Edit tour

Windows Analysis Report
http://case-id-1000228256449.counselschambers.co.uk/

Overview

General Information

Sample URL:	http://case-id-1000228256449.counselschambers.co.uk/
Analysis ID:	1638244
Infos:

Detection

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,14891926459894036710,17772559713562226786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228256449.counselschambers.co.uk/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://case-id-1000228256449.counselschambers.co.uk/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://case-id-1000228256449.counselschambers.co.uk/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg	Avira URL Cloud: Label: malware
Source: https://case-id-1000228256449.counselschambers.co.uk/	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The provided URL 'case-id-1000228256449.counselschambers.co.uk' does not match the legitimate domain for Facebook., The URL contains a subdomain 'case-id-1000228256449' which is not typically associated with Facebook., The main domain 'counselschambers.co.uk' is unrelated to Facebook, indicating a potential phishing attempt., The presence of input fields for personal information such as phone number, full name, email address, and birthday is common in phishing sites attempting to harvest sensitive data. DOM: 2.1.pages.csv
Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The provided URL 'case-id-1000228256449.counselschambers.co.uk' does not match the legitimate domain for Facebook., The URL contains a subdomain 'case-id-1000228256449' which is not typical for Facebook's legitimate services., The domain 'counselschambers.co.uk' is unrelated to Facebook and suggests a potential phishing attempt., The presence of input fields for personal information such as phone number, full name, email address, and birthday is common in phishing sites attempting to harvest sensitive data. DOM: 2.2.pages.csv

AI detected suspicious Javascript

Source: 1.5..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://case-id-1000228256449.counselschambers.co.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. It appears to be collecting user IP addresses and sending encrypted data to an external server, which is highly suspicious behavior. The script also uses multiple fallback domains, further increasing the risk. While the intent is not entirely clear, the overall behavior of this script is highly concerning and warrants further investigation.

HTML page contains obfuscated javascript

Source: https://case-id-1000228256449.counselschambers.co.uk/help.html	HTTP Parser: var _0x128029=_0x3b3d;function _0x3b3d(_0x15d4a1,_0x5b219b){var _0x29e93f=_0x416c();return
Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html	HTTP Parser: var _0x58efb4=_0x136f;(function(_0x29482d,_0x453fa9){var _0x81cf80=_0x136f,_0x523557=_0x294

Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html

HTTP Parser: Number of links: 0

Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html

HTTP Parser: Title: Business Help Center | Privacy Policy does not match URL

Source: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js

HTTP Parser: ;(function (root, factory) {if (typeof exports === "object") {// commonjsmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// amddefine([], factory);}else {// global (browser)root.cryptojs = factory();}}(this, function () {/*globals window, global, require*//** * cryptojs core components. */var cryptojs = cryptojs || (function (math, undefined) { var crypto; // native crypto from window (browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // native crypto in web worker (browser) if (typeof self !== 'undefined' && self.crypto) { crypto = self.crypto; } // native crypto from worker if (typeof globalthis !== 'undefined' && globalthis.crypto) { crypto = globalthis.crypto; } // native (experimental ie 11) crypto from window (browser) if (!crypto && typeof window !== 'undefined' && window.mscrypto) { ...

Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html

HTTP Parser: <input type="password" .../> found

Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found
Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="author".. found

Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found
Source: https://case-id-1000228256449.counselschambers.co.uk/case-support.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.68:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.4:52731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.4:52730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:52732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.4:52737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.4:52739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.4:52738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.4:52741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.4:52742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:52750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.4:52752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.4:52754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:52755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.4:52760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.4:52759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:52763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:52766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:52767 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:52725 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: case-id-1000228256449.counselschambers.co.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /help.html HTTP/1.1Host: case-id-1000228256449.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index-5b6c678b.css HTTP/1.1Host: case-id-1000228256449.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://case-id-1000228256449.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228256449.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228256449.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228256449.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react/umd/react.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228256449.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228256449.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCMjRzgEIvtXOAQiB1s4BCMjczgEIiuDOAQiu5M4BCIvlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://case-id-1000228256449.counselschambers.co.uksec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1Host: case-id-1000228256449.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228256449.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /case-support.html HTTP/1.1Host: case-id-1000228256449.counselschambers.co.ukConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://case-id-1000228256449.counselschambers.co.uk/help.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228256449.counselschambers.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://case-id-1000228256449.counselschambers.co.uk/index-5b6c678b.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://case-id-1000228256449.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://case-id-1000228256449.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banner-b1482d4c.webp HTTP/1.1Host: case-id-1000228256449.counselschambers.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //json? HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ip HTTP/1.1Host: ipapi.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_79.3.dr

String found in binary or memory: /*Dirty hack for facebook big video page e.g: https://www.facebook.com/abc/videos/...*/ equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: case-id-1000228256449.counselschambers.co.uk
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: ipapi.co
Source: global traffic	DNS traffic detected: DNS query: pickoutsourcing.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io

Source: unknown

HTTP traffic detected: POST /WeatherForecast HTTP/1.1Host: pickoutsourcing.comConnection: keep-aliveContent-Length: 55sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/json; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://case-id-1000228256449.counselschambers.co.ukSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://case-id-1000228256449.counselschambers.co.uk/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top

Source: chromecache_82.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/intl-tel-input
Source: chromecache_82.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-bootstrap
Source: chromecache_82.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Source: chromecache_82.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Source: chromecache_82.3.dr, chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ef.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ef.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ef.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f5.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f5.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f5.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fd.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f4-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1eb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f6-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ee.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1e9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f1.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f4.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f7.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fc.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ec.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1ff.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1f3.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fc-1f1f8.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fd-1f1f0.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fe-1f1ea.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1e6.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1f2.svg
Source: chromecache_79.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ff-1f1fc.svg
Source: chromecache_82.3.dr, chromecache_79.3.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_67.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_76.3.dr	String found in binary or memory: https://github.com/jackocnr/intl-tel-input.git
Source: chromecache_67.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_72.3.dr, chromecache_68.3.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_77.3.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_83.3.dr	String found in binary or memory: https://tools.ietf.org/html/rfc9110#section-15.5.1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52758
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52754
Source: unknown	Network traffic detected: HTTP traffic on port 52756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52755
Source: unknown	Network traffic detected: HTTP traffic on port 52733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52753
Source: unknown	Network traffic detected: HTTP traffic on port 52771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52769
Source: unknown	Network traffic detected: HTTP traffic on port 52757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52728
Source: unknown	Network traffic detected: HTTP traffic on port 52753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52760
Source: unknown	Network traffic detected: HTTP traffic on port 52732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52766
Source: unknown	Network traffic detected: HTTP traffic on port 52736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52763
Source: unknown	Network traffic detected: HTTP traffic on port 52768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 52781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 52735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52736
Source: unknown	Network traffic detected: HTTP traffic on port 52760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52735
Source: unknown	Network traffic detected: HTTP traffic on port 52758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52739
Source: unknown	Network traffic detected: HTTP traffic on port 52754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52733
Source: unknown	Network traffic detected: HTTP traffic on port 52731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52730
Source: unknown	Network traffic detected: HTTP traffic on port 52770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52731
Source: unknown	Network traffic detected: HTTP traffic on port 52748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52780
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52748
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52781
Source: unknown	Network traffic detected: HTTP traffic on port 52738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52741
Source: unknown	Network traffic detected: HTTP traffic on port 52734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52742
Source: unknown	Network traffic detected: HTTP traffic on port 52728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52762 -> 443

Source: unknown	HTTPS traffic detected: 142.250.186.68:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.168.191:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.4:52731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.4:52730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:52732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.4:52737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.4:52739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.251.9:443 -> 192.168.2.4:52738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.234:443 -> 192.168.2.4:52741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.8.44:443 -> 192.168.2.4:52742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.9.44:443 -> 192.168.2.4:52750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.4:52752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.4:52754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:52755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.4:52760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.186.31:443 -> 192.168.2.4:52759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:52763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:52766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:52767 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5376_1197865463

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5376_1197865463

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@22/44@32/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,14891926459894036710,17772559713562226786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228256449.counselschambers.co.uk/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,14891926459894036710,17772559713562226786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://case-id-1000228256449.counselschambers.co.uk/	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label	Link
https://case-id-1000228256449.counselschambers.co.uk/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg	100%	Avira URL Cloud	malware
https://case-id-1000228256449.counselschambers.co.uk/	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
case-id-1000228256449.counselschambers.co.uk	172.67.168.191	true	true	unknown
ipapi.co	104.26.8.44	true	false	high
cdn.jsdelivr.net.cdn.cloudflare.net	104.18.186.31	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
ipinfo.io	34.117.59.81	true	false	high
www.google.com	142.250.186.68	true	false	high
pickoutsourcing.com	104.21.80.1	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://case-id-1000228256449.counselschambers.co.uk/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg	false	Avira URL Cloud: malware	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js	false		high
https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js	false		high
https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js	false		high
https://case-id-1000228256449.counselschambers.co.uk/	false	Avira URL Cloud: malware	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW	false		high
https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ipinfo.io/missingauth	chromecache_72.3.dr, chromecache_68.3.dr	false	high
https://tools.ietf.org/html/rfc9110#section-15.5.1	chromecache_83.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f4.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ed.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ed.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f4.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ea-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ee.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ed.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f2.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1e9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ec.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1eb-1f1ee.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ed.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1e9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1e8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f3.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f1.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fb-1f1fa.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1e9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1ef.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1e6.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f1-1f1f7.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e9-1f1f2.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ed-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1fb.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1f2.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1f0.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1fb.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1ec.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1f2.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f0-1f1ec.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1ee.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f4.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f5-1f1f8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e8-1f1fe.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1f5.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ec-1f1ea.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e6-1f1f4.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f9-1f1f9.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1ff.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ee-1f1f3.svg	chromecache_79.3.dr	false	high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_77.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f8-1f1fb.svg	chromecache_79.3.dr	false	high
https://getbootstrap.com/)	chromecache_67.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f3-1f1e8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f7-1f1fc.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1f2-1f1f1.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1e7-1f1f8.svg	chromecache_79.3.dr	false	high
https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1ef-1f1f2.svg	chromecache_79.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.21.70.234	unknown	United States	13335	CLOUDFLARENETUS	false
104.26.8.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
104.21.48.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.186.31	cdn.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.67.168.191	case-id-1000228256449.counselschambers.co.uk	United States	13335	CLOUDFLARENETUS	true
104.26.9.44	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.80.1	pickoutsourcing.com	United States	13335	CLOUDFLARENETUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638244
Start date and time:	2025-03-14 10:13:51 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://case-id-1000228256449.counselschambers.co.uk/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@22/44@32/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.71.84, 216.58.206.78, 142.250.184.206, 216.58.206.35, 142.250.186.174, 142.250.185.110, 142.250.185.142, 184.30.131.245, 199.232.214.172, 142.250.181.238, 142.250.184.238, 142.250.185.106, 216.58.206.74, 216.58.212.170, 216.58.206.42, 142.250.181.234, 142.250.184.234, 142.250.185.138, 142.250.186.170, 172.217.16.202, 142.250.186.138, 142.250.185.202, 172.217.18.106, 142.250.185.234, 172.217.18.10, 142.250.184.202, 142.250.185.74, 142.250.185.206, 142.250.185.131, 142.250.186.35, 23.204.23.20, 20.12.23.50
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://case-id-1000228256449.counselschambers.co.uk/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232914
Entropy (8bit):	4.979822227315486
Encrypted:	false
SSDEEP:	1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r
MD5:	FE7FDFEC700D100DC745DC64D3600CB2
SHA1:	B231651E0FD68BBD8758189FBD3642C462D34FA6
SHA-256:	7F1D37F0D90B6385354C2AC10E2BB91563C46BD7A266ED351222EBCAC8496C2A
SHA-512:	B7819649564ED5E0BC04CDF7F5777B529870E6CD7B6BCEAD219223F2A4718672AE6FA5A8CA19EBC5E08831E02A04F81D646942706D8FAD98CC73E5ABEFCFB95E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.0 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io//json?
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.99323851364312
Encrypted:	false
SSDEEP:	6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
MD5:	7225D8C283F7B303692A163301880199
SHA1:	7BF7F829E108693DB3DAD66B557EAA1DBA464D94
SHA-256:	19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
SHA-512:	05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	119175
Entropy (8bit):	5.312931607745592
Encrypted:	false
SSDEEP:	3072:rOoUFMlBxwlHb1Vjcpnd8US74ZnhA1IvUbidhmje7rP5yx60sC:ZZhAqvUbghUe7rPkkc
MD5:	365E05DCCD2211EEABA31DEFF514F5FA
SHA1:	A36F8E61ECCC12C333A44713DC4FAE6EC1548FC4
SHA-256:	150523E0558852A799AAE470EE18FDB61F89CF260EE6DA8EFD8687621156AE33
SHA-512:	F63CEC52665F84B468648C1C21AA4367724925E38C92E460851E0BCEAA9A6AAF215BBBCAD63945C7AF4A58368400F86035275E5D1C5AA308A856E79ED1B71534
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-bootstrap@next/dist/react-bootstrap.min.js
Preview:	/! For license information please see react-bootstrap.min.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["react","react-dom"],t):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var a=typeof n;if("string"===a\|\|"number"===a)e.push(n);else if(Array.isArray(n)){if(n.length){var s=o.apply(null,n);s&&e.push(s)}}else if("object"===a){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var i in n)r.call(n,i)&&n[i]&&e.push(i)}}}return e.join(" ")}e.exports?(o.default=o,e.exports=o):void 0===(n=function(){return o}.apply(t,[]))\|\|(e.expor

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
URL:	https://ipapi.co/ip
Preview:	8.46.123.189

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19157), with no line terminators
Category:	downloaded
Size (bytes):	19157
Entropy (8bit):	4.937770512209066
Encrypted:	false
SSDEEP:	192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSc:6wRWXhK6jU+4vTixaACaglSc
MD5:	6B7FB2EE130535419A67AFB198F41C2B
SHA1:	FFB8A25633C4DDEAB81D1B1742AC2FD0B442A4C6
SHA-256:	C6956E8710CF477F7014440385AE16EE4B8CC7ECFD02FDDD4D2F0C6C7FD15845
SHA-512:	CB27BFBB47A142CAD5ADF49DE9B893D7BB77F5183D90D73EBC435C09766E333D9AF8B5851AF5D49D8B96516EA96DF623D637016FF0B7F54670D9C890BF00C3BE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css
Preview:	.iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0!important;margin-bottom:0!important;padding-right:36px;margin-right:0}.iti__flag-container{position:absolute;top:0;bottom:0;right:0;padding:1px}.iti__selected-flag{z-index:1;position:relative;display:flex;align-items:center;height:100%;padding:0 6px 0 8px}.iti__arrow{margin-left:6px;width:0;height:0;border-left:3px solid transparent;border-right:3px solid transparent;border-top:4px solid #555}.iti__arrow--up{border-top:none;border-bottom:4px solid #555}.iti__country-list{position:absolute;z-index:2;list-style:none;text-align:left;padding:0;margin:0 0 0 -1px;box-shadow:1px 1px 4px rgba(0,0,0,.2);background-color:#fff;border:1px solid #ccc;white-space:nowrap;max-height:200px;overflow-y:scroll;-webkit-overflow-scrolling:touch}.iti__country-lis

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (26993)
Category:	downloaded
Size (bytes):	29519
Entropy (8bit):	5.620109327436002
Encrypted:	false
SSDEEP:	768:ewqD7GzOoS+D45YdR3QWG6UdC8OxgtmKg3vTpzaDvCY9R:4fUQWodCjgtmKgNzazCw
MD5:	F75E31308C096A103A106C4F5A5D9A66
SHA1:	B6F78285064ECDF283081606D37B643C05D58B61
SHA-256:	FD20B6E4BB5AF8690406A2DE275141EA221822BA78A99261B5412D2BA9CA217C
SHA-512:	FA04A1C81F065A83A25CDC0E9416985DD2D3899B75D08CBAC6300219A769A8CB36D1A24EA21F8F26DDDBC14540E8279F7BBC85EEF6E55FA430C976625704D61A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js
Preview:	/. International Telephone Input v17.0.19. * https://github.com/jackocnr/intl-tel-input.git. * Licensed under the MIT license. */..!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use strict";return function(){function b(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function c(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.defineProperty(a,d.key,d)}}function d(a,b,d){return b&&c(a.prototype,b),d&&c(a,d),a}for(var e=[["Afghanistan (............)","af","93"],["Albania (Shqip.ri)","al","355"],["Algeria (..........)","dz","213"],["American Samoa","as","1",5,["684"]],["Andorra","ad","376"],["Angola","ao","244"],["Anguilla","ai","1",6,["264"]],["Antigua and Barbuda","ag","1",7,["268"]],["Argentina","ar","54"],["Armenia (........)","am","374"],["Aruba","aw","297"],["Ascension I

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131835
Entropy (8bit):	5.376665898737896
Encrypted:	false
SSDEEP:	1536:C1/SrQwxn5J6IBuXZ2NInxb7w4BqZTXZlvA61i8+pxsdn9PvV6SdqbAR:755qZpAZxA61iz6Phkm
MD5:	7D4842A904E5D5D1B19240075998B111
SHA1:	FEB8DDC9D0566A4FA0971A6E1138658618CDACFE
SHA-256:	35F4F974F4B2BCD44DA73963347F8952E341F83909E4498227D4E26B98F66F0D
SHA-512:	E9AD75D3BAD3940E2062980702A6F02C0B719968A905D24572AF32E52FDA4E07B7069F95024940066D8B3BE2A0E75BCE591F49319AB53AF8E5E6DA65B8DA5379
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))})(this,function(Q,zb){function m(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function mb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function bj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	4.802436867696083
Encrypted:	false
SSDEEP:	3:PouVKQzhq4oEEtGFivYMNbPdNAOkADFoHSb5Rhy/3GXIMBWhtoAcMBcacWWGu:h4Qzhq4HEtSKYk7fWmmHS7QlMch0MWXJ
MD5:	B8F462CEDB09DF5643A7276846674FE4
SHA1:	82DDCECD5ED9A9BBBCCC19858FE9CF52C4EC3FC4
SHA-256:	6E1018597010AA20DDD8B219D623807C0BBC6A2BD4E8A916E748A3EAC0DB2A6E
SHA-512:	864B2B3F271F265CE452A00E093DFB456FF16E1F5834A830BE011FBFCE3C447EB234C7FF753BE16EF4A1B57AD17C70BC524FAAA6A8D46B782ECE5AEB4112BAC9
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228256449.counselschambers.co.uk/
Preview:	<!DOCTYPE html>..<html lang="vi">..<head>.. <meta charset="UTF-8">.. <script>.. window.location.href = "help.html";.. </script>..</head>..<body>..</body>..</html>..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2208), with CRLF line terminators
Category:	downloaded
Size (bytes):	227261
Entropy (8bit):	5.016535362134103
Encrypted:	false
SSDEEP:	1536:aZcgFTzlCTvPbT+QiT9YWBTV9hT7OcTTKbTdwCTGA6TCVOTvE/Te2nTtmBUTvGhM:9kY8W
MD5:	33DE88FD93505A3C17A0088597503FF1
SHA1:	6003D4597724708F72D0231A42A957833EF23AE1
SHA-256:	81AE6D3FCDED62CECEA0D0F94EA27C5C1AD7EAAC23F6FB61C6AF93634B359060
SHA-512:	98A49CF4124FFD074282FECACDE6FBA2E88FE591B579C9FC4D511E0017D616446D7D0BC26925D1615380618274F9AA37B16C8C82F3D11464E3E8BA86481F74AD
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228256449.counselschambers.co.uk/case-support.html
Preview:	<html lang="en">..<head>.. <meta charset="UTF-8">.. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCFqIkJhHRiyQxysK18pGhhdUSgUGSursz7mP24b5nxpnd9fT9zd3j3E53du4dDYLmBx/O3Plj7vdz5nfOuZfSlSZNmjRp/h+saroXlIP94LQrp2UItGnZzcfAcscCdRENPAa2g0PgO/A52AIWAe1GBZ8DGoAwAwGVHogssxc++gAEfgViAs6CJdcb/kUQBMKGgNBWtwjKaf5kQoH6aA4Y4ZA2uArZeqClEr4AiARYhmc8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJAVRF9VGGhQBZrulAIJnQMDPAsAsEAELKUlB4h4IRM3hJRlFHQKhBf4JQTXDts8MiM6ASB8LYJQCYYhNJ7XQx6+CWHhFopZsFhbuMxC4yqFV3GXdgqoH3yOHBYkyDq/w2j8F8vyNlOsTZiDRAalJ5KDcxYHdqkBmvtFK2rrOZ1MQmAS6FIEAcMcF8vzzqKBVUP6lmABkYiPCe8l5sYTfHB5IiR5KpbyhHXITMPE0yUL4OiAYzRBhIhCb7nzGrkzBzTqzCi8ZwRUy1lzak4LA

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	2.8553885422075336
Encrypted:	false
SSDEEP:	3:fuMEc:23c
MD5:	99C7886BEA2DE7A0101C2650904125B2
SHA1:	923B92CB8983479444E728E099B85F84A8DC1358
SHA-256:	FFF62C3400A9C4F4618583FD90966E4E5B1122239157CAA576BFD6A1FA71204D
SHA-512:	7FB99EB3F5DF99B330325BB84C3676ABFD4BA02A2F37C596FDBD717FEEEA84887522E4957D57FD2C77A6A73C56656D1B8A8D17BB28CE158CD474ECE6E71B5565
Malicious:	false
Reputation:	low
Preview:	8.46.123.189

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	198114
Entropy (8bit):	4.547483897370231
Encrypted:	false
SSDEEP:	6144:nBx4x8tgo06sGxw8nE94ltDxa6REI/eYcicDmcKCU4MJ9x8BRnE6qSVYbc4sx6t+:nBx4x8tgo06sGxw8nE94ltDxa6REI/eB
MD5:	F716A02969E459FDFC8F37DEE235E925
SHA1:	6F2BB245FEAA0997FA30B085AF0E8990D21395CC
SHA-256:	F0BDF25FDA8F9AF5920C82070775864C7E1166EB31540D030E6B80A382E39CE1
SHA-512:	3505662F3372E0BAF9413AE65EFABF5B34CC5274479AFEE7C884FF33A2F218F052F9321E47167E6106AA5B18E9469BD13104AE60F414459CFFFA92E2F35C5778
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.js
Preview:	;(function (root, factory) {..if (typeof exports === "object") {...// CommonJS...module.exports = exports = factory();..}..else if (typeof define === "function" && define.amd) {...// AMD...define([], factory);..}..else {...// Global (browser)...root.CryptoJS = factory();..}.}(this, function () {.../globals window, global, require/.../*.. CryptoJS core components... */..var CryptoJS = CryptoJS \|\| (function (Math, undefined) {... var crypto;... // Native crypto from window (Browser).. if (typeof window !== 'undefined' && window.crypto) {.. crypto = window.crypto;.. }... // Native crypto in web worker (Browser).. if (typeof self !== 'undefined' && self.crypto) {.. crypto = self.crypto;.. }... // Native crypto from worker.. if (typeof globalThis !== 'undefined' && globalThis.crypto) {.. crypto = globalThis.crypto;.. }... // Native (experimental IE 11) crypto from window (Browser).. if (!crypto && typeof window !== 'undefined' &&

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	25882
Entropy (8bit):	5.029415269944235
Encrypted:	false
SSDEEP:	384:4A2qOzG+FP/KD4KdcEO22gF+Ln1S4Fd5IcL/Ly3LFwtRFZQ7YK0su:7OG+PUOI+Ln1S4FYcL/Ly3RwtRFZQGsu
MD5:	E95835699306BA82C03CD5E63A08CCE7
SHA1:	40392030E706DFA942A34728F75953BD47FFE685
SHA-256:	0228800DE3CA222597EA71E5B2BF719441F2441EC2266A17787739A87919C138
SHA-512:	A2478675B14DD3555A579FC172A5B053F5C43E3DF7917524F8F517646DD7355BD83DEF86D4DFD903BA69B35F50A8EC5C095BBFC833CF22CF5E64F9BC20B91F97
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228256449.counselschambers.co.uk/help.html
Preview:	<html lang="en">.<head>. <meta charset="UTF-8">. <link rel="icon" type="image/svg+xml" href="data:image/png;base64,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

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	248
Entropy (8bit):	4.996608572862607
Encrypted:	false
SSDEEP:	6:Yj9K46ATx1ixqCj9pWReLVTAAEXtCDsXn/H+iig:Ys/Ex1E9pWeGADDsXnhB
MD5:	22D48EA7CCD5CF7E7675EAE759259043
SHA1:	97511B69C6FE01B75D4406C875A3BADC8927A2D2
SHA-256:	74DDB28AF18FB53D31F60B349A9D9B6AB900566B6DB1D51E7604D93EF10F5279
SHA-512:	0EA49A3969618EE8B4A44BC668248F19DF4AA9F97DF1D7585FDE944BC5D699FEEF9911AF8B725E74015E54EA0F8B366CB008CB3AC526FCCD7F9189261C5AD35F
Malicious:	false
Reputation:	low
Preview:	{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-849fcd7c01bbc34ed7dd7decf8f37777-1e83b4efa9c2b044-00"}

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2462
Entropy (8bit):	4.264309672828736
Encrypted:	false
SSDEEP:	48:C4wZlLr3y+WciBqaoW4Q9CrLHRlJfnRb8ELn9bAN:VYRr3Jd/Jr0
MD5:	D788B9231ED2028DC29245F76CF0A415
SHA1:	84B0E307EC9E553DB1B6CCA0CE7DB506672AAE4E
SHA-256:	1FECA2279A6E78133BF577B99E4F3E82896622C255D29017CEC5F5CFA93E4D16
SHA-512:	0B6FFE2A426CDD2A35ABC4ADEE091354EDA6F540A15C027B198DA4A5C2BA4C80CF5B41A2D825D81E9E00A3DF3CE1BC256488294C5A0CF9D34A047D20C24F32A8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.445 2zM18 9h18v2H18z"/><path fill="#EEE" d="M.068 27.679c.017.093.036.186.059.277.026.101.058.198.092.296.089.259.197.509.333.743L.555 29h34.89l.002-.004c.135-.233.243-.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c.025-.102.06-.199.092-.297-.034.098-.066.196-.092.297zM18 9h18c0-.233-.028-.459-.069-.68-.017-.092-.035-.184-.059-.274-.027-.103-.059-.203-.094-.302-.089-.258-.197-.507-.332-.74.001-.001 0-.003-.001-.004H18v2z"/><path fill="#3C3B6E" d="M18 5H4C1.791 5 0 6.791 0 9v10h18V5z"/><path fill="#FFF" d="M2.001 7.726l.618.449-.23

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	10751
Entropy (8bit):	5.3269914599293475
Encrypted:	false
SSDEEP:	192:kEovMTFJ8aTY0jDAyjjf8fDye7hjI6UpAe:JoeFvHcfDbhjI6G
MD5:	E91B2616629791B375867C298DC846CC
SHA1:	AA77AE4C49F525BC21DE1D04F08A5D73962C7CCE
SHA-256:	D949F1C3687AEDADCEDAC85261865F29B17CD273997E7F6B2BFC53B2F9D4C4DD
SHA-512:	415B3C2E8E3717D952B81CA469D0DBD284970CBFC16D9E7CF2EAD6542470488A1EC10BFF1308357FCE262B753BF746D9D057E115AD584905262211BEA4844A7A
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.431705709467301
Encrypted:	false
SSDEEP:	3:O9GonPL5Yn:OAMPL5Yn
MD5:	EDFAF206F17E8D7E4D6F27F33C96B48E
SHA1:	C297DB3C574D5B04330A0038F5D06F033D63731A
SHA-256:	734FD4FF7A23372A1C4B3EB543166B23A9ACFCE0A726E35E62F9466F4966355C
SHA-512:	01420F966754A6AEA6EE15BA3AFF1F72F64B26102B72FD083BC73380B5FD80D223AFB89CA935E779C0B4DA9DBE726594C40DD0ED5178CD10D899DD1EC8D2C15E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIuCT7dCxS35jJAEgUNEg_8ahIFDdYE7rESBQ2DqFs9EgUNAwLfGSEG78IkVxVKHg==?alt=proto
Preview:	CiQKBw0SD/xqGgAKBw3WBO6xGgAKBw2DqFs9GgAKBw0DAt8ZGgA=

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	downloaded
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228256449.counselschambers.co.uk/190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13509), with CRLF line terminators
Category:	downloaded
Size (bytes):	13511
Entropy (8bit):	4.942883944272427
Encrypted:	false
SSDEEP:	192:4MmQ24+k5axPxEXaC0YMUcD5vqSWgjMXoe6MUoSk:SNk5axPxEXaC/cD5S5gjMXoe6MUA
MD5:	96ECDF4FA06E0AFBDA7E293121EEECFA
SHA1:	6BAE397B359FBF59FADB416F293ED7F25679C4C7
SHA-256:	343F3A116F0963DE569D4623FDED0ED8C7F5C44D5498B1F5AFC25B2571027E96
SHA-512:	6A42A153B3B3E7159FC59518ECD72A4D0204971C954011B91549F2DFA55D4B23961FA851A48945246B0AE46D7AF236BB6B7AA260647DD1DD4F7FEE529481F0B4
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228256449.counselschambers.co.uk/index-5b6c678b.css
Preview:	.logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-reduced-motion: no-preference){a:nth-of-type(2) .logo{animation:logo-spin infinite 20s linear}}.card{padding:2em}.read-the-docs{color:#888}.banner{position:relative;padding:50px 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height:100%;width:100%}.banner-content{top:0;right:0;bottom:0;left:0;z-index:100;display:flex;position:relative;justify-content:center;align-items:center;flex-direction:column;color:#fff!important}.banner-content h5{font-size:14px;font-family:Freight Sans LF Pro Semibold,Helvetica,Arial,sans-serif;text-rendering:optimize

