a b8 4b 87 90 0c 2b 79 88 ca 10 98 87 15 95 a7 01 63 d1 82 11 6b ff cc d9 2d c9 64 0b 43 5b bb 63 71 44 3a 9d d4 44 77 9c 1b 4c 42 53 78 22 84 10 42 08 21 c4 7e ee b9 67 47 9e f3 dc cf cb 37 bf 39 9a 8b f8 71 31 23 c6 5f 70 c0 9e 30 56 67 8f 17 f4 5c 07 87 af d6 33 26 d9 f0 a6 98 1d 28 d2 1d 3d 21 d3 46 50 7f 25 84 90 91 a9 5d 7e 5d 2b 03 8d 1d ad 4a 40 65 f0 9a 68 88 c4 54 1e c2 f7 d2 64 2d db 1a c9 84 aa 97 5e 40 7f 12 d6 f0 58 14 00 0b 7d 88 f0 a8 3c e6 a2 a3 ea 75 c2 75 25 84 10 42 bc 0e 04 Data Ascii: }I+:6Um"weJ=7&WT]>RM"BQD3IYXTjJK+yck-dC[cqD:DwLBSx"B!~gG79q1#_p0Vg\3&(=!FP%]~]+J@ehTd-^@X}<uu%B
2025-03-14 09:04:40 UTC	16384	IN	Data Raw: 67 9f f0 32 7e ec 31 6b c4 5f 77 a5 7f ae aa 0e 9e 60 10 d2 f9 64 2f f6 95 65 b6 69 9d 35 79 b1 8b 0b 49 ac 15 3f 5c b4 72 fd 41 b3 a2 1f 42 fc 2f 7d e3 83 76 d5 57 3e 5c a5 b8 c8 f8 87 6f 37 bb f5 db ab 03 21 c4 6e 41 22 bc 10 db 10 84 f0 bc 3e 3a a2 31 42 33 82 32 82 f4 de 3d 69 dd 73 84 f7 56 b3 19 62 33 21 eb 11 ca 11 ad 11 cd c9 4f f8 76 f2 f1 0d 90 c4 f0 24 c0 e3 c5 8e c0 8f a8 8d 47 3d 74 3d 0f 1e f7 08 fe 08 de b9 3c 84 f2 5a c1 7a e9 65 08 ef 69 dd f6 b4 36 3c e5 65 11 3e 0b e9 bd 6a ed 79 3c e1 db 9e 9f 36 20 e4 23 fe b7 dc 86 55 af 87 f5 e5 b1 91 f6 24 0f fb 51 cc 3e 40 44 c7 63 9d 63 ca 46 3c 27 cd ca 4a d7 a6 7c 0b 5c c3 13 1f 3b 69 2b 13 01 68 0f fb d1 3e b7 35 cc 75 f0 c2 c7 e3 9d d0 f8 88 f4 7c d8 a7 4e 42 e8 33 b1 81 7e c1 3b 9e 7a b0 5b Data Ascii: g2~1k_w`d/ei5yI?\rAB/}vW>\o7!nA">:1B32=isVb3!Ov$G=t=<Zzei6<e>jy<6 #U$Q>@DccF<'J\|\;i+h>5u\|NB3~;z[
2025-03-14 09:04:40 UTC	10399	IN	Data Raw: 9a 64 4f fb ea b5 e4 21 8d 2d 4c 0a c8 93 07 c8 b3 f1 9e a0 1a f2 52 37 f5 92 96 f3 88 f1 31 1e f6 ff 52 58 fb 24 c0 e7 31 72 16 4d 38 a6 3c fa 82 7b 92 fb 00 3b 68 53 f2 ac 1e 44 19 31 7d c1 b3 13 c2 1c 71 3d d6 65 8f f6 b2 7e 7a 3f de 43 90 8f 3c 44 a5 0b 7b bc 9f b8 6f 21 f8 7b a5 c9 43 3e 2d 47 80 3d 4c 66 e0 9e 61 33 63 7b ca 8a b1 bd a7 a5 ae 7c af ba a4 f1 fe 89 fb e4 f9 38 9f 3d cf 29 9f 3c 08 ec ec 33 91 83 67 95 7c f4 29 cf 25 ef 0c 62 49 05 bf 0e e4 af bb 0d f4 06 69 e8 73 da 84 90 cf 3d 44 a0 c7 2b 9e 07 20 a7 8b fb e0 fb 7c 10 cc 79 a6 b8 0f 3c 0f 5c a7 0d 84 7a 67 1f 31 3c fa d5 db 43 df d2 2e da 3d d1 4e 13 34 38 1f 78 e2 f4 bc 56 13 20 ca e4 e9 8e c7 7d 44 5b f0 fb ce fd 60 c9 01 da 88 4d d4 9f fb 9b be 26 22 04 4b 3d 2c 57 91 00 a9 9b 67 Data Ascii: dO!-LR71RX$1rM8<{;hSD1}q=e~z?C<D{o!{C>-G=Lfa3c{\|8=)<3g\|)%bIis=D+ \|y<\zg1<C.=N48xV }D[`M&"K=,Wg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49742	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:58 UTC	921	OUT	POST /bc/snd/1.php HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive Content-Length: 176 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://leboncoinpaiement.tiv-fr.fr Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://leboncoinpaiement.tiv-fr.fr/bc/acceuil.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full