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5735)
Category:	downloaded
Size (bytes):	5740
Entropy (8bit):	5.81152991023761
Encrypted:	false
SSDEEP:	96:hovBlC6rgVN5I3bM10dyzrrTXQUmqYskUSWQJ3H6666OLk/ZQJWhe5nISAGt3zkF:Cv3C6rMvuOa8AU9mUSW+3H6666F/qJmj
MD5:	CABC017801A28A5ACABA2B2B9534B97D
SHA1:	4136E7CE4E78DE4FD7FDC88874B32AF6785109E5
SHA-256:	0A1EE16C5BBDD12ACD246FA000423430D9A6EAA50F25E2EA40BF5128A9F6E099
SHA-512:	B6DDDDB84BE227935F4C1D9E3A2B5B96E454DC06577D52B0DCA2481EFC6FB94B73DAED44A436A167CDB3488551273CD871224D7989B297E8496C4E87A860716C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["usaa data breach settlement claim","state farm batman commercial","san francisco 49ers","silent hill f reveal trailer","australian wombat","cubs dodgers tokyo series","warhammer 40k space marine 3","joann gift cards no longer accepted"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x175, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19448
Entropy (8bit):	7.990007419869228
Encrypted:	true
SSDEEP:	384:D2sJeZ4rJgaWjNxdBrNkuWZmX1YZ/blujDzf+0Pph4N65r5ePgM:ScorBxdBhkuWZ21mkDb+r451ePd
MD5:	33D130A638F79CA24FE5AD135106ED69
SHA1:	78B969C7F3D1054328F744B31B75E7F0B4EE1B2D
SHA-256:	B1482D4C704E1C61CDEB07B3FA9F32DA4AB26930733BB54D1F123FF2DED13BB4
SHA-512:	0A8E9163D187ED56E169806A9882289CED57ACF797DC94CFEDBC55AC480E5547A8539043EB0C8A3DBFF40F89CCE5C9967087D0DC7EBA14A1291838344D588381
Malicious:	false
Reputation:	low
URL:	https://case-id-1000228256449.counselschambers.co.uk/banner-b1482d4c.webp
Preview:	RIFF.K..WEBPVP8 .K...........>m6.H.#""$..X...gnK...l..U.+....--.;....:.mZ.r.......w.zc...u...g.._.^.=M?.:n=j?........?2.i.7...]...f.../q.......n.p..6..4C...?.O.tR....../.^.]x..C.#)..e....V2N..lz8....!...i...w.......A........6...S..{.Q5..._........z.j.T..KoU..@A...0.3=.....D.+..[p....B..;.@.7nnc&..>&...;..}...T..v..6!j.s.8d.g......7.VI.U.h.l...s..Y..B."..Ey.....~....,..99../.N.....6....w.\|DH.e.N..~...}.PVX.ll'...Y..Y..t.'u.Y.'..o...^....7.4.......z....%..R.N....5 ..rn.c.cR0..s..?&.u..0.5Y.y...O..].v.B!.$.]...o.z...&.T.../..i....U%E.....;p.CW.H..="o.v.Gpd....a.]A..$.../k_I:.........&.:...._.....qx......#H....'....S..l. .\c.7G....Z.q...apX8w...-b...y....>....2....Q.&.b..C..B..fO{S..l..g <.......$h....S...7.$.....k..r.].:x........D%...1...xzF.s........-W.s`.A.R....i/4[..2..0T..U..+.x.qx.>..\....{0.f.:..B...l.A...gjr..g.4-.a....m1.............?.j.....?g.I)......N.{<.P..Jf...~.'..z..p.Hk.7..&<H....]1.0....A..k.....7.........wz......<s...<7

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	dropped
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:14:44.714422941 CET	49680	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:14:49.043253899 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:14:49.355061054 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:14:49.964406013 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:14:51.167642117 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:14:53.730009079 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:14:54.316755056 CET	49680	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:14:57.808346987 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:14:58.120378971 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:14:58.221839905 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:14:58.221888065 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:14:58.221998930 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:14:58.222151041 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:14:58.222166061 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:14:58.542025089 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:14:58.729518890 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:14:58.856892109 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:14:58.856993914 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:14:58.858124018 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:14:58.858184099 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:14:58.858475924 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:14:58.901388884 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:14:59.932636976 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:15:00.241549015 CET	49726	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:00.241592884 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:00.241745949 CET	49726	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:00.242305994 CET	49726	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:00.242322922 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:00.481703997 CET	52725	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:00.486506939 CET	53	52725	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:00.486574888 CET	52725	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:00.491355896 CET	53	52725	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:00.709928989 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:00.710038900 CET	49726	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:00.711232901 CET	49726	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:00.711244106 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:00.711479902 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:00.712018967 CET	49726	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:00.752331018 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:00.950685024 CET	52725	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:00.955670118 CET	53	52725	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:00.955838919 CET	52725	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:01.104342937 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.104636908 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.104716063 CET	49726	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.106075048 CET	49726	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.106102943 CET	443	49726	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.192393064 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.192445993 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.192562103 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.192600012 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.192620039 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.192687988 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.192790985 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.192806005 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.192939997 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.192959070 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.650702953 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.670134068 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.672708035 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.672732115 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.673379898 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.673409939 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:01.673608065 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:01.673613071 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.082346916 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.082384109 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.082405090 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.082425117 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.082449913 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.082461119 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.082511902 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.082526922 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.082607031 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.082869053 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.083511114 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.083547115 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.083570957 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.083575964 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.083592892 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.083623886 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.086910009 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.087141037 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.087169886 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.105417013 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.105446100 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.111754894 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.111809969 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.111955881 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.112185955 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.112199068 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.114092112 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.114119053 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.114229918 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.114710093 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.114748955 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.114804029 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.115250111 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.115262032 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.115319014 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.115330935 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.135572910 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.217843056 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.217906952 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.217941046 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.217958927 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.218002081 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.218051910 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.218069077 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.218077898 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.218123913 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.218509912 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.218570948 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.218601942 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.218648911 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.218667984 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.218765020 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.218771935 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.218802929 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.219068050 CET	52728	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.219095945 CET	443	52728	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.342447996 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:15:02.480739117 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.480784893 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.480815887 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.480839968 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.480844975 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.480865002 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.480906010 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.480912924 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.481007099 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.481471062 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.481515884 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.481539965 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.481579065 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.481584072 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.481621027 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.482377052 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.482460022 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.482501030 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.487458944 CET	52727	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.487476110 CET	443	52727	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.568525076 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.568589926 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.573710918 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.573725939 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.578977108 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.579041004 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.579229116 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.579658031 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.580122948 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.580146074 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.580429077 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.580674887 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.595329046 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.595391989 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.596577883 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.596601963 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.596868038 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.597219944 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.624330044 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.624335051 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.644334078 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.675308943 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.690668106 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.690706015 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.690737009 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.690753937 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.690788031 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.690809965 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.728069067 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728142977 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728176117 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728221893 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728220940 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.728255033 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728270054 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.728827953 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728871107 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728878021 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.728885889 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728943110 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.728981018 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.728988886 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.729022980 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.729032993 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.729042053 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.729085922 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.729715109 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.741544962 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.741600990 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.741646051 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.741676092 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.741686106 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.741707087 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.741724968 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.741743088 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.741776943 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.741781950 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.741789103 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.741827965 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.741835117 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.746180058 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.746225119 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.746228933 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.746243954 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.746273994 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.762703896 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.762749910 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.762782097 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.762798071 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.762825966 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.762841940 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.763521910 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.763539076 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.763618946 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.763627052 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.763809919 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.779897928 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.779932976 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816334009 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816386938 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816389084 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.816411972 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816450119 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.816458941 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816519022 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816560984 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.816567898 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816776991 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816809893 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816818953 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.816827059 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816859007 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816899061 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816906929 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.816915989 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816936016 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.816952944 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.816992044 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.816998959 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820482969 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820521116 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820528984 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.820535898 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820574045 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820575953 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.820586920 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820631981 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.820637941 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820689917 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820734024 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820777893 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.820786953 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820826054 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820832968 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.820841074 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.820899963 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.832745075 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.832840919 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.832878113 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.832891941 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.832926035 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.832973957 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.832977057 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.832988977 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833033085 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.833040953 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833368063 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833405018 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.833410978 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833420992 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833452940 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.833473921 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833551884 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833590984 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833612919 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.833621979 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833657980 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833693981 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.833702087 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.833735943 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.834475040 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.834629059 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.834666014 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.834702015 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.834705114 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.834726095 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.834739923 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.835150957 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.835206032 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.835222006 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.848678112 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.848707914 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.848771095 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.848793030 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.848835945 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.850487947 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.850513935 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.850554943 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.850564957 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.850570917 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.850613117 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.850617886 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.850646019 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.850668907 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.850692034 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.851047039 CET	52731	443	192.168.2.4	151.101.66.137
Mar 14, 2025 10:15:02.851063013 CET	443	52731	151.101.66.137	192.168.2.4
Mar 14, 2025 10:15:02.854701996 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.854728937 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.854804993 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.855035067 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.855092049 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.855134964 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.855644941 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:02.855659962 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:02.855911016 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.855937958 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.876622915 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.876671076 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.876717091 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.876749039 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.876837969 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.904195070 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.904262066 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.904443026 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.904449940 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.904476881 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.904500961 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.904515028 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.904845953 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.904881954 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.904886007 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.904901028 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.904923916 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.904941082 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.905489922 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.905694962 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.905733109 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.905734062 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.905749083 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.905777931 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.906563997 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.906624079 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.906645060 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.906658888 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.906681061 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.906688929 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.906708002 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.907510042 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.907548904 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.907572985 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.907592058 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.907603979 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.907607079 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.907641888 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.907649994 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.907700062 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.908469915 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.908514023 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.922481060 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.922555923 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.922590017 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.922633886 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.922662020 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.922730923 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.923013926 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.923069954 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.923228979 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.923278093 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.923288107 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.923335075 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.923369884 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.923377991 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.923432112 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.924299002 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.924357891 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.924359083 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.924371004 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.924396992 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.924412012 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.924412966 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.924422979 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.924451113 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.925362110 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.925403118 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.925415039 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.925421953 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.925446033 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.926155090 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.926218987 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.926250935 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.926259041 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.926270962 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.926291943 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.926392078 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.926398993 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.926438093 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.926903009 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.926943064 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.926948071 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.926959991 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:02.926975965 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.926992893 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:02.992569923 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992645025 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.992660046 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992690086 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992712021 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992716074 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.992750883 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.992758036 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992774010 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992810011 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992810965 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.992821932 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992849112 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.992855072 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.992893934 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.992901087 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.993227005 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.993590117 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.993621111 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.993645906 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.993659973 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.993669987 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.993697882 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.994054079 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.994088888 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.994102955 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.994115114 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.994136095 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.994173050 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.994201899 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.994234085 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.994257927 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.994265079 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.994276047 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.994380951 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.995032072 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995071888 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995084047 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.995109081 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995122910 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995127916 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.995145082 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.995151043 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995165110 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995182991 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.995215893 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.995222092 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995260000 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.995920897 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995959997 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.995987892 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.996001005 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.996018887 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.996036053 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.996052027 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.996093035 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.996160984 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.996202946 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.996915102 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.996948957 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.996967077 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.996977091 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.997006893 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.997015953 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.997066975 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.997112036 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.997114897 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.997123003 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.997149944 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.997165918 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.997905016 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.997952938 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.997961044 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.997971058 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.997998953 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.998014927 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:02.998028994 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:02.998059034 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.013000011 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013056040 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013063908 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.013081074 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013119936 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.013130903 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.013269901 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013325930 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.013499022 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013536930 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013544083 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.013551950 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013577938 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.013896942 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013974905 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.013979912 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.013988972 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014014006 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.014027119 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014066935 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.014075041 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014168978 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.014537096 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014575958 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014591932 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.014606953 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014638901 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.014657021 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.014676094 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014719009 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014728069 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.014734030 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014750004 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014767885 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.014775038 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.014787912 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.015455008 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.015502930 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.015511036 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.015544891 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.015590906 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.015597105 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.015657902 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.015695095 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.015700102 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.015707016 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.015737057 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.016506910 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016568899 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.016572952 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016587019 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016621113 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016627073 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.016637087 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016659021 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016660929 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.016679049 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.016684055 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016699076 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016709089 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.016732931 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.016741037 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016815901 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.016863108 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.017656088 CET	52732	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:03.017671108 CET	443	52732	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:03.045228958 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.080739021 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.080805063 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.080825090 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.080833912 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.080867052 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.080895901 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.080903053 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.080905914 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.080921888 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.080934048 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.080950022 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.080965996 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.080976963 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.080991983 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.081058979 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.081597090 CET	52730	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.081607103 CET	443	52730	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.127585888 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.127645016 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.127846003 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.128073931 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.128113985 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.128170967 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.128282070 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.128297091 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.128437996 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.128449917 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.165260077 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.165311098 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.165405035 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.165436983 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.165452003 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.165499926 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.165849924 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.165859938 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.165946007 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.165960073 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.187745094 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.187796116 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.188035011 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.188818932 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.188832998 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.317698002 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.317980051 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.318008900 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.318156958 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.318161011 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.338435888 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.338747025 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.338769913 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.338903904 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.338910103 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.474652052 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.474715948 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.474755049 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.474790096 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.474796057 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.474809885 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.474893093 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.474942923 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.474980116 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.475018024 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.475030899 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.475040913 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.475064993 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.475135088 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.475208998 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.476509094 CET	52734	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.476525068 CET	443	52734	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.599651098 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.600063086 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.600090027 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.600251913 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.600256920 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.608831882 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:03.612437010 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.612735033 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.612771034 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.615788937 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.615804911 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.656325102 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.680378914 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:15:03.739718914 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.739773989 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.739806890 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.739835024 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.739859104 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.739864111 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.739892960 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.739911079 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.739928961 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.739950895 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.739955902 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.740566969 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.740593910 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.740649939 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.740649939 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.740657091 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.742331028 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.742394924 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.742434025 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.742455959 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.742474079 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.742512941 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.742575884 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.742583990 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.742935896 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.742940903 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.742954969 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.742996931 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.743016958 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.743025064 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.743350029 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.743680954 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.745457888 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.745501995 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.745547056 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.745565891 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.745579004 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.745615005 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.745652914 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.745673895 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.745680094 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.745701075 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.746380091 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.746416092 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.746447086 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.746515036 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.746515036 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.746521950 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.746936083 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.746969938 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.747040033 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.747051001 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.747314930 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.750209093 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.750241041 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.750439882 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.750447035 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.750560045 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.793029070 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.793056965 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.820255041 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.820339918 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.820375919 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.820431948 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.820460081 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:03.820493937 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.820600986 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:03.820679903 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.820791960 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:03.820806026 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.823709011 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.825757027 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.825803995 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:03.827799082 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.828135014 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828181028 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828258991 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828283072 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.828296900 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828342915 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828372955 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.828381062 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828804016 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828830957 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.828838110 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828870058 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828891993 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.828896046 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828928947 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828950882 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.828954935 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.828988075 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.829011917 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.829015970 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.829982996 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.830008984 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.833931923 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.833967924 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.834014893 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.834058046 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.834084034 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.834095001 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.834112883 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.834191084 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.834223986 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.834548950 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.834592104 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.835129976 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835163116 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835177898 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835274935 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835298061 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835315943 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835360050 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835382938 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835391045 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835423946 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835448980 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835464954 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835494041 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835517883 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835525990 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835571051 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835598946 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835604906 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835664988 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835690975 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835700989 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835733891 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835773945 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835807085 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835830927 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835840940 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835885048 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.835908890 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.835913897 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836004019 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836026907 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836035013 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836039066 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836060047 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836069107 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836090088 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836105108 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836139917 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836162090 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836169004 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836219072 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836245060 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836251020 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836283922 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836316109 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836324930 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836359024 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836380959 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836388111 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836414099 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836421967 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836452007 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836474895 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836478949 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836517096 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836544991 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836549997 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836597919 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836628914 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836632967 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836669922 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836693048 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836802959 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836865902 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836903095 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836929083 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836951971 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.836956024 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.836982012 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.837008953 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.839884043 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.839905024 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.842005968 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.842029095 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.842344999 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.842726946 CET	49725	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:03.842731953 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.842746973 CET	443	49725	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:03.842755079 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.843017101 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.844966888 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.845062017 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.847721100 CET	52733	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:03.847748041 CET	443	52733	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:03.877597094 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.877721071 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.878276110 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.878282070 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.878504038 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.886245966 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:03.887599945 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.887599945 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:03.887639046 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:03.887674093 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.888592005 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:03.889000893 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:03.889017105 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:03.892323017 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.892324924 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.922363043 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.922414064 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.922455072 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.922688007 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.922712088 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.922739983 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.922868967 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.922976971 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923232079 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.923248053 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923297882 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923321962 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.923333883 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923351049 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923355103 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.923413038 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923435926 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.923443079 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923527002 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923532009 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.923569918 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923576117 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923593998 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.923610926 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.923633099 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.924041986 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924122095 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.924158096 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924201012 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924222946 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.924233913 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924257994 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.924479008 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924566031 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.924575090 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924702883 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924782991 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924806118 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.924813986 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924823046 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924829006 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.924958944 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924983025 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.924988985 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.924999952 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925009012 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925029039 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925048113 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925049067 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925090075 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925626993 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925697088 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925698042 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925698996 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925705910 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925714016 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925734043 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925744057 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925744057 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925781965 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925781965 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.925786972 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925884962 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.925951004 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.926291943 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.926338911 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.926364899 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.926378012 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.926398993 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.926603079 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.926651001 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.926681042 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.926687956 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.926698923 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.926708937 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.926798105 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.926809072 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.926917076 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.927453995 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.927503109 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.927526951 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.927532911 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.927550077 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.927553892 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.927567959 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.927659988 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.927681923 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.927958012 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.928339005 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:03.934627056 CET	52736	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.934657097 CET	443	52736	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:03.969197989 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:03.987322092 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:15:04.010782957 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:04.010847092 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:04.010905027 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:04.010938883 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:04.010941982 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:04.010967970 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:04.010982037 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:04.011038065 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:04.011068106 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:04.013138056 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:04.079528093 CET	52735	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:04.079555035 CET	443	52735	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:04.210444927 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.210591078 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.210659027 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.210783958 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.210783958 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.222625017 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.222727060 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.223048925 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.223083973 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.223184109 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.226341009 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.258512020 CET	52739	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.258543968 CET	443	52739	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.259813070 CET	52737	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.259845972 CET	443	52737	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.267765999 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.267930031 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.267987013 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.268013954 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.268254995 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.282346964 CET	52738	443	192.168.2.4	157.240.251.9
Mar 14, 2025 10:15:04.282371044 CET	443	52738	157.240.251.9	192.168.2.4
Mar 14, 2025 10:15:04.282928944 CET	52742	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:04.282968998 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:04.283299923 CET	52742	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:04.283716917 CET	52742	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:04.283730984 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:04.341097116 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:15:04.341835976 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:15:04.342010975 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:15:04.347994089 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:15:04.348498106 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:15:04.348507881 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:15:04.349951982 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.350097895 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.350689888 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.350703001 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.350975990 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.351375103 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.396322012 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.444142103 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:15:04.444252014 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:15:04.444766045 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:15:04.451752901 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:15:04.489954948 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490034103 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490070105 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490103960 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490150928 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490178108 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.490202904 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490240097 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490269899 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490289927 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.490294933 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490329981 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490353107 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.490356922 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.490396976 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.497526884 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.498083115 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.543771029 CET	443	49710	204.79.197.222	192.168.2.4
Mar 14, 2025 10:15:04.544071913 CET	49710	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:15:04.575373888 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.575495005 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.575644970 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.575702906 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.575732946 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.575752020 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.575789928 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.575820923 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.575870991 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.575928926 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.575932026 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.575947046 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.576071978 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.576814890 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.576864004 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.576909065 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.576929092 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.576934099 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.577116966 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.577150106 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.577291012 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.577369928 CET	52741	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:04.577383995 CET	443	52741	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:04.590699911 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:15:04.848803997 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:04.848885059 CET	52742	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:04.850867033 CET	52742	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:04.850879908 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:04.851134062 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:04.851885080 CET	52742	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:04.858839035 CET	52747	80	192.168.2.4	142.250.184.195
Mar 14, 2025 10:15:04.863600969 CET	80	52747	142.250.184.195	192.168.2.4
Mar 14, 2025 10:15:04.863682032 CET	52747	80	192.168.2.4	142.250.184.195
Mar 14, 2025 10:15:04.863756895 CET	52747	80	192.168.2.4	142.250.184.195
Mar 14, 2025 10:15:04.868572950 CET	80	52747	142.250.184.195	192.168.2.4
Mar 14, 2025 10:15:04.896317005 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.162797928 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.162887096 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.162936926 CET	52742	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.163463116 CET	52742	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.163486004 CET	443	52742	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.164829969 CET	52748	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.164875984 CET	443	52748	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.164953947 CET	52748	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.165132046 CET	52748	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.165146112 CET	443	52748	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.507287979 CET	80	52747	142.250.184.195	192.168.2.4
Mar 14, 2025 10:15:05.514748096 CET	52747	80	192.168.2.4	142.250.184.195
Mar 14, 2025 10:15:05.519490004 CET	80	52747	142.250.184.195	192.168.2.4
Mar 14, 2025 10:15:05.698460102 CET	80	52747	142.250.184.195	192.168.2.4
Mar 14, 2025 10:15:05.713706970 CET	443	52748	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.714099884 CET	52748	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.714131117 CET	443	52748	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.714302063 CET	52748	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.714307070 CET	443	52748	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.745328903 CET	52747	80	192.168.2.4	142.250.184.195
Mar 14, 2025 10:15:05.795542955 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:15:05.914639950 CET	443	52748	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.914724112 CET	443	52748	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.914969921 CET	52748	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.916076899 CET	52748	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:05.916100025 CET	443	52748	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:05.929819107 CET	52750	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:05.929847956 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:05.930011034 CET	52750	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:05.930135012 CET	52750	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:05.930151939 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:06.503335953 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:06.503803015 CET	52750	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:06.504476070 CET	52750	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:06.504487991 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:06.504755974 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:06.505322933 CET	52750	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:06.552326918 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:06.696763039 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:06.696837902 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:06.696913004 CET	52750	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:06.855714083 CET	52750	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:06.855753899 CET	443	52750	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:07.151242971 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:15:08.151258945 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:15:08.198124886 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:15:08.258981943 CET	52752	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:08.259080887 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:08.259165049 CET	52752	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:08.259357929 CET	52752	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:08.259392977 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:08.723908901 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:08.723980904 CET	52752	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:08.725085974 CET	52752	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:08.725095987 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:08.725338936 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:08.725662947 CET	52752	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:08.768337011 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.133636951 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.133701086 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.133759022 CET	52752	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:09.134426117 CET	52752	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:09.134445906 CET	443	52752	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.135318995 CET	52753	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:09.135371923 CET	443	52753	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.135518074 CET	52753	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:09.135696888 CET	52753	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:09.135711908 CET	443	52753	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.595741987 CET	443	52753	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.596261024 CET	52753	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:09.596292019 CET	443	52753	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.596442938 CET	52753	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:09.596450090 CET	443	52753	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.998450041 CET	443	52753	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.998562098 CET	443	52753	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:09.998606920 CET	52753	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:10.000300884 CET	52753	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:10.000338078 CET	443	52753	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:10.057481050 CET	52754	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:10.057539940 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.057610989 CET	52754	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:10.057761908 CET	52754	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:10.057781935 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.509872913 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.510000944 CET	52754	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:10.510512114 CET	52754	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:10.510528088 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.510770082 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.511014938 CET	52754	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:10.552339077 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.919634104 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.919744968 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.920315027 CET	52754	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:10.921617985 CET	52754	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:10.921636105 CET	443	52754	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:10.928154945 CET	52755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:10.928185940 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:10.928251028 CET	52755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:10.928400993 CET	52755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:10.928412914 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.386490107 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.388252020 CET	52755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.395046949 CET	52755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.395057917 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.395248890 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.398541927 CET	52755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.440320969 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.519579887 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.519656897 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.519754887 CET	52755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.520011902 CET	52755	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.520026922 CET	443	52755	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.520752907 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.520788908 CET	443	52756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.520859003 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.520997047 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.521013021 CET	443	52756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.982786894 CET	443	52756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.983073950 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.983100891 CET	443	52756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:11.983225107 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:11.983231068 CET	443	52756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:12.111210108 CET	443	52756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:12.111277103 CET	443	52756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:12.111440897 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:12.111538887 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:12.111571074 CET	443	52756	35.190.80.1	192.168.2.4
Mar 14, 2025 10:15:12.111582994 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:12.111747980 CET	52756	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:15:13.013896942 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:15:16.766482115 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:15:18.938450098 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:18.938497066 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:18.938725948 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:18.938772917 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:18.939152956 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:18.939248085 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:18.939485073 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:18.939501047 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:18.939558029 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:18.939568043 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.394120932 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.394443035 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.394481897 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.394608021 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.394615889 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.434956074 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.435254097 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.435271978 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.795449018 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.795635939 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.795711994 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.795747995 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.795845985 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.795928955 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.795965910 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.795974970 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.796027899 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.796035051 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.796120882 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.796428919 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.796436071 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.799990892 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.800072908 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.800595999 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.800604105 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.800683022 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.820775986 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:19.820828915 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:19.821186066 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:19.821342945 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:19.821356058 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:19.821911097 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:19.821994066 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:19.822706938 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:19.823126078 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:19.823146105 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:19.930727005 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931159019 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931278944 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.931282997 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931313038 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931377888 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.931404114 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931560040 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931648970 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931711912 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.931729078 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931817055 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.931905985 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.932162046 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.932169914 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.932276011 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.932388067 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.932483912 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.932549000 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.932557106 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.933058977 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.933163881 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.933223963 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.933233023 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.933303118 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:19.933307886 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.933330059 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:19.933545113 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.066963911 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067039013 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067068100 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067091942 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.067099094 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067128897 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067188978 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.067439079 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067501068 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067521095 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.067533016 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067852974 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.067862988 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.067918062 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.068125010 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.068133116 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.068521023 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.068556070 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.068593979 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.068624973 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.068638086 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.068646908 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.068828106 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.069464922 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.069504023 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.069518089 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.069529057 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.069593906 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.070348024 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.070383072 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.070404053 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.070409060 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.070419073 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.070507050 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.200931072 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.201179028 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.201855898 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.201894999 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.202189922 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.202209949 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.202429056 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.202466011 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.202503920 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.202533007 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.202604055 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.202615023 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.202668905 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.203315973 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.203389883 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.203447104 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.203624010 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.203634024 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.203821898 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.204277992 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.204355955 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.204371929 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.204416990 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.204803944 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.204814911 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.204942942 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.205529928 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.205585003 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.205770969 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.205780029 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.251357079 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.278481007 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.278547049 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.278841019 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.278978109 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.278990030 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.279030085 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.279401064 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.279412985 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.279668093 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.279719114 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.279928923 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.280117989 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.324316025 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.324328899 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.335913897 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.335999012 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.336077929 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.336335897 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.336445093 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.336450100 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.336482048 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.336510897 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.336544037 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.336601973 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.336777925 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.336947918 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.337029934 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.337069035 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.337230921 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.337316990 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.337412119 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.337414980 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.337438107 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.337527990 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.337544918 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.337558985 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.337641954 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.338090897 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.338169098 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.338222980 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.338315964 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.338457108 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.338464975 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.338505983 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.338584900 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.339030981 CET	52758	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.339046001 CET	443	52758	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.409085035 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409132957 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409168959 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409198999 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409301996 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409332037 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409343958 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.409364939 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409641027 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.409648895 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409677982 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.409715891 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409779072 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.409810066 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.410219908 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.410231113 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.410998106 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.411004066 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.411593914 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.411640882 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.411787987 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.411828041 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.411850929 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.411902905 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.411910057 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.412395000 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.412439108 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.412471056 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.412501097 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.412529945 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.412893057 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.412902117 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.416160107 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.416194916 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.416243076 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.416250944 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.416328907 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.453131914 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.453140974 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.495810032 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.495848894 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.495881081 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.495915890 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.495948076 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.496500015 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.496540070 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.496573925 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.496635914 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.496704102 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.498174906 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.498311996 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.499629021 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.499666929 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.500786066 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.500878096 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.500935078 CET	52760	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.500958920 CET	443	52760	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.502460957 CET	52759	443	192.168.2.4	104.18.186.31
Mar 14, 2025 10:15:20.502481937 CET	443	52759	104.18.186.31	192.168.2.4
Mar 14, 2025 10:15:20.551095963 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:20.551140070 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:20.690912962 CET	52761	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:20.690987110 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:20.691271067 CET	52761	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:20.692384005 CET	52761	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:20.692418098 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:20.693962097 CET	52762	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:20.693996906 CET	443	52762	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:20.696898937 CET	52762	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:20.697226048 CET	52762	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:20.697240114 CET	443	52762	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:20.702351093 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:20.702394009 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:20.710202932 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:20.710743904 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:20.710760117 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.067832947 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.067886114 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.067924023 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.067960024 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.067989111 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.068020105 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.068049908 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.068078995 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.068136930 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.072660923 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:21.072695017 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.087932110 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:21.159967899 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.160036087 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.160073996 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.160162926 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.164721012 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.171113968 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:21.182737112 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.182754040 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.186110973 CET	52761	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.186156034 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.186260939 CET	52761	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.186266899 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.186315060 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.190726995 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.190740108 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.190926075 CET	52757	443	192.168.2.4	172.67.168.191
Mar 14, 2025 10:15:21.190949917 CET	443	52757	172.67.168.191	192.168.2.4
Mar 14, 2025 10:15:21.191072941 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.235284090 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.242604971 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.253284931 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:21.253336906 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:21.253443956 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:21.253758907 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:21.253772974 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:21.266536951 CET	443	52762	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:21.266839981 CET	52762	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:21.266856909 CET	443	52762	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:21.266978979 CET	52762	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:21.266984940 CET	443	52762	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:21.288321018 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.368213892 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.368311882 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.368546009 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.369450092 CET	52763	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.369469881 CET	443	52763	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.379067898 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.379128933 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.379225016 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.379385948 CET	52761	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.379890919 CET	52761	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.379913092 CET	443	52761	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.385719061 CET	52766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.385757923 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.385971069 CET	52766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.386176109 CET	52766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.386189938 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.391575098 CET	52767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.391617060 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.391863108 CET	52767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.391992092 CET	52767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.392007113 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.458534956 CET	443	52762	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:21.458635092 CET	443	52762	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:21.458689928 CET	52762	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:21.459578037 CET	52762	443	192.168.2.4	104.26.8.44
Mar 14, 2025 10:15:21.459599972 CET	443	52762	104.26.8.44	192.168.2.4
Mar 14, 2025 10:15:21.463159084 CET	52768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:21.463202953 CET	443	52768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:21.463280916 CET	52768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:21.463402987 CET	52768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:21.463413954 CET	443	52768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:21.726948977 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:21.757529020 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:21.757564068 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:21.757738113 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:21.757745028 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:21.839843988 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.841109037 CET	52766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.841588020 CET	52766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.841598988 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.841883898 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.844505072 CET	52766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.844611883 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.847259045 CET	52767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.847686052 CET	52767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.847697973 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.847954035 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.855034113 CET	52767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:21.892332077 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.896332026 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.970731974 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.970849037 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.975092888 CET	52766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.976875067 CET	52766	443	192.168.2.4	34.117.59.81
Mar 14, 2025 10:15:21.976895094 CET	443	52766	34.117.59.81	192.168.2.4
Mar 14, 2025 10:15:21.992216110 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.992274046 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.992400885 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:21.997206926 CET	52767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:22.035329103 CET	443	52768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:22.035753012 CET	52768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:22.035784960 CET	443	52768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:22.035906076 CET	52768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:22.035909891 CET	443	52768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:22.136025906 CET	52767	443	192.168.2.4	104.17.25.14
Mar 14, 2025 10:15:22.136060953 CET	443	52767	104.17.25.14	192.168.2.4
Mar 14, 2025 10:15:22.223495007 CET	443	52768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:22.223576069 CET	443	52768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:22.223634958 CET	52768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:22.224808931 CET	52768	443	192.168.2.4	104.26.9.44
Mar 14, 2025 10:15:22.224828959 CET	443	52768	104.26.9.44	192.168.2.4
Mar 14, 2025 10:15:22.287919998 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.287971020 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.287998915 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.288023949 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.288049936 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.288074970 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.288115025 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.288264990 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.288300991 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.288476944 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.288971901 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.289016962 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.289292097 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.289304018 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.329309940 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.329329014 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.376194954 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.377449989 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.377513885 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.377549887 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.377556086 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.377568007 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.377604961 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.377616882 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.377641916 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.377773046 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.377990007 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.378005028 CET	443	52765	104.21.70.234	192.168.2.4
Mar 14, 2025 10:15:22.378015995 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.379056931 CET	52765	443	192.168.2.4	104.21.70.234
Mar 14, 2025 10:15:22.614581108 CET	49681	80	192.168.2.4	2.17.190.73
Mar 14, 2025 10:15:23.702528000 CET	52769	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:23.702589989 CET	443	52769	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:23.702688932 CET	52769	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:23.726783037 CET	52769	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:23.726809025 CET	443	52769	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:24.178965092 CET	443	52769	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:24.200721025 CET	52769	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:24.200829983 CET	443	52769	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:24.200921059 CET	52769	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:24.200936079 CET	443	52769	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:24.588089943 CET	443	52769	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:24.588159084 CET	443	52769	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:24.588212967 CET	52769	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:24.589016914 CET	52769	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:24.589046955 CET	443	52769	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:24.590157032 CET	52770	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:24.590193987 CET	443	52770	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:24.590260029 CET	52770	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:24.590589046 CET	52770	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:24.590601921 CET	443	52770	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:25.056250095 CET	443	52770	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:25.056535959 CET	52770	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:25.056555033 CET	443	52770	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:25.056708097 CET	52770	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:25.056713104 CET	443	52770	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:25.483210087 CET	443	52770	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:25.483319044 CET	443	52770	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:25.483395100 CET	52770	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:25.483870983 CET	52770	443	192.168.2.4	104.21.80.1
Mar 14, 2025 10:15:25.483890057 CET	443	52770	104.21.80.1	192.168.2.4
Mar 14, 2025 10:15:25.487485886 CET	52771	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:25.487539053 CET	443	52771	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:25.487638950 CET	52771	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:25.487797022 CET	52771	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:25.487807035 CET	443	52771	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:25.977998018 CET	443	52771	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:25.978327036 CET	52771	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:25.978358030 CET	443	52771	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:25.978532076 CET	52771	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:25.978537083 CET	443	52771	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:26.406131029 CET	443	52771	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:26.406407118 CET	443	52771	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:26.406467915 CET	52771	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:26.407617092 CET	52771	443	192.168.2.4	104.21.48.1
Mar 14, 2025 10:15:26.407638073 CET	443	52771	104.21.48.1	192.168.2.4
Mar 14, 2025 10:15:58.278381109 CET	52776	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:58.278434992 CET	443	52776	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:58.278501034 CET	52776	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:58.278729916 CET	52776	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:58.278743029 CET	443	52776	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:58.908013105 CET	443	52776	142.250.186.68	192.168.2.4
Mar 14, 2025 10:15:58.908410072 CET	52776	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:15:58.908435106 CET	443	52776	142.250.186.68	192.168.2.4
Mar 14, 2025 10:16:06.355560064 CET	52747	80	192.168.2.4	142.250.184.195
Mar 14, 2025 10:16:06.361012936 CET	80	52747	142.250.184.195	192.168.2.4
Mar 14, 2025 10:16:06.361099005 CET	52747	80	192.168.2.4	142.250.184.195
Mar 14, 2025 10:16:08.824104071 CET	443	52776	142.250.186.68	192.168.2.4
Mar 14, 2025 10:16:08.824177027 CET	443	52776	142.250.186.68	192.168.2.4
Mar 14, 2025 10:16:08.824254036 CET	52776	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:16:10.794363976 CET	52776	443	192.168.2.4	142.250.186.68
Mar 14, 2025 10:16:10.794406891 CET	443	52776	142.250.186.68	192.168.2.4
Mar 14, 2025 10:16:10.934294939 CET	52780	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:10.934346914 CET	443	52780	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:10.934561014 CET	52780	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:10.934632063 CET	52780	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:10.934639931 CET	443	52780	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:11.397192001 CET	443	52780	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:11.397655964 CET	52780	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:11.397692919 CET	443	52780	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:11.397728920 CET	52780	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:11.397733927 CET	443	52780	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:11.526012897 CET	443	52780	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:11.526104927 CET	443	52780	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:11.526190996 CET	52780	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:11.526750088 CET	52780	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:11.526770115 CET	443	52780	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:11.527498007 CET	52781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:11.527544975 CET	443	52781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:11.527667046 CET	52781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:11.527904034 CET	52781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:11.527915955 CET	443	52781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:12.048583984 CET	443	52781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:12.048857927 CET	52781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:12.048886061 CET	443	52781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:12.049022913 CET	52781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:12.049036026 CET	443	52781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:12.175508976 CET	443	52781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:12.175591946 CET	443	52781	35.190.80.1	192.168.2.4
Mar 14, 2025 10:16:12.175663948 CET	52781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:12.176086903 CET	52781	443	192.168.2.4	35.190.80.1
Mar 14, 2025 10:16:12.176111937 CET	443	52781	35.190.80.1	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:14:54.483649969 CET	53	59948	1.1.1.1	192.168.2.4
Mar 14, 2025 10:14:54.485768080 CET	53	59825	1.1.1.1	192.168.2.4
Mar 14, 2025 10:14:56.089979887 CET	53	52788	1.1.1.1	192.168.2.4
Mar 14, 2025 10:14:56.249464989 CET	53	59173	1.1.1.1	192.168.2.4
Mar 14, 2025 10:14:58.213973045 CET	54248	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:14:58.214128971 CET	52253	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:14:58.220798969 CET	53	54248	1.1.1.1	192.168.2.4
Mar 14, 2025 10:14:58.220815897 CET	53	52253	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:00.180923939 CET	50459	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:00.181592941 CET	56750	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:00.190097094 CET	53	50459	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:00.192524910 CET	53	56750	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:00.228703976 CET	51231	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:00.228857994 CET	49656	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:00.239331961 CET	53	49656	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:00.239799023 CET	53	51231	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:00.481307983 CET	53	52657	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:02.103837967 CET	54125	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:02.104188919 CET	61562	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:02.106116056 CET	63880	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:02.106300116 CET	52891	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:02.107023001 CET	59618	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:02.107168913 CET	54970	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:02.110862970 CET	53	54125	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:02.111182928 CET	53	61562	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:02.113205910 CET	53	52891	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:02.113507032 CET	53	59618	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:02.113637924 CET	53	63880	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:02.113893032 CET	53	54970	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:03.129160881 CET	56891	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:03.129312992 CET	59186	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:03.135906935 CET	53	56891	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:03.136143923 CET	53	59186	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:03.871804953 CET	56958	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:03.871804953 CET	57360	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:03.882611036 CET	53	56958	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:03.884188890 CET	53	57360	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:04.259813070 CET	50745	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:04.260138035 CET	57906	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:04.273983002 CET	53	50745	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:04.273999929 CET	53	57906	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:05.921575069 CET	57857	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:05.921768904 CET	52734	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:05.928723097 CET	53	57857	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:05.929308891 CET	53	52734	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:08.233220100 CET	63805	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:08.233377934 CET	53091	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:08.245858908 CET	53	63805	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:08.258264065 CET	53	53091	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:10.019107103 CET	63209	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:10.019155979 CET	49536	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:10.032623053 CET	53	49536	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:10.050232887 CET	53	63209	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:10.921045065 CET	63604	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:10.921181917 CET	61299	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:10.927629948 CET	53	61299	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:10.927697897 CET	53	63604	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:13.404300928 CET	53	63219	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:20.692096949 CET	52440	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:20.692233086 CET	57722	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:20.698422909 CET	53	61816	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:20.698745012 CET	53	52440	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:20.699565887 CET	53	57722	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:21.377079964 CET	61093	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:21.377249002 CET	53379	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:21.383615971 CET	65039	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:21.383785009 CET	53023	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:15:21.384879112 CET	53	61093	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:21.385370970 CET	53	53379	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:21.390347958 CET	53	65039	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:21.391133070 CET	53	53023	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:32.170316935 CET	53	64588	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:54.057797909 CET	53	59124	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:54.894717932 CET	53	52983	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:56.926496029 CET	53	62261	1.1.1.1	192.168.2.4
Mar 14, 2025 10:15:57.438771009 CET	138	138	192.168.2.4	192.168.2.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 10:14:58.213973045 CET	192.168.2.4	1.1.1.1	0x799f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:14:58.214128971 CET	192.168.2.4	1.1.1.1	0x96a7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:15:00.180923939 CET	192.168.2.4	1.1.1.1	0xb647	Standard query (0)	case-id-1000228256449.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:00.181592941 CET	192.168.2.4	1.1.1.1	0xb564	Standard query (0)	case-id-1000228256449.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:15:00.228703976 CET	192.168.2.4	1.1.1.1	0xeb90	Standard query (0)	case-id-1000228256449.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:00.228857994 CET	192.168.2.4	1.1.1.1	0xdf7e	Standard query (0)	case-id-1000228256449.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:15:02.103837967 CET	192.168.2.4	1.1.1.1	0x4ed2	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.104188919 CET	192.168.2.4	1.1.1.1	0xe3a7	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Mar 14, 2025 10:15:02.106116056 CET	192.168.2.4	1.1.1.1	0x4729	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.106300116 CET	192.168.2.4	1.1.1.1	0x584d	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 14, 2025 10:15:02.107023001 CET	192.168.2.4	1.1.1.1	0xe5f5	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.107168913 CET	192.168.2.4	1.1.1.1	0x7eca	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:15:03.129160881 CET	192.168.2.4	1.1.1.1	0x1e8d	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:03.129312992 CET	192.168.2.4	1.1.1.1	0x15b3	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Mar 14, 2025 10:15:03.871804953 CET	192.168.2.4	1.1.1.1	0x659e	Standard query (0)	case-id-1000228256449.counselschambers.co.uk	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:03.871804953 CET	192.168.2.4	1.1.1.1	0x57ef	Standard query (0)	case-id-1000228256449.counselschambers.co.uk	65	IN (0x0001)	false
Mar 14, 2025 10:15:04.259813070 CET	192.168.2.4	1.1.1.1	0x6f18	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:04.260138035 CET	192.168.2.4	1.1.1.1	0x5fd5	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:15:05.921575069 CET	192.168.2.4	1.1.1.1	0x25bb	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:05.921768904 CET	192.168.2.4	1.1.1.1	0xd928	Standard query (0)	ipapi.co	65	IN (0x0001)	false
Mar 14, 2025 10:15:08.233220100 CET	192.168.2.4	1.1.1.1	0xb96	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:08.233377934 CET	192.168.2.4	1.1.1.1	0x97a8	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:15:10.019107103 CET	192.168.2.4	1.1.1.1	0xd32d	Standard query (0)	pickoutsourcing.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.019155979 CET	192.168.2.4	1.1.1.1	0xe67b	Standard query (0)	pickoutsourcing.com	65	IN (0x0001)	false
Mar 14, 2025 10:15:10.921045065 CET	192.168.2.4	1.1.1.1	0x3f71	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.921181917 CET	192.168.2.4	1.1.1.1	0x190d	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 14, 2025 10:15:20.692096949 CET	192.168.2.4	1.1.1.1	0x86ec	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:20.692233086 CET	192.168.2.4	1.1.1.1	0xf32f	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:15:21.377079964 CET	192.168.2.4	1.1.1.1	0x5548	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:21.377249002 CET	192.168.2.4	1.1.1.1	0x9ed9	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 14, 2025 10:15:21.383615971 CET	192.168.2.4	1.1.1.1	0xfd20	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:21.383785009 CET	192.168.2.4	1.1.1.1	0x25d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 10:14:58.220798969 CET	1.1.1.1	192.168.2.4	0x799f	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:14:58.220815897 CET	1.1.1.1	192.168.2.4	0x96a7	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 10:15:00.190097094 CET	1.1.1.1	192.168.2.4	0xb647	No error (0)	case-id-1000228256449.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:00.190097094 CET	1.1.1.1	192.168.2.4	0xb647	No error (0)	case-id-1000228256449.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:00.192524910 CET	1.1.1.1	192.168.2.4	0xb564	No error (0)	case-id-1000228256449.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:15:00.239331961 CET	1.1.1.1	192.168.2.4	0xdf7e	No error (0)	case-id-1000228256449.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:15:00.239799023 CET	1.1.1.1	192.168.2.4	0xeb90	No error (0)	case-id-1000228256449.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:00.239799023 CET	1.1.1.1	192.168.2.4	0xeb90	No error (0)	case-id-1000228256449.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.110862970 CET	1.1.1.1	192.168.2.4	0x4ed2	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:15:02.110862970 CET	1.1.1.1	192.168.2.4	0x4ed2	No error (0)	cdn.jsdelivr.net.cdn.cloudflare.net		104.18.186.31	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.110862970 CET	1.1.1.1	192.168.2.4	0x4ed2	No error (0)	cdn.jsdelivr.net.cdn.cloudflare.net		104.18.187.31	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.111182928 CET	1.1.1.1	192.168.2.4	0xe3a7	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:15:02.113507032 CET	1.1.1.1	192.168.2.4	0xe5f5	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.113507032 CET	1.1.1.1	192.168.2.4	0xe5f5	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.113637924 CET	1.1.1.1	192.168.2.4	0x4729	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.113637924 CET	1.1.1.1	192.168.2.4	0x4729	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.113637924 CET	1.1.1.1	192.168.2.4	0x4729	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.113637924 CET	1.1.1.1	192.168.2.4	0x4729	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:02.113893032 CET	1.1.1.1	192.168.2.4	0x7eca	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 14, 2025 10:15:03.135906935 CET	1.1.1.1	192.168.2.4	0x1e8d	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:15:03.135906935 CET	1.1.1.1	192.168.2.4	0x1e8d	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:03.136143923 CET	1.1.1.1	192.168.2.4	0x15b3	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:15:03.136143923 CET	1.1.1.1	192.168.2.4	0x15b3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:15:03.136143923 CET	1.1.1.1	192.168.2.4	0x15b3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Mar 14, 2025 10:15:03.882611036 CET	1.1.1.1	192.168.2.4	0x659e	No error (0)	case-id-1000228256449.counselschambers.co.uk		104.21.70.234	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:03.882611036 CET	1.1.1.1	192.168.2.4	0x659e	No error (0)	case-id-1000228256449.counselschambers.co.uk		172.67.168.191	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:03.884188890 CET	1.1.1.1	192.168.2.4	0x57ef	No error (0)	case-id-1000228256449.counselschambers.co.uk			65	IN (0x0001)	false
Mar 14, 2025 10:15:04.273983002 CET	1.1.1.1	192.168.2.4	0x6f18	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:04.273983002 CET	1.1.1.1	192.168.2.4	0x6f18	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:04.273983002 CET	1.1.1.1	192.168.2.4	0x6f18	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:04.273999929 CET	1.1.1.1	192.168.2.4	0x5fd5	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:15:05.928723097 CET	1.1.1.1	192.168.2.4	0x25bb	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:05.928723097 CET	1.1.1.1	192.168.2.4	0x25bb	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:05.928723097 CET	1.1.1.1	192.168.2.4	0x25bb	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:05.929308891 CET	1.1.1.1	192.168.2.4	0xd928	No error (0)	ipapi.co			65	IN (0x0001)	false
Mar 14, 2025 10:15:08.245858908 CET	1.1.1.1	192.168.2.4	0xb96	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:08.245858908 CET	1.1.1.1	192.168.2.4	0xb96	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:08.245858908 CET	1.1.1.1	192.168.2.4	0xb96	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:08.245858908 CET	1.1.1.1	192.168.2.4	0xb96	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:08.245858908 CET	1.1.1.1	192.168.2.4	0xb96	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:08.245858908 CET	1.1.1.1	192.168.2.4	0xb96	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:08.245858908 CET	1.1.1.1	192.168.2.4	0xb96	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:08.258264065 CET	1.1.1.1	192.168.2.4	0x97a8	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:15:10.032623053 CET	1.1.1.1	192.168.2.4	0xe67b	No error (0)	pickoutsourcing.com			65	IN (0x0001)	false
Mar 14, 2025 10:15:10.050232887 CET	1.1.1.1	192.168.2.4	0xd32d	No error (0)	pickoutsourcing.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.050232887 CET	1.1.1.1	192.168.2.4	0xd32d	No error (0)	pickoutsourcing.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.050232887 CET	1.1.1.1	192.168.2.4	0xd32d	No error (0)	pickoutsourcing.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.050232887 CET	1.1.1.1	192.168.2.4	0xd32d	No error (0)	pickoutsourcing.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.050232887 CET	1.1.1.1	192.168.2.4	0xd32d	No error (0)	pickoutsourcing.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.050232887 CET	1.1.1.1	192.168.2.4	0xd32d	No error (0)	pickoutsourcing.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.050232887 CET	1.1.1.1	192.168.2.4	0xd32d	No error (0)	pickoutsourcing.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:10.927697897 CET	1.1.1.1	192.168.2.4	0x3f71	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:20.698745012 CET	1.1.1.1	192.168.2.4	0x86ec	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:21.384879112 CET	1.1.1.1	192.168.2.4	0x5548	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:21.390347958 CET	1.1.1.1	192.168.2.4	0xfd20	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:21.390347958 CET	1.1.1.1	192.168.2.4	0xfd20	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:15:21.391133070 CET	1.1.1.1	192.168.2.4	0x25d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