2025-03-14 09:04:58 UTC	176	OUT	Data Raw: 66 69 65 6c 64 31 25 35 42 25 35 44 3d 42 6f 6e 6a 6f 75 72 2b 25 32 31 26 66 69 65 6c 64 32 25 35 42 25 35 44 3d 43 6f 6e 6e 65 63 74 65 7a 2d 76 6f 75 73 2b 70 6f 75 72 2b 64 25 43 33 25 41 39 63 6f 75 76 72 69 72 2b 74 6f 75 74 65 73 2b 6e 6f 73 2b 66 6f 6e 63 74 69 6f 6e 6e 61 6c 69 74 25 43 33 25 41 39 73 2e 26 65 6d 61 69 6c 3d 6b 67 30 6e 69 73 25 34 30 74 68 69 65 65 2e 63 6f 26 70 77 64 3d 47 47 5a 58 43 25 37 42 25 35 44 52 42 59 6d 57 75 26 66 69 65 6c 64 35 3d 26 77 65 62 73 69 74 65 3d 26 66 69 65 6c 64 38 3d Data Ascii: field1%5B%5D=Bonjour+%21&field2%5B%5D=Connectez-vous+pour+d%C3%A9couvrir+toutes+nos+fonctionnalit%C3%A9s.&email=kg0nis%40thiee.co&pwd=GGZXC%7B%5DRBYmWu&field5=&website=&field8=
2025-03-14 09:04:58 UTC	390	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:04:58 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=e37c37e864e227d72e9121e5e8839ce9; path=/
2025-03-14 09:04:58 UTC	64	IN	Data Raw: 33 35 0d 0a 3c 73 63 72 69 70 74 3e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 2e 2e 2f 6c 6f 67 69 6e 73 75 63 2e 70 68 70 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 35<script>location.replace('../loginsuc.php');</script>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49743	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:04:58 UTC	804	OUT	GET /bc/loginsuc.php HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://leboncoinpaiement.tiv-fr.fr/bc/snd/1.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full; PHPSESSID=e37c37e864e227d72e9121e5e8839ce9
2025-03-14 09:04:59 UTC	216	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 98 Date: Fri, 14 Mar 2025 09:04:58 GMT Server: Apache
2025-03-14 09:04:59 UTC	16168	IN	Data Raw: 35 37 38 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b Data Ascii: 5789<!DOCTYPE html><html lang="fr-FR"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https:///xmlrpc.php"><script type="text/javascript">document.documentElement.className = 'js';
2025-03-14 09:04:59 UTC	6254	IN	Data Raw: 70 62 5f 72 6f 77 5f 66 75 6c 6c 77 69 64 74 68 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 34 20 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 30 20 20 65 74 5f 70 62 5f 63 73 73 5f 6d 69 78 5f 62 6c 65 6e 64 5f 6d 6f 64 65 5f 70 61 73 73 74 68 72 6f 75 67 68 20 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 65 6d 70 74 79 22 3e 0a 09 09 09 09 0a 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 20 3c 21 2d 2d 20 2e 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 2d 2d 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 20 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 5f 32 20 65 74 5f 70 62 5f 63 6f 6c 75 6d 6e 5f 31 20 20 65 74 5f 70 62 5f 63 73 73 5f 6d Data Ascii: pb_row_fullwidth"><div class="et_pb_column et_pb_column_1_4 et_pb_column_0 et_pb_css_mix_blend_mode_passthrough et_pb_column_empty"></div> ... .et_pb_column --><div class="et_pb_column et_pb_column_1_2 et_pb_column_1 et_pb_css_m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49746	217.160.0.155	443	2440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:05:04 UTC	806	OUT	GET /bc/billing.php HTTP/1.1 Host: leboncoinpaiement.tiv-fr.fr Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://leboncoinpaiement.tiv-fr.fr/bc/loginsuc.php Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPREFS=full; PHPSESSID=e37c37e864e227d72e9121e5e8839ce9