case-id-1000228256449.counselschambers.co.uk

code.jquery.com

cdn.jsdelivr.net

cdnjs.cloudflare.com

static.xx.fbcdn.net

ipapi.co

pickoutsourcing.com

ipinfo.io

www.google.com

a.nel.cloudflare.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	52747	142.250.184.195	80

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:15:04.863756895 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 14, 2025 10:15:05.507287979 CET	222	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 09:03:33 GMT Expires: Fri, 14 Mar 2025 09:53:33 GMT Age: 692 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 14, 2025 10:15:05.514748096 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 14, 2025 10:15:05.698460102 CET	222	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 09:03:52 GMT Expires: Fri, 14 Mar 2025 09:53:52 GMT Age: 673 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49726	172.67.168.191	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:00 UTC	694	OUT	GET / HTTP/1.1 Host: case-id-1000228256449.counselschambers.co.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:01 UTC	886	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:01 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 12 Feb 2025 14:20:05 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RACx8DMjRf7onOtlPUiRLc6KWVVdG%2Fe5P1sMxWRGZ7viwiOWs%2B4IckbuOBdv8zWWGSDs4L3F2Jwo5gHRg8uSZkDJheZL5oeYcexYMzVR9gtSsoloFmia%2Bp37qCeqnpuwrf0HlOkWUwiYpynOoPyVxEqmyn%2B15zyMNp2%2BNhEhiA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa01efc4e55d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2038&min_rtt=2034&rtt_var=771&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1266&delivery_rate=1411992&cwnd=80&unsent_bytes=0&cid=2f385d7d8ee80d33&ts=404&x=0"
2025-03-14 09:15:01 UTC	186	IN	Data Raw: 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 76 69 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 65 6c 70 2e 68 74 6d 6c 22 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: b4<!DOCTYPE html><html lang="vi"><head> <meta charset="UTF-8"> <script> window.location.href = "help.html"; </script></head><body></body></html>
2025-03-14 09:15:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	52728	172.67.168.191	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:01 UTC	754	OUT	GET /help.html HTTP/1.1 Host: case-id-1000228256449.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:02 UTC	899	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:38:16 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZdDSNLYWPfIzerBIZzKytR%2F4%2BWMNvlajtAkJWY3%2BpO%2BC29sFBL6iBzK3mlU%2BuPKaszRZXEER4Wn%2FN7jGqQJ9Z9iUYHgXi9jC%2BKPYutKId1w2pPzZuqJ%2BSpZ1%2BTlMLx%2FCB6Ge9fOxR91Nk3zrW4tZOM%2BwzXnEdBMQlxMZN4kU9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa07d887c3f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1470&min_rtt=1464&rtt_var=561&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1326&delivery_rate=1928665&cwnd=155&unsent_bytes=0&cid=cff26dfbf0060e3e&ts=438&x=0"
2025-03-14 09:15:02 UTC	470	IN	Data Raw: 33 37 64 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 71 49 6b Data Ascii: 37d0<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCFqIk
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 5a 65 71 43 6c 45 72 34 41 69 41 52 59 68 6d 63 38 42 6a 38 44 33 53 4a 38 4a 52 41 53 65 78 4a 52 35 6d 32 67 4f 51 6e 2f 2f 45 54 68 30 53 6f 4a 77 30 74 63 75 62 35 66 6c 4a 37 50 35 6a 41 57 41 74 2b 43 4b 6c 41 42 39 6f 4f 77 45 6c 35 53 35 36 54 6e 67 78 4d 49 6e 41 45 66 51 2b 49 63 51 6b 65 73 77 78 74 51 59 65 74 6e 78 4c 55 35 76 49 52 71 72 30 53 56 51 48 35 65 72 42 61 4c 2b 77 37 77 70 59 55 41 69 43 79 64 55 45 44 4c 62 74 49 68 38 47 4f 43 34 47 33 67 63 64 58 58 6c 64 4f 38 46 61 46 48 5a 58 41 56 64 32 6e 58 56 76 4b 47 32 69 45 68 49 4d 46 77 6b 41 74 67 5a 70 49 64 61 70 38 70 75 4b 51 4e 33 44 4b 42 51 50 4d 72 57 49 51 43 49 6f 78 5a 77 41 63 53 33 68 41 53 43 79 41 51 56 67 55 38 65 54 37 68 4b 66 41 4c 32 68 54 6b 34 4a 4a 65 79 4d Data Ascii: ZeqClEr4AiARYhmc8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyM
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 55 69 4b 58 63 4c 48 41 46 4e 7a 4d 43 58 43 7a 4b 62 67 4c 65 42 4f 45 50 77 4e 63 35 4b 44 51 50 71 2b 72 41 6e 68 66 45 50 72 36 6e 6a 47 39 34 6e 49 32 6d 61 74 36 36 47 36 30 65 70 64 4a 41 45 53 59 68 59 51 50 47 6b 77 75 4a 67 6a 57 43 76 61 43 58 65 43 50 42 4f 47 44 34 44 35 79 57 41 69 66 69 66 43 2f 6a 62 63 4f 4d 79 37 51 4c 53 43 41 4d 36 6e 76 6c 4c 36 78 2f 77 32 71 47 76 77 51 41 73 4e 6f 49 61 45 49 2b 49 45 6d 5a 7a 63 50 69 42 52 35 69 56 49 73 68 4a 2b 44 32 52 2f 51 6a 4e 6e 6e 39 68 46 55 33 69 4d 46 51 4c 2f 67 4d 77 6f 43 78 67 34 4a 39 4c 68 45 6a 62 6d 76 33 65 43 6e 46 41 52 32 30 6e 55 57 5a 76 34 70 68 49 2b 4f 74 34 39 42 52 57 39 63 6f 47 6f 77 4c 75 41 4e 67 54 44 54 41 6f 6e 4a 36 75 4b 63 42 5a 6f 64 43 4f 77 42 47 71 47 Data Ascii: UiKXcLHAFNzMCXCzKbgLeBOEPwNc5KDQPq+rAnhfEPr6njG94nI2mat66G60epdJAESYhYQPGkwuJgjWCvaCXeCPBOGD4D5yWAififC/jbcOMy7QLSCAM6nvlL6x/w2qGvwQAsNoIaEI+IEmZzcPiBR5iVIshJ+D2R/QjNnn9hFU3iMFQL/gMwoCxg4J9LhEjbmv3eCnFAR20nUWZv4phI+Ot49BRW9coGowLuANgTDTAonJ6uKcBZodCOwBGqG
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 77 61 69 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 20 20 Data Ascii: cursor: wait; overflow: hidden; border-radius: inherit; opacity: 0; z-index: 999; } .ns-block-ui .ns-block-ui-container .ns-block-ui-overlay {
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 30 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 42 33 42 33 42 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 63 6f 6e 74 61 69 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 73 74 72 65 74 63 68 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 Data Ascii: 0.5rem; color: #3B3B3B; } .ns-block-ui.contain { width: fit-content; height: fit-content; } .ns-block-ui.stretch { width: 10
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 32 61 31 37 63 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 Data Ascii: rflow: hidden; } .loading-indicator { text-align: center; } .loading-bullet { display: inline-block; opacity: 0; font-size: 2em; color: #02a17c; }
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 32 20 7b 0a 20 20 20 20 Data Ascii: m: translateX(0px); transform: translateX(0px); } 60% { opacity: 1; } 80% { opacity: 0; } } @-webkit-keyframes fadeInRTL2 {
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 32 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 Data Ascii: opacity: 0; } 20% { opacity: 0; -webkit-transform: translateX(20px); transform: translateX(20px); } 50% { opacity: 1; -web
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 61 64 65 49 6e 52 54 4c 32 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 2b 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 2b 20 2e 6c 6f 61 64 69 6e 67 2d 62 75 6c 6c 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 52 54 4c 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 52 54 4c 33 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 Data Ascii: adeInRTL2; } .loading-bullet + .loading-bullet + .loading-bullet { -webkit-animation-name: fadeInRTL3; animation-name: fadeInRTL3; } </style> <style> .--s
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 4f 76 65 72 72 69 64 65 20 63 73 73 20 73 74 79 6c 65 73 20 66 6f 72 20 54 77 69 74 63 68 2e 74 76 2a 2f 0a 20 20 20 20 20 20 20 20 6d 61 69 6e 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 72 65 73 65 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6d 6f 64 61 6c 5f 5f 62 61 63 6b 64 72 6f 70 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 72 65 73 Data Ascii: position: absolute; top: 0; } /Override css styles for Twitch.tv/ main.--savior-overlay-z-index-reset { z-index: auto !important; } .modal__backdrop.--savior-overlay-z-index-res