2025-03-14 09:05:04 UTC	216	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-WS-RateLimit-Limit: 100 X-WS-RateLimit-Remaining: 99 Date: Fri, 14 Mar 2025 09:05:04 GMT Server: Apache
2025-03-14 09:05:04 UTC	16168	IN	Data Raw: 38 38 38 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 23 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 Data Ascii: 8888<!DOCTYPE html><html lang="fr-FR"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="#xmlrpc.php"><script type="text/javascript">document.documentElement.className = 'js';</scri
2025-03-14 09:05:04 UTC	16384	IN	Data Raw: 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 76 2e 66 63 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 2c 0a 09 09 09 09 09 09 2e 66 6f 72 6d 63 72 61 66 74 2d 63 73 73 20 2e 66 63 2d 66 6f 72 6d 20 2e 66 69 65 6c 64 2d 63 6f 76 65 72 3e 64 69 76 2e 66 75 6c 6c 20 68 72 0a 09 09 09 09 09 09 7b 0a 09 09 09 09 09 09 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 62 37 37 64 31 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 23 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 76 2e 66 63 2d 64 61 74 65 70 69 63 6b 65 72 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 3a 68 6f 76 65 72 2c 0a 09 09 09 09 09 09 23 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 76 2e 66 63 2d 64 61 74 65 70 Data Ascii: ui-datepicker-div.fc-datepicker .ui-datepicker-header,.formcraft-css .fc-form .field-cover>div.full hr{border-color: #3b77d1;}#ui-datepicker-div.fc-datepicker .ui-datepicker-prev:hover,#ui-datepicker-div.fc-datep
2025-03-14 09:05:04 UTC	2413	IN	Data Raw: 73 75 69 76 61 6e 74 73 3a 22 2c 22 63 6f 6e 74 61 63 74 5f 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 22 3a 22 56 65 75 69 6c 6c 65 7a 20 63 6f 72 72 69 67 65 72 20 6c 65 73 20 65 72 72 65 75 72 73 20 73 75 69 76 61 6e 74 65 73 20 3a 22 2c 22 69 6e 76 61 6c 69 64 22 3a 22 45 2d 6d 61 69 6c 20 6e 6f 6e 20 76 61 6c 69 64 65 22 2c 22 63 61 70 74 63 68 61 22 3a 22 43 61 70 74 63 68 61 22 2c 22 70 72 65 76 22 3a 22 50 72 5c 75 30 30 65 39 63 5c 75 30 30 65 39 64 65 6e 74 22 2c 22 70 72 65 76 69 6f 75 73 22 3a 22 50 72 5c 75 30 30 65 39 63 5c 75 30 30 65 39 64 65 6e 74 65 22 2c 22 6e 65 78 74 22 3a 22 50 72 6f 63 68 61 69 6e 65 22 2c 22 77 72 6f 6e 67 5f 63 61 70 74 63 68 61 22 3a 22 56 6f 75 73 20 61 76 65 7a 20 65 6e 74 72 5c 75 30 30 65 39 20 6c 65 20 6d 61 75 Data Ascii: suivants:","contact_error_message":"Veuillez corriger les erreurs suivantes :","invalid":"E-mail non valide","captcha":"Captcha","prev":"Pr\u00e9c\u00e9dent","previous":"Pr\u00e9c\u00e9dente","next":"Prochaine","wrong_captcha":"Vous avez entr\u00e9 le mau

Target ID:	1
Start time:	05:04:06
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:04:08
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2056,i,10459607807942073340,2968510748278308306,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:3
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	05:04:15
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://leboncoinpaiement.tiv-fr.fr/"
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://leboncoinpaiement.tiv-fr.fr/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Windows Analysis Report
https://leboncoinpaiement.tiv-fr.fr/