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	52727	172.67.168.191	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:02 UTC	621	OUT	GET /index-5b6c678b.css HTTP/1.1 Host: case-id-1000228256449.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://case-id-1000228256449.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:02 UTC	939	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:02 GMT Content-Type: text/css Content-Length: 13511 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:46 GMT ETag: "34c7-62ddf0fd25ec2" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hm4nVefkXRBwgRVwjKX9oy8DOYZAS9ruao1GxC6o97HTAD0KGUwwJDPs1aIAhycwNAu9dXWGKHYVduBvzowMPfPOSCxUzs3HfYaNvVmGl%2BxG362JQviNcOSu%2Bm1gJNWRgpzNug8eONsAlM97V0RD8DB6oDv6Wl%2FCq4n3eIk7kw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa0a7d4543a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1562&min_rtt=1557&rtt_var=595&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1193&delivery_rate=1820448&cwnd=142&unsent_bytes=0&cid=313fa31b13998862&ts=815&x=0"
2025-03-14 09:15:02 UTC	430	IN	Data Raw: 2e 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 65 6d 3b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 66 69 6c 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 7d 2e 6c 6f 67 6f 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 34 36 63 66 66 61 61 29 7d 2e 6c 6f 67 6f 2e 72 65 61 63 74 3a 68 6f 76 65 72 7b 66 69 6c 74 65 72 3a 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 20 30 20 32 65 6d 20 23 36 31 64 61 66 62 61 61 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 67 6f 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 Data Ascii: .logo{height:2em;will-change:filter;transition:filter .3s}.logo:hover{filter:drop-shadow(0 0 2em #646cffaa)}.logo.react:hover{filter:drop-shadow(0 0 2em #61dafbaa)}@keyframes logo-spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media (prefers-re
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 62 61 6e 6e 65 72 2d 62 31 34 38 32 64 34 63 2e 77 65 62 70 29 7d 2e 62 61 6e 6e 65 72 2d 63 6f 6e 74 65 6e 74 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 34 33 37 36 30 62 33 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 30 3b 68 65 69 67 68 74 3a Data Ascii: 0;background-repeat:no-repeat;background-size:cover;text-align:center;background-position:center bottom;background-image:url(banner-b1482d4c.webp)}.banner-content1{background-color:#243760b3;position:absolute;z-index:1;top:0;left:0;padding:50px 0;height:
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 78 3b 77 69 64 74 68 3a 34 30 76 77 7d 2e 70 72 6f 67 72 65 73 73 7b 68 65 69 67 68 74 3a 35 70 78 7d 2e 72 65 71 75 69 65 64 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 34 38 34 38 34 38 61 62 7d 2e 62 6f 64 79 20 2e 77 72 61 70 2d 74 69 74 6c 65 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 31 63 31 62 31 62 64 39 7d 69 6e 70 75 74 23 74 78 74 5f 74 65 6c 6c 2c 69 6e 70 75 74 23 74 78 74 5f 69 73 73 75 65 2c 69 6e 70 75 74 23 65 6d 61 69 6c 2c 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 35 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 3a Data Ascii: x;width:40vw}.progress{height:5px}.requied-text{font-size:16px;color:#484848ab}.body .wrap-title p{font-size:14px;color:#1c1b1bd9}input#txt_tell,input#txt_issue,input#email,input.form-control{height:50px!important}.react-international-phone-input{padding:
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 39 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 68 33 2e 68 33 2d 63 6f 6e 66 69 67 7b 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 62 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 2e 69 63 6f 6e 46 62 2d 6b 65 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 Data Ascii: portant;font-size:16px!important;line-height:19px;color:#000!important;font-weight:500!important;margin-bottom:8px!important}h3.h3-config{color:#000000bf;font-size:16px;font-weight:700;margin-bottom:10px;margin-top:20px}.iconFb-key{background-image:url(ht
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 33 35 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 36 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 39 34 25 29 7d 2e 74 65 78 74 2d 63 61 72 64 2d 63 75 73 74 6f 6d 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 30 36 32 35 72 65 6d 21 69 6d 70 6f 72 Data Ascii: -repeat:no-repeat;display:inline-block;-webkit-filter:invert(59%) sepia(11%) saturate(200%) saturate(135%) hue-rotate(176deg) brightness(96%) contrast(94%)}.text-card-custom{font-family:inherit!important;font-weight:400!important;font-size:1.0625rem!impor
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 7b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 65 2d 64 72 6f 70 64 6f 77 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 5f 5f 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c Data Ascii: -international-phone-country-selector-button--hide-dropdown{cursor:auto}.react-international-phone-country-selector-button--hide-dropdown:hover{background-color:transparent}.react-international-phone-country-selector-button__button-content{display:flex;al
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 2d 64 69 73 61 62 6c 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 77 68 69 74 65 73 6d 6f 6b 65 29 29 3b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 2d 2d 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 62 Data Ascii: -disabled-background-color, whitesmoke));cursor:auto}.react-international-phone-country-selector-button--disabled:hover{background-color:var(--react-international-phone-disabled-country-selector-background-color, var(--react-international-phone-disabled-b
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 66 6c 61 67 2d 65 6d 6f 6a 69 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 66 6f 6e 74 2d 73 69 7a 65 2c 20 31 34 70 78 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 Data Ascii: dropdown__list-item-flag-emoji{margin-right:8px}.react-international-phone-country-selector-dropdown__list-item-country-name{margin-right:8px;font-size:var(--react-international-phone-dropdown-item-font-size, 14px)}.react-international-phone-country-selec
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 73 65 6c 65 63 74 65 64 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2d 64 69 61 6c 2d 63 6f 64 65 2d 63 6f 6c 6f 72 2c 20 67 72 61 79 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 64 72 6f 70 64 6f 77 6e 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 2d 66 6f 63 75 73 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 Data Ascii: or:var(--react-international-phone-selected-dropdown-item-dial-code-color, var(--react-international-phone-dropdown-item-dial-code-color, gray))}.react-international-phone-country-selector-dropdown__list-item--focused{background-color:var(--react-internat
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 61 6c 2d 70 68 6f 6e 65 2d 64 69 73 61 62 6c 65 64 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 20 23 36 36 36 29 29 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 63 6f 75 6e 74 72 79 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 72 65 61 63 74 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 70 68 6f 6e 65 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2c 20 34 70 78 29 3b 6d 61 Data Ascii: al-phone-disabled-text-color, #666))}.react-international-phone-input-container{display:flex}.react-international-phone-input-container .react-international-phone-country-selector-button{border-radius:var(--react-international-phone-border-radius, 4px);ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	52731	151.101.66.137	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:02 UTC	603	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:02 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 09:15:02 GMT Age: 612685 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740042-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 1 X-Timer: S1741943703.635098,VS0,VE1 Vary: Accept-Encoding
2025-03-14 09:15:02 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-14 09:15:02 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-14 09:15:02 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-14 09:15:02 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-14 09:15:02 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-14 09:15:02 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	52730	104.18.186.31	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:02 UTC	670	OUT	GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228256449.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:02 UTC	1095	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:02 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 5.3.0 x-jsd-version-type: version etag: W/"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y" Age: 1984537 x-served-by: cache-fra-eddf8230088-FRA, cache-lga21948-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9g5rcnUdKkXdU9xGpIFPb3bdRM3Ya3jB9pvVnr8unBferUCXZuR%2BatAzvbxTeQFNWpobeUIvGjLNme9rDTfkshw9PkwBBZu2f%2FGOu3WjRaIaKAbPwNjs5dglwq%2Fvvnpp2Xc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa0da94c19c7-EWR
2025-03-14 09:15:02 UTC	274	IN	Data Raw: 37 62 32 34 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 Data Ascii: 7b24@charset "UTF-8";/! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indi
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 70 6c 65 3a 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 23 64 36 33 33 38 34 3b 2d 2d 62 73 2d 72 65 64 3a 23 64 63 33 35 34 35 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 23 66 64 37 65 31 34 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 23 66 66 63 31 30 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 23 31 39 38 37 35 34 3b 2d 2d 62 73 2d 74 65 61 6c 3a 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 23 30 64 63 61 66 30 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 67 72 61 79 2d 32 30 30 3a 23 65 39 65 Data Ascii: ple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9e
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 63 38 63 62 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 61 33 63 66 62 62 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 39 65 65 61 66 39 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 66 66 65 36 39 63 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 66 31 61 65 62 35 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 65 39 65 63 65 66 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 61 64 62 35 62 64 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 32 35 35 2c 32 35 35 2c 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 30 2c 30 2c 30 3b 2d Data Ascii: c8cb;--bs-success-border-subtle:#a3cfbb;--bs-info-border-subtle:#9eeaf9;--bs-warning-border-subtle:#ffe69c;--bs-danger-border-subtle:#f1aeb5;--bs-light-border-subtle:#e9ecef;--bs-dark-border-subtle:#adb5bd;--bs-white-rgb:255,255,255;--bs-black-rgb:0,0,0;-
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 32 30 32 3b 2d 2d 62 73 2d 63 6f 64 65 2d 63 6f 6c 6f 72 3a 23 64 36 33 33 38 34 3b 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 3a 23 66 66 66 33 63 64 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 37 35 29 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 2e 33 37 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 73 6d 3a 30 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6c Data Ascii: 202;--bs-code-color:#d63384;--bs-highlight-bg:#fff3cd;--bs-border-width:1px;--bs-border-style:solid;--bs-border-color:#dee2e6;--bs-border-color-translucent:rgba(0, 0, 0, 0.175);--bs-border-radius:0.375rem;--bs-border-radius-sm:0.25rem;--bs-border-radius-l
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 73 3a 23 36 65 61 38 66 65 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 61 37 61 63 62 31 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 37 35 62 37 39 38 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 36 65 64 66 66 36 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 66 66 64 61 36 61 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 65 61 38 36 38 66 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 64 61 72 6b 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 23 64 65 65 32 65 36 3b 2d 2d 62 73 2d 70 72 Data Ascii: s:#6ea8fe;--bs-secondary-text-emphasis:#a7acb1;--bs-success-text-emphasis:#75b798;--bs-info-text-emphasis:#6edff6;--bs-warning-text-emphasis:#ffda6a;--bs-danger-text-emphasis:#ea868f;--bs-light-text-emphasis:#f8f9fa;--bs-dark-text-emphasis:#dee2e6;--bs-pr
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 74 65 78 74 2d 61 6c 69 67 6e 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 68 72 7b 6d 61 72 67 69 6e 3a 31 72 65 6d 20 Data Ascii: ight:var(--bs-body-font-weight);line-height:var(--bs-body-line-height);color:var(--bs-body-color);text-align:var(--bs-body-text-align);background-color:var(--bs-body-bg);-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:transparent}hr{margin:1rem
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 6d 61 72 6b 2c 6d 61 72 6b 7b 70 61 64 64 69 6e 67 3a 2e 31 38 37 35 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 29 7d 73 75 62 2c 73 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 2e 32 35 65 6d 7d 73 75 70 7b 74 6f 70 3a 2d 2e 35 65 6d 7d 61 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 29 2c 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 6f 70 61 63 69 74 79 2c Data Ascii: ont-size:.875em}.mark,mark{padding:.1875em;background-color:var(--bs-highlight-bg)}sub,sup{position:relative;font-size:.75em;line-height:0;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}a{color:rgba(var(--bs-link-color-rgb),var(--bs-link-opacity,
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 73 65 6c 65 63 74 3a 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 31 7d 5b 6c 69 73 74 5d 3a 6e 6f 74 28 5b 74 79 70 65 3d 64 61 74 65 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 Data Ascii: gin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}select:disabled{opacity:1}[list]:not([type=date]):not([type=datetime-local]):not([type=month]):not([type
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 6f 75 74 70 75 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 3a 30 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: tton{font:inherit;-webkit-appearance:button}output{display:inline-block}iframe{border:0}summary{display:list-item;cursor:pointer}progress{vertical-align:baseline}[hidden]{display:none!important}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 3a 2d 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 e2 80 94 c2 a0 22 7d 2e 69 6d 67 2d 66 6c 75 69 64 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d Data Ascii: :-1rem;margin-bottom:1rem;font-size:.875em;color:#6c757d}.blockquote-footer::before{content:""}.img-fluid{max-width:100%;height:auto}.img-thumbnail{padding:.25rem;background-color:var(--bs-body-bg);border:var(--bs-border-width) solid var(--bs-border-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	52732	104.17.25.14	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:02 UTC	627	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:02 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-7b00" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1245 Expires: Wed, 04 Mar 2026 09:15:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xyLgXTkXkaHOPj703g%2BEEV3YZnpr3vl3RHmzLOrxwXydWsQkISX6wNzgjnrXnRd97nNl5cDm8GhupgcNfqrnM4Zo3EqtnPnTTsVmGJjucn3gpQfshDO6s04NLzR80euiBIbJ2vbl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202aa0dcc414201-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:15:02 UTC	417	IN	Data Raw: 37 62 66 31 0d 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 20 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 29 20 7b 0a 09 09 2f 2f 20 43 6f 6d 6d 6f 6e 4a 53 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 0a 09 09 64 65 66 69 6e 65 28 5b 5d 2c 20 66 61 63 74 6f 72 79 29 3b 0a 09 7d 0a 09 65 6c 73 65 20 7b 0a 09 09 2f 2f 20 47 6c 6f 62 61 6c 20 28 62 72 6f 77 73 65 72 29 0a 09 09 72 6f 6f 74 Data Ascii: 7bf1;(function (root, factory) {if (typeof exports === "object") {// CommonJSmodule.exports = exports = factory();}else if (typeof define === "function" && define.amd) {// AMDdefine([], factory);}else {// Global (browser)root
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 6f 6e 20 28 4d 61 74 68 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 20 20 20 20 76 61 72 20 63 72 79 70 74 6f 3b 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 66 72 6f 6d 20 77 69 6e 64 6f 77 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 20 7b 0a 09 20 20 20 20 20 20 20 20 63 72 79 70 74 6f 20 3d 20 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 3b 0a 09 20 20 20 20 7d 0a 0a 09 20 20 20 20 2f 2f 20 4e 61 74 69 76 65 20 63 72 79 70 74 6f 20 69 6e 20 77 65 62 20 77 6f 72 6b 65 72 20 28 42 72 6f 77 73 65 72 29 0a 09 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 65 6c 66 20 21 3d Data Ascii: on (Math, undefined) { var crypto; // Native crypto from window (Browser) if (typeof window !== 'undefined' && window.crypto) { crypto = window.crypto; } // Native crypto in web worker (Browser) if (typeof self !=
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 55 73 65 20 72 61 6e 64 6f 6d 42 79 74 65 73 20 6d 65 74 68 6f 64 20 28 4e 6f 64 65 4a 53 29 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 42 79 74 65 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 09 20 20 20 20 20 20 Data Ascii: return crypto.getRandomValues(new Uint32Array(1))[0]; } catch (err) {} } // Use randomBytes method (NodeJS) if (typeof crypto.randomBytes === 'function') { try {
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 2a 20 40 73 74 61 74 69 63 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 4d 79 54 79 70 65 20 3d 20 43 72 79 70 74 6f 4a 53 2e 6c 69 62 2e 42 61 73 65 2e 65 78 74 65 6e 64 28 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 66 69 65 6c 64 3a 20 27 76 61 6c 75 65 27 2c 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 Data Ascii: * @static * * @example * * var MyType = CryptoJS.lib.Base.extend({ * field: 'value', * * method: function () { *
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 4d 79 54 79 70 65 2e 63 72 65 61 74 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 63 72 65 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6e 73 74 61 6e 63 65 20 3d 20 74 68 69 73 2e 65 78 74 65 6e 64 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 69 6e 69 74 2e 61 70 70 6c 79 28 69 6e 73 74 61 6e 63 65 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: * @example * * var instance = MyType.create(); */ create: function () { var instance = this.extend(); instance.init.apply(instance, arguments);
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 49 45 20 77 6f 6e 27 74 20 63 6f 70 79 20 74 6f 53 74 72 69 6e 67 20 75 73 69 6e 67 20 74 68 65 20 6c 6f 6f 70 20 61 62 6f 76 65 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 72 6f 70 65 72 74 69 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 27 74 6f 53 74 72 69 6e 67 27 29 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 20 3d 20 70 72 6f 70 65 72 74 69 65 73 2e 74 6f 53 74 72 69 6e 67 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 2a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 20 43 72 65 61 Data Ascii: // IE won't copy toString using the loop above if (properties.hasOwnProperty('toString')) { this.toString = properties.toString; } }, /** * Crea
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 33 2c 20 30 78 30 34 30 35 30 36 30 37 5d 2c 20 36 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 73 2c 20 73 69 67 42 79 74 65 73 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 77 6f 72 64 73 20 3d 20 74 68 69 73 2e 77 6f 72 64 73 20 3d 20 77 6f 72 64 73 20 7c 7c 20 5b 5d 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 69 67 42 79 74 65 73 20 21 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 20 3d 20 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 Data Ascii: 3, 0x04050607], 6); */ init: function (words, sigBytes) { words = this.words = words \|\| []; if (sigBytes != undefined) { this.sigBytes = sigBytes; } else { this.s
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 76 61 72 20 74 68 69 73 53 69 67 42 79 74 65 73 20 3d 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 68 61 74 53 69 67 42 79 74 65 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 73 69 67 42 79 74 65 73 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6c 61 6d 70 20 65 78 63 65 73 73 20 62 69 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 6c 61 6d 70 28 29 3b 0a 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 6e 63 61 74 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 53 69 67 42 79 74 65 73 20 25 20 34 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 6f 70 79 20 6f 6e 65 20 62 79 74 65 20 61 74 20 61 20 74 69 6d 65 0a 09 Data Ascii: var thisSigBytes = this.sigBytes; var thatSigBytes = wordArray.sigBytes; // Clamp excess bits this.clamp(); // Concat if (thisSigBytes % 4) { // Copy one byte at a time
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 66 20 74 68 69 73 20 77 6f 72 64 20 61 72 72 61 79 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 72 65 74 75 72 6e 20 7b 57 6f 72 64 41 72 72 61 79 7d 20 54 68 65 20 63 6c 6f 6e 65 2e 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 63 6c 6f 6e 65 28 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 63 6c 6f 6e 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 6f 6e 65 20 3d 20 42 61 73 65 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 Data Ascii: f this word array. * * @return {WordArray} The clone. * * @example * * var clone = wordArray.clone(); */ clone: function () { var clone = Base.clone.call(this)
2025-03-14 09:15:02 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 40 65 78 61 6d 70 6c 65 0a 09 20 20 20 20 20 20 20 20 20 2a 0a 09 20 20 20 20 20 20 20 20 20 2a 20 20 20 20 20 76 61 72 20 68 65 78 53 74 72 69 6e 67 20 3d 20 43 72 79 70 74 6f 4a 53 2e 65 6e 63 2e 48 65 78 2e 73 74 72 69 6e 67 69 66 79 28 77 6f 72 64 41 72 72 61 79 29 3b 0a 09 20 20 20 20 20 20 20 20 20 2a 2f 0a 09 20 20 20 20 20 20 20 20 73 74 72 69 6e 67 69 66 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 77 6f 72 64 41 72 72 61 79 29 20 7b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 53 68 6f 72 74 63 75 74 73 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 77 6f 72 64 73 20 3d 20 77 6f 72 64 41 72 72 61 79 2e 77 6f 72 64 73 3b 0a 09 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 Data Ascii: * * @example * * var hexString = CryptoJS.enc.Hex.stringify(wordArray); */ stringify: function (wordArray) { // Shortcuts var words = wordArray.words; var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	52733	172.67.168.191	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:03 UTC	710	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228256449.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228256449.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:03 UTC	941	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:03 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DgO8XJGM9QYZVd%2FOGLiadM1UekY3v2rXBYNLIQA5ILytTtXrZTmabWT4JR2JCLmCOsl76u89s32XJqkW40SW8NmWQHUaP1A7Ya0yh3tL0XZmowaOikvHRa1nYniVtsC59q3%2B3l%2BVYEDvAVujYSvBvWyjfs1BVW9UHhUzvvX4Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa124f6f7ce7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2008&min_rtt=2001&rtt_var=765&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1282&delivery_rate=1416100&cwnd=198&unsent_bytes=0&cid=9eabd3a192844f0d&ts=427&x=0"
2025-03-14 09:15:03 UTC	428	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 0d 2d 8e 72 d9 2a d8 e7 Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t-r*
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 24 a2 29 bc 96 3e fd 00 Data Ascii: :WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$$)>
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f 5a f4 bc a3 ec 9d df 0e Data Ascii: ^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QOZ
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 f1 d9 c2 e7 2d 3c 7b 14 Data Ascii: T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2-<{
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 Data Ascii: tOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFtiwFti
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b 72 5a 6c 8c 92 8f 74 a6 Data Ascii: <i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;rZlt
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 19 8a 17 ab ae 88 bf e1 Data Ascii: f-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 30 76 ed 52 b7 c3 50 1f Data Ascii: uM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`0vRP
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 af e1 38 5b 8a cd f2 84 Data Ascii: ^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP8[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	52734	104.18.186.31	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:03 UTC	647	OUT	GET /npm/react/umd/react.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228256449.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:03 UTC	1089	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=604800, s-maxage=43200 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 18.3.1 x-jsd-version-type: version etag: W/"29ff-qneuTEn1Jbwh3h0E8Ipdc5YsfM4" Age: 22005 x-served-by: cache-fra-eddf8230081-FRA, cache-lga21932-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uO8EThDi8NFQV7Y3ggIu4YUkGNOPqpxZYkMfvPUR2hu%2F1rotzx%2BAPG331ejxAqviPF7wQi58iCvIkG0TpONafyLdjB3rKBXcijvS1F3Y16u1xtdnUYyOCmw3udwUSJblx2s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa1268b9247e-EWR
2025-03-14 09:15:03 UTC	280	IN	Data Raw: 32 39 66 66 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: 29ff/** * @license React * react.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(function(){
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 78 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 78 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 78 29 3a 28 63 3d 63 7c 7c 73 65 6c 66 2c 78 28 63 2e 52 65 61 63 74 3d 7b 7d 29 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 56 26 26 61 5b 56 5d 7c 7c 61 5b 22 40 40 69 74 65 72 61 Data Ascii: x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@itera
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 73 74 72 69 6e 67 22 3a 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 68 3d 21 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 73 77 69 74 63 68 28 61 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 79 3a 63 61 73 65 20 71 61 3a 68 3d 21 30 7d 7d 69 66 28 68 29 72 65 74 75 72 6e 20 68 3d 61 2c 64 3d 64 28 68 29 2c 61 3d 22 22 3d 3d 3d 6d 3f 22 2e 22 2b 0a 4e 28 68 2c 30 29 3a 6d 2c 63 61 28 64 29 3f 28 65 3d 22 22 2c 6e 75 6c 6c 21 3d 61 26 26 28 65 3d 61 2e 72 65 70 6c 61 63 65 28 64 61 2c 22 24 26 2f 22 29 2b 22 2f 22 29 2c 42 28 64 2c 62 2c 65 2c 22 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 3a 6e 75 6c 6c 21 3d 64 26 26 28 4d 28 64 29 26 26 28 64 3d 6f 61 28 64 2c 65 2b 28 21 64 2e 6b 65 79 7c 7c 68 26 26 Data Ascii: string":case "number":h=!0;break;case "object":switch(a.$$typeof){case y:case qa:h=!0}}if(h)return h=a,d=d(h),a=""===m?"."+N(h,0):m,ca(d)?(e="",null!=a&&(e=a.replace(da,"$&/")+"/"),B(d,b,e,"",function(a){return a})):null!=d&&(M(d)&&(d=oa(d,e+(!d.key\|\|h&&
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 61 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 69 66 28 30 3d 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 5b 30 5d 2c 65 3d 61 2e 70 6f 70 28 29 3b 69 66 28 65 21 3d 3d 62 29 7b 61 5b 30 5d 3d 65 3b 61 3a 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2c 6b 3d 64 3e 3e 3e 31 3b 63 3c 6b 3b 29 7b 76 61 72 20 68 3d 32 2a 28 63 2b 31 29 2d 31 2c 6c 3d 61 5b 68 5d 2c 66 3d 68 2b 31 2c 67 3d 61 5b 66 5d 3b 69 66 28 30 3e 44 28 6c 2c 65 29 29 66 3c 64 26 26 30 3e 44 28 67 2c 6c 29 3f 28 61 5b 63 5d 3d 67 2c 61 5b 66 5d 3d 65 2c 63 3d 66 29 3a 28 61 5b 63 5d 3d 6c 2c 61 5b 68 5d 3d 65 2c 63 3d 68 29 3b 65 6c 73 65 20 69 66 28 66 3c 64 26 26 30 3e 44 28 67 2c 65 29 29 61 5b 63 5d 3d 67 2c Data Ascii: a[0]}function E(a){if(0===a.length)return null;var b=a[0],e=a.pop();if(e!==b){a[0]=e;a:for(var c=0,d=a.length,k=d>>>1;c<k;){var h=2*(c+1)-1,l=a[h],f=h+1,g=a[f];if(0>D(l,e))f<d&&0>D(g,l)?(a[c]=g,a[f]=e,c=f):(a[c]=l,a[h]=e,c=h);else if(f<d&&0>D(g,e))a[c]=g,
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 72 65 61 63 74 2e 70 72 6f 66 69 6c 65 72 22 29 2c 76 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 72 6f 76 69 64 65 72 22 29 2c 77 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 6f 6e 74 65 78 74 22 29 2c 78 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 2c 79 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 2c 7a 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 41 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 2c 56 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 2c 58 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 31 7d Data Ascii: react.profiler"),va=Symbol.for("react.provider"),wa=Symbol.for("react.context"),xa=Symbol.for("react.forward_ref"),ya=Symbol.for("react.suspense"),za=Symbol.for("react.memo"),Aa=Symbol.for("react.lazy"),V=Symbol.iterator,X={isMounted:function(a){return!1}
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 54 69 6d 65 6f 75 74 3f 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 6e 75 6c 6c 2c 6e 61 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 0a 76 6f 69 64 20 30 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 26 26 76 6f 69 64 20 30 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 2e 62 69 6e 64 28 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 29 3b 76 Data Ascii: Timeout?clearTimeout:null,na="undefined"!==typeof setImmediate?setImmediate:null;"undefined"!==typeof navigator&&void 0!==navigator.scheduling&&void 0!==navigator.scheduling.isInputPending&&navigator.scheduling.isInputPending.bind(navigator.scheduling);v
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 61 63 6b 3a 62 2c 70 72 69 6f 72 69 74 79 4c 65 76 65 6c 3a 61 2c 73 74 61 72 74 54 69 6d 65 3a 63 2c 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3a 64 2c 73 6f 72 74 49 6e 64 65 78 3a 2d 31 7d 3b 63 3e 65 3f 28 61 2e 73 6f 72 74 49 6e 64 65 78 3d 63 2c 4f 28 72 2c 61 29 2c 6e 75 6c 6c 3d 3d 3d 70 28 71 29 26 26 61 3d 3d 3d 70 28 72 29 26 26 28 7a 3f 28 65 61 28 41 29 2c 41 3d 2d 31 29 3a 7a 3d 21 30 2c 54 28 51 2c 63 2d 65 29 29 29 3a 28 61 2e 73 6f 72 74 49 6e 64 65 78 3d 64 2c 4f 28 71 2c 61 29 2c 75 7c 7c 46 7c 7c 28 75 3d 21 30 2c 52 28 53 29 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 7d 2c 75 6e 73 74 61 Data Ascii: ack:b,priorityLevel:a,startTime:c,expirationTime:d,sortIndex:-1};c>e?(a.sortIndex=c,O(r,a),null===p(q)&&a===p(r)&&(z?(ea(A),A=-1):z=!0,T(Q,c-e))):(a.sortIndex=d,O(q,a),u\|\|F\|\|(u=!0,R(S)));return a},unstable_cancelCallback:function(a){a.callback=null},unsta
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 3d 6b 61 3b 63 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 52 65 61 63 74 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 2e 2e 2e 29 3a 20 54 68 65 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 52 65 61 63 74 20 65 6c 65 6d 65 6e 74 2c 20 62 75 74 20 79 6f 75 20 70 61 73 73 65 64 20 22 2b 61 2b 22 2e 22 29 3b 76 61 72 20 65 3d 6c 61 28 7b 7d 2c 61 2e 70 72 6f 70 73 29 2c 64 3d 61 2e 6b 65 79 2c 6b 3d 61 2e 72 65 66 2c 68 3d 61 2e 5f 6f 77 6e 65 72 3b 69 66 28 6e 75 6c 6c 21 3d 62 29 7b 76 6f 69 64 20 30 21 3d 3d 62 2e 72 65 66 26 26 28 6b 3d 62 2e 72 65 66 2c 68 3d 4c 2e 63 75 72 72 65 6e 74 Data Ascii: =ka;c.cloneElement=function(a,b,c){if(null===a\|\|void 0===a)throw Error("React.cloneElement(...): The argument must be a React element, but you passed "+a+".");var e=la({},a.props),d=a.key,k=a.ref,h=a._owner;if(null!=b){void 0!==b.ref&&(k=b.ref,h=L.current
2025-03-14 09:15:03 UTC	896	IN	Data Raw: 29 7d 3b 63 2e 75 73 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 43 6f 6e 74 65 78 74 28 61 29 7d 3b 63 2e 75 73 65 44 65 62 75 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 7d 3b 63 2e 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 28 61 29 7d 3b 0a 63 2e 75 73 65 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e 74 2e 75 73 65 45 66 66 65 63 74 28 61 2c 62 29 7d 3b 63 2e 75 73 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 63 75 72 72 65 6e Data Ascii: )};c.useContext=function(a){return g.current.useContext(a)};c.useDebugValue=function(a,b){};c.useDeferredValue=function(a){return g.current.useDeferredValue(a)};c.useEffect=function(a,b){return g.current.useEffect(a,b)};c.useId=function(){return g.curren
2025-03-14 09:15:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	52735	104.18.186.31	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:03 UTC	655	OUT	GET /npm/react-dom/umd/react-dom.production.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228256449.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:03 UTC	1090	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=604800, s-maxage=43200 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 18.3.1 x-jsd-version-type: version etag: W/"202fb-/rjdydBWak+glxpuEThlhhjNrP4" Age: 25999 x-served-by: cache-fra-eddf8230096-FRA, cache-lga21991-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8kXpt6AfM1agj7X%2FdaW07f7BmO6kxVOnOkECG2mYVATCq5hFAXUp2j4H7h4rsUCwhOuqUCGtI1Ysvf4GPznUpb7qUajvd86dU6ccKVqFL%2FhtEytSXc6Umxy5V8wJ7HazYys%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa14181dda06-EWR
2025-03-14 09:15:03 UTC	279	IN	Data Raw: 37 62 32 39 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f Data Ascii: 7b29/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */(functio
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 72 65 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 28 66 75 6e 63 74 69 6f 6e 28 51 2c 7a 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 7a 62 28 65 78 70 6f 72 74 73 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 72 65 61 63 74 22 5d 2c 7a 62 29 3a 28 51 3d 51 7c 7c 73 65 6c 66 2c 7a 62 28 51 2e 52 65 61 63 74 44 4f 4d 3d 7b 7d 2c 51 2e 52 65 61 63 74 29 29 7d 29 28 74 68 69 73 2c Data Ascii: re (Custom Build) \| MIT*/'use strict';(function(Q,zb){"object"===typeof exports&&"undefined"!==typeof module?zb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],zb):(Q=Q\|\|self,zb(Q.ReactDOM={},Q.React))})(this,
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 73 70 61 63 65 3d 65 3b 74 68 69 73 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3d 63 3b 74 68 69 73 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 73 61 6e 69 74 69 7a 65 55 52 4c 3d 66 3b 74 68 69 73 2e 72 65 6d 6f 76 65 45 6d 70 74 79 53 74 72 69 6e 67 3d 67 7d 66 75 6e 63 74 69 6f 6e 20 24 64 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 52 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 3f 52 5b 62 5d 3a 6e 75 6c 6c 3b 69 66 28 6e 75 6c 6c 21 3d 3d 65 3f 30 21 3d 3d 65 2e 74 79 70 65 3a 64 7c 7c 21 28 32 3c 62 2e 6c 65 6e 67 74 68 29 7c 7c 22 6f 22 21 3d 3d 0a 62 5b 30 5d 26 26 22 4f 22 21 3d 3d 62 5b 30 5d 7c 7c 22 6e 22 21 3d 3d 62 5b 31 5d 26 Data Ascii: .attributeNamespace=e;this.mustUseProperty=c;this.propertyName=a;this.type=b;this.sanitizeURL=f;this.removeEmptyString=g}function $d(a,b,c,d){var e=R.hasOwnProperty(b)?R[b]:null;if(null!==e?0!==e.type:d\|\|!(2<b.length)\|\|"o"!==b[0]&&"O"!==b[0]\|\|"n"!==b[1]&
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 6e 22 29 2c 67 3d 65 2e 6c 65 6e 67 74 68 2d 31 2c 68 3d 66 2e 6c 65 6e 67 74 68 2d 31 3b 31 3c 3d 67 26 26 30 3c 3d 68 26 26 65 5b 67 5d 21 3d 3d 66 5b 68 5d 3b 29 68 2d 2d 3b 66 6f 72 28 3b 31 3c 3d 67 26 26 30 3c 3d 68 3b 67 2d 2d 2c 68 2d 2d 29 69 66 28 65 5b 67 5d 21 3d 3d 66 5b 68 5d 29 7b 69 66 28 31 21 3d 3d 67 7c 7c 31 21 3d 3d 68 29 7b 64 6f 20 69 66 28 67 2d 2d 2c 68 2d 2d 2c 30 3e 68 7c 7c 65 5b 67 5d 21 3d 3d 66 5b 68 5d 29 7b 76 61 72 20 6b 3d 22 5c 6e 22 2b 65 5b 67 5d 2e 72 65 70 6c 61 63 65 28 22 20 61 74 20 6e 65 77 20 22 2c 22 20 61 74 20 22 29 3b 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 26 26 6b 2e 69 6e 63 6c 75 64 65 73 28 22 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 22 29 26 26 28 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 22 3c 61 6e 6f 6e 79 6d 6f Data Ascii: n"),g=e.length-1,h=f.length-1;1<=g&&0<=h&&e[g]!==f[h];)h--;for(;1<=g&&0<=h;g--,h--)if(e[g]!==f[h]){if(1!==g\|\|1!==h){do if(g--,h--,0>h\|\|e[g]!==f[h]){var k="\n"+e[g].replace(" at new "," at ");a.displayName&&k.includes("<anonymous>")&&(k=k.replace("<anonymo
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 29 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 6a 28 61 29 7b 76 61 72 20 62 3d 61 2e 74 79 70 65 3b 0a 73 77 69 74 63 68 28 61 2e 74 61 67 29 7b 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 22 43 61 63 68 65 22 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 28 62 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 28 62 2e 5f 63 6f 6e 74 65 78 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 31 38 3a 72 65 74 75 72 6e 22 44 65 68 79 64 72 61 74 65 64 46 72 61 67 6d 65 6e 74 22 3b 63 61 73 65 20 31 31 3a 72 65 74 75 72 6e 20 Data Ascii: ))}catch(c){}}return null}function gj(a){var b=a.type;switch(a.tag){case 24:return"Cache";case 9:return(b.displayName\|\|"Context")+".Consumer";case 10:return(b._context.displayName\|\|"Context")+".Provider";case 18:return"DehydratedFragment";case 11:return
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 3d 22 22 2b 61 3b 66 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 63 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 3b 72 65 74 75 72 6e 7b 67 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 73 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 64 3d 22 22 2b 61 7d 2c 73 74 6f 70 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 0a 6e 75 6c 6c 3b 64 65 6c 65 74 65 20 61 5b 62 5d 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 63 28 61 Data Ascii: return e.call(this)},set:function(a){d=""+a;f.call(this,a)}});Object.defineProperty(a,b,{enumerable:c.enumerable});return{getValue:function(){return d},setValue:function(a){d=""+a},stopTracking:function(){a._valueTracker=null;delete a[b]}}}}function Pc(a
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 65 72 74 79 28 22 76 61 6c 75 65 22 29 3f 6d 65 28 61 2c 62 2e 74 79 70 65 2c 63 29 3a 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 65 66 61 75 6c 74 56 61 6c 75 65 22 29 26 26 6d 65 28 61 2c 62 2e 74 79 70 65 2c 55 61 28 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 29 3b 6e 75 6c 6c 3d 3d 62 2e 63 68 65 63 6b 65 64 26 26 6e 75 6c 6c 21 3d 62 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 26 26 28 61 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 21 21 62 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 67 28 61 2c 62 2c 63 29 7b 69 66 28 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 76 61 6c 75 65 22 29 7c 7c 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 65 66 61 75 6c 74 56 61 6c 75 65 22 29 Data Ascii: erty("value")?me(a,b.type,c):b.hasOwnProperty("defaultValue")&&me(a,b.type,Ua(b.defaultValue));null==b.checked&&null!=b.defaultChecked&&(a.defaultChecked=!!b.defaultChecked)}function mg(a,b,c){if(b.hasOwnProperty("value")\|\|b.hasOwnProperty("defaultValue")
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 39 33 29 29 3b 0a 63 3d 63 5b 30 5d 7d 62 3d 63 7d 6e 75 6c 6c 3d 3d 62 26 26 28 62 3d 22 22 29 3b 63 3d 62 7d 61 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 3d 7b 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 55 61 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 67 28 61 2c 62 29 7b 76 61 72 20 63 3d 55 61 28 62 2e 76 61 6c 75 65 29 2c 64 3d 55 61 28 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 6e 75 6c 6c 21 3d 63 26 26 28 63 3d 22 22 2b 63 2c 63 21 3d 3d 61 2e 76 61 6c 75 65 26 26 28 61 2e 76 61 6c 75 65 3d 63 29 2c 6e 75 6c 6c 3d 3d 62 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 26 26 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 63 26 26 28 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 63 29 29 3b Data Ascii: length)throw Error(m(93));c=c[0]}b=c}null==b&&(b="");c=b}a._wrapperState={initialValue:Ua(c)}}function og(a,b){var c=Ua(b.value),d=Ua(b.defaultValue);null!=c&&(c=""+c,c!==a.value&&(a.value=c),null==b.defaultValue&&a.defaultValue!==c&&(a.defaultValue=c));
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 45 72 72 6f 72 28 6d 28 36 32 29 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 61 2c 62 29 7b 69 66 28 2d 31 3d 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 2e 69 73 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 61 6e 6e 6f 74 61 74 69 6f 6e 2d 78 6d 6c 22 3a 63 61 73 65 20 22 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 2d 73 72 63 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 2d 75 72 69 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 2d 66 6f 72 6d 61 74 22 3a 63 61 73 65 20 22 66 6f 6e 74 2d 66 61 63 65 2d 6e 61 6d 65 22 3a 63 61 73 65 20 22 6d 69 73 73 69 6e 67 Data Ascii: Error(m(62));}}function qe(a,b){if(-1===a.indexOf("-"))return"string"===typeof b.is;switch(a){case "annotation-xml":case "color-profile":case "font-face":case "font-face-src":case "font-face-uri":case "font-face-format":case "font-face-name":case "missing
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 6a 6a 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 29 7b 67 63 3d 21 31 3b 53 63 3d 6e 75 6c 6c 3b 6b 6a 2e 61 70 70 6c 79 28 6c 6a 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 6a 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 6b 29 7b 6a 6a 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 67 63 29 7b 69 66 28 67 63 29 7b 76 61 72 20 6e 3d 53 63 3b 67 63 3d 21 31 3b 53 63 3d 6e 75 6c 6c 7d 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 6d 28 31 39 38 29 29 3b 54 63 7c 7c 28 54 63 3d 21 30 2c 75 65 3d 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 62 28 61 29 7b 76 61 72 20 62 3d 61 2c 63 3d 61 3b 69 66 28 61 2e 61 6c 74 65 72 6e 61 74 65 29 66 6f 72 28 3b 62 2e 72 65 74 75 72 6e Data Ascii: tion jj(a,b,c,d,e,f,g,h,k){gc=!1;Sc=null;kj.apply(lj,arguments)}function mj(a,b,c,d,e,f,g,h,k){jj.apply(this,arguments);if(gc){if(gc){var n=Sc;gc=!1;Sc=null}else throw Error(m(198));Tc\|\|(Tc=!0,ue=n)}}function nb(a){var b=a,c=a;if(a.alternate)for(;b.return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49725	142.250.186.68	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:03 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCMjRzgEIvtXOAQiB1s4BCMjczgEIiuDOAQiu5M4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:03 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:03 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BSS8P83Xw_FZutaMOe4MMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 09:15:03 UTC	87	IN	Data Raw: 66 31 63 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 75 73 61 61 20 64 61 74 61 20 62 72 65 61 63 68 20 73 65 74 74 6c 65 6d 65 6e 74 20 63 6c 61 69 6d 22 2c 22 73 74 61 74 65 20 66 61 72 6d 20 62 61 74 6d 61 6e 20 63 6f 6d 6d 65 72 63 69 61 6c 22 2c 22 73 61 6e 20 Data Ascii: f1c)]}'["",["usaa data breach settlement claim","state farm batman commercial","san
2025-03-14 09:15:03 UTC	1390	IN	Data Raw: 66 72 61 6e 63 69 73 63 6f 20 34 39 65 72 73 22 2c 22 73 69 6c 65 6e 74 20 68 69 6c 6c 20 66 20 72 65 76 65 61 6c 20 74 72 61 69 6c 65 72 22 2c 22 61 75 73 74 72 61 6c 69 61 6e 20 77 6f 6d 62 61 74 22 2c 22 63 75 62 73 20 64 6f 64 67 65 72 73 20 74 6f 6b 79 6f 20 73 65 72 69 65 73 22 2c 22 77 61 72 68 61 6d 6d 65 72 20 34 30 6b 20 73 70 61 63 65 20 6d 61 72 69 6e 65 20 33 22 2c 22 6a 6f 61 6e 6e 20 67 69 66 74 20 63 61 72 64 73 20 6e 6f 20 6c 6f 6e 67 65 72 20 61 63 63 65 70 74 65 64 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 Data Ascii: francisco 49ers","silent hill f reveal trailer","australian wombat","cubs dodgers tokyo series","warhammer 40k space marine 3","joann gift cards no longer accepted"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:group
2025-03-14 09:15:03 UTC	1390	IN	Data Raw: 6f 5a 6e 46 32 61 58 56 6b 59 6c 68 6b 57 48 52 74 61 47 78 4c 65 6b 6c 43 53 47 70 6c 63 44 59 76 62 31 4a 4c 52 33 4e 4a 5a 6b 74 6b 56 32 6f 7a 61 47 59 79 5a 6e 5a 50 63 56 4e 72 59 54 4e 78 63 46 49 33 57 6d 68 56 57 55 52 32 62 54 5a 30 59 6c 64 48 4f 47 51 34 57 57 4e 4b 57 44 41 30 63 33 4a 61 4e 6e 4d 32 4e 33 46 74 62 6c 4a 70 4f 56 46 6b 56 33 45 31 51 56 51 30 63 46 64 75 5a 54 56 53 56 33 4e 6f 52 44 6c 50 63 6b 31 4b 56 44 6c 79 4e 57 6c 58 5a 46 5a 78 4e 6b 46 68 55 44 56 6a 64 45 78 4e 61 6b 78 35 55 6c 52 57 54 6a 56 48 55 6c 4a 5a 54 57 55 72 56 57 6f 34 4d 55 4e 31 57 47 70 44 62 31 55 76 51 6b 78 49 55 55 5a 32 4d 6d 46 42 4e 6c 4a 43 57 58 4a 59 61 44 63 31 55 6b 64 74 56 54 4e 52 4d 33 56 78 56 57 59 77 4e 6b 74 71 55 6c 5a 55 54 45 Data Ascii: oZnF2aXVkYlhkWHRtaGxLeklCSGplcDYvb1JLR3NJZktkV2ozaGYyZnZPcVNrYTNxcFI3WmhVWUR2bTZ0YldHOGQ4WWNKWDA0c3JaNnM2N3FtblJpOVFkV3E1QVQ0cFduZTVSV3NoRDlPck1KVDlyNWlXZFZxNkFhUDVjdExNakx5UlRWTjVHUlJZTWUrVWo4MUN1WGpDb1UvQkxIUUZ2MmFBNlJCWXJYaDc1UkdtVTNRM3VxVWYwNktqUlZUTE
2025-03-14 09:15:03 UTC	1008	IN	Data Raw: 44 42 53 50 6d 64 7a 58 33 4e 7a 63 44 31 6c 53 6e 70 71 4e 48 52 45 55 44 46 55 59 33 64 4c 4f 48 46 79 54 6b 64 45 4d 45 56 70 4e 55 39 36 52 6b 35 4a 53 7a 42 79 54 56 4d 34 4e 48 4e 55 63 7a 56 59 54 55 78 47 54 55 78 54 62 30 64 42 53 6d 78 31 51 32 68 33 63 41 63 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 67 76 62 53 38 77 4f 44 56 6d 4e 68 49 53 56 32 39 74 59 6d 46 30 63 79 44 69 67 4a 51 67 51 57 35 70 62 57 46 73 4d 74 4d 4d 5a 47 46 30 59 54 70 70 62 57 46 6e 5a 53 39 71 63 47 56 6e 4f 32 4a 68 63 32 55 32 4e 43 77 76 4f 57 6f 76 4e 45 46 42 55 56 4e 72 57 6b 70 53 5a 30 46 43 51 56 46 42 51 55 46 52 51 55 4a 42 51 55 Data Ascii: DBSPmdzX3NzcD1lSnpqNHREUDFUY3dLOHFyTkdEMEVpNU96Rk5JSzByTVM4NHNUczVYTUxGTUxTb0dBSmx1Q2h3cAc\u003d","zl":10002},{"zl":10002},{"google:entityinfo":"CggvbS8wODVmNhISV29tYmF0cyDigJQgQW5pbWFsMtMMZGF0YTppbWFnZS9qcGVnO2Jhc2U2NCwvOWovNEFBUVNrWkpSZ0FCQVFBQUFRQUJBQU
2025-03-14 09:15:03 UTC	90	IN	Data Raw: 35 34 0d 0a 47 4a 71 56 55 31 49 52 7a 6c 53 56 57 4a 6a 62 6c 56 30 63 58 68 71 53 55 46 50 51 58 67 79 4f 55 74 48 55 7a 6b 30 62 47 4a 59 53 57 4d 7a 54 48 4e 6f 53 69 74 55 54 47 78 6f 4c 7a 4a 30 62 45 78 53 59 33 5a 61 63 46 56 72 56 57 46 54 54 54 46 70 62 0d 0a Data Ascii: 54GJqVU1IRzlSVWJjblV0cXhqSUFPQXgyOUtHUzk0bGJYSWMzTHNoSitUTGxoLzJ0bExSY3ZacFVrVWFTTTFpb
2025-03-14 09:15:03 UTC	1390	IN	Data Raw: 36 66 63 0d 0a 31 6c 51 64 57 52 78 62 58 4a 69 61 6e 70 44 4e 48 68 4c 61 6b 74 6b 54 32 4e 42 59 58 59 33 4e 6a 46 54 4d 6d 4e 71 4d 30 74 70 57 46 70 76 65 55 35 70 53 33 45 72 61 55 39 7a 53 56 4e 55 61 55 49 77 65 56 42 4c 61 44 42 42 61 6e 64 71 63 57 46 45 62 54 42 46 63 58 68 70 57 45 31 74 64 30 6c 51 5a 69 74 51 4d 48 49 33 64 33 52 61 65 55 64 5a 59 58 4e 46 53 45 4a 48 64 7a 6c 68 64 7a 52 55 5a 46 64 73 65 47 4e 79 59 6b 74 42 51 58 42 5a 63 56 64 4b 64 31 63 33 4e 79 74 6b 55 31 70 54 4f 45 5a 4d 52 6a 42 51 54 30 63 79 65 58 68 51 63 45 64 52 4e 6a 64 4e 63 44 4a 43 4b 33 63 78 64 44 68 4b 54 45 68 53 59 54 49 34 62 47 78 48 51 6b 68 49 63 30 56 59 63 31 42 4c 61 6e 56 49 64 30 6c 30 64 6b 68 35 55 56 64 61 56 6b 4e 4c 55 33 68 61 62 53 73 Data Ascii: 6fc1lQdWRxbXJianpDNHhLaktkT2NBYXY3NjFTMmNqM0tpWFpveU5pS3EraU9zSVNUaUIweVBLaDBBandqcWFEbTBFcXhpWE1td0lQZitQMHI3d3RaeUdZYXNFSEJHdzlhdzRUZFdseGNyYktBQXBZcVdKd1c3NytkU1pTOEZMRjBQT0cyeXhQcEdRNjdNcDJCK3cxdDhKTEhSYTI4bGxHQkhIc0VYc1BLanVId0l0dkh5UVdaVkNLU3habSs
2025-03-14 09:15:03 UTC	405	IN	Data Raw: 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 22 32 31 39 37 32 32 34 32 30 33 35 37 39 34 33 37 36 32 35 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 30 2c 36 30 31 2c 36 30 30 2c 35 35 34 2c 35 35 33 2c 35 35 32 2c 35 35 31 2c 35 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 2c 31 30 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c Data Ascii: :10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"2197224203579437625","google:suggestrelevance":[1250,601,600,554,553,552,551,550],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308,10],[3,143,362,308],[3,143,362,308],[3,143,
2025-03-14 09:15:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	52736	104.18.186.31	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:03 UTC	662	OUT	GET /npm/react-bootstrap@next/dist/react-bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://case-id-1000228256449.counselschambers.co.uk sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:03 UTC	1103	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=604800, s-maxage=43200 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 2.9.0-beta.1 x-jsd-version-type: version etag: W/"1d187-o2+OYezMEsMzpEcT3E+ubsFUj8Q" Age: 1001 x-served-by: cache-fra-eddf8230077-FRA, cache-lga21937-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2B%2F%2BcqWwlZvtXvCmnujFlhqHYZbGNFa6Me1KW2DxIkAm70uUFKvVAeGRv3koqui%2B5p%2F9%2FC9q1WyKAJ3rxqhGeoAGzqP9uI1PbSMGUrOMKrrJpcSgqywYAAEHlblL8Va8zGI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa140b5541e7-EWR
2025-03-14 09:15:03 UTC	266	IN	Data Raw: 37 62 31 63 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 61 63 74 2d 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 2d 64 6f 6d 22 29 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 72 65 61 63 Data Ascii: 7b1c/! For license information please see react-bootstrap.min.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("react"),require("react-dom")):"function"==typeof define&&define.amd?define(["reac
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 6f 6d 22 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 52 65 61 63 74 42 6f 6f 74 73 74 72 61 70 3d 74 28 72 65 71 75 69 72 65 28 22 72 65 61 63 74 22 29 2c 72 65 71 75 69 72 65 28 22 72 65 61 63 74 2d 64 6f 6d 22 29 29 3a 65 2e 52 65 61 63 74 42 6f 6f 74 73 74 72 61 70 3d 74 28 65 2e 52 65 61 63 74 2c 65 2e 52 65 61 63 74 44 4f 4d 29 7d 28 73 65 6c 66 2c 28 28 65 2c 74 29 3d 3e 28 28 29 3d 3e 7b 76 61 72 20 6e 3d 7b 38 31 34 3a 28 65 2c 74 29 3d 3e 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d Data Ascii: om"],t):"object"==typeof exports?exports.ReactBootstrap=t(require("react"),require("react-dom")):e.ReactBootstrap=t(e.React,e.ReactDOM)}(self,((e,t)=>(()=>{var n={814:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function o(){for(var e=[]
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 76 61 72 20 6f 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 6f 29 7b 76 61 72 20 74 3d 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 3b 6e 75 6c 6c 21 3d 74 26 26 28 6f 3d 74 29 7d 7d 29 29 2c 6f 7d 29 29 7d 3b 76 61 72 20 72 2c 6f 3d 28 72 3d 6e 28 38 34 34 29 29 26 26 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 72 3a 7b 64 65 66 61 75 6c 74 3a 72 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 38 34 34 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 Data Ascii: =arguments[r];var o=null;return t.forEach((function(e){if(null==o){var t=e.apply(void 0,n);null!=t&&(o=t)}})),o}))};var r,o=(r=n(844))&&r.__esModule?r:{default:r};e.exports=t.default},844:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 5f 4e 4f 54 5f 50 41 53 53 5f 54 48 49 53 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 22 7d 2c 33 35 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 38 37 29 2c 6f 3d 36 30 31 30 33 3b 69 66 28 74 2e 46 72 61 67 6d 65 6e 74 3d 36 30 31 30 37 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 66 6f 72 29 7b 76 61 72 20 61 3d 53 79 6d 62 6f 6c 2e 66 6f 72 3b 6f 3d 61 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 74 2e 46 72 61 67 6d 65 6e 74 3d 61 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 7d 76 61 72 20 73 3d 72 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f Data Ascii: _NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},356:(e,t,n)=>{"use strict";var r=n(787),o=60103;if(t.Fragment=60107,"function"==typeof Symbol&&Symbol.for){var a=Symbol.for;o=a("react.element"),t.Fragment=a("react.fragment")}var s=r.__SECRET_INTERNALS_DO_NOT_USE_OR_
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 2c 6f 2e 72 3d 65 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 3b 76 61 72 20 61 3d 7b 7d 3b 72 65 74 75 72 6e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 72 28 61 29 2c 6f 2e 64 28 61 2c 7b 41 63 63 6f 72 64 69 6f 6e 3a 28 29 3d 3e 4f 65 2c 41 63 63 6f 72 64 69 6f 6e 42 75 74 74 6f 6e 3a 28 29 3d 3e 79 65 Data Ascii: ,o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var a={};return(()=>{"use strict";o.r(a),o.d(a,{Accordion:()=>Oe,AccordionButton:()=>ye
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 3a 28 29 3d 3e 54 73 2c 4d 6f 64 61 6c 54 69 74 6c 65 3a 28 29 3d 3e 44 73 2c 4e 61 76 3a 28 29 3d 3e 57 73 2c 4e 61 76 44 72 6f 70 64 6f 77 6e 3a 28 29 3d 3e 77 69 2c 4e 61 76 49 74 65 6d 3a 28 29 3d 3e 46 73 2c 4e 61 76 4c 69 6e 6b 3a 28 29 3d 3e 48 73 2c 4e 61 76 62 61 72 3a 28 29 3d 3e 67 69 2c 4e 61 76 62 61 72 42 72 61 6e 64 3a 28 29 3d 3e 7a 73 2c 4e 61 76 62 61 72 43 6f 6c 6c 61 70 73 65 3a 28 29 3d 3e 71 73 2c 4e 61 76 62 61 72 4f 66 66 63 61 6e 76 61 73 3a 28 29 3d 3e 76 69 2c 4e 61 76 62 61 72 54 65 78 74 3a 28 29 3d 3e 62 69 2c 4e 61 76 62 61 72 54 6f 67 67 6c 65 3a 28 29 3d 3e 58 73 2c 4f 66 66 63 61 6e 76 61 73 3a 28 29 3d 3e 70 69 2c 4f 66 66 63 61 6e 76 61 73 42 6f 64 79 3a 28 29 3d 3e 74 69 2c 4f 66 66 63 61 6e 76 61 73 48 65 61 64 65 72 Data Ascii: :()=>Ts,ModalTitle:()=>Ds,Nav:()=>Ws,NavDropdown:()=>wi,NavItem:()=>Fs,NavLink:()=>Hs,Navbar:()=>gi,NavbarBrand:()=>zs,NavbarCollapse:()=>qs,NavbarOffcanvas:()=>vi,NavbarText:()=>bi,NavbarToggle:()=>Xs,Offcanvas:()=>pi,OffcanvasBody:()=>ti,OffcanvasHeader
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 65 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 7b 76 61 72 20 72 3d 6e 2e 63 61 6c 6c 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 7d 28 65 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f Data Ascii: function(e,t){if("object"!=typeof e\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,"string");if("object"!=typeof r)return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(e)}(e);return"symbo
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 5d 29 3b 72 65 74 75 72 6e 28 30 2c 6d 2e 6a 73 78 29 28 67 2c 7b 76 61 6c 75 65 3a 73 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 7d 76 61 72 20 4f 3d 2f 28 5b 41 2d 5a 5d 29 2f 67 2c 52 3d 2f 5e 6d 73 2d 2f 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 4f 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 28 65 29 2e 72 65 70 6c 61 63 65 28 52 2c 22 2d 6d 73 2d 22 29 7d 76 61 72 20 50 3d 2f 5e 28 28 74 72 61 6e 73 6c 61 74 65 7c 72 6f 74 61 74 65 7c 73 63 61 6c 65 29 28 58 7c 59 7c 5a 7c Data Ascii: ]);return(0,m.jsx)(g,{value:s,children:a})};function C(e){return e&&e.ownerDocument\|\|document}var O=/([A-Z])/g,R=/^ms-/;function k(e){return function(e){return e.replace(O,"-$1").toLowerCase()}(e).replace(R,"-ms-")}var P=/^((translate\|rotate\|scale)(X\|Y\|Z\|
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 74 61 74 75 73 3d 3d 3d 49 3f 7b 73 74 61 74 75 73 3a 41 7d 3a 6e 75 6c 6c 7d 3b 76 61 72 20 61 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 61 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 75 70 64 61 74 65 53 74 61 74 75 73 28 21 30 2c 74 68 69 73 2e 61 70 70 65 61 72 53 74 61 74 75 73 29 7d 2c 61 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 75 6c 6c 3b 69 66 28 65 21 3d 3d 74 68 69 73 2e 70 72 6f 70 73 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 73 74 61 74 65 2e 73 74 61 74 75 73 3b 74 68 69 73 2e 70 72 6f 70 73 2e 69 6e 3f 6e 21 3d 3d 4c 26 26 6e 21 3d 3d 42 26 26 28 74 3d 4c 29 3a 6e 21 3d 3d 4c 26 26 6e 21 3d Data Ascii: tatus===I?{status:A}:null};var a=o.prototype;return a.componentDidMount=function(){this.updateStatus(!0,this.appearStatus)},a.componentDidUpdate=function(e){var t=null;if(e!==this.props){var n=this.state.status;this.props.in?n!==L&&n!==B&&(t=L):n!==L&&n!=
2025-03-14 09:15:03 UTC	1369	IN	Data Raw: 72 65 64 28 61 29 7d 29 29 7d 2c 61 2e 70 65 72 66 6f 72 6d 45 78 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 70 72 6f 70 73 2e 65 78 69 74 2c 6e 3d 74 68 69 73 2e 67 65 74 54 69 6d 65 6f 75 74 73 28 29 2c 72 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6e 6f 64 65 52 65 66 3f 76 6f 69 64 20 30 3a 44 28 29 2e 66 69 6e 64 44 4f 4d 4e 6f 64 65 28 74 68 69 73 29 3b 74 3f 28 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 45 78 69 74 28 72 29 2c 74 68 69 73 2e 73 61 66 65 53 65 74 53 74 61 74 65 28 7b 73 74 61 74 75 73 3a 46 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 6f 70 73 2e 6f 6e 45 78 69 74 69 6e 67 28 72 29 2c 65 2e 6f 6e 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 6e 2e 65 78 69 74 2c 28 66 75 6e 63 74 69 6f Data Ascii: red(a)}))},a.performExit=function(){var e=this,t=this.props.exit,n=this.getTimeouts(),r=this.props.nodeRef?void 0:D().findDOMNode(this);t?(this.props.onExit(r),this.safeSetState({status:F},(function(){e.props.onExiting(r),e.onTransitionEnd(n.exit,(functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	52739	157.240.251.9	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:03 UTC	778	OUT	GET /rsrc.php/v3/y4/r/lCgIhoPdDwe.png?_nc_eui2=AeEHhRnoC5WMGsis9w3OX_xmipu6QNTZOaaKm7pA1Nk5pm0Io5KHk3e2v5hMgnZRXyR3jgQllPVtTyYbHbAwAVOK HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:04 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:15:04 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:15:04 UTC	3364	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4b 4a 6e 54 75 75 71 4d 71 67 52 47 30 72 77 4b 51 7a 32 54 41 6b 4f 50 4a 5a 58 69 62 69 4a 48 59 6f 6c 70 71 77 72 58 54 39 65 62 36 45 4e 41 38 6b 45 78 71 4a 79 67 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4c 4d 65 4f 6d 79 6d 5f 71 4e 75 70 74 59 67 32 55 79 62 30 50 62 61 4e 75 79 30 37 61 43 73 41 44 31 4f 4e 47 7a 45 54 4d 73 6d 6c 49 4f 44 30 35 75 4f 6f 4a 62 6e 64 74 41 55 4e 54 6e 45 2d 48 49 68 67 71 46 56 77 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 49 79 74 69 47 42 67 7a 78 32 70 71 6c 51 46 79 55 75 4b 38 5a 71 37 71 38 47 72 4c 53 54 34 37 66 63 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcKJnTuuqMqgRG0rwKQz2TAkOPJZXibiJHYolpqwrXT9eb6ENA8kExqJyg"; e_fb_requesttime="AcLMeOmym_qNuptYg2Uyb0PbaNuy07aCsAD1ONGzETMsmlIOD05uOoJbndtAUNTnE-HIhgqFVw"; e_proxy="AcIytiGBgzx2pqlQFyUuK8Zq7q8GrLST47fc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	52737	157.240.251.9	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:03 UTC	778	OUT	GET /rsrc.php/v3/y0/r/ZDbWZ2ztKOk.png?_nc_eui2=AeGSAI0Ta_q8bhtXbB4BszOpKhxbmRQXpz0qHFuZFBenPVMKXXE6_r6aJu7KzG1uB7QXmT4PCyvmz-1AFJATsMyQ HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:04 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:15:04 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:15:04 UTC	3366	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 49 51 79 73 75 46 61 67 68 6c 6f 36 64 72 52 6c 76 79 72 59 6f 30 30 4c 72 78 42 39 46 38 46 7a 48 5f 53 5a 65 6a 4b 32 4f 58 31 4f 75 6d 6d 52 76 47 48 52 69 57 31 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4c 59 6e 49 51 45 56 44 6a 6c 4d 66 4c 52 42 4d 63 51 77 47 53 44 31 6b 38 6d 31 78 36 31 36 39 64 42 78 66 75 6a 6c 65 78 39 4a 76 56 54 66 50 64 4f 47 67 55 58 4b 5f 68 49 51 55 64 71 6f 30 6c 77 4e 66 48 30 70 77 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4a 49 6e 68 78 4c 68 61 59 63 42 77 6a 7a 69 52 58 4e 30 48 41 4e 62 69 41 50 70 69 4b 74 49 77 76 30 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcIQysuFaghlo6drRlvyrYo00LrxB9F8FzH_SZejK2OX1OummRvGHRiW1Q"; e_fb_requesttime="AcLYnIQEVDjlMfLRBMcQwGSD1k8m1x6169dBxfujlex9JvVTfPdOGgUXK_hIQUdqo0lwNfH0pw"; e_proxy="AcJInhxLhaYcBwjziRXN0HANbiAPpiKtIwv0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	52738	157.240.251.9	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:03 UTC	778	OUT	GET /rsrc.php/v3/y5/r/juHXA8pRbU4.png?_nc_eui2=AeGYPh0Yw0hm06jC3mdd5o4pqL-BzkD0hYqov4HOQPSFiuhqifH663RsjfKIYI5RkcrWYAJhnyRtt5m9gJlVNKSW HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:04 UTC	1295	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;font-src data: blob: 'self';img-src data: blob: 'self' https://*.google-analytics.com;media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-03-14 09:15:04 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-03-14 09:15:04 UTC	3364	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4b 62 37 4d 43 39 30 4d 55 66 65 79 71 76 63 66 73 70 66 41 41 75 5a 4f 51 4b 73 77 63 4c 64 65 70 31 49 63 61 6b 50 73 68 70 76 32 49 2d 30 4f 31 4c 59 71 76 6e 59 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4a 47 75 59 51 43 37 34 75 35 58 4d 6d 4e 49 7a 45 4f 7a 56 51 76 76 62 65 59 72 6e 75 46 36 70 6c 36 49 44 63 6e 64 4f 52 53 76 48 6c 5f 54 4c 43 78 69 72 42 49 73 46 43 7a 57 75 46 59 49 62 41 37 39 6d 67 47 2d 41 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4c 32 4c 30 4c 4d 73 42 67 31 45 59 5a 48 55 75 6b 51 70 53 62 68 56 72 73 33 65 6e 59 6d 5f 65 5a 47 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcKb7MC90MUfeyqvcfspfAAuZOQKswcLdep1IcakPshpv2I-0O1LYqvnYQ"; e_fb_requesttime="AcJGuYQC74u5XMmNIzEOzVQvvbeYrnuF6pl6IDcndORSvHl_TLCxirBIsFCzWuFYIbA79mgG-A"; e_proxy="AcL2L0LMsBg1EYZHUukQpSbhVrs3enYm_eZG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	52741	104.21.70.234	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:04 UTC	469	OUT	GET /190947209_1002880900116912_4375102209501448340_n-8956b37a.jpg HTTP/1.1 Host: case-id-1000228256449.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:04 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:04 GMT Content-Type: image/jpeg Content-Length: 32608 Connection: close Last-Modified: Sun, 09 Feb 2025 14:24:06 GMT ETag: "7f60-62db65825aadf" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sfx9SaksifCy94tG22iNzpelaVjOivqNmNrt%2BP6t%2B9Gy%2B8C6JfxHfeoH5aaGjdTnN5cYbS0fnW0rVJv8rRtiTBhITTirlF7b%2B4JJ%2BSosRyAg6O0nPktxfv9jF4N5CNJ7JbtUtlTlDMsHX%2BTZFd2Tv73fy9YKwCtZ8IET69YUig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa18bbd9c472-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1484&min_rtt=1478&rtt_var=566&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1041&delivery_rate=1910994&cwnd=229&unsent_bytes=0&cid=ff2933ed922f9f20&ts=154&x=0"
2025-03-14 09:15:04 UTC	422	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3c 8f df 25 56 c3 df 2e 28 63 2f 36 2d 66 3e b6 de 6a 3c f7 cd c3 53 2f 9e ec 5a fc bc f6 f2 9e 71 59 43 27 9e e4 3c f4 00 00 00 00 00 00 00 00 00 01 19 23 57 11 b9 6a ad 96 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 0f 50 43 28 dd f3 59 0f 48 ec e2 d7 e3 38 dd 8a b7 9d 23 37 91 25 e6 7e 62 3d f0 f4 00 00 00 00 19 4b 03 c5 c9 b5 a8 4b 73 36 81 09 74 0d 2d Data Ascii: <%V.(c/6-f>j<S/ZqYC'<#WjPC(YH8#7%~b=KKs6t-
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: 01 09 bc f7 c3 ed 1b 3a 57 79 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 b9 56 71 e7 c6 95 00 00 00 00 00 ea 86 56 88 00 00 ad 36 9f 87 69 2a 56 cb 3f 43 5d af e8 f9 cf a7 f9 f0 d5 cf 00 00 00 00 0e c3 75 a5 dd 60 6a ea 78 2e f7 82 bb 5e 6c f0 cf 46 90 7a 00 04 d0 cd e7 bf 44 1f 37 b3 c3 69 b7 3a 6d 9c db 02 e5 70 00 00 00 00 6e b4 bb fe 1d 7a b1 83 aa 00 0e 5b a9 af c3 be a6 5a 31 50 bd b3 6b f1 36 58 eb 32 f3 db 36 6a db 94 21 f9 27 d2 3e 6f a1 44 2c d7 01 e7 be 1f 73 b1 5e c7 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 01 83 ca dc e7 51 ae a9 72 b6 55 a3 a5 73 1d 2f 59 cf 6c e5 52 1f 49 86 00 00 00 00 90 eb 37 5a 7d c6 06 ae a7 82 ef f8 6b 95 d9 e5 9e 8d 38 92 bd f2 24 a2 24 a2 Data Ascii: :WySVqV6i*V?C]u`jx.^lFzD7i:mpnz[Z1Pk6X26j!'>oD,s^9<PQrUs/YlRI7Z}k8$$
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: 00 e8 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb d6 39 67 5d 6a f5 dc 7d ca d6 35 98 e3 6f 80 47 d0 32 b3 51 ef 99 4f 5a f4 Data Ascii: y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^9g]j}5oG2QOZ
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 02 3c 33 c2 70 00 00 00 00 00 00 00 00 00 02 bf 3f d4 3b 73 e1 77 db c7 5e 78 e4 55 ee 1e 7a 00 00 00 00 00 01 ef cc fe 99 f2 ee fc a9 0b 7c 00 00 06 78 66 66 f7 d9 c7 0f 72 1e 65 8e 24 d9 55 c4 bb 85 41 3c 58 a3 eb e8 bf 3a ec b8 75 ea c5 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b1 c8 94 42 60 00 ab 6a ac a3 cf 8d 3a 00 00 00 00 01 d5 0c ad 10 00 8f 0c f0 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 5d 6a 51 f9 13 a7 e7 b4 2a c2 64 62 00 00 00 00 00 00 07 43 cf 75 7c e5 d9 0a 36 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 63 91 28 84 c0 01 56 d5 59 47 9f 1a 74 00 00 00 00 03 aa 19 5a 20 01 1e 19 e1 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 21 4f 2c 77 32 f1 d9 Data Ascii: >4T2@<3p?;sw^xUz\|xffre$UA<X:u;B`j:r]jQ*dbCu\|6c(VYGtZ 8!O,w2
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: fe d6 48 45 61 61 8a 83 0f 74 4f 89 90 ae 4b 7f 19 8f 2d e9 34 77 97 9d e8 a3 24 a5 75 97 6f 89 29 33 19 a8 d3 4d 83 d9 6c ee 6b fa 4c 8f 17 0a 9b 1e f5 fa 4b 98 88 a9 7a 43 92 15 e9 68 b4 5a 22 ce 72 38 42 d2 e2 02 92 4b 43 ed 1c 67 f8 25 df a9 1f 19 54 a2 79 d8 50 53 10 29 fc 14 1d 46 63 2e 47 75 a5 d2 e3 2d 86 04 da 40 62 14 89 0a 2a 1b b8 48 a5 c8 60 ba 62 1e 30 ff 00 a1 13 2e 18 d3 ba 34 ee 8d 3b a3 4e e8 d3 ba 34 ee 89 2c b8 96 38 24 46 a5 32 d9 32 d0 95 20 a3 32 b5 a9 c5 82 2e a8 72 8e 3b 9e 95 56 2f 61 27 c1 41 62 bd 3b a3 4e e8 d3 ba 34 ee 8d 3b a3 4e e8 c3 0f 47 97 81 32 de 3b 0e 3a a2 5a 1e c4 ea f0 89 be 9a 73 2e 2e 9f a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 46 9d d1 a7 74 69 dd 1a 77 Data Ascii: HEaatOK-4w$uo)3MlkLKzChZ"r8BKCg%TyPS)Fc.Gu-@b*H`b0.4;N4,8$F22 2.r;V/a'Ab;N4;NG2;:Zs..tiwFtiwFtiwFtiwFtiw
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: 90 33 96 19 5e 1b b2 3c 1c a9 69 b6 5e e5 27 e7 b1 3e 46 96 09 99 99 8a 5c 95 46 9d b3 59 09 ef b6 f9 fb b6 58 12 cf 15 73 48 f0 3a 75 4f 3b 8a fa bd 1f 48 35 19 a5 b2 b1 1e ee 2f 25 04 2e 6d 01 2e 92 94 da ee 4e dc 8f 07 10 fb f4 d4 d3 83 db 94 9f 9e c5 55 a3 7a 9b e9 05 a3 7a 76 cd 64 27 be da ff 00 93 aa 3c 13 f8 14 ca 96 6f 11 c3 c5 61 67 82 42 9c 35 21 94 e0 95 28 dc 51 30 a0 96 89 26 d9 e0 bd b9 1e 0e 22 ba aa 49 c5 8d ca 4f cf 66 b9 05 a8 ae 45 8c b9 72 29 f4 c6 e0 27 66 b2 13 df 6d 1e e6 e1 fb fe 07 61 4c a8 6a 53 c2 3e e1 df 1b 25 89 ad 16 1a 9d b9 0c a7 02 cf 30 db a6 a5 34 9c 55 b7 23 c1 ca 90 8c c8 fb 94 9f 9e cf f9 27 c2 89 ff 00 6d b5 59 09 ef b4 e1 e0 da 7d 92 7e e7 f8 28 51 a1 c8 d5 45 e7 70 55 f2 0f a8 30 5f c5 49 25 12 92 69 35 3b 72 5a Data Ascii: 3^<i^'>F\FYXsH:uO;H5/%.m.NUzzvd'<oagB5!(Q0&"IOfEr)'fmaLjS>%04U#'mY}~(QEpU0_I%i5;rZ
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: 65 5b ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b 11 e8 ed 36 64 58 17 14 b6 24 78 38 8a e3 29 29 5a 5e a6 85 25 48 3d b6 63 b8 f9 b1 05 b6 b8 06 76 a4 cf 13 e3 24 8d 4a 8a c1 46 8f f9 45 df ae 47 83 88 ae fc 77 1a 43 a9 7a 9c a4 83 23 49 f5 b4 cb 8f 1b 34 e4 20 76 2e 05 49 dc a8 3c 6c 31 14 96 52 72 ff 00 2c bb f5 c8 f0 71 15 df 92 eb 2d bc 4f 53 96 90 64 64 7e ad b2 e3 a6 cd 39 29 04 44 92 e1 56 9d c5 ce 1d a6 63 28 13 64 2e 49 0a 6c 52 24 fe 59 77 eb 91 e0 e2 2b bf 2d d6 1b 78 9e a7 2d 21 0c 3a b5 33 4d 4a 41 11 24 b8 93 d7 7c ed 94 a6 e1 96 63 2c c6 5a 86 59 8c a3 19 43 2c 85 89 18 a4 86 61 0c c3 06 a3 3f 4a 5a ae a7 fe 59 77 eb 91 e0 e2 2b bf ea 4c 4d b3 36 49 56 8c d3 19 a3 34 66 8c d3 19 8a Data Ascii: e[Cqf-}b?23+)#I tK6dX$x8))Z^%H=cv$JFEGwCz#I4 v.I<l1Rr,q-OSdd~9)DVc(d.IlR$Yw+-x-!:3MJA$\|c,ZYC,a?JZYw+LM6IV4f
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: 5c 4e 88 be 87 dc 1a 75 b8 14 eb a9 f1 4d fe db 84 2c 2a 05 ec a8 5a 81 07 6d 3a 66 5a a9 b3 00 c5 f2 54 35 be 22 4a 73 0b fe 13 db 84 c5 cf e2 75 aa 08 79 ba 87 dc 16 9b ab 70 29 d7 7c 01 e8 35 c5 a9 ae 91 a4 c1 0d 54 8c 85 c6 5c 77 58 7f ee 55 76 b5 dc 6e 7f 13 a6 7b f5 23 ea 9b a8 7d c1 69 42 da dc 0a 75 a1 0d fd 16 bb 09 4c 78 7e da 21 0f 14 d3 1c 1f ba 20 72 7a af 50 7c 5c fe 27 5b a9 6c b6 6e a1 f7 05 c2 da dc 0a 75 ac dd 37 6f 48 12 c3 21 35 c1 c2 45 a4 81 ba 3d 43 7e 11 aa 5c 9b b2 7b f1 76 7d 64 4c f9 37 3f 89 d4 23 b3 86 21 08 f8 b6 87 dc 1a 75 b8 14 eb 5a 21 b2 85 ad d6 63 f2 cf fe 2d fb d4 aa 18 8c bb cb 97 fa 5f ed 74 fd 56 11 0e d9 1e a2 98 13 28 d5 2e d0 7f 13 ad 0b a9 64 3a 6d a1 f7 06 9d 6e 05 3a c6 b7 11 85 5c 43 00 b9 ba f4 aa 60 30 76 Data Ascii: \NuM,*Zm:fZT5"Jsuyp)\|5T\wXUvn{#}iBuLx~! rzP\|\'[lnu7oH!5E=C~\{v}dL7?#!uZ!c-_tV(.d:mn:\C`0v
2025-03-14 09:15:04 UTC	1369	IN	Data Raw: 56 33 ec 40 8a 2b c1 5e 0a f0 4e 22 9c 21 22 e0 d0 b4 8b d1 90 b9 63 e5 72 c7 ca e5 8f 94 db 36 79 95 35 99 a2 aa 9c 61 89 c2 30 9c c2 dd fb 10 11 1c 29 c0 04 46 06 75 0d 30 ad 51 df 62 bc 06 4d 5f c6 c2 f7 5a 1a ef 18 a5 7d c6 17 27 bd cf 35 76 95 8a 73 7a e1 c7 3f 4e 01 ba 90 66 a7 81 d1 1f d7 08 2c ee 94 fe 93 5b f4 14 94 25 18 41 d9 18 9c 13 86 b0 28 9e 15 e0 0a 27 03 3a 86 a4 8d be d2 d5 0c 40 bc 30 a8 61 64 2d ba cc 56 bf 84 e9 d9 be 50 9b b6 29 fe b0 8f 70 a2 2d f2 bd 26 78 41 a5 64 dd b0 39 81 db a7 c0 46 da 87 6c 93 64 20 a7 3c 34 54 ae 61 bf 49 92 87 1a 63 67 50 d5 ba da d6 98 ed 7f 09 c5 4c 36 6f 94 26 6d 8a 6c dd 44 ef 18 43 ca be 51 71 38 e4 88 39 39 a5 a6 87 4e 51 47 27 bc be 8d fa 0a a4 e6 9a e0 d5 1b ef 0a e2 67 50 d6 81 d7 a3 07 15 af e1 Data Ascii: V3@+^N"!"cr6y5a0)Fu0QbM_Z}'5vsz?Nf,[%A(':@0ad-VP)p-&xAd9Fld <4TaIcgPL6o&mlDCQq899NQG'gP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	52742	104.26.8.44	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:04 UTC	558	OUT	OPTIONS /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://case-id-1000228256449.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:05 UTC	1141	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: origin access-control-allow-origin: https://case-id-1000228256449.counselschambers.co.uk access-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with access-control-allow-methods: GET, POST, OPTIONS access-control-max-age: 86400 X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o9HpG%2Bs1Y%2FpMAESkYPmSb7dKQtZ2QkG%2FAcZOAcXZlApubZBDk5aX%2F6C0JJeEvdSBbPaRp%2FM9f4Fz21MRSJhn7FZbnf6ZgtJyHkjHjOGjazHZgSnEKWS1Ihsf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa1baa9d8c45-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3369&min_rtt=1971&rtt_var=3348&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2790&recv_bytes=1134&delivery_rate=1449131&cwnd=206&unsent_bytes=0&cid=dd74db2f3e29a671&ts=419&x=0"
2025-03-14 09:15:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	52748	104.26.8.44	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:05 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228256449.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:05 UTC	1004	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:05 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: POST, GET, HEAD, OPTIONS, OPTIONS X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228256449.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHkqPy267LgXrnCm4jqptQaiqmKOcESZlipio2m3xwhudzAxo5K5mY66COqpcz1aKRxHlIVWnCoKBEvZ7ohhA5Tr6O6MmEG9FI1miGzgXyNLZq2SzS2RjXxP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa210f4319aa-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3629&min_rtt=1851&rtt_var=3929&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=1211&delivery_rate=1577525&cwnd=127&unsent_bytes=0&cid=98fdf01bca4df417&ts=300&x=0"
2025-03-14 09:15:05 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	52750	104.26.9.44	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:06 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:06 UTC	924	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:06 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: OPTIONS, OPTIONS, GET, POST, HEAD X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MrBQAxQSRPySBUT4ZTEr%2FWBGCeS4NRFcWNAU9QSxxWdracMsEH0an7qCvynb6he%2F8yvmilfPy8xObWuLSkNW2YWv9xzAInElBhKxj5CYA5QxIumT3CGCjfHq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa25fcc24308-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3134&min_rtt=1688&rtt_var=3350&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2789&recv_bytes=950&delivery_rate=1729857&cwnd=218&unsent_bytes=0&cid=c3a4f955c73070ff&ts=297&x=0"
2025-03-14 09:15:06 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	52752	104.21.80.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:08 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228256449.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:09 UTC	861	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:15:09 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DQ72Jpps4mbPJ3iJ7HgWooVUpQKd3gu0luqbMDQUDJgO4WccwNQYOQ%2FmLB7Y8zLbC2A2xuiKTsjeS9Dg5TR98fKulDmdvy9CsBboRhRIC2qIJAE7EBdc3DreVURlFsstw4NtWUmS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa33fbc8de94-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1612&min_rtt=1604&rtt_var=619&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1155&delivery_rate=1743283&cwnd=173&unsent_bytes=0&cid=ac4677b18d56bbc6&ts=421&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	52753	104.21.80.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:09 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 55 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228256449.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:09 UTC	55	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 35 51 62 38 7a 52 38 6e 66 41 6e 43 4b 75 41 68 4a 6c 45 75 66 2f 6f 70 4f 7a 72 70 55 4c 44 6f 6d 2b 4f 4a 51 2f 63 70 55 73 41 3d 22 7d Data Ascii: {"data":"5Qb8zR8nfAnCKuAhJlEuf/opOzrpULDom+OJQ/cpUsA="}
2025-03-14 09:15:09 UTC	878	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:09 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=790w%2FqUHQOD%2BhgVZSfn3hzIsAZRo%2FO0w%2F%2FKxu4hXrRttl8TJFSwE2baDdKNp8%2FvNLPZe%2BuXbU6p470ZhEziW7IWruYIqhEC41KjAOf31QllVqjTkir%2Fbaj1Ildfw44mtKfnxHBQS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa397b8423ce-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2417&min_rtt=2407&rtt_var=924&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1387&delivery_rate=1170809&cwnd=72&unsent_bytes=0&cid=1ce3a4458f444ed1&ts=408&x=0"
2025-03-14 09:15:09 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:15:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	52754	104.21.48.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:10 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:10 UTC	842	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:15:10 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ggibqmrjprRwi53jwigc%2B4VfKxSmDUgL1djjGj7Z%2BRsJ9XYhcMZDEeWomBy0GR%2FpYLYjZqVMEO4pjSEQ3KIkCb%2BsMHGlwdupGrFhi90VVt%2BMWoWoLAIHv88Tuf4wzC%2FCq8wME6pp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa3f3cc66a56-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1567&min_rtt=1550&rtt_var=616&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=970&delivery_rate=1727810&cwnd=187&unsent_bytes=0&cid=98b72e20ee57e9af&ts=416&x=0"
2025-03-14 09:15:10 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 66 62 35 35 34 34 35 35 35 33 62 37 62 33 39 35 34 64 37 66 31 37 32 61 64 39 33 62 62 35 32 30 2d 64 33 35 30 31 39 36 38 64 31 35 63 61 39 32 61 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-fb55445553b7b3954d7f172ad93bb520-d3501968d15ca92a-00"}
2025-03-14 09:15:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	52755	35.190.80.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:11 UTC	554	OUT	OPTIONS /report/v4?s=ggibqmrjprRwi53jwigc%2B4VfKxSmDUgL1djjGj7Z%2BRsJ9XYhcMZDEeWomBy0GR%2FpYLYjZqVMEO4pjSEQ3KIkCb%2BsMHGlwdupGrFhi90VVt%2BMWoWoLAIHv88Tuf4wzC%2FCq8wME6pp HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 09:15:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	52756	35.190.80.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:11 UTC	529	OUT	POST /report/v4?s=ggibqmrjprRwi53jwigc%2B4VfKxSmDUgL1djjGj7Z%2BRsJ9XYhcMZDEeWomBy0GR%2FpYLYjZqVMEO4pjSEQ3KIkCb%2BsMHGlwdupGrFhi90VVt%2BMWoWoLAIHv88Tuf4wzC%2FCq8wME6pp HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 402 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:11 UTC	402	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 30 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 38 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e 67 2e 63 6f Data Ascii: [{"age":0,"body":{"elapsed_time":901,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.48.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcing.co
2025-03-14 09:15:12 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:15:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	52758	172.67.168.191	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:19 UTC	791	OUT	GET /case-support.html HTTP/1.1 Host: case-id-1000228256449.counselschambers.co.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://case-id-1000228256449.counselschambers.co.uk/help.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:19 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 04 Mar 2025 15:39:24 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i0vtADMhJ1wOE2URaBarggRd9FTD37%2Fj0oEJdvO1i%2BCP8rs5dgJ7xo1EXsZHkt6RUi0y%2FQMsdn6IjtbuqQ1tbdPWST1mrng%2F%2BkowTxnGquh7kpvGHconbctVE70JDDGJVF%2FsoA4DdbUHkNMw9VgRyy4ngenhxHbX9%2BtedVxo8w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa76ad634217-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1552&min_rtt=1539&rtt_var=604&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1363&delivery_rate=1771844&cwnd=229&unsent_bytes=0&cid=9fd053cebec9b005&ts=405&x=0"
2025-03-14 09:15:19 UTC	478	IN	Data Raw: 33 37 63 65 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 44 41 41 41 41 41 77 43 41 59 41 41 41 42 58 41 76 6d 48 41 41 41 47 43 55 6c 45 51 56 52 34 58 75 32 58 65 34 68 55 56 52 7a 48 66 2f 66 4f 7a 4f 36 61 50 52 52 4a 4c 46 54 36 49 36 57 48 59 6c 59 51 68 45 6f 51 5a 41 38 77 71 54 38 4b 69 54 4a 33 33 5a 66 75 77 33 56 58 39 2b 47 34 75 31 71 43 46 Data Ascii: 37ce<html lang="en"><head> <meta charset="UTF-8"> <link rel="icon" type="image/svg+xml" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAYAAABXAvmHAAAGCUlEQVR4Xu2Xe4hUVRzHf/fOzO6aPRRJLFT6I6WHYlYQhEoQZA8wqT8KiTJ33Zfuw3VX9+G4u1qCF
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 45 72 34 41 69 41 52 59 68 6d 63 38 42 6a 38 44 33 53 4a 38 4a 52 41 53 65 78 4a 52 35 6d 32 67 4f 51 6e 2f 2f 45 54 68 30 53 6f 4a 77 30 74 63 75 62 35 66 6c 4a 37 50 35 6a 41 57 41 74 2b 43 4b 6c 41 42 39 6f 4f 77 45 6c 35 53 35 36 54 6e 67 78 4d 49 6e 41 45 66 51 2b 49 63 51 6b 65 73 77 78 74 51 59 65 74 6e 78 4c 55 35 76 49 52 71 72 30 53 56 51 48 35 65 72 42 61 4c 2b 77 37 77 70 59 55 41 69 43 79 64 55 45 44 4c 62 74 49 68 38 47 4f 43 34 47 33 67 63 64 58 58 6c 64 4f 38 46 61 46 48 5a 58 41 56 64 32 6e 58 56 76 4b 47 32 69 45 68 49 4d 46 77 6b 41 74 67 5a 70 49 64 61 70 38 70 75 4b 51 4e 33 44 4b 42 51 50 4d 72 57 49 51 43 49 6f 78 5a 77 41 63 53 33 68 41 53 43 79 41 51 56 67 55 38 65 54 37 68 4b 66 41 4c 32 68 54 6b 34 4a 4a 65 79 4d 79 6c 4a 41 56 Data Ascii: Er4AiARYhmc8Bj8D3SJ8JRASexJR5m2gOQn//ETh0SoJw0tcub5flJ7P5jAWAt+CKlAB9oOwEl5S56TngxMInAEfQ+IcQkeswxtQYetnxLU5vIRqr0SVQH5erBaL+w7wpYUAiCydUEDLbtIh8GOC4G3gcdXXldO8FaFHZXAVd2nXVvKG2iEhIMFwkAtgZpIdap8puKQN3DKBQPMrWIQCIoxZwAcS3hASCyAQVgU8eT7hKfAL2hTk4JJeyMylJAV
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 4c 48 41 46 4e 7a 4d 43 58 43 7a 4b 62 67 4c 65 42 4f 45 50 77 4e 63 35 4b 44 51 50 71 2b 72 41 6e 68 66 45 50 72 36 6e 6a 47 39 34 6e 49 32 6d 61 74 36 36 47 36 30 65 70 64 4a 41 45 53 59 68 59 51 50 47 6b 77 75 4a 67 6a 57 43 76 61 43 58 65 43 50 42 4f 47 44 34 44 35 79 57 41 69 66 69 66 43 2f 6a 62 63 4f 4d 79 37 51 4c 53 43 41 4d 36 6e 76 6c 4c 36 78 2f 77 32 71 47 76 77 51 41 73 4e 6f 49 61 45 49 2b 49 45 6d 5a 7a 63 50 69 42 52 35 69 56 49 73 68 4a 2b 44 32 52 2f 51 6a 4e 6e 6e 39 68 46 55 33 69 4d 46 51 4c 2f 67 4d 77 6f 43 78 67 34 4a 39 4c 68 45 6a 62 6d 76 33 65 43 6e 46 41 52 32 30 6e 55 57 5a 76 34 70 68 49 2b 4f 74 34 39 42 52 57 39 63 6f 47 6f 77 4c 75 41 4e 67 54 44 54 41 6f 6e 4a 36 75 4b 63 42 5a 6f 64 43 4f 77 42 47 71 47 75 58 36 4c 7a Data Ascii: LHAFNzMCXCzKbgLeBOEPwNc5KDQPq+rAnhfEPr6njG94nI2mat66G60epdJAESYhYQPGkwuJgjWCvaCXeCPBOGD4D5yWAififC/jbcOMy7QLSCAM6nvlL6x/w2qGvwQAsNoIaEI+IEmZzcPiBR5iVIshJ+D2R/QjNnn9hFU3iMFQL/gMwoCxg4J9LhEjbmv3eCnFAR20nUWZv4phI+Ot49BRW9coGowLuANgTDTAonJ6uKcBZodCOwBGqGuX6Lz
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 76 69 e1 bb 87 6e 20 43 53 53 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 63 73 73 2f 69 6e 74 6c 54 65 6c 49 6e 70 75 74 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 54 68 c6 b0 20 76 69 e1 bb 87 6e 20 4a 61 76 61 53 63 72 69 70 74 20 2d 2d 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 40 31 37 2e 30 2e 31 39 2f 62 75 69 6c 64 2f 6a 73 2f 69 6e 74 6c 54 Data Ascii: vin CSS --> <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css"> ... Th vin JavaScript --> <script src="https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.19/build/js/intlT
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 6c 6f 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 Data Ascii: .ns-block-ui .ns-block-ui-container .ns-block-ui-loader-container { position: absolute; top: 50%; left: 0; right: 0; text-align: center;
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2e 62 6c 6f 63 6b 69 6e 67 20 2e 6e 73 2d 62 6c 6f 63 6b 2d 75 69 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 66 61 64 65 6f 75 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d Data Ascii: sition: fixed; top: 0; right: 0; bottom: 0; left: 0; } .ns-block-ui.blocking .ns-block-ui-container:not(.fadeout) { opacity: 1; }
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 20 66 72 6f 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 Data Ascii: from { opacity: 1; } to { opacity: 0; } } @-webkit-keyframes fadeInRTL1 { 0% { opacity: 0; -webkit-transform: tr
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 Data Ascii: orm: translateX(20px); } 40% { opacity: 1; -webkit-transform: translateX(0px); transform: translateX(0px); } 60% { opacity: 1;
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 52 54 4c 33 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 32 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 Data Ascii: opacity: 1; } 80% { opacity: 0; } } @keyframes fadeInRTL3 { 0% { opacity: 0; } 20% { opacity
2025-03-14 09:15:19 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 7a 2d 69 6e 64 65 78 2d 74 6f 70 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 33 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 2d 2d 73 61 76 69 6f 72 2d 6f 76 65 72 6c 61 79 2d 70 6f 73 69 74 69 6f 6e 2d 73 74 61 74 Data Ascii: mportant; } .--savior-overlay-z-index-top { z-index: 2147483643 !important; } .--savior-overlay-position-relative { position: relative; } .--savior-overlay-position-stat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	52759	104.18.186.31	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:20 UTC	656	OUT	GET /npm/intl-tel-input@17.0.19/build/css/intlTelInput.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:20 UTC	1106	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:20 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 17.0.19 x-jsd-version-type: version etag: W/"4ad5-/7iiVjPE3eq4HRsXQqwv0LRCpMY" Age: 4236628 x-served-by: cache-fra-etou8220138-FRA, cache-lga21954-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qkKBAPURX2dAV66IdtYpWG94qMBoM7NjGKFO4gvhicWBZu5JcjEFodv4%2BBTy8wFXyoyJR%2FUSqMSP%2Fc%2BZUN%2FKgcJmvRo3dAmkoUF4HbNy%2BgLQ3%2BxQhY3RhRd%2FdYWeQHhfNek%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa7c482fc344-EWR
2025-03-14 09:15:20 UTC	263	IN	Data Raw: 34 61 64 35 0d 0a 2e 69 74 69 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 69 74 69 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 69 74 69 5f 5f 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 74 69 5f 5f 76 2d 68 69 64 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 69 74 69 20 69 6e 70 75 74 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 Data Ascii: 4ad5.iti{position:relative;display:inline-block}.iti *{box-sizing:border-box;-moz-box-sizing:border-box}.iti__hide{display:none}.iti__v-hide{visibility:hidden}.iti input,.iti input[type=tel],.iti input[type=text]{position:relative;z-index:0;margin-top:0
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 36 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 3a 31 70 78 7d 2e 69 74 69 5f 5f 73 65 6c 65 63 74 65 64 2d 66 6c 61 67 7b 7a 2d 69 6e 64 65 78 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 20 36 70 78 20 30 20 38 70 78 7d 2e 69 74 69 5f 5f Data Ascii: nt;margin-bottom:0!important;padding-right:36px;margin-right:0}.iti__flag-container{position:absolute;top:0;bottom:0;right:0;padding:1px}.iti__selected-flag{z-index:1;position:relative;display:flex;align-items:center;height:100%;padding:0 6px 0 8px}.iti__
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 70 61 72 61 74 65 2d 64 69 61 6c 2d 63 6f 64 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d 64 69 61 6c 2d 63 6f 64 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 32 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 2e 69 74 69 5f 5f 66 6c 61 67 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 69 74 69 2d 2d 73 65 70 61 72 61 74 65 2d 64 69 61 6c 2d 63 6f 64 65 20 2e 69 74 69 5f 5f 66 6c 61 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 30 7d 2e 69 74 69 2d 2d 61 6c 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 20 2e 69 74 Data Ascii: parate-dial-code input[type=tel],.iti--separate-dial-code input[type=text]{padding-right:6px;padding-left:52px;margin-left:0}.iti--allow-dropdown .iti__flag-container,.iti--separate-dial-code .iti__flag-container{right:auto;left:0}.iti--allow-dropdown .it
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 74 68 3a 31 33 70 78 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 76 61 7b 77 69 64 74 68 3a 31 35 70 78 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 2e 69 74 69 5f 5f 66 6c 61 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 35 36 35 32 70 78 20 31 35 70 78 7d 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 61 63 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 61 64 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 32 70 78 Data Ascii: th:13px}.iti__flag.iti__va{width:15px}@media (-webkit-min-device-pixel-ratio:2),(min-resolution:192dpi){.iti__flag{background-size:5652px 15px}}.iti__flag.iti__ac{height:10px;background-position:0 0}.iti__flag.iti__ad{height:14px;background-position:-22px
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 34 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 66 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 36 30 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 67 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 38 32 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 68 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 35 30 34 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 62 69 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f Data Ascii: kground-position:-440px 0}.iti__flag.iti__bf{height:14px;background-position:-460px 0}.iti__flag.iti__bg{height:12px;background-position:-482px 0}.iti__flag.iti__bh{height:12px;background-position:-504px 0}.iti__flag.iti__bi{height:12px;background-positio
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 34 34 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 69 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 36 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 6b 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 38 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 6c 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 30 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 63 6d 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 Data Ascii: ht:15px;background-position:-944px 0}.iti__flag.iti__ci{height:14px;background-position:-961px 0}.iti__flag.iti__ck{height:10px;background-position:-983px 0}.iti__flag.iti__cl{height:14px;background-position:-1005px 0}.iti__flag.iti__cm{height:14px;backgr
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 34 32 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 63 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 34 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 65 7b 68 65 69 67 68 74 3a 31 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 36 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 67 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 38 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 65 68 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 35 31 31 70 78 20 30 7d 2e 69 74 Data Ascii: 423px 0}.iti__flag.iti__ec{height:14px;background-position:-1445px 0}.iti__flag.iti__ee{height:13px;background-position:-1467px 0}.iti__flag.iti__eg{height:14px;background-position:-1489px 0}.iti__flag.iti__eh{height:10px;background-position:-1511px 0}.it
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 32 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 6d 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 35 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 6e 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 37 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 70 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 39 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 67 71 7b 68 65 69 67 68 74 3a 31 34 70 78 Data Ascii: height:14px;background-position:-1929px 0}.iti__flag.iti__gm{height:14px;background-position:-1951px 0}.iti__flag.iti__gn{height:14px;background-position:-1973px 0}.iti__flag.iti__gp{height:14px;background-position:-1995px 0}.iti__flag.iti__gq{height:14px
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 2d 32 34 31 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 6f 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 33 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 71 7b 68 65 69 67 68 74 3a 31 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 35 37 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 72 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 34 37 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 69 73 7b 68 65 69 67 68 74 3a 31 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 35 30 31 70 Data Ascii: tion:-2413px 0}.iti__flag.iti__io{height:10px;background-position:-2435px 0}.iti__flag.iti__iq{height:14px;background-position:-2457px 0}.iti__flag.iti__ir{height:12px;background-position:-2479px 0}.iti__flag.iti__is{height:15px;background-position:-2501p
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 74 69 5f 5f 6c 63 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 31 39 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 69 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 34 31 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 6b 7b 68 65 69 67 68 74 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 36 33 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 72 7b 68 65 69 67 68 74 3a 31 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 39 38 35 70 78 20 30 7d 2e 69 74 69 5f 5f 66 6c 61 67 2e 69 74 69 5f 5f 6c 73 7b 68 65 69 67 Data Ascii: ti__lc{height:10px;background-position:-2919px 0}.iti__flag.iti__li{height:12px;background-position:-2941px 0}.iti__flag.iti__lk{height:10px;background-position:-2963px 0}.iti__flag.iti__lr{height:11px;background-position:-2985px 0}.iti__flag.iti__ls{heig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	52760	104.18.186.31	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:20 UTC	640	OUT	GET /npm/intl-tel-input@17.0.19/build/js/intlTelInput.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:20 UTC	1110	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 17.0.19 x-jsd-version-type: version etag: W/"734f-tveChQZOzfKDCBYG03tkPAXVi2E" Age: 1186711 x-served-by: cache-fra-etou8220100-FRA, cache-lga21975-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qGyiynb2b3OITren%2Bx6kDwHvLpG7Pukq4I%2F7kK3LOK5IyNRSa%2B0ZZeO9fDH1QrPe36foERwOseX6tIsyH4rt6plSIaDVlB9Acieu6Vb8RUsseQnLPwwpdzitIoIY82c1V20%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa7c4cb5a4c6-EWR
2025-03-14 09:15:20 UTC	259	IN	Data Raw: 37 33 34 66 0d 0a 2f 2a 0a 20 2a 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 54 65 6c 65 70 68 6f 6e 65 20 49 6e 70 75 74 20 76 31 37 2e 30 2e 31 39 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 61 63 6b 6f 63 6e 72 2f 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2e 67 69 74 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3a 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 3d 61 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 Data Ascii: 734f/* * International Telephone Input v17.0.19 * https://github.com/jackocnr/intl-tel-input.git * Licensed under the MIT license */!function(a){"object"==typeof module&&module.exports?module.exports=a():window.intlTelInput=a()}(function(a){"use s
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 74 22 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 64 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 64 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 64 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 64 26 26 28 64 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 Data Ascii: t";return function(){function b(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function c(a,b){for(var c=0;c<b.length;c++){var d=b[c];d.enumerable=d.enumerable\|\|!1,d.configurable=!0,"value"in d&&(d.writable=!0),Object.d
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 69 6c 29 22 2c 22 62 72 22 2c 22 35 35 22 5d 2c 5b 22 42 72 69 74 69 73 68 20 49 6e 64 69 61 6e 20 4f 63 65 61 6e 20 54 65 72 72 69 74 6f 72 79 22 2c 22 69 6f 22 2c 22 32 34 36 22 5d 2c 5b 22 42 72 69 74 69 73 68 20 56 69 72 67 69 6e 20 49 73 6c 61 6e 64 73 22 2c 22 76 67 22 2c 22 31 22 2c 31 31 2c 5b 22 32 38 34 22 5d 5d 2c 5b 22 42 72 75 6e 65 69 22 2c 22 62 6e 22 2c 22 36 37 33 22 5d 2c 5b 22 42 75 6c 67 61 72 69 61 20 28 d0 91 d1 8a d0 bb d0 b3 d0 b0 d1 80 d0 b8 d1 8f 29 22 2c 22 62 67 22 2c 22 33 35 39 22 5d 2c 5b 22 42 75 72 6b 69 6e 61 20 46 61 73 6f 22 2c 22 62 66 22 2c 22 32 32 36 22 5d 2c 5b 22 42 75 72 75 6e 64 69 20 28 55 62 75 72 75 6e 64 69 29 22 2c 22 62 69 22 2c 22 32 35 37 22 5d 2c 5b 22 43 61 6d 62 6f 64 69 61 20 28 e1 9e 80 e1 9e 98 e1 Data Ascii: il)","br","55"],["British Indian Ocean Territory","io","246"],["British Virgin Islands","vg","1",11,["284"]],["Brunei","bn","673"],["Bulgaria ()","bg","359"],["Burkina Faso","bf","226"],["Burundi (Uburundi)","bi","257"],["Cambodia (
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 6c 69 63 20 28 c4 8c 65 73 6b c3 a1 20 72 65 70 75 62 6c 69 6b 61 29 22 2c 22 63 7a 22 2c 22 34 32 30 22 5d 2c 5b 22 44 65 6e 6d 61 72 6b 20 28 44 61 6e 6d 61 72 6b 29 22 2c 22 64 6b 22 2c 22 34 35 22 5d 2c 5b 22 44 6a 69 62 6f 75 74 69 22 2c 22 64 6a 22 2c 22 32 35 33 22 5d 2c 5b 22 44 6f 6d 69 6e 69 63 61 22 2c 22 64 6d 22 2c 22 31 22 2c 31 33 2c 5b 22 37 36 37 22 5d 5d 2c 5b 22 44 6f 6d 69 6e 69 63 61 6e 20 52 65 70 75 62 6c 69 63 20 28 52 65 70 c3 ba 62 6c 69 63 61 20 44 6f 6d 69 6e 69 63 61 6e 61 29 22 2c 22 64 6f 22 2c 22 31 22 2c 32 2c 5b 22 38 30 39 22 2c 22 38 32 39 22 2c 22 38 34 39 22 5d 5d 2c 5b 22 45 63 75 61 64 6f 72 22 2c 22 65 63 22 2c 22 35 39 33 22 5d 2c 5b 22 45 67 79 70 74 20 28 e2 80 ab d9 85 d8 b5 d8 b1 e2 80 ac e2 80 8e 29 22 2c 22 Data Ascii: lic (esk republika)","cz","420"],["Denmark (Danmark)","dk","45"],["Djibouti","dj","253"],["Dominica","dm","1",13,["767"]],["Dominican Republic (Repblica Dominicana)","do","1",2,["809","829","849"]],["Ecuador","ec","593"],["Egypt ()","
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 5b 22 49 63 65 6c 61 6e 64 20 28 c3 8d 73 6c 61 6e 64 29 22 2c 22 69 73 22 2c 22 33 35 34 22 5d 2c 5b 22 49 6e 64 69 61 20 28 e0 a4 ad e0 a4 be e0 a4 b0 e0 a4 a4 29 22 2c 22 69 6e 22 2c 22 39 31 22 5d 2c 5b 22 49 6e 64 6f 6e 65 73 69 61 22 2c 22 69 64 22 2c 22 36 32 22 5d 2c 5b 22 49 72 61 6e 20 28 e2 80 ab d8 a7 db 8c d8 b1 d8 a7 d9 86 e2 80 ac e2 80 8e 29 22 2c 22 69 72 22 2c 22 39 38 22 5d 2c 5b 22 49 72 61 71 20 28 e2 80 ab d8 a7 d9 84 d8 b9 d8 b1 d8 a7 d9 82 e2 80 ac e2 80 8e 29 22 2c 22 69 71 22 2c 22 39 36 34 22 5d 2c 5b 22 49 72 65 6c 61 6e 64 22 2c 22 69 65 22 2c 22 33 35 33 22 5d 2c 5b 22 49 73 6c 65 20 6f 66 20 4d 61 6e 22 2c 22 69 6d 22 2c 22 34 34 22 2c 32 2c 5b 22 31 36 32 34 22 2c 22 37 34 35 37 36 22 2c 22 37 35 32 34 22 2c 22 37 39 32 34 Data Ascii: ["Iceland (sland)","is","354"],["India ()","in","91"],["Indonesia","id","62"],["Iran ()","ir","98"],["Iraq ()","iq","964"],["Ireland","ie","353"],["Isle of Man","im","44",2,["1624","74576","7524","7924
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 2c 22 32 32 32 22 5d 2c 5b 22 4d 61 75 72 69 74 69 75 73 20 28 4d 6f 72 69 73 29 22 2c 22 6d 75 22 2c 22 32 33 30 22 5d 2c 5b 22 4d 61 79 6f 74 74 65 22 2c 22 79 74 22 2c 22 32 36 32 22 2c 31 2c 5b 22 32 36 39 22 2c 22 36 33 39 22 5d 5d 2c 5b 22 4d 65 78 69 63 6f 20 28 4d c3 a9 78 69 63 6f 29 22 2c 22 6d 78 22 2c 22 35 32 22 5d 2c 5b 22 4d 69 63 72 6f 6e 65 73 69 61 22 2c 22 66 6d 22 2c 22 36 39 31 22 5d 2c 5b 22 4d 6f 6c 64 6f 76 61 20 28 52 65 70 75 62 6c 69 63 61 20 4d 6f 6c 64 6f 76 61 29 22 2c 22 6d 64 22 2c 22 33 37 33 22 5d 2c 5b 22 4d 6f 6e 61 63 6f 22 2c 22 6d 63 22 2c 22 33 37 37 22 5d 2c 5b 22 4d 6f 6e 67 6f 6c 69 61 20 28 d0 9c d0 be d0 bd d0 b3 d0 be d0 bb 29 22 2c 22 6d 6e 22 2c 22 39 37 36 22 5d 2c 5b 22 4d 6f 6e 74 65 6e 65 67 72 6f 20 28 Data Ascii: ,"222"],["Mauritius (Moris)","mu","230"],["Mayotte","yt","262",1,["269","639"]],["Mexico (Mxico)","mx","52"],["Micronesia","fm","691"],["Moldova (Republica Moldova)","md","373"],["Monaco","mc","377"],["Mongolia ()","mn","976"],["Montenegro (
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 22 5d 2c 5b 22 52 c3 a9 75 6e 69 6f 6e 20 28 4c 61 20 52 c3 a9 75 6e 69 6f 6e 29 22 2c 22 72 65 22 2c 22 32 36 32 22 2c 30 5d 2c 5b 22 52 6f 6d 61 6e 69 61 20 28 52 6f 6d c3 a2 6e 69 61 29 22 2c 22 72 6f 22 2c 22 34 30 22 5d 2c 5b 22 52 75 73 73 69 61 20 28 d0 a0 d0 be d1 81 d1 81 d0 b8 d1 8f 29 22 2c 22 72 75 22 2c 22 37 22 2c 30 5d 2c 5b 22 52 77 61 6e 64 61 22 2c 22 72 77 22 2c 22 32 35 30 22 5d 2c 5b 22 53 61 69 6e 74 20 42 61 72 74 68 c3 a9 6c 65 6d 79 22 2c 22 62 6c 22 2c 22 35 39 30 22 2c 31 5d 2c 5b 22 53 61 69 6e 74 20 48 65 6c 65 6e 61 22 2c 22 73 68 22 2c 22 32 39 30 22 5d 2c 5b 22 53 61 69 6e 74 20 4b 69 74 74 73 20 61 6e 64 20 4e 65 76 69 73 22 2c 22 6b 6e 22 2c 22 31 22 2c 31 38 2c 5b 22 38 36 39 22 5d 5d 2c 5b 22 53 61 69 6e 74 20 4c 75 63 Data Ascii: "],["Runion (La Runion)","re","262",0],["Romania (Romnia)","ro","40"],["Russia ()","ru","7",0],["Rwanda","rw","250"],["Saint Barthlemy","bl","590",1],["Saint Helena","sh","290"],["Saint Kitts and Nevis","kn","1",18,["869"]],["Saint Luc
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 6c 61 6e 64 20 28 53 63 68 77 65 69 7a 29 22 2c 22 63 68 22 2c 22 34 31 22 5d 2c 5b 22 53 79 72 69 61 20 28 e2 80 ab d8 b3 d9 88 d8 b1 d9 8a d8 a7 e2 80 ac e2 80 8e 29 22 2c 22 73 79 22 2c 22 39 36 33 22 5d 2c 5b 22 54 61 69 77 61 6e 20 28 e5 8f b0 e7 81 a3 29 22 2c 22 74 77 22 2c 22 38 38 36 22 5d 2c 5b 22 54 61 6a 69 6b 69 73 74 61 6e 22 2c 22 74 6a 22 2c 22 39 39 32 22 5d 2c 5b 22 54 61 6e 7a 61 6e 69 61 22 2c 22 74 7a 22 2c 22 32 35 35 22 5d 2c 5b 22 54 68 61 69 6c 61 6e 64 20 28 e0 b9 84 e0 b8 97 e0 b8 a2 29 22 2c 22 74 68 22 2c 22 36 36 22 5d 2c 5b 22 54 69 6d 6f 72 2d 4c 65 73 74 65 22 2c 22 74 6c 22 2c 22 36 37 30 22 5d 2c 5b 22 54 6f 67 6f 22 2c 22 74 67 22 2c 22 32 32 38 22 5d 2c 5b 22 54 6f 6b 65 6c 61 75 22 2c 22 74 6b 22 2c 22 36 39 30 22 5d Data Ascii: land (Schweiz)","ch","41"],["Syria ()","sy","963"],["Taiwan ()","tw","886"],["Tajikistan","tj","992"],["Tanzania","tz","255"],["Thailand ()","th","66"],["Timor-Leste","tl","670"],["Togo","tg","228"],["Tokelau","tk","690"]
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 74 6c 2d 74 65 6c 2d 69 6e 70 75 74 2d 69 64 22 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 47 6c 6f 62 61 6c 73 2e 69 6e 73 74 61 6e 63 65 73 5b 62 5d 7d 2c 69 6e 73 74 61 6e 63 65 73 3a 7b 7d 2c 64 6f 63 75 6d 65 6e 74 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 7d 7d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 69 6e 74 6c 54 65 6c 49 6e 70 75 74 47 6c 6f 62 61 6c 73 3d 68 29 3b 76 61 72 20 69 3d 30 2c 6a 3d 7b 61 6c 6c 6f 77 44 72 6f 70 64 Data Ascii: (a){var b=a.getAttribute("data-intl-tel-input-id");return window.intlTelInputGlobals.instances[b]},instances:{},documentReady:function(){return"complete"===document.readyState}};"object"==typeof window&&(window.intlTelInputGlobals=h);var i=0,j={allowDropd
2025-03-14 09:15:20 UTC	1369	IN	Data Raw: 65 7c 4f 70 65 72 61 20 4d 69 6e 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 74 68 69 73 2e 67 26 26 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 74 69 2d 6d 6f 62 69 6c 65 22 29 2c 74 68 69 73 2e 64 2e 64 72 6f 70 64 6f 77 6e 43 6f 6e 74 61 69 6e 65 72 7c 7c 28 74 68 69 73 2e 64 2e 64 72 6f 70 64 6f 77 6e 43 6f 6e 74 61 69 6e 65 72 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 29 7b 76 61 72 20 62 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 68 3d 62 2c 61 2e 69 3d 63 7d 29 2c 63 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 Data Ascii: e\|Opera Mini/i.test(navigator.userAgent),this.g&&(document.body.classList.add("iti-mobile"),this.d.dropdownContainer\|\|(this.d.dropdownContainer=document.body)),"undefined"!=typeof Promise){var b=new Promise(function(b,c){a.h=b,a.i=c}),c=new Promise(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	52757	172.67.168.191	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:20 UTC	678	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228256449.counselschambers.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://case-id-1000228256449.counselschambers.co.uk/index-5b6c678b.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:21 UTC	939	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:21 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MO0fKse7Mcu9g8xHLQVIzkSva3iWP2XqQDByKyG6AOa6ovAO%2FeKUiuaBBKL6BPqJAn6bGahijVbX1tzl7aHOSum8oLglTNRznwiV1G9pGKQ8SGFB9jXnMk6O%2F%2BSbEIRVDnpO4IxrKJ%2BhLwzP5bpXJ8lMO9yJYM1OZMRWzU%2BVZw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa7dcfa64302-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1589&min_rtt=1585&rtt_var=602&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2857&recv_bytes=1250&delivery_rate=1805813&cwnd=189&unsent_bytes=0&cid=6d69f46510e50f92&ts=1637&x=0"
2025-03-14 09:15:21 UTC	430	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: 6c 6c 27 ad 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b f5 18 2d 62 80 0c Data Ascii: ll'YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqapX8w-b
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: da 7c 10 59 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c 88 04 11 9d 16 5e Data Ascii: \|YL^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy3l^
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: 44 05 a3 7f 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb 61 a8 2c 51 24 62 Data Ascii: D&%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`a,Q$b
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: 57 80 00 33 df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 07 88 71 c0 fb e2 f0 f1 Data Ascii: W3%3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,q
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: b7 d0 36 0e 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 3c 92 43 97 76 d4 a0 52 Data Ascii: 6%~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\<CvR
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: dc 31 c2 02 ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 84 62 b3 91 05 db 77 e4 Data Ascii: 1{Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.bw
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: 68 ae 2f ed 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 00 3e e8 08 90 b7 04 53 Data Ascii: h/]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@8>S
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: d5 94 10 31 f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 85 04 8d 14 db ff 4f 2e Data Ascii: 1E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^YO.
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: 69 52 9d 25 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 87 65 fb 84 03 b8 8b 39 Data Ascii: iR%]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43e9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	52761	104.17.25.14	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:21 UTC	693	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:21 UTC	940	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:21 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 04 Mar 2026 09:15:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bd0RboP499VVtVy70PvQelC8EUZu3y7X9NkU%2F%2FzgefRy82l2nZl0FD2qugWHznA61wzui9YELNLFvJBEDLpf0l%2FNa50RiZirNBd97roq%2FN4lHtbdRl9y2JZ7Vbvr%2B4rWMDiHLlAI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202aa81d899d911-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:15:21 UTC	429	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 32 38 20 38 2e 30 34 34 63 Data Ascii: -.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.128 8.044c
2025-03-14 09:15:21 UTC	671	IN	Data Raw: 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 6c 2e 36 31 38 2e 34 34 39 Data Ascii: 9-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0l.618.449
2025-03-14 09:15:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	52763	34.117.59.81	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:21 UTC	651	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228256449.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:21 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:15:21 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:15:21 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	52762	104.26.8.44	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:21 UTC	635	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228256449.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:21 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: POST, GET, HEAD, OPTIONS, OPTIONS X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://case-id-1000228256449.counselschambers.co.uk X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UvYo2ujfKdJF%2FMTOecJpa7TFYbYUjEU%2BRhpwYFJtxqVla5ZveLoV99HvwoSFaclCwLbb2DnUgtIJ97dVEhd%2By1WkLP2TZYyTLxOrry6XC%2FDhaiwxhPoqPzqd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa82480d659d-EWR server-timing: cfL4;desc="?proto=TCP&rtt=3121&min_rtt=1650&rtt_var=3404&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2788&recv_bytes=1211&delivery_rate=1732937&cwnd=104&unsent_bytes=0&cid=b90979ede2b3c2f1&ts=293&x=0"
2025-03-14 09:15:21 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	52765	104.21.70.234	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:21 UTC	428	OUT	GET /banner-b1482d4c.webp HTTP/1.1 Host: case-id-1000228256449.counselschambers.co.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:22 UTC	935	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:22 GMT Content-Type: image/webp Content-Length: 19448 Connection: close Last-Modified: Tue, 11 Feb 2025 14:58:23 GMT ETag: "4bf8-62ddf0e7534e3" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yItJ0Z%2BpG9BbIg7APYZzQM8PJSbz64h8YrRG2xlY6q37E42sxe5ynXW98rDZ5mTjtiHpCk1xExL2Ih3DPNF%2Fm82RlLtr%2F0f8wcI0UvdRCWOgK2pawK3eLdGvAjb1WfyaGp4ggD%2B7lHnT4gdkvlk7Ic7x2uXlbPaczsmhqjO6Kw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa855c97c52b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2008&min_rtt=1998&rtt_var=769&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1000&delivery_rate=1405197&cwnd=67&unsent_bytes=0&cid=8006cc60e2dc5804&ts=564&x=0"
2025-03-14 09:15:22 UTC	434	IN	Data Raw: 52 49 46 46 f0 4b 00 00 57 45 42 50 56 50 38 20 e4 4b 00 00 90 eb 01 9d 01 2a 80 07 af 00 3e 6d 36 95 48 a4 23 22 22 24 92 8a 58 80 0d 89 67 6e 4b f3 eb ee 6c ae 17 55 1d 2b fe ff 9b d7 2d 2d c0 3b bf 91 cf 00 3a 80 6d 5a a3 72 8e 19 a5 1c f1 ef e5 77 b4 7a 63 fe d1 e9 75 d1 e7 cc 67 9d ef a7 5f f8 5e 93 3d 4d 3f db 3a 6e 3d 6a 3f d3 f4 80 7f ff f6 e9 e8 87 f8 3f 32 9f 69 ff 37 c7 9f d5 7f 5d e6 b5 fe f6 66 fe a7 bb 2f 71 9e cd ff 90 f1 0b c9 6e cb 70 09 df 93 36 ef d5 34 43 ff eb d7 3f 14 4f cc 74 52 7f ed fb e7 eb 9f f7 2f fd 5e 99 5d 78 bd 13 43 0a 23 29 ad f9 65 fb 95 ff 15 56 32 4e e6 e5 b2 6c 7a 38 83 a6 0f 0a 21 eb 97 e5 f7 69 0a de 11 77 ca ab e3 7f cf eb fd 1a 41 2a d8 0a 9b e3 c1 db 13 93 36 9c 2a 0a ce 53 91 d0 7b 9c 51 35 1e e1 f7 5f df 15 90 Data Ascii: RIFFKWEBPVP8 K>m6H#""$XgnKlU+--;:mZrwzcug_^=M?:n=j??2i7]f/qnp64C?OtR/^]xC#)eV2Nlz8!iwA6*S{Q5_
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: 82 c8 59 d1 e1 8c 59 fa 01 74 e5 27 75 06 59 a9 27 ed a4 2e 6f d1 14 b2 5e ff 10 ba 09 37 95 34 d5 e9 18 b1 12 ae ae 7a ec 93 94 13 2e 1a 25 18 17 52 c7 4e d8 11 e3 89 05 35 20 9b ef 72 6e 83 63 9a 63 52 30 06 ff 73 81 d4 3f 26 e2 75 fe c2 30 e7 35 59 a3 79 be 19 1b 4f 0a d1 5d 87 76 c9 42 21 b2 24 c0 5d a1 9b 11 6f 0e 7a 1f a9 b1 26 8c 54 db e9 1d 2f 1d a5 69 bd 87 00 dc 55 25 45 13 c5 0f 9b 08 3b 70 84 43 57 cc 48 99 ba 3d 22 6f f3 76 b6 47 70 64 18 9d b6 98 61 92 5d 41 e3 98 f3 24 c3 b0 98 f3 2f 6b 5f 49 3a 03 bd 97 04 cc b2 18 a8 fa e1 a0 26 84 3a 86 cf 1b fe 5f ec 18 dd f1 d6 8e 71 78 06 06 16 ad a9 e1 23 48 bb 84 0d bc 27 80 c2 c1 00 53 ff e2 6c 8b 20 fa 5c 63 e3 bf 37 47 97 0f b3 9e 5a fd 71 ef f5 c0 61 70 58 38 77 0b f5 18 2d 62 80 0c 88 79 a4 8e Data Ascii: YYt'uY'.o^74z.%RN5 rnccR0s?&u05YyO]vB!$]oz&T/iU%E;pCWH="ovGpda]A$/k_I:&:_qx#H'Sl \c7GZqapX8w-by
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: 1a 4c e1 5e 74 96 ec b0 01 43 ab 3e 3e 70 d2 ff fd 16 a2 ce 29 b7 e7 79 2b 71 84 a0 2b db 0f 00 9b a7 c4 9e 11 bb 80 40 4d 1b 7d 28 8c d7 27 b3 e3 35 44 3c c5 fa 1c 0b 2d 21 07 ce 86 cb 33 b2 e7 9d 07 bd a6 75 b6 52 9d 27 19 12 b9 78 8b 02 51 2b d5 c9 f2 48 ec d2 60 fc 20 be a3 64 f6 7e b9 d3 33 6f 24 43 8a a3 91 ff 61 de 78 dc a1 b8 13 9e 2b 60 3c ce 6a 56 8b ad 44 f2 af 4e d0 31 e4 b4 25 c0 22 aa 81 df fc 5d fd ef d1 cf c8 89 a3 f8 b9 74 13 69 f8 98 1b 29 0f ae 17 06 a0 9a 59 92 56 83 4d 86 00 62 45 2f 13 58 ed 96 1c fd a0 44 b4 21 b5 d2 7e 91 39 40 a1 ba 0b ef a0 12 b4 25 ec e4 95 e4 c1 ca 33 8d d4 82 6b bd 3d 9f 5b 1a 37 21 1b b0 89 2d f0 67 a7 af 71 56 50 12 d8 98 dd 21 a3 ba 26 8e 5a f1 52 a0 ed 5b e0 46 79 33 aa bd 6c 88 04 11 9d 16 5e 0c 17 cb d5 Data Ascii: L^tC>>p)y+q+@M}('5D<-!3uR'xQ+H` d~3o$Cax+`<jVDN1%"]ti)YVMbE/XD!~9@%3k=[7!-gqVP!&ZR[Fy3l^
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: 26 93 b0 e1 1b 25 e4 f0 07 d4 52 a7 f0 ea bb c1 c6 f0 aa 22 42 62 c7 89 41 4c b1 c5 d1 e4 0c cb bc e7 17 a2 1b 9c b5 42 06 d0 e4 c1 85 67 ef 35 b2 e9 06 ed d8 69 53 46 8b d0 49 2e 18 38 b6 e9 ef d4 1e 59 8b ba 05 12 96 35 fe 13 29 43 b6 b7 50 93 e8 7f 56 c1 67 05 a2 11 24 10 7e 65 fd 04 78 ea 98 3b d8 24 fc 41 62 24 a3 46 88 4f f4 93 c7 e9 70 08 ea 25 54 43 62 2f bc 42 fd 23 3e 51 39 29 ce 9a c8 38 3f f2 d6 06 88 60 90 6f a0 66 8f 40 8a e6 51 9c 5f 2c 91 d5 17 0d b0 d2 83 2b 29 b2 dd 26 a2 6c 80 4a f1 d7 a1 ab 70 53 2f 6d 60 ca a9 90 5f 14 59 78 90 71 b8 91 50 3e b5 20 31 38 10 ce 7c d4 79 60 8d a7 58 54 ea 7e b2 0b b7 32 6d 52 6b f2 85 cd 1f a2 26 a1 12 e6 7d a4 0a 2e de 26 1c 3c 0a ed f3 9a c8 34 a1 b6 a4 48 a6 1c 60 08 eb 61 a8 2c 51 24 62 ea 87 8e 37 Data Ascii: &%R"BbALBg5iSFI.8Y5)CPVg$~ex;$Ab$FOp%TCb/B#>Q9)8?`of@Q_,+)&lJpS/m`_YxqP> 18\|y`XT~2mRk&}.&<4H`a,Q$b7
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: df df 13 96 c5 ff aa f8 e1 1a 25 33 3f 14 6f 76 5a 16 c0 d8 85 d7 43 d9 44 98 e0 fb fa 75 e6 72 d7 eb c5 32 ba 41 04 81 8d 5c e3 3d 94 68 49 5d 0f c2 0f 7e fa 9a 1a b7 97 d2 ee b1 d3 b8 ab 5d 74 29 5f b9 58 b8 c4 69 10 7a 15 82 cc ae a3 fd ad 9a 8e ca d5 68 3a 53 11 e6 45 87 36 32 ef 73 93 f2 c1 22 41 9b 28 d1 81 58 3b 42 e9 8c 85 c7 98 e1 58 bc 02 af 49 bc 95 52 a6 a5 c6 97 ec e0 db de 46 c4 df 37 f6 20 18 e1 a4 10 82 2d c9 f7 7c 35 7b ee 04 21 94 4b bb a1 a1 be 4a a1 db 98 6c 57 7a f6 9d a2 b7 00 a3 6a 24 fb bc 8b b8 af 0a 1d 89 3f cb 47 f4 52 60 45 9e 1d bb 6f 46 8d 26 34 80 48 5c a5 8d 86 0f 33 05 70 4c 1c 0d b9 11 64 fd 19 ef 03 ef ff 9c ca 7f 50 12 eb 28 fe fb 4f ae 58 70 6e 5c 5b 96 e4 a0 a9 04 15 ce 51 2c 95 f1 07 88 71 c0 fb e2 f0 f1 fe e5 82 8e Data Ascii: %3?ovZCDur2A\=hI]~]t)_Xizh:SE62s"A(X;BXIRF7 -\|5{!KJlWzj$?GR`EoF&4H\3pLdP(OXpn\[Q,q
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: 25 cf ea a0 9e f8 c5 b6 2a 9c bc 7e af da ea 15 08 26 4d 8f c5 66 3b 01 5c b7 ef f1 bd 42 05 76 cc 6c 72 9f 32 2a 08 b8 71 07 dc 6e ff 07 0c cc 0d 69 70 a6 bb af dd 95 c3 8e aa aa 9f b3 9e e5 27 4d 53 f6 ce 68 8f 30 ee 54 5a d2 25 3b 21 89 78 db 81 15 7d 0e 70 26 d6 09 0f ae 5c 60 84 6a 96 91 fb e7 e1 6b 23 ec f8 34 c5 2f e9 a1 82 a5 6d fa ac 5c 15 cc 8f a2 d7 56 48 41 31 11 5f 7f d3 fd c5 8c 52 d3 1d 4a 5e 1c 92 e9 0f 3a 26 96 6a 9c ba 04 eb 02 c5 3b a9 db 81 c2 ac f5 ea 37 02 97 a0 84 b1 14 69 4f 78 2a 1c 3f f8 21 46 35 35 88 a6 51 7a 69 d7 86 e6 4b d1 61 35 07 cb d3 91 d4 e3 80 5f 7a e2 94 07 81 6d d4 fc fa d6 e6 ba 8b 64 50 b0 c5 7e cf 92 66 c8 0b 04 dc d6 4a 0b cb 53 1c e6 da 7b 9e 3f 3d af 6b 3d fe e3 99 5c ec c6 3c 92 43 97 76 d4 a0 52 b9 0b 95 40 Data Ascii: %~&Mf;\Bvlr2qnip'MSh0TZ%;!x}p&\`jk#4/m\VHA1_RJ^:&j;7iOx*?!F55QziKa5_zmdP~fJS{?=k=\<CvR@
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: ab ff 7b e3 51 09 ee 62 35 7b 34 cb d6 01 ed ef 9f 1e 64 31 26 dc 08 fa dd 7d d9 f5 ec 2c 61 0f 7b 09 42 7e 89 2a 78 90 d3 98 32 a3 65 ac f4 64 1e c6 c8 0f 49 3d 06 4e c7 10 ff d1 36 7d 69 cc dc 9c f1 48 66 e2 0c 2f 64 29 43 b6 18 a7 2e e4 b1 91 87 14 1a fa 39 b6 13 15 9e dc 1c 83 c9 10 3f a2 92 70 f0 b0 42 9b 41 28 59 d5 1d 51 f3 10 95 3f 9d 87 da dc 47 b9 0e c0 09 e5 ba 15 b9 52 7f 25 c1 45 d0 29 88 35 55 ef bc b4 22 ca 2d ec fb b6 69 c8 05 2c 5d 42 99 2f bd c7 5a 38 df ae dc f1 01 29 58 da 59 f0 56 44 79 09 f1 78 39 77 2f a4 3d b7 bc 69 82 98 d9 ed 9c 96 ce 64 95 76 e7 67 80 2e d2 bd 19 87 33 14 a2 e3 52 cc 15 5e 25 d6 0c ba 5a 6d 33 f7 70 cc e8 80 40 a9 cc ab 07 23 07 66 4d fd ef 23 ff 04 11 4f d5 e1 fd 89 2e c0 82 84 62 b3 91 05 db 77 e4 5b 88 9e 87 Data Ascii: {Qb5{4d1&},a{B~*x2edI=N6}iHf/d)C.9?pBA(YQ?GR%E)5U"-i,]B/Z8)XYVDyx9w/=idvg.3R^%Zm3p@#fM#O.bw[
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: 5d 60 45 67 a9 a4 cd e1 26 fe dd 9a a8 25 d8 3c 82 1b 65 d6 3a 1c aa d0 37 52 be 29 30 82 68 ab 74 09 62 5f aa e9 d5 f0 96 b5 91 66 42 9c c2 73 84 9a 1a aa 30 6d 91 61 98 e7 33 15 77 b3 63 93 f7 0f 4c 94 a5 24 dd c5 c1 96 dc 03 2a 80 e4 94 80 32 c3 c7 ee 19 e7 f8 4f 65 29 ee a9 14 8b 41 fe 5b 1f ad d2 33 6e 8d c4 a3 94 08 5b 8e ad c2 d6 c3 2a f8 9a c5 89 cb 22 5f 43 39 32 94 24 40 1e de af 90 51 10 92 aa c3 90 f5 1b 0e 57 06 85 5c e5 1a e9 6a 8b a2 1d cf ab 9d b8 24 87 dd 6a 02 61 7b c8 3c 8b 64 de 03 a3 0e f5 2d 9f 1b af 95 1e a9 b5 0b 28 fc 1f f1 61 aa 4d 1a 7c 7e 69 18 5a 22 87 01 98 ed 8f 67 ca 85 b4 a3 50 88 db c1 5f df d4 a6 11 c6 b5 63 ad 1d 08 93 fe da dc e4 6c eb 2c f6 b8 d4 43 23 60 27 7c 86 7b 9e e1 40 e4 38 00 3e e8 08 90 b7 04 53 d8 da 28 82 Data Ascii: ]`Eg&%<e:7R)0htb_fBs0ma3wcL$2Oe)A[3n["_C92$@QW\j$ja{<d-(aM\|~iZ"gP_cl,C#`'\|{@8>S(
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: f0 a2 11 14 eb a8 45 09 7b fb c8 00 49 96 40 df 1d a3 f2 02 01 9d 93 23 05 3b fa fe 88 69 b4 2c fc b8 26 c3 d8 28 9a 05 ba ab 8e dc df e4 b2 45 ec 53 8a f7 16 f1 7e 25 4c cf ac c8 bd 94 37 6e 9e 7d 29 2e 4f 3e ee 52 9f d7 45 9c 6f b8 60 74 38 f8 c4 ca fa 1f b2 e4 92 10 ac 53 9a 22 07 17 63 e4 8a cf 32 f6 e5 6e 43 07 82 af 1d c9 0b a1 90 2c 0b 78 d2 c8 6e e4 a4 0f 5e fd 01 1d ca 8e 43 29 99 7b 4d f7 e0 29 c6 d3 a4 0d a0 fa 76 d5 02 5c 52 d3 b7 22 45 13 ac 60 05 8c 21 ce f7 a3 47 8a d0 4c 63 88 f3 fa 7a 87 f3 25 88 82 aa ce 2d 6a 98 e3 ed 23 2a b2 71 6b 91 ad 22 0d f0 e2 48 84 ea bd 64 ad ca 63 44 9b 86 ef 46 2d 38 af 5c e0 69 a7 ad 52 75 e3 96 d1 23 8b 67 9a a7 1e 6f 03 99 d9 db d3 cc 7b 32 a1 43 7d f9 04 5e bc c5 05 59 85 04 8d 14 db ff 4f 2e b2 14 62 f9 Data Ascii: E{I@#;i,&(ES~%L7n}).O>REo`t8S"c2nC,xn^C){M)v\R"E`!GLcz%-j#*qk"HdcDF-8\iRu#go{2C}^YO.b
2025-03-14 09:15:22 UTC	1369	IN	Data Raw: 81 5d f1 5c a7 0b ce 9b d6 53 5f 0e 49 2c e0 20 2e 69 4e be d4 41 e8 08 41 94 d7 51 56 75 6e 77 86 8e 60 80 28 4a b5 c0 61 12 86 f6 0f 3b e4 a8 f3 46 45 e4 b7 9b 7b 68 ad 65 7c c6 3b 81 70 86 96 b1 02 00 f0 e3 ff 44 4e e0 52 a1 df e9 23 ef a8 4a 6b fb c7 16 90 38 94 cb 3a 71 d0 3a 1e f2 30 d4 99 c1 0f e1 be 73 47 70 5f 9b 0a 73 26 27 e1 cd a8 e3 e1 7d bb 33 de 95 52 86 2e 44 9a 2d f6 79 fd 89 af 16 9b ca e4 39 64 0a c2 52 af b2 59 aa d6 28 76 00 42 99 49 de fd 47 81 ad de 90 96 d1 1c ab 81 98 db 50 81 9f 00 08 07 d6 c1 c4 f0 a7 8c 80 54 27 20 7d 16 81 36 08 9e 2f 0d 1f 6c 70 d5 e8 66 51 4c 25 bb bc c1 b5 cf d9 37 50 6d 0f 87 b3 c2 1b 78 8e c0 5b 05 a5 4b c4 71 bf 0c cf db 45 4d 3b 6c 21 9f a2 f7 9b 34 9a ff 33 ba cc 17 87 65 fb 84 03 b8 8b 39 88 3d af 1a Data Ascii: ]\S_I, .iNAAQVunw`(Ja;FE{he\|;pDNR#Jk8:q:0sGp_s&'}3R.D-y9dRY(vBIGPT' }6/lpfQL%7Pmx[KqEM;l!43e9=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	52766	34.117.59.81	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:21 UTC	379	OUT	GET //json? HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:21 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 321 content-type: application/json; charset=utf-8 date: Fri, 14 Mar 2025 09:15:21 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:15:21 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	52767	104.17.25.14	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:21 UTC	428	OUT	GET /ajax/libs/twemoji/14.0.2/svg/1f1fa-1f1f8.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:21 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:21 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"659a11a8-2d8" Last-Modified: Sun, 07 Jan 2024 03:51:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 13935 Expires: Wed, 04 Mar 2026 09:15:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hMBmYiHS5Sz2UbsICpwJGQ0kJxVRJD7%2FSKUxDTlbU32ENNmKek6j1MXAT%2BiXKdY0s%2BBvskh4ahfy6JOaOdcOWz3GEHBMh4RBD4kCYpp0kJ%2F6AR5MaMGXdUjrIk65mfld63OiRIap"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9202aa861abf433a-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 09:15:21 UTC	420	IN	Data Raw: 39 39 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 32 32 33 33 34 22 20 64 3d 22 4d 33 35 2e 34 34 35 20 37 43 33 34 2e 37 35 32 20 35 2e 38 30 39 20 33 33 2e 34 37 37 20 35 20 33 32 20 35 48 31 38 76 32 68 31 37 2e 34 34 35 7a 4d 30 20 32 35 68 33 36 76 32 48 30 7a 6d 31 38 2d 38 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 32 31 68 33 36 76 32 48 30 7a 6d 34 20 31 30 68 32 38 63 31 2e 34 37 37 20 30 20 32 2e 37 35 32 2d 2e 38 30 39 20 33 2e 34 34 35 2d 32 48 2e 35 35 35 63 2e 36 39 33 20 31 2e 31 39 31 20 31 2e 39 36 38 20 32 20 33 2e 34 34 Data Ascii: 99e<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><path fill="#B22334" d="M35.445 7C34.752 5.809 33.477 5 32 5H18v2h17.445zM0 25h36v2H0zm18-8h18v2H18zm0-4h18v2H18zM0 21h36v2H0zm4 10h28c1.477 0 2.752-.809 3.445-2H.555c.693 1.191 1.968 2 3.44
2025-03-14 09:15:21 UTC	1369	IN	Data Raw: 2d 2e 34 38 33 2e 33 33 32 2d 2e 37 34 31 2e 30 33 34 2d 2e 30 39 39 2e 30 36 37 2d 2e 31 39 38 2e 30 39 33 2d 2e 33 30 31 2e 30 32 33 2d 2e 30 39 2e 30 34 32 2d 2e 31 38 32 2e 30 35 39 2d 2e 32 37 35 2e 30 34 31 2d 2e 32 32 2e 30 36 39 2d 2e 34 34 36 2e 30 36 39 2d 2e 36 37 39 48 30 63 30 20 2e 32 33 33 2e 30 32 38 2e 34 35 38 2e 30 36 38 2e 36 37 39 7a 4d 30 20 32 33 68 33 36 76 32 48 30 7a 6d 30 2d 34 76 32 68 33 36 76 2d 32 48 31 38 7a 6d 31 38 2d 34 68 31 38 76 32 48 31 38 7a 6d 30 2d 34 68 31 38 76 32 48 31 38 7a 4d 30 20 39 63 30 2d 2e 32 33 33 2e 30 33 2d 2e 34 35 37 2e 30 36 38 2d 2e 36 37 39 43 2e 30 32 38 20 38 2e 35 34 32 20 30 20 38 2e 37 36 37 20 30 20 39 7a 6d 2e 35 35 35 2d 32 6c 2d 2e 30 30 33 2e 30 30 35 4c 2e 35 35 35 20 37 7a 4d 2e 31 Data Ascii: -.483.332-.741.034-.099.067-.198.093-.301.023-.09.042-.182.059-.275.041-.22.069-.446.069-.679H0c0 .233.028.458.068.679zM0 23h36v2H0zm0-4v2h36v-2H18zm18-4h18v2H18zm0-4h18v2H18zM0 9c0-.233.03-.457.068-.679C.028 8.542 0 8.767 0 9zm.555-2l-.003.005L.555 7zM.1
2025-03-14 09:15:21 UTC	680	IN	Data Raw: 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 33 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 4d 36 2e 33 38 33 20 31 32 2e 39 4c 37 20 31 32 2e 34 35 32 6c 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 37 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 68 2d 2e 37 36 34 6c 2e 36 31 38 2e 34 34 39 7a 6d 33 2e 36 31 38 2d 31 2e 31 37 34 6c 2e 36 31 38 2e 34 34 39 2d 2e 32 33 36 2e 37 32 35 2e 36 31 37 2d 2e 34 34 38 2e 36 31 38 2e 34 34 38 2d 2e 32 33 36 2d 2e 37 32 35 2e 36 31 38 2d 2e 34 34 39 68 2d 2e 37 36 34 4c 31 31 20 31 31 6c 2d 2e 32 33 35 2e 37 32 36 7a 6d 34 20 30 Data Ascii: 4l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L3 11l-.235.726zM6.383 12.9L7 12.452l.618.448-.236-.725.618-.449h-.764L7 11l-.235.726h-.764l.618.449zm3.618-1.174l.618.449-.236.725.617-.448.618.448-.236-.725.618-.449h-.764L11 11l-.235.726zm4 0
2025-03-14 09:15:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	52768	104.26.9.44	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:22 UTC	374	OUT	GET /ip HTTP/1.1 Host: ipapi.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:22 UTC	929	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:22 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Allow: HEAD, OPTIONS, OPTIONS, POST, GET X-Frame-Options: DENY Vary: Host, origin X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cross-Origin-Opener-Policy: same-origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EiEBnuIw7gJqurTgdU9TSadJtTT0zBfyl9dhJ4b4%2BNelOeSN%2Fy1cJEDkH9gQo4aG8jVWh8aFD%2FjgYsyz1gmZzhU3GxmevIroKtlDB1QbRK710%2BYNabgewGgB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa8708500c7a-EWR server-timing: cfL4;desc="?proto=TCP&rtt=6617&min_rtt=1611&rtt_var=10456&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2790&recv_bytes=950&delivery_rate=1650650&cwnd=189&unsent_bytes=0&cid=c2a95d9f4060cefc&ts=291&x=0"
2025-03-14 09:15:22 UTC	12	IN	Data Raw: 38 2e 34 36 2e 31 32 33 2e 31 38 39 Data Ascii: 8.46.123.189

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	52769	104.21.80.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:24 UTC	583	OUT	OPTIONS /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://case-id-1000228256449.counselschambers.co.uk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:24 UTC	868	IN	HTTP/1.1 204 No Content Date: Fri, 14 Mar 2025 09:15:24 GMT Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7dCawx9LwYO18knZ856MT1qWhzW5ieVpqt%2FLpBrvV%2FKJU0AkdTEl85zcQdKMZcYWE3lhGTRP%2F9fYWqPSgnHCjgaqJDZWx0PnfOU75YaICyJsTitokaxS22X0OYEwiL%2BBitG%2BKxvN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa9498702223-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2089&min_rtt=2082&rtt_var=796&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1155&delivery_rate=1362575&cwnd=73&unsent_bytes=0&cid=4c9a89c986a3ba56&ts=414&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	52770	104.21.80.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:25 UTC	738	OUT	POST /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive Content-Length: 75 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://case-id-1000228256449.counselschambers.co.uk Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://case-id-1000228256449.counselschambers.co.uk/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:25 UTC	75	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 22 67 6f 63 45 68 6f 2b 4c 2b 67 73 68 73 59 64 43 55 52 50 50 4f 71 4b 30 4d 38 2f 6e 56 76 6d 59 46 70 4f 53 4a 4f 36 57 58 74 44 77 74 36 49 4f 63 4d 6a 46 65 77 4a 6d 42 45 7a 47 47 4e 31 4f 22 7d Data Ascii: {"data":"gocEho+L+gshsYdCURPPOqK0M8/nVvmYFpOSJO6WXtDwt6IOcMjFewJmBEzGGN1O"}
2025-03-14 09:15:25 UTC	875	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:15:25 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9vrCcXzkTMfBrqkzUXBCsF4ipUH6UhvMWJoaqaOhL%2BjmRveTZqj%2Bgk3xeQDyogozrS7Uddydv51AjxLvnQ21bbZSsxJdft%2BOD3GS4PxmRfpWkjBzljnP%2B93vH%2BLVpow8BOn%2FPZIj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa9a2d797b0e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2466&min_rtt=2464&rtt_var=929&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1407&delivery_rate=1175050&cwnd=118&unsent_bytes=0&cid=ec540243e73e1f1f&ts=431&x=0"
2025-03-14 09:15:25 UTC	13	IN	Data Raw: 38 0d 0a 52 6b 46 4a 54 41 3d 3d 0d 0a Data Ascii: 8RkFJTA==
2025-03-14 09:15:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	52771	104.21.48.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:15:25 UTC	398	OUT	GET /WeatherForecast HTTP/1.1 Host: pickoutsourcing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:15:26 UTC	840	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 09:15:26 GMT Content-Type: application/problem+json; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: ASP.NET cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BP%2BcQB4283YTfylqcLT6wg6K0f27%2F1aIdsaevU%2FXXBsx6dk50JW8bvAXNabKTam%2F0bMvFYyQ5qgx3Bli1Kd0ycAN18QSIz4Ylx7JHgbIWe8ddixuxkKGzjFs0i%2BdpstuZm9uTbn7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202aa9ffa138ca8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2033&min_rtt=1823&rtt_var=1104&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=970&delivery_rate=833095&cwnd=147&unsent_bytes=0&cid=d395814f73eabdca&ts=439&x=0"
2025-03-14 09:15:26 UTC	254	IN	Data Raw: 66 38 0d 0a 7b 22 74 79 70 65 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 69 65 74 66 2e 6f 72 67 2f 68 74 6d 6c 2f 72 66 63 39 31 31 30 23 73 65 63 74 69 6f 6e 2d 31 35 2e 35 2e 31 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 73 20 6f 63 63 75 72 72 65 64 2e 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 2c 22 65 72 72 6f 72 73 22 3a 7b 22 77 65 61 74 68 65 72 22 3a 5b 22 54 68 65 20 77 65 61 74 68 65 72 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 5d 7d 2c 22 74 72 61 63 65 49 64 22 3a 22 30 30 2d 38 34 39 66 63 64 37 63 30 31 62 62 63 33 34 65 64 37 64 64 37 64 65 63 66 38 66 33 37 37 37 37 2d 31 65 38 33 62 34 65 66 61 39 63 32 62 30 34 34 2d 30 30 22 7d 0d 0a Data Ascii: f8{"type":"https://tools.ietf.org/html/rfc9110#section-15.5.1","title":"One or more validation errors occurred.","status":400,"errors":{"weather":["The weather field is required."]},"traceId":"00-849fcd7c01bbc34ed7dd7decf8f37777-1e83b4efa9c2b044-00"}
2025-03-14 09:15:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	52780	35.190.80.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:16:11 UTC	552	OUT	OPTIONS /report/v4?s=BP%2BcQB4283YTfylqcLT6wg6K0f27%2F1aIdsaevU%2FXXBsx6dk50JW8bvAXNabKTam%2F0bMvFYyQ5qgx3Bli1Kd0ycAN18QSIz4Ylx7JHgbIWe8ddixuxkKGzjFs0i%2BdpstuZm9uTbn7 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pickoutsourcing.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:16:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 09:16:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	52781	35.190.80.1	443	5684	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:16:12 UTC	527	OUT	POST /report/v4?s=BP%2BcQB4283YTfylqcLT6wg6K0f27%2F1aIdsaevU%2FXXBsx6dk50JW8bvAXNabKTam%2F0bMvFYyQ5qgx3Bli1Kd0ycAN18QSIz4Ylx7JHgbIWe8ddixuxkKGzjFs0i%2BdpstuZm9uTbn7 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 406 Content-Type: application/reports+json Origin: https://pickoutsourcing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:16:12 UTC	406	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 34 35 32 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 31 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 38 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 69 63 6b 6f 75 74 73 6f 75 72 63 69 6e Data Ascii: [{"age":44526,"body":{"elapsed_time":919,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.48.1","status_code":400,"type":"http.error"},"type":"network-error","url":"https://pickoutsourcin
2025-03-14 09:16:12 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 09:16:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	1
Start time:	05:14:48
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:14:52
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,14891926459894036710,17772559713562226786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2064 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	05:14:59
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://case-id-1000228256449.counselschambers.co.uk/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://case-id-1000228256449.counselschambers.co.uk/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
http://case-id-1000228256449.counselschambers.co.uk/